$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: hM+N1Qx34hUAWaCugO3wPK2fDBJzKH46WEC2mWdZqUQ= Subject key identifier: 64:0A:56:E4:9D:72:73:2B:58:90:3F:25:43:34:A0:DB:CE:FC:D5:1E Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019FFC11A790616E12B288362F4E315F3455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 10A1 Signing time: Thu 13 Aug 2026 17:00:43 +0000 Manifest this update: Thu 13 Aug 2026 17:00:43 +0000 Manifest next update: Fri 14 Aug 2026 17:00:43 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: vxbUTQIJiANQVKLOjZMOYB+Po6xVrw77zW2gqDSCacY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 15:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:fc:11:a7:90:61:6e:12:b2:88:36:2f:4e:31:5f:34:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Aug 13 17:00:43 2026 GMT Not After : Aug 14 17:00:43 2026 GMT Subject: CN=640a56e49d72732b58903f254334a0dbcefcd51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:00:e8:3c:3b:f0:b1:0b:4d:4e:94:0e:a4:b1: 8d:88:d3:66:54:ca:89:e7:3e:d1:cf:fd:c3:ec:fc: b0:08:dd:c0:f4:ba:90:be:c0:f6:62:79:b0:88:0b: 2c:5b:be:db:c0:93:82:fb:65:fc:46:0c:b4:fc:d8: 78:51:20:4f:11:5e:67:2a:70:2d:02:5b:b3:ca:a4: 46:0d:7f:9a:a5:5f:36:33:72:4b:af:90:0d:d6:78: bc:7e:9c:88:01:74:56:6d:77:d8:cf:a1:30:35:84: 12:9b:b0:4e:16:63:84:1f:ce:84:12:4c:25:12:24: 55:98:3d:ee:b8:c5:ef:2e:f2:ac:05:7b:59:6e:2d: 78:89:e7:d1:b9:5e:a1:39:d9:0c:bd:a4:18:b6:29: 0e:41:d9:18:13:e8:8f:56:7c:e7:46:27:f8:83:ed: cd:75:0c:8c:47:ac:6b:33:3c:3d:24:07:d0:5c:a7: fa:a3:2a:d5:6a:bb:84:ff:06:65:26:d8:b9:7a:5a: 7b:44:a5:02:02:62:45:1c:c9:85:45:aa:71:bb:48: 32:c2:b8:8f:b8:89:cf:af:97:a0:74:45:ae:ef:5b: 53:c2:5f:2c:71:d8:44:47:73:f3:21:af:dc:93:87: 08:a1:0c:16:18:b6:83:8a:1e:53:1d:2d:b6:7b:e9: f5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0A:56:E4:9D:72:73:2B:58:90:3F:25:43:34:A0:DB:CE:FC:D5:1E X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:58:8a:c9:53:2a:f8:5b:ab:a2:aa:eb:85:65:e9:ec:ae:89: 36:47:5b:5e:2e:ad:3f:6c:d3:e8:f1:3c:bd:7e:f3:e4:25:4e: 43:76:f4:d5:1e:13:8c:df:19:f3:09:da:40:13:65:97:7e:df: eb:f9:a0:93:00:81:95:44:20:2b:d7:0a:53:cf:7e:c4:79:94: 83:8f:09:09:2c:42:2c:e3:36:0c:43:0e:fa:c0:33:7d:25:99: 66:ed:92:00:84:a4:ba:df:7d:8a:27:69:66:0c:48:96:2e:ee: b5:d2:47:06:57:34:39:0d:5e:d9:1f:45:99:9a:2a:0d:65:de: 08:0b:25:c5:01:9c:6e:e9:47:f1:ba:b3:aa:c5:f2:97:f8:31: 57:50:12:c7:53:fc:4c:4e:05:9f:7a:19:1c:ae:0f:4d:ff:18: 8e:92:2f:54:2f:66:38:e4:ad:c0:38:e9:22:4a:50:7d:0c:d2: 69:8a:dd:3a:d0:41:cb:b4:73:ed:43:50:35:ad:19:4c:dc:11: 1a:df:8d:f2:4d:d4:03:01:57:25:50:06:78:d4:92:79:75:1b: 60:63:e7:e5:97:26:83:94:db:89:90:79:99:d2:ac:05:5f:93: 3c:7e:b2:5d:e8:d4:43:dc:4e:76:f3:a4:b6:bc:e7:b6:70:2f: 49:ce:18:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/8EaeQYW4Ssog2L04xXzRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwODEzMTcwMDQzWhcNMjYwODE0MTcwMDQzWjAzMTEwLwYDVQQD Eyg2NDBhNTZlNDlkNzI3MzJiNTg5MDNmMjU0MzM0YTBkYmNlZmNkNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ADoPDvwsQtNTpQOpLGNiNNmVMqJ 5z7Rz/3D7PywCN3A9LqQvsD2YnmwiAssW77bwJOC+2X8Rgy0/Nh4USBPEV5nKnAt AluzyqRGDX+apV82M3JLr5AN1ni8fpyIAXRWbXfYz6EwNYQSm7BOFmOEH86EEkwl EiRVmD3uuMXvLvKsBXtZbi14iefRuV6hOdkMvaQYtikOQdkYE+iPVnznRif4g+3N dQyMR6xrMzw9JAfQXKf6oyrVaruE/wZlJti5elp7RKUCAmJFHMmFRapxu0gywriP uInPr5egdEWu71tTwl8scdhER3PzIa/ck4cIoQwWGLaDih5THS22e+n1vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQKVuSdcnMrWJA/JUM0oNvO/NUeMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1iKyVMq +FuroqrrhWXp7K6JNkdbXi6tP2zT6PE8vX7z5CVOQ3b01R4TjN8Z8wnaQBNll37f 6/mgkwCBlUQgK9cKU89+xHmUg48JCSxCLOM2DEMO+sAzfSWZZu2SAISkut99iidp ZgxIli7utdJHBlc0OQ1e2R9FmZoqDWXeCAslxQGcbulH8bqzqsXyl/gxV1ASx1P8 TE4Fn3oZHK4PTf8YjpIvVC9mOOStwDjpIkpQfQzSaYrdOtBBy7Rz7UNQNa0ZTNwR Gt+N8k3UAwFXJVAGeNSSeXUbYGPn5Zcmg5TbiZB5mdKsBV+TPH6yXejUQ9xOdvOk trzntnAvSc4Y0A== -----END CERTIFICATE-----Generated at Thu Aug 13 20:49:57 2026 by rpki-client