$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: NV+iJx8UubjcY6rJYVQPfzmDHQ144YAxebJoKxI5a0E= Subject key identifier: 70:B4:21:10:C4:90:CC:71:D9:B7:5C:6C:26:8C:B1:17:40:52:09:4A Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019E29943FBE607E961EA490DC3DAE3E25A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0FA3 Signing time: Fri 15 May 2026 03:00:41 +0000 Manifest this update: Fri 15 May 2026 03:00:41 +0000 Manifest next update: Sat 16 May 2026 03:00:41 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 18LcGFaA85L2PFhGmCXVUOoWIl4.roa (hash: 4CfPxdyovYZLWsCd3zC7X3GJYkpt6Kyh3yiKuvnwRcQ=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 5: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 6: 6DAgtZi47nehUjXXTU_IBnF5YW4.roa (hash: Dpma5XKqXI2J8Gsz1+CwwsgqLXij/CGgvv2gTyr8Lt8=) 7: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 8: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 9: Eiim02ghBCwS5ot2vJXFepCzz9U.roa (hash: /907tU35HYtvqYYUjHp1pohLa92BU9Q56ucgrNUsIGE=) 10: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 11: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 12: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 13: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 14: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 15: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 16: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: jzsj2K1a0ynvVHszSdO3bTdJCYGS2S8dPpwRLw4X+cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:29:94:3f:be:60:7e:96:1e:a4:90:dc:3d:ae:3e:25:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: May 15 03:00:41 2026 GMT Not After : May 16 03:00:41 2026 GMT Subject: CN=70b42110c490cc71d9b75c6c268cb1174052094a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0f:ae:34:10:aa:e0:2e:d9:df:1e:87:b0:3f: f7:81:c7:30:99:8e:b4:31:8b:9d:a6:22:b6:02:b9: 02:6e:1f:bb:0f:56:51:7e:96:9d:b3:c8:ca:0d:7f: 71:17:51:cc:60:07:9d:03:fc:9d:77:35:2a:dd:45: b1:55:e5:b4:90:19:0b:31:34:d2:4f:07:99:df:6c: c7:14:ed:ed:2e:27:f8:21:f7:02:9d:40:cf:da:69: 1d:ae:2a:e6:5c:e8:fc:66:5e:c3:60:93:b5:93:1a: d9:66:f2:78:0d:49:b6:76:24:ce:d9:47:72:e3:81: 83:7e:94:46:34:d3:25:7e:61:54:16:f7:51:3a:94: c1:e9:fd:3f:c7:b0:f4:73:31:e7:6f:60:a3:b6:1e: ac:54:2f:fc:37:78:93:70:79:c8:cf:47:d6:ac:4e: b6:a5:4c:32:c3:32:50:15:3b:1e:5a:f4:06:39:89: 4d:0e:97:74:61:4e:e3:7f:11:4c:ad:0b:12:cd:8f: 74:fe:9a:a0:73:f0:2c:fe:38:2d:3a:d1:f3:af:bc: 30:a2:7f:7a:36:a9:a8:45:2f:a9:fd:e6:00:65:ea: 13:aa:34:de:0e:05:91:7d:26:d2:95:55:90:26:e2: a0:26:85:34:8c:73:29:d0:47:1b:6e:72:75:6c:db: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B4:21:10:C4:90:CC:71:D9:B7:5C:6C:26:8C:B1:17:40:52:09:4A X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c2:46:4a:16:97:2a:8b:97:d0:fd:3e:c6:c7:05:fb:34:f8: 13:36:b2:45:7d:8c:4b:6b:54:bd:af:17:cb:a2:7d:fe:6e:40: c0:91:fb:01:cf:ad:41:1b:0a:77:95:65:c0:0a:99:e7:b5:f3: be:28:b1:fc:18:fd:dd:0b:12:91:59:e3:ba:37:87:52:f6:35: 9c:c2:f5:55:a1:e4:f1:f5:72:5c:0c:92:63:6c:a5:d6:f7:7e: 43:20:48:3a:f2:59:04:9a:fb:d3:c7:fc:89:8e:a9:da:1a:f2: a4:59:2c:2c:d3:c8:76:2e:25:a1:d0:e7:87:7c:2d:92:9f:4a: a9:0d:36:36:19:92:b6:b0:62:00:fd:ec:aa:02:ca:ee:e7:56: b2:d3:d2:a2:9f:9a:dc:c0:c0:15:ea:0c:f4:e9:74:8b:e7:4e: 7d:9e:3e:d8:aa:12:a0:b2:f8:49:80:de:8d:3c:d6:a4:e4:02: ca:86:dd:82:0d:63:10:59:d7:54:79:cd:b4:4b:ba:24:6f:d9: c1:45:91:33:0a:b3:77:aa:a0:80:0c:fd:4a:f3:58:e7:7b:64: 9c:76:5a:bf:e4:3f:d3:57:6a:0c:89:52:1f:c5:2c:0e:49:c5: 3f:91:ca:93:13:56:b4:5a:dd:8d:a3:1f:52:21:d8:9e:f4:df: a5:24:a1:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4plD++YH6WHqSQ3D2uPiWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwNTE1MDMwMDQxWhcNMjYwNTE2MDMwMDQxWjAzMTEwLwYDVQQD Eyg3MGI0MjExMGM0OTBjYzcxZDliNzVjNmMyNjhjYjExNzQwNTIwOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ+uNBCq4C7Z3x6HsD/3gccwmY60 MYudpiK2ArkCbh+7D1ZRfpads8jKDX9xF1HMYAedA/yddzUq3UWxVeW0kBkLMTTS TweZ32zHFO3tLif4IfcCnUDP2mkdrirmXOj8Zl7DYJO1kxrZZvJ4DUm2diTO2Udy 44GDfpRGNNMlfmFUFvdROpTB6f0/x7D0czHnb2Cjth6sVC/8N3iTcHnIz0fWrE62 pUwywzJQFTseWvQGOYlNDpd0YU7jfxFMrQsSzY90/pqgc/As/jgtOtHzr7wwon96 NqmoRS+p/eYAZeoTqjTeDgWRfSbSlVWQJuKgJoU0jHMp0EcbbnJ1bNvakwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC0IRDEkMxx2bdcbCaMsRdAUglKMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsJGShaX KouX0P0+xscF+zT4EzayRX2MS2tUva8Xy6J9/m5AwJH7Ac+tQRsKd5VlwAqZ57Xz viix/Bj93QsSkVnjujeHUvY1nML1VaHk8fVyXAySY2yl1vd+QyBIOvJZBJr708f8 iY6p2hrypFksLNPIdi4lodDnh3wtkp9KqQ02NhmStrBiAP3sqgLK7udWstPSop+a 3MDAFeoM9Ol0i+dOfZ4+2KoSoLL4SYDejTzWpOQCyobdgg1jEFnXVHnNtEu6JG/Z wUWRMwqzd6qggAz9SvNY53tknHZav+Q/01dqDIlSH8UsDknFP5HKkxNWtFrdjaMf UiHYnvTfpSShTw== -----END CERTIFICATE-----Generated at Fri May 15 06:57:01 2026 by rpki-client