$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: 4ajbifGz1sx+jh42b829jMP1olGYJdco5WtKPrJqkBU= Subject key identifier: 6F:B3:CC:6C:C0:B4:FF:E8:9F:A1:00:7C:DC:3A:9D:D0:FE:77:6A:A5 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019F8FECC0FB55A5592C57CD821EC8322E3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 1069 Signing time: Thu 23 Jul 2026 17:01:25 +0000 Manifest this update: Thu 23 Jul 2026 17:01:25 +0000 Manifest next update: Fri 24 Jul 2026 17:01:25 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: eFsKew0QLMTrBZY8oLVJJoZfSh4b5XwTAVqRjw5WzPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:c0:fb:55:a5:59:2c:57:cd:82:1e:c8:32:2e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jul 23 17:01:25 2026 GMT Not After : Jul 24 17:01:25 2026 GMT Subject: CN=6fb3cc6cc0b4ffe89fa1007cdc3a9dd0fe776aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:6f:9f:b0:eb:fd:86:b7:6d:45:e9:16:68: b2:17:1e:e1:90:01:60:cf:aa:c5:75:ee:84:26:77: 40:a7:58:55:d2:86:1a:55:b6:ae:63:fe:ee:01:c8: 12:bc:a1:bf:91:83:7b:5f:d5:2c:03:0d:5d:8e:cf: fc:a5:aa:fb:ad:1f:f8:38:5d:89:c7:8a:f9:d7:8c: 18:22:fe:c0:98:81:f8:7f:11:06:1a:02:0c:70:b8: 8c:c6:6d:c9:d3:02:83:24:d4:69:9c:f0:cc:6d:44: 50:81:65:ed:41:5b:ae:d4:5b:09:9d:d7:21:7c:4a: ea:f7:55:d2:a7:f3:d2:5e:15:89:1c:7d:78:8a:18: 48:89:47:63:8e:6b:10:53:56:4c:45:ef:dc:28:2d: e2:37:1d:fe:b0:e2:9c:ba:ae:2e:c8:71:18:fb:3d: aa:1d:11:5b:e3:b4:ae:86:a2:3a:e1:27:bb:d6:fa: 11:95:4a:1f:5d:62:1e:ef:de:08:51:0a:18:c8:1e: f6:f1:72:39:2b:33:85:d2:f2:4a:0c:ae:26:67:25: a6:81:7b:de:7f:c5:d0:93:79:0b:f5:71:00:3a:bc: 7c:c7:a2:f6:3f:a0:d1:a6:93:17:c2:0f:aa:8d:fb: 29:fa:2e:c4:7c:48:fd:3d:86:cd:85:64:ec:bb:be: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B3:CC:6C:C0:B4:FF:E8:9F:A1:00:7C:DC:3A:9D:D0:FE:77:6A:A5 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:92:74:08:e8:74:32:67:50:2d:1a:10:46:30:8f:97:25:f5: a1:7c:73:fa:25:42:1e:42:2b:f8:d9:70:25:5b:07:30:96:f9: 64:8f:0d:a9:e2:9c:78:13:9d:10:4f:6a:f2:85:ab:e2:2a:4f: 29:38:75:30:21:11:2b:ce:7e:aa:3c:6c:3f:fd:a0:1f:3e:99: 45:0e:1d:bc:5a:a3:94:7a:ec:3a:8d:60:22:2e:dc:51:e4:1e: 08:b3:c3:9f:41:b8:83:db:4d:4a:29:f8:e5:31:bd:b2:19:35: b6:b1:04:71:b0:03:11:52:78:72:35:4d:dc:d8:7e:f7:4b:a4: 15:ac:0f:f7:6e:c9:10:50:5c:39:37:b1:bd:52:f0:bc:dd:82: 55:0a:56:14:9a:24:84:91:6b:e5:22:6d:02:0b:e4:52:d9:bb: 5e:d4:9c:1b:51:ab:0e:fd:db:87:08:09:43:83:12:91:b6:69: d1:d8:06:70:15:26:18:9d:53:51:1f:7f:ca:69:63:3d:5b:90: f3:78:17:1e:62:52:cd:1c:e5:c0:26:a8:93:61:19:37:4a:e6: 45:d5:44:7e:85:0e:71:4f:59:d0:24:27:8f:1c:c9:4d:17:7a: 4f:3b:8b:ee:39:7e:a1:6c:90:cc:30:0d:a9:2d:ca:2e:91:af: de:c2:d9:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7MD7VaVZLFfNgh7IMi4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwNzIzMTcwMTI1WhcNMjYwNzI0MTcwMTI1WjAzMTEwLwYDVQQD Eyg2ZmIzY2M2Y2MwYjRmZmU4OWZhMTAwN2NkYzNhOWRkMGZlNzc2YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupRvn7Dr/Ya3bUXpFmiyFx7hkAFg z6rFde6EJndAp1hV0oYaVbauY/7uAcgSvKG/kYN7X9UsAw1djs/8par7rR/4OF2J x4r514wYIv7AmIH4fxEGGgIMcLiMxm3J0wKDJNRpnPDMbURQgWXtQVuu1FsJndch fErq91XSp/PSXhWJHH14ihhIiUdjjmsQU1ZMRe/cKC3iNx3+sOKcuq4uyHEY+z2q HRFb47SuhqI64Se71voRlUofXWIe794IUQoYyB728XI5KzOF0vJKDK4mZyWmgXve f8XQk3kL9XEAOrx8x6L2P6DRppMXwg+qjfsp+i7EfEj9PYbNhWTsu7583wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+zzGzAtP/on6EAfNw6ndD+d2qlMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZJ0COh0 MmdQLRoQRjCPlyX1oXxz+iVCHkIr+NlwJVsHMJb5ZI8NqeKceBOdEE9q8oWr4ipP KTh1MCERK85+qjxsP/2gHz6ZRQ4dvFqjlHrsOo1gIi7cUeQeCLPDn0G4g9tNSin4 5TG9shk1trEEcbADEVJ4cjVN3Nh+90ukFawP927JEFBcOTexvVLwvN2CVQpWFJok hJFr5SJtAgvkUtm7XtScG1GrDv3bhwgJQ4MSkbZp0dgGcBUmGJ1TUR9/ymljPVuQ 83gXHmJSzRzlwCaok2EZN0rmRdVEfoUOcU9Z0CQnjxzJTRd6TzuL7jl+oWyQzDAN qS3KLpGv3sLZ6A== -----END CERTIFICATE-----Generated at Thu Jul 23 19:08:40 2026 by rpki-client