$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: 59WyN25a8lzovVOHkqfG/LjrNAhYUmkp+zlg7NkDtoQ= Subject key identifier: 24:6F:AF:65:B9:02:EF:3D:2F:4D:45:A0:67:98:06:44:77:94:2C:A5 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019F1265FCDD7E2D87F5D8A31E91402D2CC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 1028 Signing time: Mon 29 Jun 2026 08:01:41 +0000 Manifest this update: Mon 29 Jun 2026 08:01:41 +0000 Manifest next update: Tue 30 Jun 2026 08:01:41 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: AURZwUMIYDU2N2eMVqFeyYCID6BjFSEBN1zdetbSr+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:65:fc:dd:7e:2d:87:f5:d8:a3:1e:91:40:2d:2c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jun 29 08:01:41 2026 GMT Not After : Jun 30 08:01:41 2026 GMT Subject: CN=246faf65b902ef3d2f4d45a06798064477942ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:90:57:fc:b1:e1:ea:56:df:49:02:19:3b: dd:18:fe:08:21:1e:21:eb:90:1b:99:23:73:06:c9: 7e:52:c0:80:c8:76:a6:2c:35:f2:74:f4:2b:0d:9b: 24:e9:bf:e0:13:d7:21:1d:78:ed:6c:6a:86:fe:99: 35:4d:42:d4:db:01:88:23:12:1d:86:1e:2c:be:ae: e6:48:cd:b8:63:af:40:93:62:17:c0:7a:5f:55:6b: ba:c7:43:1f:8f:46:56:ba:2f:be:34:b6:26:48:e1: 8f:e4:95:cd:e9:cc:8e:50:42:67:ac:28:79:47:9e: d9:e1:1b:53:37:8f:64:cf:65:c7:ba:6d:5a:39:9f: 0e:7e:4a:47:30:88:8f:16:15:51:db:1d:a1:24:d1: d5:93:23:3d:92:cf:de:c3:c8:4a:bb:02:1d:3a:26: bd:f0:15:63:b6:82:ac:b2:57:e4:3a:cf:01:c6:cb: 5d:83:1e:23:f3:c5:c6:ac:fd:93:ab:3c:2c:b1:b9: 12:a9:f5:2c:d6:82:15:6d:1b:a7:e5:af:a4:0f:57: bb:6a:89:76:f8:d6:65:d0:e5:56:4a:5d:57:4a:43: 8d:08:fd:1f:1d:75:8f:43:62:0b:bf:4e:4b:e4:e7: 49:ab:9c:c5:ce:c5:9b:70:7f:5a:a7:58:e7:94:31: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6F:AF:65:B9:02:EF:3D:2F:4D:45:A0:67:98:06:44:77:94:2C:A5 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:56:a9:e8:ed:f1:57:c2:be:ee:93:9a:82:37:7b:27:78:fd: 47:d1:7c:8a:ca:7d:5c:03:59:25:c5:96:38:35:13:fb:77:89: d3:45:af:9f:d7:1c:be:05:de:f5:e5:a9:30:e2:e5:56:00:7a: cb:2f:2e:55:9a:82:5f:e2:2f:4b:b9:a7:f0:37:3f:7b:eb:d6: 99:5a:4e:da:cd:ee:9a:5b:72:c1:69:62:35:38:18:62:22:99: 69:83:3b:d5:b5:2d:ba:90:c9:e0:77:6a:32:0f:68:c8:0d:bd: 36:74:2d:b7:2d:bc:ed:42:d9:a1:92:a3:17:0d:73:0e:c4:15: c9:4d:37:4e:e0:bd:02:40:c9:07:f2:b8:4a:4f:ad:04:7a:97: af:aa:44:66:a4:0a:e9:82:c5:7e:e2:d4:66:02:56:c0:38:c9: 59:01:ba:d4:77:c2:76:bd:b5:6d:8f:03:20:b0:db:f8:a1:a4: 42:ea:0d:fd:d6:cd:1f:d5:53:68:b0:2e:23:24:1d:9f:55:4d: 45:e2:cc:33:7c:23:ad:25:14:c2:21:fb:0e:a0:7a:7c:81:bc: 5c:64:8a:3f:38:73:39:14:0a:e0:03:b6:38:8b:e0:33:34:6b: 9f:fc:81:77:45:95:fa:1f:a2:11:d4:c8:b8:2e:69:5a:58:45: e8:11:3e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8SZfzdfi2H9dijHpFALSzBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwNjI5MDgwMTQxWhcNMjYwNjMwMDgwMTQxWjAzMTEwLwYDVQQD EygyNDZmYWY2NWI5MDJlZjNkMmY0ZDQ1YTA2Nzk4MDY0NDc3OTQyY2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8yQV/yx4epW30kCGTvdGP4IIR4h 65AbmSNzBsl+UsCAyHamLDXydPQrDZsk6b/gE9chHXjtbGqG/pk1TULU2wGIIxId hh4svq7mSM24Y69Ak2IXwHpfVWu6x0Mfj0ZWui++NLYmSOGP5JXN6cyOUEJnrCh5 R57Z4RtTN49kz2XHum1aOZ8OfkpHMIiPFhVR2x2hJNHVkyM9ks/ew8hKuwIdOia9 8BVjtoKsslfkOs8Bxstdgx4j88XGrP2TqzwssbkSqfUs1oIVbRun5a+kD1e7aol2 +NZl0OVWSl1XSkONCP0fHXWPQ2ILv05L5OdJq5zFzsWbcH9ap1jnlDFRwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRvr2W5Au89L01FoGeYBkR3lCylMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVap6O3x V8K+7pOagjd7J3j9R9F8isp9XANZJcWWODUT+3eJ00Wvn9ccvgXe9eWpMOLlVgB6 yy8uVZqCX+IvS7mn8Dc/e+vWmVpO2s3umltywWliNTgYYiKZaYM71bUtupDJ4Hdq Mg9oyA29NnQtty287ULZoZKjFw1zDsQVyU03TuC9AkDJB/K4Sk+tBHqXr6pEZqQK 6YLFfuLUZgJWwDjJWQG61HfCdr21bY8DILDb+KGkQuoN/dbNH9VTaLAuIyQdn1VN ReLMM3wjrSUUwiH7DqB6fIG8XGSKPzhzORQK4AO2OIvgMzRrn/yBd0WV+h+iEdTI uC5pWlhF6BE+bA== -----END CERTIFICATE-----Generated at Mon Jun 29 11:38:01 2026 by rpki-client