$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: nYtCXxZ30CneE6KTjFInOzv+MuLwO7a0Gf2mCSD09H8= Subject key identifier: AB:8F:92:52:32:DD:AF:CA:D1:41:CD:39:2C:2C:8E:84:36:E0:E2:59 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019CAC103C7766A7F5739859B307E2401F43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1424 Signing time: Mon 02 Mar 2026 01:01:10 +0000 Manifest this update: Mon 02 Mar 2026 01:01:10 +0000 Manifest next update: Tue 03 Mar 2026 01:01:10 +0000 Files and hashes: 1: 3h1CXl7HYMWmLGwBh3ONd5rS3hc.roa (hash: Xuejav4fss+XVZMTSOqx2d21V8VUJ6E3micJYPsKn7s=) 2: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 3: 7ItMpX2jLTwyH9XpO5jp7SzIWSg.roa (hash: J9SJjSKqLYuFsUDjJoCt3JIVxoO5phlJCjXL8OymbCw=) 4: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 5: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 6: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 7: TSjFM1kyGeGyo2PAsR0WSG_oqns.roa (hash: TMlFjOXacwLKIABcDzQq377NOlMddVoF+Xggh2q6las=) 8: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 9: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: Y8sODTLhUQDCdiKRYETCAg8fL0WcHOG3t9L+bUnZesE=) 10: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 11: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 12: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:10:3c:77:66:a7:f5:73:98:59:b3:07:e2:40:1f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Mar 2 01:01:10 2026 GMT Not After : Mar 3 01:01:10 2026 GMT Subject: CN=ab8f925232ddafcad141cd392c2c8e8436e0e259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:69:35:63:ad:39:ce:df:a3:f5:d5:d1:cc: 40:a9:a0:c5:c0:16:47:25:03:4c:93:d1:15:2e:a7: 03:e5:73:62:c6:24:35:55:4c:47:5a:d8:c8:77:3c: 42:62:0d:64:9f:88:4f:42:3c:9d:05:40:88:d8:f7: 6a:14:9c:d4:cf:e1:23:5e:fc:41:57:f8:ef:8f:55: 87:84:5e:c6:cc:a7:84:5d:1c:43:f7:3f:6e:76:fd: 7c:92:4f:fa:af:2a:d1:e5:24:93:8c:7c:07:14:75: 0f:df:5b:27:f1:b5:12:ad:51:ab:2a:88:26:ac:6c: 7c:bf:af:90:2d:0e:88:e2:4a:a1:5d:ac:de:df:e7: ff:d9:87:29:82:99:b9:96:19:88:2e:08:2f:54:a3: 98:16:2e:12:44:21:7c:24:c4:8d:c0:b4:49:57:9f: 31:fd:41:d3:bd:12:2c:6b:bb:a7:23:c0:80:38:03: 65:96:45:bd:fd:59:45:af:93:b6:2a:82:be:19:de: e0:5e:33:e8:c4:c0:11:a7:53:f6:72:19:6d:7f:81: 7e:a9:c5:b2:9f:8a:90:f2:52:bd:39:58:74:35:92: 65:40:19:e3:be:a7:47:6d:47:2a:de:b0:ab:5c:14: 14:bd:7f:99:45:0e:8b:2e:97:ab:23:30:b7:0b:2d: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8F:92:52:32:DD:AF:CA:D1:41:CD:39:2C:2C:8E:84:36:E0:E2:59 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:da:77:69:3f:ab:fb:2c:fe:a5:89:06:4d:b6:4b:15:c1:33: 74:22:a2:98:58:b0:1c:52:bc:e1:71:aa:38:c2:51:64:50:cd: 4d:2c:85:b2:d6:ca:45:d8:27:bc:b1:40:a5:6e:d4:68:6d:75: f1:8f:c4:e8:1e:d4:c3:1b:0f:8a:a8:a1:2f:52:1e:fa:a0:b5: 50:55:28:7a:a2:d9:6a:6b:98:82:99:89:eb:c1:12:59:83:66: 6a:b8:7b:ab:aa:2e:ce:c0:21:9e:88:03:dd:35:93:0b:9f:d2: 98:1e:b9:50:7c:41:5f:e8:0a:e2:32:22:ab:d7:fc:82:66:18: 8d:5e:e1:82:36:d0:be:72:9c:61:24:86:13:4a:9d:06:4d:17: c1:92:eb:15:d9:3a:6a:00:c4:b3:47:99:38:75:c1:74:05:0c: d4:d0:cf:20:7b:da:78:e4:10:17:74:91:63:47:e2:ff:90:67: 7e:9e:f8:86:a2:c7:31:97:61:fc:07:44:4d:8c:3b:27:c1:46: 5d:fa:3c:e9:bf:b1:5e:16:f4:92:72:a5:8d:4c:7d:17:1e:ad: 14:c5:a5:15:cd:21:4a:b0:21:4c:73:37:8d:71:8c:33:94:fb: 24:df:12:b4:22:21:0c:d7:e5:17:1d:b7:6e:ba:ad:7a:80:91: 5c:0f:14:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysEDx3Zqf1c5hZswfiQB9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMzAyMDEwMTEwWhcNMjYwMzAzMDEwMTEwWjAzMTEwLwYDVQQD EyhhYjhmOTI1MjMyZGRhZmNhZDE0MWNkMzkyYzJjOGU4NDM2ZTBlMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E1pNWOtOc7fo/XV0cxAqaDFwBZH JQNMk9EVLqcD5XNixiQ1VUxHWtjIdzxCYg1kn4hPQjydBUCI2PdqFJzUz+EjXvxB V/jvj1WHhF7GzKeEXRxD9z9udv18kk/6ryrR5SSTjHwHFHUP31sn8bUSrVGrKogm rGx8v6+QLQ6I4kqhXaze3+f/2Ycpgpm5lhmILggvVKOYFi4SRCF8JMSNwLRJV58x /UHTvRIsa7unI8CAOANllkW9/VlFr5O2KoK+Gd7gXjPoxMARp1P2chltf4F+qcWy n4qQ8lK9OVh0NZJlQBnjvqdHbUcq3rCrXBQUvX+ZRQ6LLperIzC3Cy0XTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuPklIy3a/K0UHNOSwsjoQ24OJZMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9p3aT+r +yz+pYkGTbZLFcEzdCKimFiwHFK84XGqOMJRZFDNTSyFstbKRdgnvLFApW7UaG11 8Y/E6B7UwxsPiqihL1Ie+qC1UFUoeqLZamuYgpmJ68ESWYNmarh7q6ouzsAhnogD 3TWTC5/SmB65UHxBX+gK4jIiq9f8gmYYjV7hgjbQvnKcYSSGE0qdBk0XwZLrFdk6 agDEs0eZOHXBdAUM1NDPIHvaeOQQF3SRY0fi/5Bnfp74hqLHMZdh/AdETYw7J8FG Xfo86b+xXhb0knKljUx9Fx6tFMWlFc0hSrAhTHM3jXGMM5T7JN8StCIhDNflFx23 brqteoCRXA8Urg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:07 2026 by rpki-client