$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: lnfZH9r93MjGw9qjFqalZwDPtJiX0tgoX4newgNUtyU= Subject key identifier: 98:0C:71:07:02:0B:B5:64:6A:E2:63:D7:FF:EC:75:C0:6A:9B:A0:6D Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 019CAC1045714EE896A4A3919F0B9FFDAC64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0EDC Signing time: Mon 02 Mar 2026 01:01:13 +0000 Manifest this update: Mon 02 Mar 2026 01:01:13 +0000 Manifest next update: Tue 03 Mar 2026 01:01:13 +0000 Files and hashes: 1: 0wx-a2e1eldxJgCadnUlkPPuxSw.roa (hash: 6MLtoA514hxGwe9vr9TEiVAw6GmmDUE1kP9i8h2wlSc=) 2: 18LcGFaA85L2PFhGmCXVUOoWIl4.roa (hash: 4CfPxdyovYZLWsCd3zC7X3GJYkpt6Kyh3yiKuvnwRcQ=) 3: 1oA9-wr3Pubct_pU5ZSoZw_dM3U.roa (hash: +CQGANQsfsIyY99SGTu6+JSI+A6xJbsieJJRBVf6KlM=) 4: 4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (hash: aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=) 5: 6DAgtZi47nehUjXXTU_IBnF5YW4.roa (hash: Dpma5XKqXI2J8Gsz1+CwwsgqLXij/CGgvv2gTyr8Lt8=) 6: 9Gj-CHK90hL-UChHTOoAxc-EglY.roa (hash: XOa41lqmNlLGwYetFqk/t6xjGxRC11igz1tlLu7y978=) 7: EfI-nVg-gzX72QHAmuNUE9UONIE.roa (hash: F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=) 8: L-Cg5Jzluhl25yqjwPgCSNN0Zyg.roa (hash: mXd9c8p/MYmsSAlTHI0ShwereD66JBSXLjwRToq5PMI=) 9: RFjAhcJEe6eWD1luSBJsmYuiQb0.roa (hash: 1qw2TT4RIaBd5iCGNMOCxs4GxU9R5vh/R3j25W4xwMs=) 10: VeJJmnC-8Q_0a1pLzST4jtM1Hq8.roa (hash: WP4UaUcxrdfBlAMFFsaXmggPZwSD/JcDZLDXI5e7by0=) 11: Wguo4sVdCd0JINTIE3u-8ZKZwO0.roa (hash: dmfUnjuy2XXV0WPso6TT9dET6khMchCU0W+1XJvh0E0=) 12: h6_aL5pgoLsaIJgKdok7qkIgM6o.roa (hash: MsbqMbJsONIWn5FHKcqihNnXLAsAL7eIuq+gvHJq75E=) 13: hEMAmZtnlak_X-Ys7GDTb8Alac8.roa (hash: meUysnrJlvkOj/hjdUl2tqoEhyljNghiJNVOZ2iX7p8=) 14: wbG73mS1cj9OGxG-NRB1JPNjUvg.roa (hash: qW8yIoR/5r3CI7egVQMkyuaO1Dan/9+Olyw8F/005gY=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: SJrWeZ416IVmULviOZ/j7XIYgzD/PpRYMkyhWoP0YNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ac:10:45:71:4e:e8:96:a4:a3:91:9f:0b:9f:fd:ac:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Mar 2 01:01:13 2026 GMT Not After : Mar 3 01:01:13 2026 GMT Subject: CN=980c7107020bb5646ae263d7ffec75c06a9ba06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:8e:2d:55:8d:e5:4a:c4:c4:f6:28:0f:9a: f3:a3:19:de:f5:b6:83:f3:e4:35:ab:87:14:6e:e2: 78:97:08:9a:92:ab:c7:67:a2:06:e0:12:c0:30:56: b6:ea:ce:1f:12:1c:88:d0:8b:b3:6b:4d:03:95:83: bf:15:5b:f4:0e:7d:1e:e0:e3:47:28:cd:f6:b6:51: cc:dc:59:1d:80:51:a9:a3:e9:bf:f1:ab:d2:99:95: a1:ca:1b:e6:89:94:70:96:ef:27:4c:ca:fc:43:4f: 85:c3:00:46:0c:c1:4e:b3:e1:3c:eb:86:19:66:2c: f0:8c:6c:6d:93:21:fa:17:4a:24:f7:6d:f2:3a:55: 2f:e4:73:b3:49:36:10:e1:9a:ca:c6:e4:d6:bb:e8: b5:d0:df:9b:09:3b:1d:60:e6:68:a7:05:62:b3:a6: da:18:6d:f3:76:14:0e:b2:79:12:15:55:a4:c4:d6: 95:48:b7:3c:1d:5e:26:31:64:cd:1a:d9:65:0a:50: 57:cb:9a:c0:35:84:98:5d:0f:36:5b:b8:c7:d3:99: 4c:96:24:d9:20:7c:b3:95:20:c7:a2:c5:9c:4a:0c: 6b:7a:2a:0b:94:9b:cc:98:73:b6:ee:8d:b2:4f:87: 8a:b9:8e:da:7a:cb:d8:04:e8:fd:ed:15:0c:d0:7f: 85:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:71:07:02:0B:B5:64:6A:E2:63:D7:FF:EC:75:C0:6A:9B:A0:6D X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1d:e9:dd:af:c2:42:00:3c:c3:ee:45:3e:af:5e:d9:d7:39: ed:48:48:31:eb:e8:ba:0e:43:5b:c7:98:4a:2b:38:3b:1a:8f: 21:87:12:db:6d:24:f4:1f:77:f2:b6:45:87:4a:0f:58:dd:25: 4f:3b:08:20:d8:4f:83:d6:50:9d:f4:bb:50:2d:f9:09:ca:42: 3a:9d:fe:6e:8d:4a:f2:12:b4:24:40:21:e6:34:ae:28:a5:e8: d1:72:ea:d8:8c:7a:bc:09:1b:00:2e:24:9a:65:91:da:7f:03: 44:df:4f:09:9e:33:fb:24:94:64:28:73:e5:e2:2f:b4:bf:1d: ae:b1:e0:70:c8:9d:05:93:86:ca:2a:ae:85:5a:c4:23:07:41: 2d:66:78:07:ed:62:ae:ab:21:18:b9:78:b8:38:16:f8:a9:83: 6b:24:71:a5:61:af:cb:ef:b8:70:e0:7a:2a:86:19:d0:9f:28: 13:12:e5:63:af:f3:14:08:89:e7:e8:13:ca:2e:60:18:17:8f: bd:59:e2:1f:72:43:51:ae:d2:60:24:0e:23:0f:5f:5d:39:fd: fb:9b:7b:23:c5:4e:52:f8:2a:55:2f:13:7e:9b:d0:79:34:81: b4:f1:21:89:48:0d:d8:73:b0:7b:ec:87:74:a1:f2:90:06:4b: 82:e4:55:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZysEEVxTuiWpKORnwuf/axkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjYwMzAyMDEwMTEzWhcNMjYwMzAzMDEwMTEzWjAzMTEwLwYDVQQD Eyg5ODBjNzEwNzAyMGJiNTY0NmFlMjYzZDdmZmVjNzVjMDZhOWJhMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpSOLVWN5UrExPYoD5rzoxne9baD 8+Q1q4cUbuJ4lwiakqvHZ6IG4BLAMFa26s4fEhyI0Iuza00DlYO/FVv0Dn0e4ONH KM32tlHM3FkdgFGpo+m/8avSmZWhyhvmiZRwlu8nTMr8Q0+FwwBGDMFOs+E864YZ ZizwjGxtkyH6F0ok923yOlUv5HOzSTYQ4ZrKxuTWu+i10N+bCTsdYOZopwVis6ba GG3zdhQOsnkSFVWkxNaVSLc8HV4mMWTNGtllClBXy5rANYSYXQ82W7jH05lMliTZ IHyzlSDHosWcSgxreioLlJvMmHO27o2yT4eKuY7aesvYBOj97RUM0H+FvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgMcQcCC7VkauJj1//sdcBqm6BtMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR3p3a/C QgA8w+5FPq9e2dc57UhIMevoug5DW8eYSis4OxqPIYcS220k9B938rZFh0oPWN0l TzsIINhPg9ZQnfS7UC35CcpCOp3+bo1K8hK0JEAh5jSuKKXo0XLq2Ix6vAkbAC4k mmWR2n8DRN9PCZ4z+ySUZChz5eIvtL8drrHgcMidBZOGyiquhVrEIwdBLWZ4B+1i rqshGLl4uDgW+KmDayRxpWGvy++4cOB6KoYZ0J8oExLlY6/zFAiJ5+gTyi5gGBeP vVniH3JDUa7SYCQOIw9fXTn9+5t7I8VOUvgqVS8TfpvQeTSBtPEhiUgN2HOwe+yH dKHykAZLguRVFg== -----END CERTIFICATE-----Generated at Mon Mar 2 11:54:45 2026 by rpki-client