$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json) Hash identifier: 0FOc9SMu8MAOc/QzTDPU4gmPYcnbBzBtdDdE+Q2/MFg= Subject key identifier: 8A:42:39:F3:6E:A3:67:3A:BC:90:3B:37:FC:03:04:A1:01:AA:B9:D0 Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Certificate serial: 01A06E034F4035D795E179EE3D012BE62539 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft Manifest number: 1A51 Signing time: Fri 04 Sep 2026 20:01:45 +0000 Manifest this update: Fri 04 Sep 2026 20:01:45 +0000 Manifest next update: Sat 05 Sep 2026 20:01:45 +0000 Files and hashes: 1: 1-dAYLfzEcuSnLWMiLXXSdIwT4rU.roa (hash: WhA4jtvtbE79AQa3IJODloRRuW4QHZIWAX/A32JL7m4=) 2: GOmV_75Dv1jwn9wiVioc2BSPZTo.roa (hash: pRTwblvRoqzlcA6ZsWJlwN1cr9uhPXOkl31rFqoTMf8=) 3: NklSIVNcNIWeMyDnmkM31BBhz1c.roa (hash: UKSW2BDTyMNTJDzhPRFU+Wzj1R5uLkgmHOPWx5CWEqQ=) 4: W4UHRrBQAt50eiIa0aXkDS2q-jI.roa (hash: wJtHrvfPjqzoQaYOzEJ/TBfUCsO/TaG3P+SEUHqq3Ig=) 5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: hbXzDuKY5ZKq5tNWAs9z4bhtu9YwVHI00vhNVLpMLYg=) 6: _5CTbNuX6fLN7jDqdj1oQp0kARc.roa (hash: Ha0LgykvjQP+9qGPn28IFIuJ0yQRLEpHe1bDMbGiuiE=) 7: _YOXL7ZxwGLyAFtXgmbGoGmsxw0.roa (hash: oYcEDHMjBaLjLdS2+cnHZQVD1ORy9f2L160BSTCgJ4c=) 8: itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (hash: Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=) 9: lxIA5T6ig6P82Z6FpI76sa5r9Hk.roa (hash: 3LHUUi612Oq28/k9MVav0SeJK2Lmj7BOxrV2xdjlDis=) 10: szXceV_8JO0f_7ooL6S8iduW9xI.roa (hash: xeJBYCAXDOSNVRxdgWGAZ1ipDc3y7H3KXIsJs1D2FK4=) 11: xnSiVa_Qi8Hl5xGaTydyCAcB4Q4.roa (hash: SWwZIzY753Ls9csZNqAI1seyxm1jJEeEibvAi3lb+6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6e:03:4f:40:35:d7:95:e1:79:ee:3d:01:2b:e6:25:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba Validity Not Before: Sep 4 20:01:45 2026 GMT Not After : Sep 5 20:01:45 2026 GMT Subject: CN=8a4239f36ea3673abc903b37fc0304a101aab9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:df:37:97:0a:0e:ee:b2:f4:68:7f:85:dd: 7b:3a:57:25:b4:62:e8:5f:3c:27:78:8f:ef:10:f8: 5e:ee:74:3b:e5:c9:26:16:99:7e:82:61:97:c8:3f: f5:3a:38:43:32:1f:70:5e:ab:45:92:9b:bd:d2:ea: fb:61:42:2c:d6:29:bf:30:d1:b3:e4:7a:de:2f:fa: 7b:29:4c:d1:56:ef:82:30:9d:89:01:20:93:eb:11: d1:03:e8:80:09:12:6d:36:79:e3:c8:13:03:37:e9: 8b:5b:53:eb:45:d2:68:07:82:4c:b8:0d:c7:09:cc: 5b:b0:fe:47:3f:1d:56:aa:85:73:3d:30:14:70:10: bb:9f:a9:83:1a:4e:8b:a0:25:9f:9c:5b:2e:ba:79: c5:2e:24:90:46:75:46:26:9a:7e:13:87:94:de:0d: b2:a5:47:b0:16:ef:f6:35:51:dc:12:f5:bd:bf:52: 19:d3:d1:dd:aa:a2:b2:5e:58:b2:72:d5:7b:81:52: f7:0a:de:f7:5e:b6:99:1d:36:07:fe:99:57:d4:ba: 4d:9d:bc:23:a4:28:b7:c5:fa:0c:04:d7:8e:b4:f6: d9:98:76:3d:7f:22:79:e9:e3:e4:86:83:94:75:60: 0a:eb:69:4a:8c:04:1e:69:fb:23:99:f6:b4:26:ef: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:42:39:F3:6E:A3:67:3A:BC:90:3B:37:FC:03:04:A1:01:AA:B9:D0 X509v3 Authority Key Identifier: keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:17:cb:ef:94:c5:51:a9:0a:dd:ac:a0:81:80:d0:60:80:86: 49:db:2c:c0:da:fc:3a:74:80:94:b2:b8:f4:8a:a5:bd:be:9d: 1c:7d:f3:3b:2b:92:55:35:c6:9e:28:43:e7:92:48:1f:b2:7d: 05:70:84:44:e1:f3:d6:e8:2e:4a:05:0e:43:63:59:a0:c4:b7: b2:06:80:20:7a:63:85:46:34:1b:8b:4f:e6:ba:65:c0:12:0d: 5b:2b:e9:a9:70:f7:17:01:db:bf:3c:f2:d1:11:24:b5:d8:0f: 03:47:80:87:e0:ea:bc:99:70:17:98:76:31:0e:ea:b7:1d:89: 73:e3:04:eb:1a:3a:f8:07:38:ad:5a:c4:c2:9b:7e:06:36:fb: 90:12:69:c4:01:71:6a:f1:73:90:0e:4b:8c:56:67:76:79:63: cb:70:de:b7:f6:69:3d:52:e4:47:e0:5b:48:05:9d:d2:97:a7: 2e:7a:ed:57:0f:71:11:f4:2f:bb:c7:e0:f3:fe:02:c6:98:c2: 5d:e0:76:d9:db:fb:25:93:e1:18:dd:e3:cd:d0:fe:42:e2:c3: ec:dd:73:37:4d:3f:3d:37:0d:37:cd:10:b8:72:20:3d:49:fb: b8:ec:7a:bd:38:71:20:8e:54:e4:c0:d0:cf:70:c0:f4:a9:2f: 1f:4c:e2:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBuA09ANdeV4XnuPQEr5iU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjMxYWZjMzZjYjY5NTUwMDdmZTk3ZWQ0YTVlMzE4NWQy MjcxYmEwHhcNMjYwOTA0MjAwMTQ1WhcNMjYwOTA1MjAwMTQ1WjAzMTEwLwYDVQQD Eyg4YTQyMzlmMzZlYTM2NzNhYmM5MDNiMzdmYzAzMDRhMTAxYWFiOWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr/fN5cKDu6y9Gh/hd17OlcltGLo XzwneI/vEPhe7nQ75ckmFpl+gmGXyD/1OjhDMh9wXqtFkpu90ur7YUIs1im/MNGz 5HreL/p7KUzRVu+CMJ2JASCT6xHRA+iACRJtNnnjyBMDN+mLW1PrRdJoB4JMuA3H CcxbsP5HPx1WqoVzPTAUcBC7n6mDGk6LoCWfnFsuunnFLiSQRnVGJpp+E4eU3g2y pUewFu/2NVHcEvW9v1IZ09HdqqKyXliyctV7gVL3Ct73XraZHTYH/plX1LpNnbwj pCi3xfoMBNeOtPbZmHY9fyJ56ePkhoOUdWAK62lKjAQeafsjmfa0Ju+0DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpCOfNuo2c6vJA7N/wDBKEBqrnQMB8GA1UdIwQY MBaAFFzzGvw2y2lVAH/pftSl4xhdInG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQt NzM2ZDEyODg4Y2E4LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80NThlYzMtMDQ1MS00ZTQxLTlhMzQtNzM2ZDEyODg4Y2E4 LzEvWFBNYV9EYkxhVlVBZi1sLTFLWGpHRjBpY2JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxfL75TF UakK3ayggYDQYICGSdsswNr8OnSAlLK49Iqlvb6dHH3zOyuSVTXGnihD55JIH7J9 BXCEROHz1uguSgUOQ2NZoMS3sgaAIHpjhUY0G4tP5rplwBINWyvpqXD3FwHbvzzy 0REktdgPA0eAh+DqvJlwF5h2MQ7qtx2Jc+ME6xo6+Ac4rVrEwpt+Bjb7kBJpxAFx avFzkA5LjFZndnljy3Det/ZpPVLkR+BbSAWd0penLnrtVw9xEfQvu8fg8/4CxpjC XeB22dv7JZPhGN3jzdD+QuLD7N1zN00/PTcNN80QuHIgPUn7uOx6vThxII5U5MDQ z3DA9KkvH0ziNg== -----END CERTIFICATE-----Generated at Fri Sep 4 23:22:18 2026 by rpki-client