$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: veALhtPJhYKbj3z9XTWjwp4rgx0OdKpdHXzQB3scLUk= Subject key identifier: F1:9F:B9:47:A8:7D:8B:37:00:DC:E9:4F:75:C5:83:6B:74:FB:C9:52 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01A0C6D7892A598EB3E96D95EBFDBF68E15D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 110A Signing time: Tue 22 Sep 2026 02:00:09 +0000 Manifest this update: Tue 22 Sep 2026 02:00:09 +0000 Manifest next update: Wed 23 Sep 2026 02:00:09 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 1nxz0cuRh1bbWRBwHeUoK8qV7Ag.roa (hash: cJl0uLNxWIFkCwsrXzEZ1fzjYpWCkwS20YmjvsnXOuI=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 3I2pFK8nGTJ_uDMRMRqBf5vHxXU.roa (hash: EmVEL6YBB+Z3ZH5Yd/KsUbz2nNCU2trzuyKPxrF9c3s=) 5: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 6: 56UV3dmZd6L7a1EEbhnlkQGlQqU.roa (hash: iXVsroKD30ZYmhZFV9knb8fHuVKnNjiDnYvFlpMVSIU=) 7: 5N9cmVoV6WWeeidTenKIIVrKZtU.asa (hash: nABPr08keyRH/GjiI7HNbXnUK1Rd0e6FNTyKcw+2e+8=) 8: 7dwcBbvVnefNVnS3xa77Chf94xY.roa (hash: VD1nhUhmj/cy239Pjqk6Su3la8qAcLSyM7KYpjO+7HU=) 9: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 10: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 11: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 12: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 13: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 14: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 15: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 16: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 17: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: LXC/7AIf4kxaFCe55UQS/DgNjbLgTYP2e7bh6zD0g3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 02:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:d7:89:2a:59:8e:b3:e9:6d:95:eb:fd:bf:68:e1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Sep 22 02:00:09 2026 GMT Not After : Sep 23 02:00:09 2026 GMT Subject: CN=f19fb947a87d8b3700dce94f75c5836b74fbc952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:39:8b:6f:4d:b5:41:e3:59:2f:13:ed:59:9e: 55:1f:f1:71:5e:84:6d:81:cc:f0:ea:02:89:25:b6: 43:87:b4:13:d5:82:c4:74:6d:25:17:8b:09:3a:c9: d2:7b:8e:7a:c6:d5:1c:2a:c3:86:49:40:ea:c7:0f: a9:68:9c:5e:34:b1:70:c5:ed:21:04:fd:cb:79:a6: 5e:83:b5:67:7d:e3:16:34:62:f4:d1:e6:e4:ef:2a: 64:3e:7c:c3:dc:c5:12:76:f8:53:db:c0:dd:3a:d3: a0:4e:51:67:75:e1:7b:d8:08:b4:94:dc:ce:3f:e4: 86:65:6b:cd:4a:8c:dc:a0:1a:65:8d:06:a4:f5:b5: 0a:eb:e3:70:06:cf:73:79:3f:87:0c:ed:33:50:4d: fd:8a:02:14:6f:cd:3b:26:8e:19:f1:15:ef:7c:3c: ca:d2:c5:25:19:85:27:4f:e6:00:d5:19:15:dd:b9: 44:4d:b7:47:d5:f3:de:66:8f:fe:05:31:d2:3f:21: 72:ef:95:06:51:b3:98:cb:60:e0:08:f2:0b:6e:89: 19:af:03:7a:48:a5:0b:ec:16:33:21:19:1b:b1:73: e0:48:f6:cc:5e:de:89:9b:d4:3b:1b:3f:e0:7a:51: 90:3e:bb:17:f7:59:4a:8f:f3:2d:8f:17:ee:2e:cc: 20:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:9F:B9:47:A8:7D:8B:37:00:DC:E9:4F:75:C5:83:6B:74:FB:C9:52 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e4:29:17:10:0d:63:9b:ec:1e:1e:6b:b9:a6:d9:af:12:2d: d9:02:9b:2e:dc:8c:07:83:73:2c:9e:3e:3f:08:51:ae:3e:75: 53:3b:ae:58:17:90:36:05:98:ce:41:9c:66:b4:78:77:24:fd: c4:54:93:4b:b5:88:fe:c5:10:bc:fe:40:97:8b:70:3b:ff:64: ad:73:e2:0c:70:8b:44:a5:d2:51:58:6c:a9:ef:78:ae:ab:dc: b1:84:79:33:cc:11:13:85:96:0b:f4:61:1c:38:87:6d:ad:28: 9f:83:95:e5:b6:87:0e:18:eb:47:53:f5:10:1a:89:f8:1e:b1: c1:76:c6:33:03:be:f7:31:bc:12:d7:c3:65:0e:7a:16:99:a5: dc:d3:99:a6:34:d6:71:b9:ec:c7:63:ed:1e:bd:55:c7:23:e5: af:a8:1b:8e:5e:4b:b0:97:f0:82:52:32:d9:8d:d7:a3:0b:37: 7b:87:0d:11:4b:f1:59:73:4a:0e:59:fb:b4:81:9e:60:a2:86: bc:d1:8a:69:c6:87:51:fb:d5:0c:3d:0c:78:82:cf:fe:69:aa: e5:f0:c9:29:2f:76:c1:8d:92:a0:71:ec:80:42:16:ee:41:d5: f8:1b:4f:e9:95:5e:64:8f:ec:1a:fb:2c:2a:40:b7:88:a2:32: d9:91:4e:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDG14kqWY6z6W2V6/2/aOFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwOTIyMDIwMDA5WhcNMjYwOTIzMDIwMDA5WjAzMTEwLwYDVQQD EyhmMTlmYjk0N2E4N2Q4YjM3MDBkY2U5NGY3NWM1ODM2Yjc0ZmJjOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzmLb021QeNZLxPtWZ5VH/FxXoRt gczw6gKJJbZDh7QT1YLEdG0lF4sJOsnSe456xtUcKsOGSUDqxw+paJxeNLFwxe0h BP3LeaZeg7VnfeMWNGL00ebk7ypkPnzD3MUSdvhT28DdOtOgTlFndeF72Ai0lNzO P+SGZWvNSozcoBpljQak9bUK6+NwBs9zeT+HDO0zUE39igIUb807Jo4Z8RXvfDzK 0sUlGYUnT+YA1RkV3blETbdH1fPeZo/+BTHSPyFy75UGUbOYy2DgCPILbokZrwN6 SKUL7BYzIRkbsXPgSPbMXt6Jm9Q7Gz/gelGQPrsX91lKj/MtjxfuLswgaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGfuUeofYs3ANzpT3XFg2t0+8lSMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuQpFxAN Y5vsHh5ruabZrxIt2QKbLtyMB4NzLJ4+PwhRrj51UzuuWBeQNgWYzkGcZrR4dyT9 xFSTS7WI/sUQvP5Al4twO/9krXPiDHCLRKXSUVhsqe94rqvcsYR5M8wRE4WWC/Rh HDiHba0on4OV5baHDhjrR1P1EBqJ+B6xwXbGMwO+9zG8EtfDZQ56Fpml3NOZpjTW cbnsx2PtHr1VxyPlr6gbjl5LsJfwglIy2Y3Xows3e4cNEUvxWXNKDln7tIGeYKKG vNGKacaHUfvVDD0MeILP/mmq5fDJKS92wY2SoHHsgEIW7kHV+BtP6ZVeZI/sGvss KkC3iKIy2ZFO5w== -----END CERTIFICATE-----Generated at Tue Sep 22 13:11:49 2026 by rpki-client