$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: A6yWD5TboX/S/fKJ4cofwGCUdUTtoMe8ZQ9AZ93C3ms= Subject key identifier: E7:9D:2B:DC:70:F3:48:AA:6E:55:7D:28:D0:C2:BB:41:BE:8F:1E:32 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019D382E9BD8059361FC1F7B6F03BA106291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 146F Signing time: Sun 29 Mar 2026 06:01:11 +0000 Manifest this update: Sun 29 Mar 2026 06:01:11 +0000 Manifest next update: Mon 30 Mar 2026 06:01:11 +0000 Files and hashes: 1: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 2: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 3: N2mIezuMwglH5z9Sw394yPABh_Y.roa (hash: yGQ16rD5VkDHl88O+y0XucdcYEVXoD+T2CoyV9LtCBE=) 4: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 5: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 6: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 7: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: pzJ20AsxOaopHPkGwR7+DAAm4NHh5KQnFbANdibQ9SA=) 8: _Vz2AEmZ4dDgj8Ud8EDnRZzqDhg.roa (hash: a0HQa5htazrnK7Glu+swssGtSBkAyFnuHUYyfJ+ATNo=) 9: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 10: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 11: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 12: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:2e:9b:d8:05:93:61:fc:1f:7b:6f:03:ba:10:62:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Mar 29 06:01:11 2026 GMT Not After : Mar 30 06:01:11 2026 GMT Subject: CN=e79d2bdc70f348aa6e557d28d0c2bb41be8f1e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:b7:1d:95:2e:81:51:be:9e:1d:00:ee:f4: e4:f9:23:f8:69:6c:bf:e3:3e:1c:aa:47:7c:1f:87: c6:30:c5:e1:f2:fb:30:a7:35:9f:78:4a:99:f9:fe: d6:6f:e7:50:0c:2f:e3:98:e8:25:1a:0a:9f:92:bf: 69:d7:48:e1:29:c2:3c:f5:a6:07:ab:0b:d5:d7:2a: 5d:cd:25:c6:18:cb:f2:3f:67:9a:37:cf:1f:36:5a: 1a:06:da:87:5a:8a:4c:b2:80:18:c3:dc:2b:42:3e: cc:2c:8b:cc:41:e3:70:6d:75:97:9c:11:4b:d9:c9: f9:1b:f8:a7:b9:1b:3c:b7:92:9e:1e:63:10:a0:a0: 32:09:2f:66:81:ec:8c:b5:f4:1a:fe:3b:ba:14:3c: d7:e4:d6:ba:c2:bc:00:e9:72:91:51:9c:e0:af:92: 39:ae:ea:1f:18:92:90:84:a5:c0:fe:c3:42:76:d6: c5:f4:95:97:23:a3:06:05:22:3c:01:0c:1b:03:b3: 9c:ee:50:32:23:51:43:79:db:eb:cd:17:78:69:a0: ef:4b:0f:34:4a:45:29:9d:79:ec:65:6b:93:ed:ee: 4a:70:ec:74:66:22:bc:70:76:44:75:62:e0:9b:10: b5:9f:da:c4:26:c0:05:02:12:8e:16:57:0d:eb:96: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9D:2B:DC:70:F3:48:AA:6E:55:7D:28:D0:C2:BB:41:BE:8F:1E:32 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:bc:7f:cc:19:17:97:a2:d5:33:d1:6e:67:9e:b4:fb:fd:67: 92:11:50:30:5f:3e:8c:d9:04:1d:9e:44:ca:7c:37:74:11:0e: e4:98:36:60:a7:d7:cf:0d:b5:d3:2b:ee:06:d7:eb:b3:3c:62: 4f:b1:4a:e1:fd:66:d0:16:7b:d5:23:fa:03:84:be:76:b6:fe: 40:f6:fb:2f:4d:93:95:6f:b7:9e:29:36:d2:e7:5c:f4:bb:f0: 3f:f7:41:0d:ff:cc:05:90:80:d6:34:5e:56:d4:88:94:cf:e5: bb:5a:52:7c:7d:ca:ca:3a:d3:6b:39:34:79:78:8d:74:38:68: f7:3f:62:11:7a:c9:f9:ec:ec:94:77:ac:37:44:8d:66:7e:b7: ca:4b:68:6d:8b:81:32:ab:5c:c5:ad:0c:5b:69:23:e9:86:f1: 9d:8b:a5:86:4f:bb:9e:24:af:a8:85:ae:b6:29:a8:fd:b4:50: bf:7e:86:0c:86:7c:8e:c1:cb:77:2c:a4:86:cf:04:aa:59:a9: 4a:47:3f:fb:4d:57:1a:aa:f3:01:34:f7:8a:ca:7f:72:1a:72: 6a:9e:d6:9c:06:fd:2c:ac:ab:35:42:cc:a0:99:ee:64:48:2f: de:eb:4f:fc:f7:68:fd:7c:14:54:fe:aa:ef:08:aa:00:fc:0d: f1:25:a1:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04LpvYBZNh/B97bwO6EGKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMzI5MDYwMTExWhcNMjYwMzMwMDYwMTExWjAzMTEwLwYDVQQD EyhlNzlkMmJkYzcwZjM0OGFhNmU1NTdkMjhkMGMyYmI0MWJlOGYxZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiha3HZUugVG+nh0A7vTk+SP4aWy/ 4z4cqkd8H4fGMMXh8vswpzWfeEqZ+f7Wb+dQDC/jmOglGgqfkr9p10jhKcI89aYH qwvV1ypdzSXGGMvyP2eaN88fNloaBtqHWopMsoAYw9wrQj7MLIvMQeNwbXWXnBFL 2cn5G/inuRs8t5KeHmMQoKAyCS9mgeyMtfQa/ju6FDzX5Na6wrwA6XKRUZzgr5I5 ruofGJKQhKXA/sNCdtbF9JWXI6MGBSI8AQwbA7Oc7lAyI1FDedvrzRd4aaDvSw80 SkUpnXnsZWuT7e5KcOx0ZiK8cHZEdWLgmxC1n9rEJsAFAhKOFlcN65Z2xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOedK9xw80iqblV9KNDCu0G+jx4yMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLx/zBkX l6LVM9FuZ560+/1nkhFQMF8+jNkEHZ5Eynw3dBEO5Jg2YKfXzw210yvuBtfrszxi T7FK4f1m0BZ71SP6A4S+drb+QPb7L02TlW+3nik20udc9LvwP/dBDf/MBZCA1jRe VtSIlM/lu1pSfH3KyjrTazk0eXiNdDho9z9iEXrJ+ezslHesN0SNZn63yktobYuB Mqtcxa0MW2kj6YbxnYulhk+7niSvqIWutimo/bRQv36GDIZ8jsHLdyykhs8Eqlmp Skc/+01XGqrzATT3isp/chpyap7WnAb9LKyrNULMoJnuZEgv3utP/Pdo/XwUVP6q 7wiqAPwN8SWhBQ== -----END CERTIFICATE-----Generated at Sun Mar 29 12:39:07 2026 by rpki-client