$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: E7Oie6vr25oet4zDyzohip9SsDIzZd3yZoJz2wzbVyo= Subject key identifier: 19:07:EC:94:DC:93:2D:C4:44:28:65:C1:0C:33:6F:CB:31:38:D0:56 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019CE411000C4877896DE9B1E6A4FC23DCE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1881 Signing time: Thu 12 Mar 2026 22:00:45 +0000 Manifest this update: Thu 12 Mar 2026 22:00:45 +0000 Manifest next update: Fri 13 Mar 2026 22:00:45 +0000 Files and hashes: 1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=) 3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: /Xp1IPm1ogRrK59cwXDqy3ojyKfsbZ6s5gMTpc58lFs=) 7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 8: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=) 9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Mar 2026 21:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e4:11:00:0c:48:77:89:6d:e9:b1:e6:a4:fc:23:dc:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Mar 12 22:00:45 2026 GMT Not After : Mar 13 22:00:45 2026 GMT Subject: CN=1907ec94dc932dc4442865c10c336fcb3138d056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:97:08:db:f4:0c:9b:f6:3d:e9:de:bd:a9: 5d:6f:32:8d:f1:f9:06:d9:e5:c4:9c:f4:8d:cd:b9: 39:c0:d3:61:28:83:2d:5e:6d:db:b8:ec:68:79:06: 93:bc:b3:70:e5:26:9b:ab:83:80:65:fe:f2:6f:63: 00:d9:de:ca:9a:d9:ea:de:ce:b7:27:89:42:7c:19: af:19:c1:f2:bc:7a:da:64:42:48:af:65:f1:97:05: aa:f9:9d:91:0c:3f:32:ea:91:8b:9c:78:0d:89:8d: d4:02:f6:03:bf:17:53:ce:40:04:57:05:f3:b4:36: 6f:db:50:00:25:4b:e2:e7:86:e7:76:e8:f3:3f:f7: ea:88:50:0a:8f:45:1b:06:c5:62:9e:cb:44:4a:34: 41:79:26:32:94:53:ae:26:d4:fa:60:be:7d:08:3b: f6:db:ce:2c:e3:ed:ee:6b:5e:db:ec:f4:fe:aa:e5: f5:3e:5a:86:63:9d:5b:f7:13:47:41:71:c0:50:8c: 96:8f:50:90:45:77:60:53:c6:f5:1e:ff:c6:01:33: 18:c2:16:56:0f:fa:84:7f:94:be:f5:3a:4e:8b:c7: 1a:01:73:fe:b1:89:bd:ac:84:38:e2:c3:1b:6c:3a: be:67:6f:07:64:c4:f9:7c:89:85:19:18:2a:b8:c2: 11:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:07:EC:94:DC:93:2D:C4:44:28:65:C1:0C:33:6F:CB:31:38:D0:56 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:72:39:e2:76:9c:9b:dc:c4:76:0e:56:ac:b2:36:6e:8c:94: cc:d5:b4:e0:ad:36:21:f6:86:ad:b3:e7:bb:db:53:93:19:24: f7:0f:6d:a3:fd:8e:8b:d8:48:8e:c1:ad:13:cf:58:e3:19:5e: f4:af:0f:aa:8c:32:60:14:ca:58:22:7f:b3:2b:d8:f7:5c:6e: 8e:27:30:85:34:d5:c1:d9:82:b4:01:e8:d7:f6:30:5c:83:ee: 51:dc:8d:b9:b1:42:24:3b:36:35:3e:d1:4a:66:7a:74:2e:e6: 80:67:ab:65:96:0d:ad:76:ca:b3:4f:df:3b:3a:53:a4:bd:ee: dc:ce:f4:5b:db:9f:c2:b0:70:dd:37:6a:3f:51:8d:be:cf:b6: 04:5e:27:b8:b0:a2:c5:30:c7:e1:c5:11:7e:93:88:39:d3:20: c4:97:4a:bf:dc:19:21:b1:6e:f0:31:92:42:08:c3:6e:38:c4: d3:a3:b2:37:e1:e9:38:b8:94:66:d1:c2:25:db:82:e2:bc:bc: 09:22:84:f4:5d:48:fd:11:89:83:54:30:13:ff:5b:52:51:d4: 5c:8e:da:05:42:53:7f:73:c6:2c:a3:a2:cf:38:72:90:24:0f: aa:3a:22:6d:36:e3:a0:a2:6f:1b:5c:9f:a5:04:f0:44:44:41: ca:5b:fa:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzkEQAMSHeJbemx5qT8I9znMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMzEyMjIwMDQ1WhcNMjYwMzEzMjIwMDQ1WjAzMTEwLwYDVQQD EygxOTA3ZWM5NGRjOTMyZGM0NDQyODY1YzEwYzMzNmZjYjMxMzhkMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDyXCNv0DJv2PenevaldbzKN8fkG 2eXEnPSNzbk5wNNhKIMtXm3buOxoeQaTvLNw5Sabq4OAZf7yb2MA2d7Kmtnq3s63 J4lCfBmvGcHyvHraZEJIr2XxlwWq+Z2RDD8y6pGLnHgNiY3UAvYDvxdTzkAEVwXz tDZv21AAJUvi54bndujzP/fqiFAKj0UbBsVinstESjRBeSYylFOuJtT6YL59CDv2 284s4+3ua17b7PT+quX1PlqGY51b9xNHQXHAUIyWj1CQRXdgU8b1Hv/GATMYwhZW D/qEf5S+9TpOi8caAXP+sYm9rIQ44sMbbDq+Z28HZMT5fImFGRgquMIRyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkH7JTcky3ERChlwQwzb8sxONBWMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXI54nac m9zEdg5WrLI2boyUzNW04K02IfaGrbPnu9tTkxkk9w9to/2Oi9hIjsGtE89Y4xle 9K8PqowyYBTKWCJ/syvY91xujicwhTTVwdmCtAHo1/YwXIPuUdyNubFCJDs2NT7R SmZ6dC7mgGerZZYNrXbKs0/fOzpTpL3u3M70W9ufwrBw3TdqP1GNvs+2BF4nuLCi xTDH4cURfpOIOdMgxJdKv9wZIbFu8DGSQgjDbjjE06OyN+HpOLiUZtHCJduC4ry8 CSKE9F1I/RGJg1QwE/9bUlHUXI7aBUJTf3PGLKOizzhykCQPqjoibTbjoKJvG1yf pQTwRERBylv6jg== -----END CERTIFICATE-----Generated at Fri Mar 13 06:49:53 2026 by rpki-client