$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: UeyZe6AylMn6CytRo1sS+lQH/MMKLo0DbPd8COHPjzA= Subject key identifier: 73:4F:7D:DA:03:F7:ED:11:E5:F7:65:F4:DC:EC:3A:1A:23:08:81:E4 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01A0D07F77842BB579C2391F68F59FDCDC9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 110F Signing time: Wed 23 Sep 2026 23:00:09 +0000 Manifest this update: Wed 23 Sep 2026 23:00:09 +0000 Manifest next update: Thu 24 Sep 2026 23:00:09 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: K/zXK8jsgHupdmn9Zp+V+osxOhW1IdBvmoYf/HGXe3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:7f:77:84:2b:b5:79:c2:39:1f:68:f5:9f:dc:dc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Sep 23 23:00:09 2026 GMT Not After : Sep 24 23:00:09 2026 GMT Subject: CN=734f7dda03f7ed11e5f765f4dcec3a1a230881e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:58:b0:f6:1f:03:78:1a:54:cc:6d:6f:80: b9:fa:e1:73:f8:9f:3d:4d:15:d9:a2:ae:40:9c:16: 57:2a:9e:ec:a7:07:59:31:79:28:31:1d:6a:35:1b: ad:ac:fa:e7:4a:30:61:fe:b2:82:cc:f4:bf:05:c6: 0b:26:1a:d1:38:49:f8:fc:65:cf:4e:83:ad:09:11: 3e:ec:ad:a4:9e:28:da:35:ec:c9:ab:e4:18:b6:fa: 12:8b:50:9b:20:e9:2f:65:55:75:1e:13:9c:d7:c1: 1c:17:80:57:d3:0b:a9:ff:e3:a9:2b:52:e2:22:34: b2:09:f2:f9:54:3f:7e:31:e4:1e:9d:c7:c2:6e:7a: 4f:a9:90:19:9a:bf:0e:fe:ea:e9:cf:6b:4d:37:8f: 82:0d:9d:07:ef:ce:9f:2a:12:86:85:33:7d:14:0c: a1:51:b8:90:62:15:94:0f:02:d5:34:88:db:42:2d: b0:fc:a7:87:23:64:0a:e3:43:12:fd:f2:98:01:23: aa:e8:bd:fe:20:be:cb:ae:0c:d0:8e:58:de:e8:20: fa:0c:f6:c7:09:98:97:14:2b:74:b8:ae:48:1c:03: 53:9c:8f:ff:2d:f3:e8:e5:42:c5:e5:ba:e0:17:fe: d1:e2:f5:4f:93:78:52:99:0c:8a:54:d1:85:eb:f1: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4F:7D:DA:03:F7:ED:11:E5:F7:65:F4:DC:EC:3A:1A:23:08:81:E4 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a2:f1:71:6e:ff:47:57:2b:b9:11:a4:a4:72:b6:87:b6:e6: ca:24:c2:e9:9b:89:23:26:2f:da:56:6a:b1:4d:6c:33:1a:4a: e1:d9:ff:b6:56:97:33:0d:bb:59:10:99:7c:3d:84:23:ea:89: 28:7d:8a:0e:cc:06:09:4b:cf:32:38:e5:fc:f4:dc:08:42:e8: 44:7a:cf:54:cd:25:1f:8a:6e:6b:87:ca:5e:26:8e:47:ab:b1: 8d:20:ad:60:ad:b1:15:07:e2:72:10:d8:f8:c6:2c:4e:49:c7: 06:af:c9:61:ca:e2:f3:28:de:74:d1:15:e9:c6:fc:84:15:4a: 65:6f:5b:dd:0c:ee:1c:74:b0:28:95:1c:2c:45:cb:6c:90:15: 7e:20:84:08:e4:47:c7:38:5f:62:28:da:42:21:76:71:ba:50: a6:35:60:da:1d:0f:51:9f:2f:79:13:da:1a:d9:fb:e8:23:ed: 48:dd:d6:66:b3:3f:d9:44:3d:c7:83:26:2f:e0:a0:11:ad:7b: 0e:54:79:99:6f:bb:b2:f3:47:c2:d5:6f:bd:57:00:e0:fe:b1: 46:0d:08:b3:a6:b9:f5:ff:4d:2f:c9:6f:b3:9e:4d:0f:36:bb: de:65:2c:60:7a:e0:ad:d3:af:19:37:2e:f7:7c:be:67:95:6c: c2:5e:5f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQf3eEK7V5wjkfaPWf3NyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwOTIzMjMwMDA5WhcNMjYwOTI0MjMwMDA5WjAzMTEwLwYDVQQD Eyg3MzRmN2RkYTAzZjdlZDExZTVmNzY1ZjRkY2VjM2ExYTIzMDg4MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkhYsPYfA3gaVMxtb4C5+uFz+J89 TRXZoq5AnBZXKp7spwdZMXkoMR1qNRutrPrnSjBh/rKCzPS/BcYLJhrROEn4/GXP ToOtCRE+7K2knijaNezJq+QYtvoSi1CbIOkvZVV1HhOc18EcF4BX0wup/+OpK1Li IjSyCfL5VD9+MeQencfCbnpPqZAZmr8O/urpz2tNN4+CDZ0H786fKhKGhTN9FAyh UbiQYhWUDwLVNIjbQi2w/KeHI2QK40MS/fKYASOq6L3+IL7LrgzQjlje6CD6DPbH CZiXFCt0uK5IHANTnI//LfPo5ULF5brgF/7R4vVPk3hSmQyKVNGF6/H98wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNPfdoD9+0R5fdl9NzsOhojCIHkMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6LxcW7/ R1cruRGkpHK2h7bmyiTC6ZuJIyYv2lZqsU1sMxpK4dn/tlaXMw27WRCZfD2EI+qJ KH2KDswGCUvPMjjl/PTcCELoRHrPVM0lH4pua4fKXiaOR6uxjSCtYK2xFQfichDY +MYsTknHBq/JYcri8yjedNEV6cb8hBVKZW9b3QzuHHSwKJUcLEXLbJAVfiCECORH xzhfYijaQiF2cbpQpjVg2h0PUZ8veRPaGtn76CPtSN3WZrM/2UQ9x4MmL+CgEa17 DlR5mW+7svNHwtVvvVcA4P6xRg0Is6a59f9NL8lvs55NDza73mUsYHrgrdOvGTcu 93y+Z5Vswl5fYw== -----END CERTIFICATE-----Generated at Thu Sep 24 10:43:23 2026 by rpki-client