$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: mW3MiEo7ICrmppS97oaCOtJKq+IbP1dizLXCGxff8ls= Subject key identifier: A5:3B:A9:C3:26:BB:0B:4F:FD:35:D5:71:D7:CF:D9:A2:13:89:76:73 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 01A17D7408B5F5D0387EAC3CC7CC393AD9BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1AE4 Signing time: Tue 27 Oct 2026 13:01:58 +0000 Manifest this update: Tue 27 Oct 2026 13:01:58 +0000 Manifest next update: Wed 28 Oct 2026 13:01:58 +0000 Files and hashes: 1: 0kNz9-JWERt3abzlaJOUE4NTJO4.roa (hash: 67hyPCPSnaEobnQIj1pQT7pIpy62/SUOtS+52kq/tjI=) 2: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 3: 7keWNGuJWU9cxRe0HNoW84Ifj9k.roa (hash: sPxLFVFyd1CLo0KSVpgvL78Q3f91cF50L3Qj8oDKbuo=) 4: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 5: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 6: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 7: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: rS4S17HmOnoStsNKK0W8KuqswJ/IERJb7uC1UAUSvCU=) 8: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:74:08:b5:f5:d0:38:7e:ac:3c:c7:cc:39:3a:d9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Oct 27 13:01:58 2026 GMT Not After : Oct 28 13:01:58 2026 GMT Subject: CN=a53ba9c326bb0b4ffd35d571d7cfd9a213897673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:7a:86:49:31:77:20:56:bc:cf:dd:62:3f: e2:f7:9e:61:8c:72:fc:2e:23:c8:3a:77:8d:bd:bb: 62:71:5e:5c:58:ff:ec:d3:fe:4f:ea:cf:2a:10:16: e7:02:c3:35:1b:a5:cb:8b:a5:5b:49:c0:df:e0:66: 7e:a9:d2:4b:4a:c4:ba:98:9c:ff:c5:73:4e:26:93: b7:36:ff:b7:5e:0f:69:2e:1a:32:44:b3:47:6d:48: d0:34:7d:10:5a:17:25:de:71:b8:57:95:8a:eb:97: 50:e3:df:f5:6a:e5:32:c9:c0:1c:34:c1:42:97:44: da:65:49:0e:98:31:02:fa:fb:48:cc:05:60:93:b7: a0:89:26:52:9e:d0:1d:6b:30:f7:ae:3e:8c:2f:c4: a5:11:7a:06:93:a4:b2:6f:fa:de:01:4f:d6:80:7b: 25:2e:70:89:9a:cc:a6:a6:64:5e:e3:bd:df:c2:b3: d0:2b:e7:d8:64:b7:af:8d:69:98:9c:27:9d:50:82: 9e:83:c1:61:7f:d6:5a:03:79:49:b1:3b:8c:bc:40: c6:b6:b4:ab:1b:41:44:19:b8:fe:01:7b:73:c8:84: be:16:61:5e:7f:d5:76:c2:94:00:00:98:92:53:71: 31:86:3d:d7:03:68:f4:12:ae:8e:3c:3f:46:be:05: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:A9:C3:26:BB:0B:4F:FD:35:D5:71:D7:CF:D9:A2:13:89:76:73 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:77:6e:7b:c2:b2:42:8b:11:a7:48:80:76:a4:6b:f8:d4:74: f5:18:6e:5e:d2:86:19:11:24:45:82:ed:43:2f:0c:48:ec:fb: 3e:66:82:3e:17:82:07:08:d4:f4:e7:14:10:31:9b:41:3a:99: 36:5a:79:5a:1a:67:fb:68:1a:83:c8:4b:7d:65:7b:59:22:29: ae:6c:1d:a0:c8:6c:ae:08:6b:6b:e6:9f:8e:34:7e:fc:db:e3: 3b:93:a5:d0:35:11:e4:d9:18:6a:7e:20:d4:d5:08:2f:b7:82: 46:de:ad:60:8b:ae:67:8f:95:6e:b2:a6:e9:a8:01:26:06:e4: e6:d1:b9:3e:6b:9e:08:51:f3:ec:b3:51:22:8f:05:df:36:0e: 03:ac:7e:12:61:16:05:fd:8e:eb:c5:60:bf:72:3a:69:ca:b1: a3:9a:98:d7:c8:a6:e2:76:a3:77:ee:8d:98:f4:cc:17:f7:23: d4:65:db:6c:ca:38:7e:52:fc:0d:ae:2a:43:dc:1e:54:32:ca: 20:15:da:91:39:df:52:7b:f5:9e:1c:3b:d7:93:a8:dc:0b:99: 0c:99:21:f0:fd:05:06:c9:d2:54:7e:62:a9:9a:f3:cc:dd:b0: 43:71:5b:b5:5d:fd:64:90:c9:f3:e2:fc:1a:e0:d6:fd:b2:94: 9b:a0:75:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9dAi19dA4fqw8x8w5Otm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYxMDI3MTMwMTU4WhcNMjYxMDI4MTMwMTU4WjAzMTEwLwYDVQQD EyhhNTNiYTljMzI2YmIwYjRmZmQzNWQ1NzFkN2NmZDlhMjEzODk3NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKl6hkkxdyBWvM/dYj/i955hjHL8 LiPIOneNvbticV5cWP/s0/5P6s8qEBbnAsM1G6XLi6VbScDf4GZ+qdJLSsS6mJz/ xXNOJpO3Nv+3Xg9pLhoyRLNHbUjQNH0QWhcl3nG4V5WK65dQ49/1auUyycAcNMFC l0TaZUkOmDEC+vtIzAVgk7egiSZSntAdazD3rj6ML8SlEXoGk6Syb/reAU/WgHsl LnCJmsympmRe473fwrPQK+fYZLevjWmYnCedUIKeg8Fhf9ZaA3lJsTuMvEDGtrSr G0FEGbj+AXtzyIS+FmFef9V2wpQAAJiSU3Exhj3XA2j0Eq6OPD9GvgVXKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU7qcMmuwtP/TXVcdfP2aITiXZzMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHdue8Ky QosRp0iAdqRr+NR09RhuXtKGGREkRYLtQy8MSOz7PmaCPheCBwjU9OcUEDGbQTqZ Nlp5Whpn+2gag8hLfWV7WSIprmwdoMhsrghra+afjjR+/NvjO5Ol0DUR5NkYan4g 1NUIL7eCRt6tYIuuZ4+VbrKm6agBJgbk5tG5PmueCFHz7LNRIo8F3zYOA6x+EmEW Bf2O68Vgv3I6acqxo5qY18im4najd+6NmPTMF/cj1GXbbMo4flL8Da4qQ9weVDLK IBXakTnfUnv1nhw715Oo3AuZDJkh8P0FBsnSVH5iqZrzzN2wQ3FbtV39ZJDJ8+L8 GuDW/bKUm6B1Eg== -----END CERTIFICATE-----Generated at Tue Oct 27 20:45:28 2026 by rpki-client