$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: ERa1OnpHcGmWd90hOq22MQ2ANkMYxnR1G1rQUqJxWVA= Subject key identifier: 1C:21:4F:BB:5A:43:22:1A:5B:E2:7C:B1:27:B9:24:37:EE:03:98:57 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01A0D64B751EC7CF308B2E5E247D9D66B2E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 1112 Signing time: Fri 25 Sep 2026 02:01:04 +0000 Manifest this update: Fri 25 Sep 2026 02:01:04 +0000 Manifest next update: Sat 26 Sep 2026 02:01:04 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: eClfIDSXR9yrB/RS/VI9qyhjW5ke9JLeAssSBn8ZD+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:4b:75:1e:c7:cf:30:8b:2e:5e:24:7d:9d:66:b2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Sep 25 02:01:04 2026 GMT Not After : Sep 26 02:01:04 2026 GMT Subject: CN=1c214fbb5a43221a5be27cb127b92437ee039857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a1:5f:56:10:db:e8:89:94:20:6e:3f:3d:a3: a7:4d:63:02:10:ed:ce:de:f2:24:a1:7d:9c:58:c7: c7:1e:5c:73:1f:9c:7a:0b:2f:72:c4:e5:c0:0c:b3: 3d:36:95:0e:b5:25:81:7e:05:fe:f9:e1:95:8b:ac: 46:ef:0f:53:03:00:46:84:b7:7b:d6:65:89:bd:ec: bc:79:d8:66:b4:62:2a:99:12:c2:25:8c:08:06:ee: c8:70:a3:ce:f3:28:8b:74:2b:a5:63:4f:35:a9:bb: 06:88:aa:5c:fe:0e:3e:f9:ea:6b:60:56:87:50:ca: 1d:47:72:d9:dd:b0:be:29:63:d1:fe:6f:48:38:ba: 44:06:ea:0f:57:eb:d0:d8:3f:ef:0f:96:be:f2:cd: f0:13:48:47:a2:08:92:fb:ee:f7:00:36:8c:d8:c9: f9:71:74:58:12:5f:51:62:b8:4a:da:18:47:12:3e: 8a:5c:25:32:47:0c:00:70:d4:02:18:cd:39:55:f6: 07:cf:c8:12:e4:dd:23:65:bf:a2:da:12:c1:8d:6f: 6a:0c:32:20:a5:07:eb:6b:4c:f6:bb:97:36:b1:d9: 7a:cc:d9:5e:18:5f:a7:cf:26:b7:56:d1:cd:35:5d: 4d:0d:41:f5:1c:a5:44:b0:3a:d4:1d:0a:ef:70:44: cd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:4F:BB:5A:43:22:1A:5B:E2:7C:B1:27:B9:24:37:EE:03:98:57 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ca:9d:e5:aa:29:99:25:be:f7:de:8b:a9:1f:e9:72:aa:25: 2c:25:25:50:84:36:b9:db:f9:63:f0:d3:26:d5:c3:f3:6d:c2: 78:bf:13:9d:26:77:1d:cd:22:a9:2c:8a:44:b8:43:85:1a:ae: 4f:75:44:25:44:25:38:ae:cd:d2:ed:89:a9:37:29:1e:e0:52: 37:a0:68:ca:f9:a5:20:88:c9:27:d8:7d:3d:ba:5b:8f:99:fa: 85:5e:13:cb:55:8e:b7:dc:cc:ea:eb:a8:93:fc:a8:0a:08:37: 05:5c:0a:e8:cd:6c:f8:6e:52:2e:79:69:28:6b:2d:50:e5:db: da:9c:f9:da:c0:d3:6c:72:a0:91:5d:5b:67:33:1c:cf:34:ae: 58:6d:ef:d1:36:cb:02:fb:c1:fb:da:a6:c5:97:77:aa:72:ea: 0f:ba:19:23:0d:b1:3c:35:3f:64:0d:05:32:af:2d:8b:d7:0c: 7a:61:ed:51:29:d9:c2:e3:af:94:da:f9:7a:d2:7c:8b:d2:2f: 1d:e6:2a:7d:c2:a9:e7:53:c5:13:72:2c:48:60:6e:85:e9:0e: 99:97:e0:48:62:67:07:be:7c:3b:3d:9a:7a:2c:db:79:1b:75: 81:d3:12:4f:a1:db:19:f3:24:ab:46:ce:8c:b1:e6:7a:67:77: f7:e8:d1:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWS3Uex88wiy5eJH2dZrLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwOTI1MDIwMTA0WhcNMjYwOTI2MDIwMTA0WjAzMTEwLwYDVQQD EygxYzIxNGZiYjVhNDMyMjFhNWJlMjdjYjEyN2I5MjQzN2VlMDM5ODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaFfVhDb6ImUIG4/PaOnTWMCEO3O 3vIkoX2cWMfHHlxzH5x6Cy9yxOXADLM9NpUOtSWBfgX++eGVi6xG7w9TAwBGhLd7 1mWJvey8edhmtGIqmRLCJYwIBu7IcKPO8yiLdCulY081qbsGiKpc/g4++eprYFaH UModR3LZ3bC+KWPR/m9IOLpEBuoPV+vQ2D/vD5a+8s3wE0hHogiS++73ADaM2Mn5 cXRYEl9RYrhK2hhHEj6KXCUyRwwAcNQCGM05VfYHz8gS5N0jZb+i2hLBjW9qDDIg pQfra0z2u5c2sdl6zNleGF+nzya3VtHNNV1NDUH1HKVEsDrUHQrvcETNgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwhT7taQyIaW+J8sSe5JDfuA5hXMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8qd5aop mSW+996LqR/pcqolLCUlUIQ2udv5Y/DTJtXD823CeL8TnSZ3Hc0iqSyKRLhDhRqu T3VEJUQlOK7N0u2JqTcpHuBSN6BoyvmlIIjJJ9h9Pbpbj5n6hV4Ty1WOt9zM6uuo k/yoCgg3BVwK6M1s+G5SLnlpKGstUOXb2pz52sDTbHKgkV1bZzMczzSuWG3v0TbL AvvB+9qmxZd3qnLqD7oZIw2xPDU/ZA0FMq8ti9cMemHtUSnZwuOvlNr5etJ8i9Iv HeYqfcKp51PFE3IsSGBuhekOmZfgSGJnB758Oz2aeizbeRt1gdMST6HbGfMkq0bO jLHmemd39+jR+A== -----END CERTIFICATE-----Generated at Fri Sep 25 06:29:35 2026 by rpki-client