$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: FnEcunSgkGFMVOVmP8Hm9pW3Cv3ymppZbmL6415y394= Subject key identifier: 4F:6E:7F:DB:74:BD:38:BB:BD:61:BB:EE:77:DC:46:76:D8:52:64:5E Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01A08CB1E98DFC918934AAFDC76BB9CCFC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1A6A Signing time: Thu 10 Sep 2026 19:01:04 +0000 Manifest this update: Thu 10 Sep 2026 19:01:04 +0000 Manifest next update: Fri 11 Sep 2026 19:01:04 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 13: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 14: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 15: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 16: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 17: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 18: cIzWNeNZbGQqB6PaAUfFk04qwpw.roa (hash: qXYjYaptAMpe3dpSUVYLnaW4A2Txz8KndGthhN4noC0=) 19: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 20: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=) 21: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 22: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 23: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 24: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=) 25: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 26: jXlPjmax2D6xk6xk15LqeUs2Fa8.roa (hash: ZUhfEbcBqZVUtm9r9VeW3nIknnrUSnVpiKVvjVmMjCA=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: dMNWEdzO0q6J1L0uZdi6bBECV7lKzr069EttmVOnZTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:b1:e9:8d:fc:91:89:34:aa:fd:c7:6b:b9:cc:fc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Sep 10 19:01:04 2026 GMT Not After : Sep 11 19:01:04 2026 GMT Subject: CN=4f6e7fdb74bd38bbbd61bbee77dc4676d852645e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:be:b8:0d:8b:ee:4b:ec:99:7c:69:1f:5d: 47:e7:9e:6b:a9:1f:e8:0b:e4:00:52:78:a4:bc:c2: 48:a9:59:62:cd:11:32:d2:98:33:9a:a3:19:c6:a1: 38:c0:17:ef:5f:1e:f9:4b:24:d9:5e:41:04:ec:90: 5a:21:59:86:cd:9d:09:d3:27:69:8f:bc:39:96:1e: d0:a5:97:ed:7b:4a:e2:52:04:27:ab:c8:2a:03:86: fd:d7:73:9b:e8:b9:a3:d7:b1:de:4f:76:4f:27:7d: 26:27:68:71:ad:15:3f:db:09:2d:0b:13:1a:52:7d: 25:88:e5:4e:01:1a:8d:9e:66:8e:c1:37:56:d6:8f: 92:08:c8:c6:52:56:49:fb:83:90:f4:48:f5:7b:4c: 63:db:66:18:20:92:8c:96:c1:4b:aa:d5:8a:28:ed: f7:47:80:8b:93:7a:05:ac:15:4c:32:38:45:8e:1d: 45:48:4c:29:8e:42:d3:bf:fe:3f:0a:26:dd:bc:df: 4b:1f:16:f2:ae:28:72:49:25:be:61:9a:f2:a5:c4: f6:84:13:c5:9a:3a:69:71:e8:72:ef:24:61:05:29: 5c:31:1a:30:07:1b:8a:45:54:e5:29:cb:34:e8:50: a9:ce:af:d5:10:ed:be:bb:ab:e8:85:9f:fc:11:7f: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6E:7F:DB:74:BD:38:BB:BD:61:BB:EE:77:DC:46:76:D8:52:64:5E X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:28:5e:8b:9c:3f:cf:62:68:e9:b9:ec:ef:33:87:f6:3f:e5: 75:7a:fa:a5:57:b7:a1:60:a0:67:e5:23:7f:44:c2:5d:1c:bd: d5:0d:22:37:65:fe:06:09:b9:f7:3e:53:2a:2e:43:b3:67:f2: 8c:57:76:ad:c9:03:d2:86:fb:d9:1d:4e:4f:ee:f6:96:19:96: a5:58:ad:c3:83:28:36:d2:ef:b2:82:58:2c:ff:5c:9d:ad:81: 49:4e:37:f5:41:05:de:4d:05:f3:24:2e:77:9b:d8:5f:ca:8f: 10:de:00:a5:5d:07:52:54:5d:97:e1:18:ec:93:60:47:19:a8: e6:42:8d:bf:3f:be:36:06:21:0f:43:dc:3f:39:33:07:69:8e: 69:de:b2:b9:c0:a4:6e:ff:ca:2c:93:9c:20:6c:58:b1:b4:ba: 4a:a4:c5:9f:2c:34:1a:c3:fa:c2:9a:0a:ea:a1:cd:b5:0d:13: 8e:5e:ab:91:d4:39:9d:b0:79:f1:32:39:3b:6c:62:a1:bf:8f: fe:39:13:62:03:6e:11:e8:e9:84:ae:92:6e:d8:55:75:25:58: b8:57:60:d3:63:95:77:ba:db:ae:e3:84:6d:c9:e0:4e:4c:92: 63:f5:29:5b:1e:9c:dd:79:79:03:31:83:73:bd:61:bc:13:63: d1:ca:5d:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCMsemN/JGJNKr9x2u5zPxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwOTEwMTkwMTA0WhcNMjYwOTExMTkwMTA0WjAzMTEwLwYDVQQD Eyg0ZjZlN2ZkYjc0YmQzOGJiYmQ2MWJiZWU3N2RjNDY3NmQ4NTI2NDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD2+uA2L7kvsmXxpH11H555rqR/o C+QAUnikvMJIqVlizREy0pgzmqMZxqE4wBfvXx75SyTZXkEE7JBaIVmGzZ0J0ydp j7w5lh7QpZfte0riUgQnq8gqA4b913Ob6Lmj17HeT3ZPJ30mJ2hxrRU/2wktCxMa Un0liOVOARqNnmaOwTdW1o+SCMjGUlZJ+4OQ9Ej1e0xj22YYIJKMlsFLqtWKKO33 R4CLk3oFrBVMMjhFjh1FSEwpjkLTv/4/CibdvN9LHxbyrihySSW+YZrypcT2hBPF mjppcehy7yRhBSlcMRowBxuKRVTlKcs06FCpzq/VEO2+u6vohZ/8EX+X1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9uf9t0vTi7vWG77nfcRnbYUmReMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeihei5w/ z2Jo6bns7zOH9j/ldXr6pVe3oWCgZ+Ujf0TCXRy91Q0iN2X+Bgm59z5TKi5Ds2fy jFd2rckD0ob72R1OT+72lhmWpVitw4MoNtLvsoJYLP9cna2BSU439UEF3k0F8yQu d5vYX8qPEN4ApV0HUlRdl+EY7JNgRxmo5kKNvz++NgYhD0PcPzkzB2mOad6yucCk bv/KLJOcIGxYsbS6SqTFnyw0GsP6wpoK6qHNtQ0Tjl6rkdQ5nbB58TI5O2xiob+P /jkTYgNuEejphK6SbthVdSVYuFdg02OVd7rbruOEbcngTkySY/UpWx6c3Xl5AzGD c71hvBNj0cpdFQ== -----END CERTIFICATE-----Generated at Thu Sep 10 21:42:43 2026 by rpki-client