$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft File: xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json) Hash identifier: z8Ye02eegESfCUM6uy0/bvm8EI2AKDnxNisu0JS3lhA= Subject key identifier: 77:5E:4C:DF:45:94:4A:A3:55:8F:44:D7:91:AF:27:BE:1E:99:51:3E Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 01A0C0D5FDD995DA4CEFAA9FA95D3DAC4AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft Manifest number: 1A85 Signing time: Sun 20 Sep 2026 22:00:44 +0000 Manifest this update: Sun 20 Sep 2026 22:00:44 +0000 Manifest next update: Mon 21 Sep 2026 22:00:44 +0000 Files and hashes: 1: 327Pemqk9sFkUW1UuW8ziGGSZZw.roa (hash: ppw0czaBOT9M4S3v5W/5Tq+8LmykMNtbgTkUQ8yWE2Q=) 2: 4O2FbX601-gBzb6h9g4rxWyIEtQ.roa (hash: TijnigUxJO0VkgNYCCWevg979evUf45Yv9DM6CJB1YQ=) 3: 4TLc-RZQvXpmyF7h4Csz7X13aCg.roa (hash: fUAGwVoyhs0QW1ur6F37wVxXLEtCjowCKYYnC+aO+oo=) 4: 7bWHpI5hLkVOOVMwaLDHOJjE-AQ.roa (hash: OG4wWGCUVxMVLCl+iWc5JLI3OgOP6z2IIPVQAsdzDqI=) 5: B65xybVJWOfMzOFS0UR9-O1GM7A.roa (hash: tAOeBsLf6DKyiC/JTFGsAeHLZ/oPpzm8mDnfepadXxE=) 6: Hs0H6CP8Sdc8K234nEi8yZ7lpcY.roa (hash: 38bwfsJmZUq97h+cdER4fwtCEcCYr5ZXIT6zw+0Jdhc=) 7: KCSkG-M_vayCpo68Ad12Z_kuFiw.roa (hash: pV60C6kU4d2wz1aLgEquE6I7nPbu+DSy0MC61QN3nt8=) 8: MP9GV1aDbU5FCATFFEpagOxKq5E.roa (hash: /TchIxxmMugLDKCX9UaOzPAAl6PEOMasQ2iLjcExFwM=) 9: Mdbc7JKGBe-JSvKB28h6Q_ApLiU.roa (hash: ixbEaYXOURIbpbdcksYTq3QhDvoC08h0/HFaZkHONBA=) 10: N7ElhbVyCmGSjUSh1AxjT63WzYw.roa (hash: W3FJJT1fp/7XCFXKVQfC6wjn61A9LFjVkKvFsdNlvHw=) 11: NMRSYRWPNEeA7-bAu7YGKb77w-w.roa (hash: eW8TDQOugRRowNyUaDmP0iEfShcpqstWsoeuH1rCrD0=) 12: PoFBrEh2SMRPYVmU_szomrEefgE.roa (hash: rlWtklGuZq/V0ptMquWiRwvkcGUeR1KUGk/odJwJIoc=) 13: XJjk4iuq21KJi_eSHwzmqhjc_8c.roa (hash: jOGURgmK75hsefYMnVhRtGVJY5YkbyE0SgF+Nks8cp8=) 14: Ybb4MF7W8pI3PYYiVsp0XR6vOko.roa (hash: Dj07k3KstrBcF52pApqtwtaTx2esJLpuT2QwAiWYbk8=) 15: _6J7AwPIqd15mIlwq2cJqNgjb0I.roa (hash: jxk3CJkvfpWrVN7KbiWix7L1eSxCaMfAPSl2gWvHW9o=) 16: _X1aB1grD4SEnY0N9BS0XD2icYQ.roa (hash: 8ohwVFQyC0+8LBOZ3vBnB2ZQPF3XbCAWhyBCtY+3UwE=) 17: bNLCkSinXiYwmDqOGOa8s-V6Q3Q.roa (hash: haFcBNVZwKKJJG8if5wj//WNo7O84ixbtXTuzJ5h90o=) 18: cIzWNeNZbGQqB6PaAUfFk04qwpw.roa (hash: qXYjYaptAMpe3dpSUVYLnaW4A2Txz8KndGthhN4noC0=) 19: da2QfG6A8HePFVhHUZPAybEpN68.roa (hash: TKp47i1BUIPNcl+xrP72HbJ0DwhwhsJyAX+gufSHOcQ=) 20: efwlLLHqb-bdy8PqwUcM4smevIk.roa (hash: dziFMotDF0gnY460BoEIQb6O67mGB4C/hN9W6acAk18=) 21: f8XSqcnwlZlK4hs1lSB5rn58js0.roa (hash: tjsQfcci6+epX3kib5qTfEfmQbUbQ46VzjgDJsHnqJc=) 22: fl030ykYWSfFMJ3I618xpKaj2Ho.roa (hash: pFEqmv+BjHNl0B+g2h17soeMDVxIGqWF0IhtOC2J1Tg=) 23: i39T_sxoePa7FkwXjI2KlpcV9nQ.roa (hash: xjv51Wh2+JZgrJ+iRtvSyXOWKDVobdGo9gsPb02h2X4=) 24: iPKJwckHS7fTX2BYHqvx9q3JA4g.roa (hash: 2bHm3BwYJ52KpSHXTQlcz+x91m3fEq3PirchX6IlyGw=) 25: iqnR0QT5Gp1ysbpIbYG1Jx1Dr-A.roa (hash: uT81Q71i5BXjU2YhhS0n8jdqFaplDdaFrFqRykt33OM=) 26: jXlPjmax2D6xk6xk15LqeUs2Fa8.roa (hash: ZUhfEbcBqZVUtm9r9VeW3nIknnrUSnVpiKVvjVmMjCA=) 27: kIUbbYh6ze26nak_H_v-MD0wSSY.roa (hash: CmhR0RNFprtW/FUqKS4N2o6ZxexEDi835cZpYYZrHUo=) 28: lcn7Wtg6ulEkp1Lc7XKZFro-mds.roa (hash: QCmVx87F8wdoRkStlUnKFmP4R7y7QH8VIpoG6J8hkG4=) 29: mGHfTe4HlOI6ikD255Ba9ypvq-M.roa (hash: 3pJb7Pd785PsGkpCHW3Ncqf7JB0x9mA0Rp7Wk5mjymw=) 30: oKT0teDRuCKghhjJR_CyLi3LsKQ.roa (hash: UJ60ENBvDsOG9AkFDPJ8MVNUvDKatIBnVyDiXubzPPQ=) 31: uFClGSpeGEjwQsC_QTd20Dprr-I.roa (hash: ZSHME475VpVZlfM6MiJmA1EyOYGOLuRVRvJ6kvFPsNM=) 32: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (hash: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg=) 33: x3ERDAaeO48LeOr6lKQKB6Ey2mM.roa (hash: Y+nAlXRY4txRKWouCnodtOhRL0mCZVwY0SjTTDgCeMQ=) 34: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: YJKPvMW6JIPHznExo6kwSdfeMMqhNkePqZ6n/fsn+3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:d5:fd:d9:95:da:4c:ef:aa:9f:a9:5d:3d:ac:4a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Sep 20 22:00:44 2026 GMT Not After : Sep 21 22:00:44 2026 GMT Subject: CN=775e4cdf45944aa3558f44d791af27be1e99513e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:a6:55:d8:64:53:1c:31:68:8c:5d:6c:89: 67:39:1f:ea:c9:a8:7d:bb:57:ce:74:4d:58:4b:77: c6:a2:0c:b0:a8:ff:b7:9a:54:a4:bc:65:e9:65:0a: dd:5c:90:92:c5:6c:46:e0:21:11:0f:5b:6b:d6:9a: 36:82:17:4f:bb:70:2c:2e:c9:a3:31:30:ef:c7:55: 64:64:32:cd:ca:39:60:6f:79:49:fa:60:c9:52:43: 00:77:74:78:5f:9d:25:d8:e3:1f:32:52:d4:c5:7b: 7c:c5:aa:4a:eb:d9:90:fd:e5:cd:ec:2f:34:91:2b: ab:8b:d6:02:d4:7e:32:58:60:66:69:62:d4:0c:59: 3a:b3:07:11:ce:e3:2a:c8:40:09:5e:3a:1c:0f:81: b9:0b:b3:c0:05:c8:c2:5c:fc:9d:fd:f7:f2:80:5b: a3:b3:b3:02:3f:88:70:74:0d:58:d7:59:40:ae:24: ae:c3:a8:03:1c:7c:c5:01:d9:b5:4b:01:68:34:9f: 34:38:af:c7:13:10:a6:76:19:ae:7e:55:52:dc:c7: 3b:8f:93:1f:fb:2d:96:79:16:59:ec:03:48:70:c9: 08:d7:cf:4b:b8:c2:08:6c:b2:e1:72:85:a4:01:76: a2:27:13:77:3f:d0:41:f5:6e:f6:0c:ca:be:c6:7d: 8e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5E:4C:DF:45:94:4A:A3:55:8F:44:D7:91:AF:27:BE:1E:99:51:3E X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:94:13:16:83:21:d9:3f:b9:6e:c8:8d:13:58:57:26:c3:2d: 15:f7:a6:3a:7b:88:dc:bf:49:1f:2c:dc:74:4a:f0:99:75:2f: 34:68:16:0c:40:71:22:25:9a:71:cf:0e:3c:fb:93:0a:80:f1: 74:82:d2:dd:40:74:ec:56:64:58:21:ec:83:2d:c5:0e:fd:79: c2:46:84:28:b5:37:65:36:6b:ea:5b:f8:7a:8c:9f:9b:96:b5: 9f:03:2f:92:f2:16:9f:23:27:29:45:10:f9:c9:c3:e6:f1:6c: 30:cf:43:96:b6:66:c7:2b:a6:ee:b5:66:7a:c5:74:f8:f4:3a: 7f:b6:98:9c:22:a5:b0:4a:65:fc:6e:fd:ca:f0:a3:3e:14:58: 56:95:31:a8:24:89:2c:08:5b:1e:3e:16:33:d5:72:e1:28:7e: 75:b6:a4:10:49:0b:5f:d1:aa:be:b3:e6:dd:ec:6d:10:02:14: c3:7d:ae:11:57:eb:b8:c9:1f:53:20:63:74:6b:f9:da:9b:49: 74:b9:bf:ce:aa:66:2f:e7:46:1c:da:80:a1:70:7a:89:d3:64: 72:8a:da:a7:c0:a7:1a:a8:69:7f:d4:0e:70:a8:b9:a9:c3:74: bb:8a:61:82:20:71:2b:00:a6:2e:2a:69:73:ce:d8:81:78:e4: 11:95:db:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDA1f3ZldpM76qfqV09rEqvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwOTIwMjIwMDQ0WhcNMjYwOTIxMjIwMDQ0WjAzMTEwLwYDVQQD Eyg3NzVlNGNkZjQ1OTQ0YWEzNTU4ZjQ0ZDc5MWFmMjdiZTFlOTk1MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu2mVdhkUxwxaIxdbIlnOR/qyah9 u1fOdE1YS3fGogywqP+3mlSkvGXpZQrdXJCSxWxG4CERD1tr1po2ghdPu3AsLsmj MTDvx1VkZDLNyjlgb3lJ+mDJUkMAd3R4X50l2OMfMlLUxXt8xapK69mQ/eXN7C80 kSuri9YC1H4yWGBmaWLUDFk6swcRzuMqyEAJXjocD4G5C7PABcjCXPyd/ffygFuj s7MCP4hwdA1Y11lAriSuw6gDHHzFAdm1SwFoNJ80OK/HExCmdhmuflVS3Mc7j5Mf +y2WeRZZ7ANIcMkI189LuMIIbLLhcoWkAXaiJxN3P9BB9W72DMq+xn2O7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdeTN9FlEqjVY9E15GvJ74emVE+MB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpQTFoMh 2T+5bsiNE1hXJsMtFfemOnuI3L9JHyzcdErwmXUvNGgWDEBxIiWacc8OPPuTCoDx dILS3UB07FZkWCHsgy3FDv15wkaEKLU3ZTZr6lv4eoyfm5a1nwMvkvIWnyMnKUUQ +cnD5vFsMM9DlrZmxyum7rVmesV0+PQ6f7aYnCKlsEpl/G79yvCjPhRYVpUxqCSJ LAhbHj4WM9Vy4Sh+dbakEEkLX9GqvrPm3extEAIUw32uEVfruMkfUyBjdGv52ptJ dLm/zqpmL+dGHNqAoXB6idNkcorap8CnGqhpf9QOcKi5qcN0u4phgiBxKwCmLipp c87YgXjkEZXbzA== -----END CERTIFICATE-----Generated at Mon Sep 21 03:36:46 2026 by rpki-client