$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: 7/u5sOLUWACBHAyOBIXK/qZTw5vmV6d2DX0B5D5A1Xk= Subject key identifier: 4E:E8:DB:14:74:7B:4A:A3:68:C1:A2:8A:03:C9:8A:A6:1E:C6:70:B8 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019F11F84F914D9CF84395ECF869A8518F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1566 Signing time: Mon 29 Jun 2026 06:01:53 +0000 Manifest this update: Mon 29 Jun 2026 06:01:53 +0000 Manifest next update: Tue 30 Jun 2026 06:01:53 +0000 Files and hashes: 1: 00oBTfnWdUzIvMRCoDAsBiu6TY0.roa (hash: 2cUMeBAWg056ZrP6AEZcwET0ohxuoFacoijmfCtjIBA=) 2: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 3: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 6: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 7: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: Ww/GC8EMkhvuqYjTv2vsmC7QSWWGcw0NAczICBW/dQQ=) 8: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 9: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 10: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 11: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:f8:4f:91:4d:9c:f8:43:95:ec:f8:69:a8:51:8f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jun 29 06:01:53 2026 GMT Not After : Jun 30 06:01:53 2026 GMT Subject: CN=4ee8db14747b4aa368c1a28a03c98aa61ec670b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:b7:1c:9e:37:75:27:15:ca:dc:fc:4d:b3: 3e:4a:c4:e7:35:57:b9:a2:0a:36:31:0b:32:67:5f: f2:75:40:98:4b:3b:4f:2b:bb:01:5e:05:d8:5e:d9: 74:20:cd:63:75:37:51:b3:6d:ab:44:db:e8:4a:17: 9f:d9:1c:05:f5:e0:31:e3:73:36:89:01:1b:18:96: fb:34:ca:5f:23:d9:e3:b1:1c:b5:7f:54:bd:c4:99: 4e:b8:ad:a8:c3:49:92:49:54:14:d0:d8:1d:45:d6: 9d:50:ee:dc:48:4f:9c:31:9a:91:4d:f0:0c:93:e9: b3:84:ed:ae:e3:08:57:7b:b4:00:84:de:bd:5e:5b: 07:f2:8e:f4:66:f1:12:c4:06:e6:31:ed:bf:e5:e4: cc:de:5c:7b:b1:c5:47:d7:eb:be:a0:c2:52:a0:c0: ec:27:68:aa:5e:25:1d:b8:6b:62:d3:16:ae:c3:1e: 52:4f:4c:aa:dc:52:47:d3:77:f1:1f:ed:fe:c1:90: 47:f9:b3:b2:c6:04:4a:79:5a:7f:d9:22:fa:98:6b: e5:8f:ca:55:20:a1:0f:31:f3:8d:d6:cb:20:55:1d: 5a:35:5b:01:1c:6d:8d:8c:ac:8c:1f:c7:d9:ef:36: 9e:08:4f:fb:77:3b:97:b7:f9:43:de:9e:81:36:b0: 67:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E8:DB:14:74:7B:4A:A3:68:C1:A2:8A:03:C9:8A:A6:1E:C6:70:B8 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:62:3a:16:a1:99:32:0f:b5:86:86:10:04:ae:ef:19:d3:80: 61:59:bf:c0:fa:eb:86:16:18:2b:a3:0b:1e:9c:b8:62:1d:f7: 78:43:cd:31:97:81:51:e7:38:0d:da:25:8e:dd:5a:ff:83:d6: b8:69:4b:5d:cb:d8:78:3e:e6:69:5b:b8:6f:62:fe:68:62:69: c7:5d:61:0d:0f:98:fe:7b:42:67:de:73:a3:e5:77:84:d9:a4: 6f:e4:0e:6f:3c:e6:e1:b2:83:2c:13:48:bb:d2:92:d9:66:bf: 9e:c8:3d:5d:2b:77:00:21:e4:68:c5:9e:ae:46:61:12:68:32: 82:64:aa:f7:5a:af:ca:95:de:97:89:04:d8:76:65:f8:68:40: 9d:a9:5a:1b:e3:4a:d5:42:bd:b3:68:a8:28:8d:8b:eb:35:da: aa:6f:ca:3b:0d:bb:50:4f:16:58:e1:f3:4e:0b:23:dc:13:62: 7e:9e:74:f3:6f:4a:bd:9d:31:3d:2d:0d:b8:fe:89:04:14:1b: eb:e0:c8:b2:9e:8a:fd:b3:07:3b:f6:66:10:08:e3:ce:fd:89: ea:97:1a:b9:35:2a:de:39:9e:db:a3:01:5f:37:1b:44:04:c9: 6c:5b:af:bf:be:ed:ac:c0:20:52:60:80:b8:f2:5f:55:2d:7c: 4f:b7:0c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8R+E+RTZz4Q5Xs+GmoUY8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwNjI5MDYwMTUzWhcNMjYwNjMwMDYwMTUzWjAzMTEwLwYDVQQD Eyg0ZWU4ZGIxNDc0N2I0YWEzNjhjMWEyOGEwM2M5OGFhNjFlYzY3MGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDC3HJ43dScVytz8TbM+SsTnNVe5 ogo2MQsyZ1/ydUCYSztPK7sBXgXYXtl0IM1jdTdRs22rRNvoShef2RwF9eAx43M2 iQEbGJb7NMpfI9njsRy1f1S9xJlOuK2ow0mSSVQU0NgdRdadUO7cSE+cMZqRTfAM k+mzhO2u4whXe7QAhN69XlsH8o70ZvESxAbmMe2/5eTM3lx7scVH1+u+oMJSoMDs J2iqXiUduGti0xauwx5ST0yq3FJH03fxH+3+wZBH+bOyxgRKeVp/2SL6mGvlj8pV IKEPMfON1ssgVR1aNVsBHG2NjKyMH8fZ7zaeCE/7dzuXt/lD3p6BNrBnuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7o2xR0e0qjaMGiigPJiqYexnC4MB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWI6FqGZ Mg+1hoYQBK7vGdOAYVm/wPrrhhYYK6MLHpy4Yh33eEPNMZeBUec4Ddoljt1a/4PW uGlLXcvYeD7maVu4b2L+aGJpx11hDQ+Y/ntCZ95zo+V3hNmkb+QObzzm4bKDLBNI u9KS2Wa/nsg9XSt3ACHkaMWerkZhEmgygmSq91qvypXel4kE2HZl+GhAnalaG+NK 1UK9s2ioKI2L6zXaqm/KOw27UE8WWOHzTgsj3BNifp50829KvZ0xPS0NuP6JBBQb 6+DIsp6K/bMHO/ZmEAjjzv2J6pcauTUq3jme26MBXzcbRATJbFuvv77trMAgUmCA uPJfVS18T7cMAg== -----END CERTIFICATE-----Generated at Mon Jun 29 11:09:55 2026 by rpki-client