$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: V/3Np4iddCNSteBjQelLW4kVesVJ4AazSXkc0sZTJLA= Subject key identifier: 7F:EC:92:F4:91:07:42:44:7B:AB:DE:C0:7D:FD:1B:EF:CC:BB:E2:CC Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019CAFED2874AA644DFBE956A1E693BBFC82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1866 Signing time: Mon 02 Mar 2026 19:01:20 +0000 Manifest this update: Mon 02 Mar 2026 19:01:20 +0000 Manifest next update: Tue 03 Mar 2026 19:01:20 +0000 Files and hashes: 1: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 2: 5xaOtvdRRcRbWJ7RO2zXZTBbzHo.roa (hash: jVjnXKJCmaM69ihXNF4Fvp6wlNMh49T6+g/No1R59Xw=) 3: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 4: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 5: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 6: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: ZoAa+LySbLNasCDyMWPbXClJx6a+YTPa8Y76dq+NdVo=) 7: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 8: giCv_eoabdDGNQ76ze62UyFFjv8.roa (hash: CGWpYFajJaXhrm0XFaoEyMaeJXprNddmqt1FMrWwQoA=) 9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 15:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:af:ed:28:74:aa:64:4d:fb:e9:56:a1:e6:93:bb:fc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Mar 2 19:01:20 2026 GMT Not After : Mar 3 19:01:20 2026 GMT Subject: CN=7fec92f4910742447babdec07dfd1befccbbe2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:a0:cd:6f:f8:69:6f:b2:18:8d:71:8a:e5: 4c:16:2f:8e:64:bf:bf:ac:24:38:d8:b9:84:d2:61: af:d0:60:74:77:d0:8e:e4:bb:9c:b0:96:d3:5c:c7: d8:6e:a6:2f:16:88:7a:d8:fc:04:ea:b7:a7:b9:0b: af:96:ed:cc:0a:9d:46:5a:7c:38:3c:5f:e7:62:86: e8:22:79:53:11:c0:ce:b8:60:75:7f:56:02:11:08: 50:48:49:35:1b:99:6c:90:44:01:44:a4:27:b0:8f: 5b:bd:4d:10:a5:3a:63:6c:a8:7c:09:a3:29:f2:8f: 83:fd:78:90:1b:25:e3:6e:61:37:09:02:57:73:60: 2d:9d:e6:a6:14:cf:01:d1:e7:e2:1e:e9:27:29:e6: 90:14:59:6f:0b:b7:d6:be:71:14:94:96:3f:ac:b6: 1a:7a:81:82:d5:2f:17:ed:11:31:94:25:a7:7b:81: 0e:25:1e:db:b4:fa:9e:35:6f:88:11:5f:a0:ec:c5: e9:4a:de:6e:2c:45:83:ef:ce:5a:65:08:2d:f3:62: 6d:e0:37:84:41:12:9a:9c:8e:a6:ff:c6:d7:f2:1f: a8:1a:49:a4:85:9b:f2:30:72:82:01:b7:eb:98:b9: 53:b7:c5:af:72:61:da:6d:e2:9d:3d:68:29:e3:31: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EC:92:F4:91:07:42:44:7B:AB:DE:C0:7D:FD:1B:EF:CC:BB:E2:CC X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b1:f2:8a:23:f7:53:f4:95:c1:7a:ca:2b:81:ec:58:de:62: d3:48:66:77:ec:fa:e8:d6:58:02:eb:f0:e8:95:dc:a5:a3:f1: 71:3c:58:d8:71:35:cc:6d:fe:3d:23:ba:78:71:62:ff:fb:5c: e3:8f:70:de:e1:dc:24:5f:eb:5f:66:c4:9b:a4:8f:88:eb:30: 91:04:d4:3b:2b:0c:78:17:32:d1:af:b5:af:44:33:02:72:7a: 43:54:14:9d:5c:b0:e3:22:1e:81:34:47:1d:79:27:7c:8f:8f: fc:92:0b:3f:38:0b:a3:6c:b9:b5:d7:23:86:06:1f:fe:68:cd: 3a:a3:01:bf:be:60:0c:fa:e5:aa:f8:1d:d1:18:7a:b1:16:58: 3e:cd:06:a0:5f:1b:9d:bd:cc:86:e0:ce:0f:1e:b4:22:49:00: 50:f6:58:23:f6:07:8b:5a:f5:4e:71:35:5c:d0:da:66:4f:fa: 4e:a3:9c:30:3c:2c:27:1e:7e:bb:b4:ba:6a:be:a4:33:c8:57: 2c:c1:61:ce:dd:da:e4:1a:d7:39:58:92:a2:e0:2b:96:1d:5f: a2:e4:7a:ff:55:75:b8:3b:f9:14:82:d5:65:2f:c8:23:13:b9: 22:01:3f:89:ae:38:c9:bc:7d:80:f2:de:0c:fb:dc:27:fd:c3: 93:2e:52:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyv7Sh0qmRN++lWoeaTu/yCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwMzAyMTkwMTIwWhcNMjYwMzAzMTkwMTIwWjAzMTEwLwYDVQQD Eyg3ZmVjOTJmNDkxMDc0MjQ0N2JhYmRlYzA3ZGZkMWJlZmNjYmJlMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWagzW/4aW+yGI1xiuVMFi+OZL+/ rCQ42LmE0mGv0GB0d9CO5LucsJbTXMfYbqYvFoh62PwE6renuQuvlu3MCp1GWnw4 PF/nYoboInlTEcDOuGB1f1YCEQhQSEk1G5lskEQBRKQnsI9bvU0QpTpjbKh8CaMp 8o+D/XiQGyXjbmE3CQJXc2AtneamFM8B0efiHuknKeaQFFlvC7fWvnEUlJY/rLYa eoGC1S8X7RExlCWne4EOJR7btPqeNW+IEV+g7MXpSt5uLEWD785aZQgt82Jt4DeE QRKanI6m/8bX8h+oGkmkhZvyMHKCAbfrmLlTt8WvcmHabeKdPWgp4zF6EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/skvSRB0JEe6vewH39G+/Mu+LMMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArHyiiP3 U/SVwXrKK4HsWN5i00hmd+z66NZYAuvw6JXcpaPxcTxY2HE1zG3+PSO6eHFi//tc 449w3uHcJF/rX2bEm6SPiOswkQTUOysMeBcy0a+1r0QzAnJ6Q1QUnVyw4yIegTRH HXknfI+P/JILPzgLo2y5tdcjhgYf/mjNOqMBv75gDPrlqvgd0Rh6sRZYPs0GoF8b nb3MhuDODx60IkkAUPZYI/YHi1r1TnE1XNDaZk/6TqOcMDwsJx5+u7S6ar6kM8hX LMFhzt3a5BrXOViSouArlh1fouR6/1V1uDv5FILVZS/IIxO5IgE/ia44ybx9gPLe DPvcJ/3Dky5Syg== -----END CERTIFICATE-----Generated at Mon Mar 2 21:26:12 2026 by rpki-client