$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft File: xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json) Hash identifier: ICroqqn4iRyjlQ8l545rEvasqwIuqQv3HfHHew/sSEQ= Subject key identifier: B5:B1:0E:EE:16:65:70:DB:93:9F:04:A1:8B:B1:4A:CE:C4:91:09:63 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 01A164FCC9EB6B0C22A61E041F176F9EEA2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft Manifest number: 1C52 Signing time: Thu 22 Oct 2026 19:00:50 +0000 Manifest this update: Thu 22 Oct 2026 19:00:50 +0000 Manifest next update: Fri 23 Oct 2026 19:00:50 +0000 Files and hashes: 1: 1-MjPGa6a53IbnyZwW_IHAr61-zc.roa (hash: kZzBRFBi/2P9qSc5Z6+RyZ3kz7bsXv3WNDSRuvOzN+g=) 2: 1-QbP-OlL5C49Pz6xfC6dPI6n2LQ.roa (hash: b1isReMzje2eOqP7q5KK1YgmNcLYTYhlgMv1rOjAxw8=) 3: 1-ZnI4rWSRrMRT1eatOUz2rc3Lh4.roa (hash: Eull/8vH/vDrcToT+vW/qVp1jrAOXqKVQZSKsYw9cW4=) 4: 1B0hQuEvoERQUbCoQ4g3NWvH9SY.roa (hash: 60ReKNnC1eB2w7lgYP2EUuG8gzwLkYsPdDD/C9cGvuw=) 5: 2ndwCQa5uK9SGXTw7amvh8YViz0.roa (hash: MNshJXo3vLTUpr4S/CLHnaCG5DDaH89yW7YggkO0OtA=) 6: 6CRDymwFt79mzvWnLpOF6bfqp_k.roa (hash: huEM2FNwHHsVHVv7H74bhAuZJD9zQfLotNqyWe2iUkw=) 7: 6pzxly1r6duo4bfTPPly5YdWLj4.roa (hash: jY7kyQJckoR7mZf1iNKgGtuPt/cOspaKF8OuIn7JaVk=) 8: 9OxDWufNnv1B2C-qPmgpikF7iaw.roa (hash: dL8qSlWuBeannbfUKKeK7j1b+LVimlrkYaTHvjJkkuY=) 9: AsR8PMxYeWP89FOuspLxoZEjj1U.roa (hash: ARY4kS+u5n58uyYcSBSAEiIPAoo4CIZkyZRdQCxQau0=) 10: GFODE-DZ21eHroatRJKIqVrZsaA.roa (hash: oAdEbCipvHFNYnI86ODFnZBMhLMWx82ptyOpEbw1Egk=) 11: IbfTWIENtav2Gb-9A4BMXMtftZI.roa (hash: 0UUeRTn6dWpbmAIk5t/xVrewmG/jaZ2du/1VLqKtqQ8=) 12: Ip1p585eSEewb0IONkaOYazW_0Q.roa (hash: h1M4blMde36vPMnlEH2IroJd96qzWruE2brZEpd0Sp0=) 13: JYBgPKpA16-8lG6M4O7EPuTiVw4.roa (hash: mBzvoCHcL+VOx9e/kdW43sQh2RmNJVbq5CtoJwcYdSg=) 14: L7VWwLoJgeZkkj-hqhbFv4uJCJA.roa (hash: j7rFQER5IJLYN6eQr2ZVubfwjYglPZSeNtxESTBcfWk=) 15: NsHDsBlsQAGgspNiM-HwDV4swTc.roa (hash: eQMEYl3+MQxyvaK6givVIiWlfkYaPSu2MObxqH2imYo=) 16: TizLz_RtqcQjN9lGzJGaC8FzeDM.roa (hash: uLfdO+lKVjA/KdCMSJZIRciSMOLy+9+itlBgtmnFcVQ=) 17: UzM2gwxSrfVOD3Hvo4dml2FJYQA.roa (hash: WyUp8DycTfhYHy9UHk1wLaMoq3LzBPZapcazzfzjy7M=) 18: V4refFyh6ltSMJ1zdDJO0na4eQM.roa (hash: 9x0HEEKUvclD2vVHGseZaoa9RjzKqYZyjMhfIIhJ7tw=) 19: X18nP2YXusglmmwBliQYUGVmd64.roa (hash: sJN+6yrZAWGfme0noZ5x+K33dl/pCeBb/hwCFWl81W8=) 20: aod_DktF53Tt-zNeeRQupJVLMQ8.roa (hash: yB6sdIgHjKBnXT3MB4XSMfE1vvY6rKhZAhejibcjeBs=) 21: bG3-mY47kvhtLeMyln_YrPnYhQ8.roa (hash: gSw9xFys9U2SCIo9gOGxJ3o+zrki+w2p6MYnYkXsyIw=) 22: e_8LCfE_pngkPg3O5n81H_tyTro.roa (hash: z2GpZJjZPHBgpOqNxe6EdKGnVRgsgNAoxLNBM3PnZwY=) 23: f_W3cs_ecWHdG6K3evMumWzr_vo.roa (hash: J+lU3UAd31ssl7BE3T3uw9sHoucxFu+hegq+C0LD7U0=) 24: gYtsibPnBXBPb2nY_SAs-atiQiI.roa (hash: wZHUmXk6L4SjfoRfOx34od7ZFq/bTnT1ojNinmzWm5o=) 25: ks2Ide1WxAbJ0usJnuY9q7RlLSY.roa (hash: ItIUrv9B2UX7ToX8RQLw22/2GA3tCSuwSFRKIVwMms0=) 26: ku-pFyguE5cHtF69_qC9IQyhWD4.roa (hash: SRmdiGErBs4riF+x6opmEUXvpJ+dRiQ3pdAIUM1No24=) 27: nQxBt3f4W-r1paalMa6N4pPP6ZU.roa (hash: 9ffTVmqYk+m4WshwCCBOW6WAFzu1MVlR9JFD/Da94cA=) 28: pPdJc_g7J9FjsKbnsWcQjWaRbgQ.roa (hash: k6Styv321cogEzOvWQNWhd0ddvtWhbMw7NOEI52o9sI=) 29: qV4BzWghOJcIjFL2t572uLzc5A8.roa (hash: /tlNW3pQSqKGNUqp2nGES7Pv5A/y9d61Lu+dWRJiM1c=) 30: ql1haZnROI_A4gtMJ1WOjV3AQNw.roa (hash: etq9X6mBNiExqhsqPZrAcoPMp4nhVPKjSDDkz+uku0Y=) 31: rOCfl2KdkSQ41Cz-7TAdMD1JZAw.roa (hash: PmQDJv1RrZOr9vzHCVnaWIaGpF/CaKtpdo+vBTUpt+8=) 32: rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa (hash: 2K+J256SefSCQUxPHkRrXtSFRiGIJpB2gFkBQ7pPKWE=) 33: ryt3ye7Vir3TU8n8omiofTS7hqY.roa (hash: rr//RbIxX5Xi9wQUjZY+06Kfd80TItSLVfcu1moq5dI=) 34: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: 6+OF8VkOALYEYVuK71dmR4Bb49g9GCnB5EeO3J7YAKs=) 35: zYFfWUlh-P5ldgkEaLd32AaEmqc.roa (hash: d8sg18toB2rZYXSV8ZWT01bPiWhaZN7thdAndhNnLhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Oct 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:64:fc:c9:eb:6b:0c:22:a6:1e:04:1f:17:6f:9e:ea:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Oct 22 19:00:50 2026 GMT Not After : Oct 23 19:00:50 2026 GMT Subject: CN=b5b10eee166570db939f04a18bb14acec4910963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:54:49:9b:81:ee:21:f4:0b:dc:2d:27:59: 25:b0:5f:7b:a1:ca:ee:d4:29:cb:c8:6b:fa:c6:5e: 05:f8:55:69:39:55:09:95:96:db:aa:55:f3:0b:32: 8f:ff:84:45:c1:96:3a:de:29:b6:68:f5:eb:65:47: b5:05:a6:3d:f7:c8:0b:23:86:85:7f:13:28:e9:c7: f1:e6:e2:0c:ff:7b:65:5a:d1:8b:ef:c7:3e:fa:00: d4:b8:9d:c0:f3:0c:04:e1:0c:48:0d:b2:35:63:5a: 07:8c:d5:ef:9e:de:7e:ef:08:66:4d:37:a2:14:5c: c4:a7:70:db:49:3d:75:cf:fb:55:2d:90:98:c4:85: 2c:80:eb:30:f6:f8:45:b0:81:b8:bd:77:43:42:8d: ac:be:e2:32:80:fa:f4:1e:04:c3:fd:72:b0:f6:11: 81:82:e9:93:61:d4:a1:c7:50:07:c2:35:c8:19:a3: d2:81:e1:88:ea:57:76:b8:0c:18:a2:42:17:a4:6e: 95:11:68:82:9a:f7:6b:9e:9b:6c:23:a4:4e:ec:e3: e2:30:6b:70:67:03:e4:31:1f:01:06:e9:93:84:9a: 02:ee:09:91:59:56:a2:67:2d:5b:18:11:94:c8:8a: df:87:8f:3c:16:fa:3c:e9:0b:29:4f:c1:0a:7b:4d: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:0E:EE:16:65:70:DB:93:9F:04:A1:8B:B1:4A:CE:C4:91:09:63 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:cb:9c:39:28:5d:80:70:df:dd:25:ae:b5:22:0b:df:d2:76: d5:d6:28:4f:1c:27:00:91:2c:17:70:26:b4:47:e0:2b:1d:2d: f1:db:7d:f8:7d:f0:ed:fb:db:a0:57:87:d5:a5:19:4b:8d:e5: b4:96:1d:8d:c1:ee:9a:5c:3c:db:91:b1:8b:56:b4:34:b1:fe: 95:b9:f9:b4:24:b2:30:ff:69:5a:10:61:4f:17:e1:e1:d6:09: fb:03:f9:2f:d9:8a:6a:27:29:ee:96:e2:16:38:71:b0:32:f6: ed:ed:e0:9f:6a:52:d3:16:83:10:ed:f1:32:19:0c:0d:7e:8b: a9:99:f5:25:b4:ff:50:ca:10:1e:b2:1b:d4:a6:19:0c:19:fd: 0f:97:9f:69:ed:fe:3c:a3:43:fc:6d:31:42:4f:1f:54:4f:ef: 73:f8:36:e6:82:a4:fb:e9:8f:99:67:f5:0f:a7:13:8f:52:fa: bb:1a:1f:13:23:0d:01:f4:7c:88:f5:fa:d1:f4:23:c5:1a:c3: b6:f7:eb:65:75:64:6e:0c:41:79:92:61:9b:3d:5a:07:31:ce: 11:61:b6:cf:af:92:54:24:41:05:02:42:f5:00:20:a2:25:f9: 7f:14:fe:33:69:f5:c6:6b:82:1a:64:3e:d4:aa:36:61:8a:d3: 18:fd:b6:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFk/Mnrawwiph4EHxdvnuouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYxMDIyMTkwMDUwWhcNMjYxMDIzMTkwMDUwWjAzMTEwLwYDVQQD EyhiNWIxMGVlZTE2NjU3MGRiOTM5ZjA0YTE4YmIxNGFjZWM0OTEwOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8VUSZuB7iH0C9wtJ1klsF97ocru 1CnLyGv6xl4F+FVpOVUJlZbbqlXzCzKP/4RFwZY63im2aPXrZUe1BaY998gLI4aF fxMo6cfx5uIM/3tlWtGL78c++gDUuJ3A8wwE4QxIDbI1Y1oHjNXvnt5+7whmTTei FFzEp3DbST11z/tVLZCYxIUsgOsw9vhFsIG4vXdDQo2svuIygPr0HgTD/XKw9hGB gumTYdShx1AHwjXIGaPSgeGI6ld2uAwYokIXpG6VEWiCmvdrnptsI6RO7OPiMGtw ZwPkMR8BBumThJoC7gmRWVaiZy1bGBGUyIrfh488Fvo86QspT8EKe03XAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWxDu4WZXDbk58EoYuxSs7EkQljMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcucOShd gHDf3SWutSIL39J21dYoTxwnAJEsF3AmtEfgKx0t8dt9+H3w7fvboFeH1aUZS43l tJYdjcHumlw825Gxi1a0NLH+lbn5tCSyMP9pWhBhTxfh4dYJ+wP5L9mKaicp7pbi FjhxsDL27e3gn2pS0xaDEO3xMhkMDX6LqZn1JbT/UMoQHrIb1KYZDBn9D5efae3+ PKND/G0xQk8fVE/vc/g25oKk++mPmWf1D6cTj1L6uxofEyMNAfR8iPX60fQjxRrD tvfrZXVkbgxBeZJhmz1aBzHOEWG2z6+SVCRBBQJC9QAgoiX5fxT+M2n1xmuCGmQ+ 1Ko2YYrTGP22jA== -----END CERTIFICATE-----Generated at Thu Oct 22 23:04:04 2026 by rpki-client