$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: 3JNAFzWGew5cvsAU3iR84+mnownCRIOXJ+tabeBi0pc= Subject key identifier: EC:94:C5:AD:81:57:E5:03:56:9A:B0:F9:45:CC:31:08:48:DA:67:2B Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019EBF5A93E8BA2A3EACE2471BAA6417205D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0FFD Signing time: Sat 13 Jun 2026 05:00:44 +0000 Manifest this update: Sat 13 Jun 2026 05:00:44 +0000 Manifest next update: Sun 14 Jun 2026 05:00:44 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: G5kaTH+jIHaBLFnjxvcpO2C3WG+AicMRMMUhfTINVPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:5a:93:e8:ba:2a:3e:ac:e2:47:1b:aa:64:17:20:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jun 13 05:00:44 2026 GMT Not After : Jun 14 05:00:44 2026 GMT Subject: CN=ec94c5ad8157e503569ab0f945cc310848da672b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:93:83:f8:4e:a6:54:73:b6:06:89:fd:d2:a6: d1:02:53:49:a7:2c:83:9f:7b:4a:de:63:93:01:38: 4e:94:02:3b:ef:cf:12:2c:fa:29:d5:52:f0:3f:9d: 45:79:9a:82:dd:16:60:18:e2:e6:b2:c6:94:da:2f: ef:6e:77:42:30:41:82:bd:c6:f9:e6:0b:d4:c0:e9: aa:58:98:80:18:00:c7:60:d3:91:27:50:04:87:b2: 09:c6:6a:8f:92:ba:5f:80:66:4c:e7:34:56:ce:67: fe:74:1b:ad:93:39:ce:b7:e8:f9:9a:90:6d:5d:2c: 5f:0e:a5:ae:bc:8f:ca:50:14:da:52:38:a9:f6:f6: 77:00:55:a6:13:f6:f0:25:e6:62:61:46:57:7a:20: 61:02:a8:15:20:ac:1c:ae:c3:b0:0d:9b:32:9c:fe: cb:ba:ff:b7:38:cd:a8:8e:ba:0c:94:42:12:77:62: dd:61:ae:47:2d:f1:11:ca:7c:6f:6c:bb:5b:ff:74: e1:95:84:1a:1e:cf:3c:0e:26:23:9c:5b:2c:cc:8d: f5:db:53:00:fa:72:0b:f0:b0:bc:7c:ab:fa:bc:17: 78:eb:79:86:ed:c3:56:0c:d8:a2:0b:a2:e3:57:f8: 41:46:53:1c:01:d9:40:b6:88:32:71:50:a5:ee:1f: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:94:C5:AD:81:57:E5:03:56:9A:B0:F9:45:CC:31:08:48:DA:67:2B X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4e:7f:64:ed:45:f7:6d:58:4b:da:10:33:7d:3c:e1:63:b6: 8f:55:07:71:97:75:b2:af:b7:6f:52:b8:f3:ba:9e:08:8c:5c: b8:2b:84:25:ac:41:fb:97:0d:8b:85:0a:4b:c2:ad:dd:08:22: 97:5d:51:61:74:36:61:2a:eb:fe:63:13:01:57:f0:af:4e:fa: ab:38:77:76:f0:06:9a:a0:a2:db:5a:56:35:02:95:ca:d0:f7: 8f:5f:2b:bc:e3:df:21:68:af:9f:70:47:76:8a:22:c4:04:a7: b4:77:51:46:c3:ab:57:b3:ef:80:04:94:c6:09:c7:75:dc:69: 40:29:35:5f:fc:fb:22:26:41:d2:d7:13:28:da:8c:8d:34:f0: 1e:4b:c1:89:cd:9f:64:92:fa:72:47:e4:45:ce:e0:2b:29:ad: 2e:4f:e9:f6:09:ad:52:d9:4a:23:e1:d5:bb:b4:60:b2:cf:c2: 10:84:20:8e:4e:87:21:d4:25:a3:a2:af:b4:2d:b0:87:20:aa: 1c:a7:a4:f0:d0:cd:f4:82:03:94:96:cb:89:c3:4f:27:1d:bd: 8c:2f:49:27:42:35:8f:6b:aa:b5:ce:c5:3a:8a:94:80:63:c3: ba:2a:38:68:71:45:e6:6e:fa:94:1d:df:6c:ca:a8:c4:92:20: aa:e9:ca:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/WpPouio+rOJHG6pkFyBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwNjEzMDUwMDQ0WhcNMjYwNjE0MDUwMDQ0WjAzMTEwLwYDVQQD EyhlYzk0YzVhZDgxNTdlNTAzNTY5YWIwZjk0NWNjMzEwODQ4ZGE2NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpOD+E6mVHO2Bon90qbRAlNJpyyD n3tK3mOTAThOlAI7788SLPop1VLwP51FeZqC3RZgGOLmssaU2i/vbndCMEGCvcb5 5gvUwOmqWJiAGADHYNORJ1AEh7IJxmqPkrpfgGZM5zRWzmf+dButkznOt+j5mpBt XSxfDqWuvI/KUBTaUjip9vZ3AFWmE/bwJeZiYUZXeiBhAqgVIKwcrsOwDZsynP7L uv+3OM2ojroMlEISd2LdYa5HLfERynxvbLtb/3ThlYQaHs88DiYjnFsszI3121MA +nIL8LC8fKv6vBd463mG7cNWDNiiC6LjV/hBRlMcAdlAtogycVCl7h8MuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyUxa2BV+UDVpqw+UXMMQhI2mcrMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhE5/ZO1F 921YS9oQM3084WO2j1UHcZd1sq+3b1K487qeCIxcuCuEJaxB+5cNi4UKS8Kt3Qgi l11RYXQ2YSrr/mMTAVfwr076qzh3dvAGmqCi21pWNQKVytD3j18rvOPfIWivn3BH dooixASntHdRRsOrV7PvgASUxgnHddxpQCk1X/z7IiZB0tcTKNqMjTTwHkvBic2f ZJL6ckfkRc7gKymtLk/p9gmtUtlKI+HVu7Rgss/CEIQgjk6HIdQlo6KvtC2whyCq HKek8NDN9IIDlJbLicNPJx29jC9JJ0I1j2uqtc7FOoqUgGPDuio4aHFF5m76lB3f bMqoxJIgqunKBg== -----END CERTIFICATE-----Generated at Sat Jun 13 13:34:01 2026 by rpki-client