$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: uiv2wdFMOr9Zi37L1ZoawS7mGpn1dKfvEXrdoUp6Oio= Subject key identifier: D6:10:4D:BE:01:3E:BC:99:B4:9B:96:47:20:2F:AA:11:CD:5C:EE:68 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01A1DEDE447C2F04631E34FF333A841EB672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 119B Signing time: Sun 15 Nov 2026 11:01:10 +0000 Manifest this update: Sun 15 Nov 2026 11:01:10 +0000 Manifest next update: Mon 16 Nov 2026 11:01:10 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: dA3IIbhJLEiuqrWH/Clxrscc+XMtz71mI9jEDGC1EVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:de:44:7c:2f:04:63:1e:34:ff:33:3a:84:1e:b6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Nov 15 11:01:10 2026 GMT Not After : Nov 16 11:01:10 2026 GMT Subject: CN=d6104dbe013ebc99b49b9647202faa11cd5cee68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3e:ff:20:fb:85:5b:3b:6b:7c:8e:a3:9d:36: 9a:e5:63:07:10:ae:92:80:ff:c3:82:f3:f5:04:ef: 3f:c0:8f:ab:94:6c:6b:55:d8:cf:d2:c9:86:99:e1: 00:6f:92:a7:b4:db:52:5c:86:26:3f:c2:3e:22:fb: 47:8c:65:98:3a:7d:dc:79:58:42:40:17:d5:49:b5: d4:9e:b0:e8:56:77:47:40:4e:44:6d:9e:d4:18:5a: d2:5b:de:ba:42:23:72:4b:1f:ae:63:33:65:75:55: f2:c6:d3:b0:09:38:d4:8b:35:5b:04:32:75:5f:d5: 63:ca:e0:f8:5c:25:57:24:38:7f:bd:17:fc:88:88: 00:92:76:d4:20:45:e0:f5:0e:95:7f:2e:6f:28:b9: fa:6a:41:db:b9:78:37:ac:1c:22:d8:7b:8e:60:a2: 08:c6:98:4a:d0:2a:03:23:0c:6e:3b:08:25:01:d7: c7:cf:3a:e2:2c:36:d3:f2:02:d6:6d:2a:e3:8d:5a: fe:17:4a:24:56:5d:17:92:03:82:a5:21:b6:6f:27: 8e:a0:40:70:3b:ed:66:99:3a:f4:d4:f5:1a:f1:ff: 25:ae:1a:6c:2c:79:e9:8f:8c:79:ff:09:36:e0:b4: d3:6e:bc:75:ef:df:f5:06:3d:e3:8f:73:26:ed:74: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:10:4D:BE:01:3E:BC:99:B4:9B:96:47:20:2F:AA:11:CD:5C:EE:68 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:89:7f:2c:fc:51:51:69:bc:c7:fd:15:a2:2b:90:14:1a:66: eb:57:d8:40:89:17:a6:0a:f8:f3:ff:54:cd:60:bc:c1:5b:00: 3d:5d:99:21:e5:dc:44:44:f7:1d:21:77:ef:20:59:bb:2b:b8: f9:38:1a:84:42:4b:53:e8:ac:86:bb:19:97:ab:58:20:d0:da: a0:2e:da:f6:98:4c:08:c8:29:c1:ab:d1:6a:d6:37:46:63:2b: 42:05:65:a7:4a:d9:cc:c6:42:d5:e1:eb:38:e5:d9:f4:39:a7: ab:ff:e1:e0:7c:13:4c:4c:09:fd:3d:62:d0:08:c6:be:c7:f4: 28:85:bf:ab:6b:85:07:e4:bf:93:29:3d:a3:15:d7:f1:3d:11: aa:f5:51:32:48:d0:06:dd:ec:06:62:11:fa:8c:64:e9:59:9f: b6:71:0d:a6:60:a9:a7:bf:03:9a:e1:1a:d3:98:af:d4:96:39: 08:a7:2f:95:25:e1:a7:73:92:0a:52:c2:32:e0:64:0a:21:38: e7:47:b2:82:f0:3e:84:ac:32:fa:b6:7e:a0:16:4e:26:6c:97: bc:40:27:36:a0:12:20:98:f1:ff:ab:92:94:00:af:72:5a:65: f2:3d:92:c0:d1:99:6a:2a:2d:b9:27:db:14:17:04:c1:b6:11: 79:12:28:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHe3kR8LwRjHjT/MzqEHrZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYxMTE1MTEwMTEwWhcNMjYxMTE2MTEwMTEwWjAzMTEwLwYDVQQD EyhkNjEwNGRiZTAxM2ViYzk5YjQ5Yjk2NDcyMDJmYWExMWNkNWNlZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT7/IPuFWztrfI6jnTaa5WMHEK6S gP/DgvP1BO8/wI+rlGxrVdjP0smGmeEAb5KntNtSXIYmP8I+IvtHjGWYOn3ceVhC QBfVSbXUnrDoVndHQE5EbZ7UGFrSW966QiNySx+uYzNldVXyxtOwCTjUizVbBDJ1 X9VjyuD4XCVXJDh/vRf8iIgAknbUIEXg9Q6Vfy5vKLn6akHbuXg3rBwi2HuOYKII xphK0CoDIwxuOwglAdfHzzriLDbT8gLWbSrjjVr+F0okVl0XkgOCpSG2byeOoEBw O+1mmTr01PUa8f8lrhpsLHnpj4x5/wk24LTTbrx179/1Bj3jj3Mm7XRwCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYQTb4BPryZtJuWRyAvqhHNXO5oMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIl/LPxR UWm8x/0VoiuQFBpm61fYQIkXpgr48/9UzWC8wVsAPV2ZIeXcRET3HSF37yBZuyu4 +TgahEJLU+ishrsZl6tYINDaoC7a9phMCMgpwavRatY3RmMrQgVlp0rZzMZC1eHr OOXZ9Dmnq//h4HwTTEwJ/T1i0AjGvsf0KIW/q2uFB+S/kyk9oxXX8T0RqvVRMkjQ Bt3sBmIR+oxk6VmftnENpmCpp78DmuEa05iv1JY5CKcvlSXhp3OSClLCMuBkCiE4 50eygvA+hKwy+rZ+oBZOJmyXvEAnNqASIJjx/6uSlACvclpl8j2SwNGZaiotuSfb FBcEwbYReRIoMQ== -----END CERTIFICATE-----Generated at Sun Nov 15 18:35:20 2026 by rpki-client