$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: GWXp633ZmpM+Y6wotRC7rb1MWMd9V6qzEHe6Rxme5Tc= Subject key identifier: 0D:AB:26:BD:1D:5A:94:73:4B:01:7D:2D:FF:B7:D7:C2:20:4D:6C:00 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019FA90746B232671AE77714DFB0579B14BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 1076 Signing time: Tue 28 Jul 2026 14:00:54 +0000 Manifest this update: Tue 28 Jul 2026 14:00:54 +0000 Manifest next update: Wed 29 Jul 2026 14:00:54 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: Ergm3WrH3Dx3gKUNzflvyrhqBcQtUkEU3jBqWgqiB7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:07:46:b2:32:67:1a:e7:77:14:df:b0:57:9b:14:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Jul 28 14:00:54 2026 GMT Not After : Jul 29 14:00:54 2026 GMT Subject: CN=0dab26bd1d5a94734b017d2dffb7d7c2204d6c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:ed:cd:c4:49:58:76:d3:77:d1:7a:09:2e: cc:58:a0:23:f9:fe:c9:d2:0f:2d:0e:0e:02:93:22: 0f:e5:56:20:e3:f5:79:d9:37:d2:2f:0d:c5:c4:5e: 28:c6:f6:c6:92:6f:01:ef:e7:e2:82:f1:46:b2:d8: 3b:80:17:09:a7:92:5a:f9:29:84:d1:7c:49:61:73: c1:47:58:ee:bb:4b:4e:f2:3b:b5:aa:b4:e8:c3:03: 30:19:2e:b9:bb:1a:d9:ab:96:b3:3c:45:57:8b:4c: be:2b:22:52:b3:0c:6a:9c:67:fc:fc:35:fe:08:24: 22:ac:fc:ec:21:0a:4b:f0:21:15:94:db:8e:4b:de: 7d:15:99:fa:b1:61:26:3a:c4:70:21:26:f7:09:c3: 08:84:ff:ec:0d:64:0a:cc:33:78:1a:82:ee:94:9b: e1:38:a3:21:85:79:50:1d:2a:d5:55:94:cb:96:eb: b5:2f:37:4e:f8:42:b6:9d:86:76:e9:92:60:82:a0: 22:d4:1b:94:a1:b5:12:cb:42:2c:81:0d:95:53:04: ad:64:3e:b0:f9:1c:6e:36:2a:aa:8b:e0:fa:e9:20: ff:7c:db:5e:80:ba:0e:44:8b:d7:32:fa:12:84:68: 0a:0e:5f:82:6e:9e:24:0c:bd:d2:67:26:70:27:ae: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AB:26:BD:1D:5A:94:73:4B:01:7D:2D:FF:B7:D7:C2:20:4D:6C:00 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:67:ca:aa:b0:a2:7a:ea:2c:a7:13:fb:47:82:c2:87:19:51: 1b:70:a2:f6:ae:8a:2f:18:c9:6a:2f:4d:37:95:20:3a:08:b1: 13:cc:fd:11:83:2f:9f:76:e9:88:43:88:48:f1:80:7c:05:47: 36:f3:ad:25:78:d6:31:57:35:73:6e:bb:5e:76:4f:f1:e9:06: df:01:36:e9:09:2b:92:26:a6:dc:76:4e:ba:73:5b:52:65:9e: b1:8f:e7:d1:1a:ec:5d:c7:21:08:b6:02:8e:7b:85:a1:e8:3e: 6c:75:5d:a9:5d:c4:0b:2c:82:09:8a:3b:ed:d6:4f:d2:5f:5a: 35:fc:e1:58:5b:a7:23:e6:38:00:61:af:2b:3a:c5:d4:ec:b5: 33:9a:7f:c6:48:7d:34:61:e9:64:3f:50:64:ca:06:b3:27:3b: 86:f3:d3:8d:56:71:62:d7:e1:45:89:1b:04:24:02:62:7b:97: 1a:9e:af:a5:23:d5:51:00:56:a9:74:b5:e3:3b:09:84:a7:84: 9d:ac:83:55:eb:44:63:bc:ae:74:bc:04:1d:1e:29:12:d2:57: 0a:b5:84:0a:b1:9d:38:a2:3c:c2:21:e3:f1:f7:8e:ee:51:24: 9a:d5:20:64:31:f3:fd:62:02:2b:3c:9b:57:08:5e:99:67:77: d4:1b:d7:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pB0ayMmca53cU37BXmxS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwNzI4MTQwMDU0WhcNMjYwNzI5MTQwMDU0WjAzMTEwLwYDVQQD EygwZGFiMjZiZDFkNWE5NDczNGIwMTdkMmRmZmI3ZDdjMjIwNGQ2YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFPtzcRJWHbTd9F6CS7MWKAj+f7J 0g8tDg4CkyIP5VYg4/V52TfSLw3FxF4oxvbGkm8B7+figvFGstg7gBcJp5Ja+SmE 0XxJYXPBR1juu0tO8ju1qrTowwMwGS65uxrZq5azPEVXi0y+KyJSswxqnGf8/DX+ CCQirPzsIQpL8CEVlNuOS959FZn6sWEmOsRwISb3CcMIhP/sDWQKzDN4GoLulJvh OKMhhXlQHSrVVZTLluu1LzdO+EK2nYZ26ZJggqAi1BuUobUSy0IsgQ2VUwStZD6w +RxuNiqqi+D66SD/fNtegLoORIvXMvoShGgKDl+Cbp4kDL3SZyZwJ66UPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2rJr0dWpRzSwF9Lf+318IgTWwAMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWfKqrCi euospxP7R4LChxlRG3Ci9q6KLxjJai9NN5UgOgixE8z9EYMvn3bpiEOISPGAfAVH NvOtJXjWMVc1c267XnZP8ekG3wE26Qkrkiam3HZOunNbUmWesY/n0RrsXcchCLYC jnuFoeg+bHVdqV3ECyyCCYo77dZP0l9aNfzhWFunI+Y4AGGvKzrF1Oy1M5p/xkh9 NGHpZD9QZMoGsyc7hvPTjVZxYtfhRYkbBCQCYnuXGp6vpSPVUQBWqXS14zsJhKeE nayDVetEY7yudLwEHR4pEtJXCrWECrGdOKI8wiHj8feO7lEkmtUgZDHz/WICKzyb VwhemWd31BvXFQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:51:43 2026 by rpki-client