$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: lRMxPR5HwoO7MIhhnSks6y9P/S8YOMDLk9vO99gEbd4= Subject key identifier: 54:74:4E:20:19:B6:EA:51:E2:F5:DE:38:F1:45:69:87:19:A4:13:D6 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019DF8A7D55026895125ACBAF328CA200242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 1158 Signing time: Tue 05 May 2026 15:00:41 +0000 Manifest this update: Tue 05 May 2026 15:00:41 +0000 Manifest next update: Wed 06 May 2026 15:00:41 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: zQqiXQI5Gql8P+kIt6G43fS+O+yq3mcmAo5Zsqcqin0=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 15: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 16: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 17: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 18: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 19: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 20: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f8:a7:d5:50:26:89:51:25:ac:ba:f3:28:ca:20:02:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: May 5 15:00:41 2026 GMT Not After : May 6 15:00:41 2026 GMT Subject: CN=54744e2019b6ea51e2f5de38f145698719a413d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d0:f2:ce:30:b2:c5:4a:71:ee:16:79:c4:78: bb:b1:f7:c8:8c:a4:58:30:f3:b4:41:51:9a:cf:9b: 48:9f:2c:5c:33:23:5a:3d:47:9c:53:c1:6a:9b:a3: ce:3b:ae:57:51:c7:48:c2:9e:d8:b4:1c:4b:8d:ad: cc:16:d7:e5:74:10:31:34:6b:8d:46:32:62:58:01: 0a:6f:86:eb:3b:20:80:8d:51:07:66:aa:95:f2:b3: da:7a:7f:02:33:9a:7e:13:0d:2e:72:d1:ad:4d:7a: 59:02:9d:b0:4f:42:61:e7:8f:08:ed:04:26:22:87: 50:33:af:34:74:9b:9a:79:ec:6a:14:75:70:30:b7: 61:04:0c:0d:df:fd:8d:be:fb:c7:0d:9a:60:62:d7: e9:27:94:8d:37:5b:e9:17:9c:18:25:b4:0a:7c:a4: e4:da:28:aa:55:13:ef:03:f5:e8:7e:49:78:9d:54: 9e:98:ed:a7:18:16:13:50:99:df:b9:c3:9c:79:93: 41:b5:2b:2b:55:7b:e3:29:c5:1f:3a:9d:ef:ed:29: ac:21:84:6f:42:5c:d0:63:13:6d:4f:e2:26:c1:da: 86:d6:b8:72:68:9e:19:f8:13:4a:0e:5f:7f:66:5a: e2:85:6e:5e:16:e8:e1:2a:7d:f2:5d:fc:aa:97:cf: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:74:4E:20:19:B6:EA:51:E2:F5:DE:38:F1:45:69:87:19:A4:13:D6 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:53:75:1e:30:16:ca:4f:d0:db:03:d1:1f:4c:a8:a8:36:e1: 17:99:01:98:9d:e7:48:a0:7a:a2:35:ba:73:b8:64:21:ab:d5: 1b:21:d3:63:f6:45:9a:5e:9b:73:3e:08:7d:0f:9f:ee:9a:fd: d5:d0:7f:d6:9b:17:63:5d:6e:5f:2a:b9:a7:96:23:3d:f8:b2: f8:c3:ba:e1:12:09:70:74:a0:17:aa:bc:96:e8:17:68:e3:31: 20:e1:9b:d3:da:1b:f7:05:6f:e9:86:4b:54:aa:40:32:21:6f: 1b:1a:fe:9a:93:6b:e7:73:47:be:f8:7a:ea:b2:4e:3f:77:22: bf:c3:dd:e0:a1:06:44:17:01:7a:e4:61:75:f9:77:84:4b:34: 26:eb:c7:dd:03:87:ad:25:4c:7e:17:45:2f:dc:f8:bb:30:fc: 6b:5b:fa:f3:bc:38:46:5c:18:7f:7e:40:02:c0:dd:86:74:c1: 39:f2:56:e7:90:5e:dc:54:a4:0d:1c:a3:3f:c4:63:85:93:5c: ed:24:20:65:b4:75:04:b2:5b:72:23:1c:2a:23:98:e1:2c:e7: de:c3:d3:b2:ea:0d:a7:75:c6:62:ef:c3:64:f6:7e:41:fe:55: 10:ff:dc:df:23:76:e7:a5:d4:76:b4:f2:4e:6a:4d:66:7a:3a: cb:6f:7f:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ34p9VQJolRJay68yjKIAJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwNTA1MTUwMDQxWhcNMjYwNTA2MTUwMDQxWjAzMTEwLwYDVQQD Eyg1NDc0NGUyMDE5YjZlYTUxZTJmNWRlMzhmMTQ1Njk4NzE5YTQxM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09DyzjCyxUpx7hZ5xHi7sffIjKRY MPO0QVGaz5tInyxcMyNaPUecU8Fqm6POO65XUcdIwp7YtBxLja3MFtfldBAxNGuN RjJiWAEKb4brOyCAjVEHZqqV8rPaen8CM5p+Ew0uctGtTXpZAp2wT0Jh548I7QQm IodQM680dJuaeexqFHVwMLdhBAwN3/2NvvvHDZpgYtfpJ5SNN1vpF5wYJbQKfKTk 2iiqVRPvA/Xofkl4nVSemO2nGBYTUJnfucOceZNBtSsrVXvjKcUfOp3v7SmsIYRv QlzQYxNtT+ImwdqG1rhyaJ4Z+BNKDl9/ZlrihW5eFujhKn3yXfyql88/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFR0TiAZtupR4vXeOPFFaYcZpBPWMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlN1HjAW yk/Q2wPRH0yoqDbhF5kBmJ3nSKB6ojW6c7hkIavVGyHTY/ZFml6bcz4IfQ+f7pr9 1dB/1psXY11uXyq5p5YjPfiy+MO64RIJcHSgF6q8lugXaOMxIOGb09ob9wVv6YZL VKpAMiFvGxr+mpNr53NHvvh66rJOP3civ8Pd4KEGRBcBeuRhdfl3hEs0JuvH3QOH rSVMfhdFL9z4uzD8a1v687w4RlwYf35AAsDdhnTBOfJW55Be3FSkDRyjP8RjhZNc 7SQgZbR1BLJbciMcKiOY4Szn3sPTsuoNp3XGYu/DZPZ+Qf5VEP/c3yN256XUdrTy TmpNZno6y29/pQ== -----END CERTIFICATE-----Generated at Wed May 6 00:20:48 2026 by rpki-client