$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: jupDdwL2s3+dEd6QRtTSG3kHhnk6yED/IKeoE8oPHyA= Subject key identifier: 24:D9:9D:61:C6:BC:C9:63:59:93:92:2B:5F:D7:F6:CD:04:86:5B:E4 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019DA340D87DD9F69358198EF4F7F2DC08A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 14A7 Signing time: Sun 19 Apr 2026 01:00:28 +0000 Manifest this update: Sun 19 Apr 2026 01:00:28 +0000 Manifest next update: Mon 20 Apr 2026 01:00:28 +0000 Files and hashes: 1: 6x8_lobLoVhuOkMPbJ37tyo730k.roa (hash: frU4mbSkgCyRaUyYfKiF6eXm6Dyg76kmIZLBN+kqhOQ=) 2: G6j6G54eI6PykBhSQs9rNNcS6hw.roa (hash: laEXgXrT36Ynj7L9LkdaNFFej1PJ+rq5ig2aomYZyl4=) 3: HhvDcRGxYktP-ooZD2Di0b_W1uE.roa (hash: fg1gEV9lRdq6PNRyrfFXchNYcjeZSbgEM15KK+dTco0=) 4: JRP5ovn---EWtL-bZCGivGnYETo.roa (hash: eCnq4mLeF8zhsMi0H+sOPhfOpIVevs9iRcwDBx1K8J4=) 5: N2mIezuMwglH5z9Sw394yPABh_Y.roa (hash: yGQ16rD5VkDHl88O+y0XucdcYEVXoD+T2CoyV9LtCBE=) 6: RqXOnfuhgtOL3e2rdrVK_Ccn08A.roa (hash: gac1U5GhiAAvsADQW6zIs1K5OYBIIdxw6YN3Rmr6cdo=) 7: T4heRDKlYRou0MSfgEymplCs1fI.roa (hash: 7Kau4IXXz63KFmSMkdEw0X3J/Iw4UUvnHM/p5nOdHhg=) 8: WGwfm8cbVhTnz3acW_v7UxYOAWU.roa (hash: qj1x4HXcfbSo+Vlg5x+bKgQnTydN1BLn3gU6Y3DWQx8=) 9: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: uu4CM2uTtMIMtBOWkyGXY2YOWKRnxlRwyQ4cvUFeJYo=) 10: mdwMxB2i4JqGt_2u-3_ShCtSrqY.roa (hash: sXvWRa0cGZ0eH2CssCaF8CgkrXf1U+VjrI6hfvsrHmA=) 11: ngvbCcTY1Sy_R6l9fJF7ydsrteI.roa (hash: H2FjpC4oPaW/RUWzolau1DV8dz/fsMIpTphefULddg0=) 12: ofUllF-dWXHUPtc7vJnGioqPfCY.roa (hash: DKXn87ibX3uXQNhf8bxZ9LKgNiZi6MqVfnjhDNqP0fA=) 13: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (hash: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 01:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a3:40:d8:7d:d9:f6:93:58:19:8e:f4:f7:f2:dc:08:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Apr 19 01:00:28 2026 GMT Not After : Apr 20 01:00:28 2026 GMT Subject: CN=24d99d61c6bcc9635993922b5fd7f6cd04865be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:57:59:44:8d:b8:99:4e:a8:6f:c8:78:2a: cf:2a:9b:fa:53:c9:0b:a9:b2:c8:b9:96:9c:6a:23: 90:8e:51:6a:50:3c:2e:88:cb:8b:df:17:d7:c5:49: dd:a1:db:00:00:fd:82:89:8b:77:66:b1:c9:6c:82: f5:68:ed:7d:23:cc:4c:02:2b:07:23:32:5a:dd:70: 58:c7:12:23:5d:61:f3:79:ce:c4:73:86:2a:48:03: c9:e1:33:d2:48:ba:42:e3:9e:e5:60:80:37:53:21: c6:a1:0d:33:60:d8:ad:08:f5:f0:db:4a:82:11:05: 00:8e:f4:d6:18:6a:53:5f:12:fd:8a:96:37:32:c8: 51:97:4f:62:f7:4e:1f:9c:b5:0e:0d:ef:1f:82:db: 96:d2:83:30:3c:ea:43:89:3f:04:a5:98:96:02:77: 22:46:e6:e6:a3:f2:77:8c:d8:35:49:bb:1d:7d:e8: 3a:02:ad:ff:4a:b1:4b:66:03:40:95:13:a1:65:90: fa:7e:7c:7e:b2:b4:4b:17:9d:b3:62:65:2b:8a:dc: a3:90:dd:9a:74:c8:ca:c2:1d:9a:d4:d5:e2:6e:6e: 7d:81:c0:d8:a2:75:c2:bd:70:40:3e:b5:00:b6:c9: 11:1c:9b:51:c1:8e:c6:9e:9a:24:6e:25:41:11:e5: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D9:9D:61:C6:BC:C9:63:59:93:92:2B:5F:D7:F6:CD:04:86:5B:E4 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:b2:db:91:75:c5:13:e4:6d:cc:78:a3:39:73:b8:31:70: 98:f1:1d:ac:e6:1b:6f:23:ed:3d:4f:7d:7b:68:a4:57:3a:fb: a4:fc:8e:b8:4d:ae:e5:99:3d:76:6d:a0:6e:6a:0c:fe:b0:f3: a8:0c:14:68:88:2b:b3:6c:16:12:ef:d0:8b:8a:32:c9:15:fd: 2b:4e:4e:de:5a:4c:de:13:95:4e:2f:63:44:33:bf:35:ae:02: 18:79:f5:ca:9c:77:6c:42:51:5d:91:59:6b:b6:6c:b2:a7:74: d3:09:e7:47:b8:aa:57:00:54:ba:4a:33:db:ea:32:a3:cf:ab: a3:66:02:9a:bc:19:86:ee:fb:ab:03:12:00:46:3d:ec:40:ba: 15:7e:d4:b5:2c:ab:74:9a:1b:18:7c:01:f5:a1:fb:35:b4:a7: 57:1c:a6:7c:a4:e2:94:69:b2:6a:33:a0:50:9c:9e:a7:83:27: 14:af:ec:f8:a7:cc:f8:2b:51:b9:b7:cc:16:ef:52:41:52:bd: 23:2a:ac:e9:bd:98:b6:3c:fc:e8:a3:74:f4:36:1a:7e:27:72: c6:02:a5:a5:d7:aa:a3:46:b2:22:57:8c:62:e3:43:b8:fa:cb: e7:fb:aa:50:61:a1:87:8d:58:b3:75:f4:be:31:0c:eb:2b:c2: 3a:41:03:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2jQNh92faTWBmO9Pfy3AimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwNDE5MDEwMDI4WhcNMjYwNDIwMDEwMDI4WjAzMTEwLwYDVQQD EygyNGQ5OWQ2MWM2YmNjOTYzNTk5MzkyMmI1ZmQ3ZjZjZDA0ODY1YmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PRXWUSNuJlOqG/IeCrPKpv6U8kL qbLIuZacaiOQjlFqUDwuiMuL3xfXxUndodsAAP2CiYt3ZrHJbIL1aO19I8xMAisH IzJa3XBYxxIjXWHzec7Ec4YqSAPJ4TPSSLpC457lYIA3UyHGoQ0zYNitCPXw20qC EQUAjvTWGGpTXxL9ipY3MshRl09i904fnLUODe8fgtuW0oMwPOpDiT8EpZiWAnci Rubmo/J3jNg1Sbsdfeg6Aq3/SrFLZgNAlROhZZD6fnx+srRLF52zYmUrityjkN2a dMjKwh2a1NXibm59gcDYonXCvXBAPrUAtskRHJtRwY7GnpokbiVBEeVWuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTZnWHGvMljWZOSK1/X9s0EhlvkMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdOy25F1 xRPkbcx4ozlzuDFwmPEdrOYbbyPtPU99e2ikVzr7pPyOuE2u5Zk9dm2gbmoM/rDz qAwUaIgrs2wWEu/Qi4oyyRX9K05O3lpM3hOVTi9jRDO/Na4CGHn1ypx3bEJRXZFZ a7Zssqd00wnnR7iqVwBUukoz2+oyo8+ro2YCmrwZhu77qwMSAEY97EC6FX7UtSyr dJobGHwB9aH7NbSnVxymfKTilGmyajOgUJyep4MnFK/s+KfM+CtRubfMFu9SQVK9 Iyqs6b2Ytjz86KN09DYafidyxgKlpdeqo0ayIleMYuNDuPrL5/uqUGGhh41Ys3X0 vjEM6yvCOkEDPQ== -----END CERTIFICATE-----Generated at Sun Apr 19 10:06:43 2026 by rpki-client