$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: wBhChF5k010oaF+w5nkTmajsXjeISfWL84mmaHpFYrg= Subject key identifier: 3A:13:48:46:04:CB:D7:9A:A9:07:34:5C:C7:09:FB:E3:A5:89:15:12 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 01A0BE42AD4EB4F4A0DDD515BF2ABDEFA1CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1A81 Signing time: Sun 20 Sep 2026 10:00:35 +0000 Manifest this update: Sun 20 Sep 2026 10:00:35 +0000 Manifest next update: Mon 21 Sep 2026 10:00:35 +0000 Files and hashes: 1: 0kNz9-JWERt3abzlaJOUE4NTJO4.roa (hash: 67hyPCPSnaEobnQIj1pQT7pIpy62/SUOtS+52kq/tjI=) 2: 4TKo4hpIgeOaUC4msoLXj79brZw.roa (hash: nEKkT5nayoB6X5C9mnM1stExdpwEue5SpN4elNaZnJg=) 3: 7keWNGuJWU9cxRe0HNoW84Ifj9k.roa (hash: sPxLFVFyd1CLo0KSVpgvL78Q3f91cF50L3Qj8oDKbuo=) 4: HIrm6sRoTksRGtSnmk5VERHaRBI.roa (hash: 5kYVCcz0PvuIcAwPfpXwqKs3H5+iF2EWwV43kAN9Zh8=) 5: Lc1GuVjjApGSdMl5cDRvuL9C63E.roa (hash: j2ZLFcBgyK8+6PD7sIFfqmq1q2LME6wfEuotMkEwgLw=) 6: TBbb52loGUfoyqY4IjSCSNt13F8.roa (hash: 7gXhXE88Dz/LUX1AsHHfFQZ/lUsqoBgQIbupC+dBqCA=) 7: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: GP1kOrkpvO6K/6VKT2osnXZLArySb1FUClcPExr6adk=) 8: bwp5bXEghgHr7EYl0KNAFE7mc20.roa (hash: 7u7Zj5oFaGyCqot4J3MzTBt5vDDbem5Ae4vFNHbppfk=) 9: jKcEmRIDilRbegMXDvNfe4imvAk.roa (hash: Z/j4k2QApdwbYRv/hX0sWoy2nITxJs8LZ19RK808A/E=) 10: kAV42zy5ItGrvvbv1krId_7HV5A.roa (hash: yhIVNCh19TC+CSc7taPbV70ViFKCn6sP5Y0H3vfQEDc=) 11: nntHTPnh88EzY_e3kkkRQsK5w7M.roa (hash: aZV+AItfqgNQSbmNx8IbkbUfKGk65poULNn0lqPwxbM=) 12: sZoONX-atX44GreUxrMqc6C9sFQ.roa (hash: OXwYQmgqP66zyYHOv7k9Apd3i8xq7uri5BBqPLyj09A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 10:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:42:ad:4e:b4:f4:a0:dd:d5:15:bf:2a:bd:ef:a1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Sep 20 10:00:35 2026 GMT Not After : Sep 21 10:00:35 2026 GMT Subject: CN=3a13484604cbd79aa907345cc709fbe3a5891512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:57:cf:1e:19:8e:cd:f3:37:a2:ce:64:5c: e5:bc:4d:af:82:63:0e:83:00:bc:f3:d6:07:e0:51: a5:4b:1b:63:4d:fa:d5:e3:4f:ed:f3:ac:87:9d:94: 83:cc:c7:44:6c:2f:a3:05:c1:c0:f6:47:e5:ac:00: b2:27:06:42:f6:6d:e6:04:5f:46:a3:8d:7e:48:ea: 7a:91:12:33:51:5c:08:95:06:dc:b8:37:23:a3:ea: 23:ce:1e:48:cc:f7:a5:92:40:2c:fd:2c:97:4d:9f: f6:88:a1:ca:47:a7:61:9d:d5:90:14:10:76:7c:e3: 89:67:cd:9d:81:86:8a:0d:7b:b4:0a:d1:5d:ee:2e: 50:20:72:03:ca:d4:b5:7d:5e:a8:e0:f4:a8:e0:e8: fc:43:08:dd:aa:41:99:4d:ed:35:ea:1e:c7:56:a2: be:1f:dc:4f:31:bd:dd:e9:33:17:d5:c2:72:2b:10: 10:d6:7a:93:c1:5f:e7:1d:e6:97:21:c1:a2:08:dd: 80:3b:5c:4c:e3:94:1e:a4:8d:63:c1:be:c8:05:83: 9d:ab:24:3b:eb:d9:43:9b:40:39:9a:d0:35:ed:02: e4:6d:75:96:3e:c1:07:76:67:9c:13:f1:a5:15:41: ee:e1:38:72:1e:21:b7:79:f2:48:e4:bf:a7:64:23: 5b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:13:48:46:04:CB:D7:9A:A9:07:34:5C:C7:09:FB:E3:A5:89:15:12 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:89:c8:78:fe:99:66:64:56:b2:4e:f3:c0:34:8a:e0:8e:b3: c7:12:de:4d:91:49:f1:6d:ec:4f:0c:3c:c4:ee:95:37:21:45: 0d:3a:21:c3:65:01:7c:a5:2e:ea:96:09:99:fc:3c:74:33:49: 3c:4d:82:21:bf:c3:c3:e4:f6:69:17:b6:97:25:5f:fe:d2:aa: c0:7f:69:0e:0f:0c:8c:c5:df:83:43:0f:7b:c3:34:69:79:9c: 45:04:78:f8:a4:a2:04:c7:02:d2:5c:55:66:7b:35:44:ad:ff: a9:35:15:0f:fc:af:7a:9b:a8:44:8a:15:fa:f8:a1:07:d9:a0: 4e:05:df:3a:5f:b5:94:9f:47:9a:0d:09:05:fe:d4:d2:d8:66: 82:c8:0f:13:3d:86:12:b8:a4:8a:89:cf:68:df:14:d7:a1:72: 02:2f:84:07:11:49:ca:9b:e4:a1:69:5c:94:f0:d4:2d:ec:e3: 99:37:3f:27:4d:90:4b:7d:f3:40:70:f6:1e:60:bd:8e:db:32: f2:03:79:5a:17:17:d1:d3:a0:e9:8b:37:e2:b4:ca:84:99:c8: e0:a1:12:90:93:6c:6f:9f:d8:49:da:d8:ee:db:a1:3b:6e:fa: 67:20:f4:73:6e:fe:f3:09:db:89:1f:bf:0b:58:02:6d:e7:62: 88:6b:ba:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+Qq1OtPSg3dUVvyq976HPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjYwOTIwMTAwMDM1WhcNMjYwOTIxMTAwMDM1WjAzMTEwLwYDVQQD EygzYTEzNDg0NjA0Y2JkNzlhYTkwNzM0NWNjNzA5ZmJlM2E1ODkxNTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ZXzx4Zjs3zN6LOZFzlvE2vgmMO gwC889YH4FGlSxtjTfrV40/t86yHnZSDzMdEbC+jBcHA9kflrACyJwZC9m3mBF9G o41+SOp6kRIzUVwIlQbcuDcjo+ojzh5IzPelkkAs/SyXTZ/2iKHKR6dhndWQFBB2 fOOJZ82dgYaKDXu0CtFd7i5QIHIDytS1fV6o4PSo4Oj8QwjdqkGZTe016h7HVqK+ H9xPMb3d6TMX1cJyKxAQ1nqTwV/nHeaXIcGiCN2AO1xM45QepI1jwb7IBYOdqyQ7 69lDm0A5mtA17QLkbXWWPsEHdmecE/GlFUHu4ThyHiG3efJI5L+nZCNbSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoTSEYEy9eaqQc0XMcJ++OliRUSMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4nIeP6Z ZmRWsk7zwDSK4I6zxxLeTZFJ8W3sTww8xO6VNyFFDTohw2UBfKUu6pYJmfw8dDNJ PE2CIb/Dw+T2aRe2lyVf/tKqwH9pDg8MjMXfg0MPe8M0aXmcRQR4+KSiBMcC0lxV Zns1RK3/qTUVD/yvepuoRIoV+vihB9mgTgXfOl+1lJ9Hmg0JBf7U0thmgsgPEz2G ErikionPaN8U16FyAi+EBxFJypvkoWlclPDULezjmTc/J02QS33zQHD2HmC9jtsy 8gN5WhcX0dOg6Ys34rTKhJnI4KESkJNsb5/YSdrY7tuhO276ZyD0c27+8wnbiR+/ C1gCbediiGu6tg== -----END CERTIFICATE-----Generated at Sun Sep 20 17:49:08 2026 by rpki-client