$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft File: xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json) Hash identifier: r+HyUbsiNmrC2lJR8co6/oI/bkgzRuwlbjyqJUg2Bxg= Subject key identifier: DA:79:F5:4E:A0:9E:6E:19:69:29:41:1A:16:F2:52:7B:09:38:48:EA Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019CAD2245020E1FCC65B920A8A7E9D59864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft Manifest number: 18AF Signing time: Mon 02 Mar 2026 06:00:30 +0000 Manifest this update: Mon 02 Mar 2026 06:00:30 +0000 Manifest next update: Tue 03 Mar 2026 06:00:30 +0000 Files and hashes: 1: 0OuuyqY3IwdsfAtd88x0rLTDEmc.roa (hash: Qq6wGpoV1AfHrD9+W3Yp1kNkuV/yBgqjGqUUQJ0ciVY=) 2: 2g3YqagtveoXivlimUOijGK4Sw4.roa (hash: ygC6oN+dOsYHf4Cjh6O/E1qqcFKMCRFPzFyAC5l12yw=) 3: 5B28Ei4KPuBfMPCYz_CdjunmzfA.roa (hash: Fh0fY9vBoWA1h/GgmdDXwKoDcv0YIku/VzyUipmtScY=) 4: 65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa (hash: AD4zC7meiWbh1Y7ei46GISC0uTS4fKqWlAroEgp7qMg=) 5: D7uQ99DLK4WMkw1fHpYfJKmTzvI.roa (hash: LbOMXXB9u8cO6PHdvqyPMdpNy795D8V7gOQlri0kebI=) 6: DeLLhmnL8UGopy5KKmx7aJEcegM.roa (hash: MiHnbQkuo0f/Ih4buFqhTcosJDlqA6PQQ++HZPqmd5w=) 7: ElfbXSGIDiSMTPPlbo6V-o0SRuY.roa (hash: lKK5rdzCjZE0+7rICMxRWAfKpw9HWxpCs96nQPbHzso=) 8: F3V6NHBiFLHYH9kCeJ_cphI6VuI.roa (hash: S7WFcWfal2pVRy/GM+kUJ9lEuF9xQr0ct0tz3YBvyhU=) 9: GBoQQ8Yn-SioOyNoTDKqDla9z4o.roa (hash: v9SK5mh7PmHOJWi3iJx6YpyA3GIGwSntwdY41a/SlEI=) 10: JNM-7wwm3QhYYC0nIPsX8CdxBRA.roa (hash: UMtm5NsMwoDqBk1AdmB+70baCvbkR79TUj4KCkxO3RI=) 11: NJV8waBsLUaoGLKI4jOQ12y_154.roa (hash: zy+s0FwJ70UvNcy6TEvBfYURXcENeGYoESLAOkXvxpY=) 12: PdDHdpbPpbKYuTECocykq4914hM.roa (hash: OqAak7Fi70YK8BmuGNS/s8KqFkZrFfNHxhvYdFiVlco=) 13: SuktG5ygfNWoaIU5AmVI9f2QHqc.roa (hash: njMvgmOx4SGfZ8RPEr0/GOcVp5Xe/qHE6LYm5ovrTVQ=) 14: VXP_uFqv54kn5PXeZcQj6-zBdWM.roa (hash: RmWBZcHSSZvH3KKmvnz7cJeoXnECiQumgZ2zixWZ+YE=) 15: YF--vA_L6zCcHJEBqR7jtaCGFfo.roa (hash: a3gFh25pMYpl+agwkJIHNpjKYlN2gnTlYe3HeVBoWTk=) 16: YYro5ffGY8__zi5PmVjqRei7Zi8.roa (hash: v6CR7E1/nVT3Cmi4Wb+H0VJhjtdKWQon2xJxBGFWHgY=) 17: dANCF-_ELvUXZe_N9iPSiuIBUYs.roa (hash: L7tV/7qxxRlCHwy6Cmc9dl/HlJ9PPDTVkduSLInAUZ0=) 18: gMYRXePhXBj5QEchP90fA4n6PTI.roa (hash: n3t3ay/80ZRLXPkmrmKkNg7PYGv+vXmzByKb6p1QvZ8=) 19: llmpvsJp6iJllq8aPzCHiXy7pDI.roa (hash: DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=) 20: nPy5I6zb3QC7xw0J_IvJjR2hd9Y.roa (hash: b5roqxrC5hM3q/j7Y7kUe7Tu2I31wiF3qmJCqWlG9jo=) 21: nm-KZislIGz6wosxLU6C90OgEBY.roa (hash: eiBhQ/2d82wkJoJ8lwkynR/qT2+hnESyOr9AACLRf+E=) 22: tWR6de_y3YqQITSsFwOUQ9hgoS8.roa (hash: A85iHNufZIkn4yOU2pLKW3cxxsXEb4XDO37mWDui/7U=) 23: ugtI-QyWNOjJ59RgJ8WbbnFfW4U.roa (hash: aT3mMJhpwKfI0RkCBtFq/BKu85xA6+3aVTdjvSvqPZQ=) 24: w6gmNc7f_bvjPNIJjuhS3RSIpZQ.roa (hash: GdBjwBkJ4iGW3k1Xd7AiPym4634yoaPZu5TSA3ZGyx8=) 25: wfzgDMRxuyayBLQPPxPuYGao92s.roa (hash: XLNXyipW2bdTh0IJx7RRnlgyXVVw+Yp3FUwpSXwkVJs=) 26: xB8G2Wpa-bPT0379AYe1B0JaZCA.roa (hash: XnvuBDsm7nE5D21D99HgDtqbUAjTfFnm+Hp6IwSPINI=) 27: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: J76+ZN/mwvb/pE9/8Okwv7gvNiHc/XCe+WDO3tcY0JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Mar 2026 00:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ad:22:45:02:0e:1f:cc:65:b9:20:a8:a7:e9:d5:98:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Mar 2 06:00:30 2026 GMT Not After : Mar 3 06:00:30 2026 GMT Subject: CN=da79f54ea09e6e196929411a16f2527b093848ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:69:3a:2b:a7:3a:8f:86:17:05:6d:2c:a9: 74:a1:33:d1:ae:c0:ef:61:b3:43:55:8e:e6:22:0a: 56:f8:85:51:70:70:7c:b0:d8:cd:c6:0c:c7:35:35: d1:06:24:92:4f:50:b9:9b:9f:7c:f8:d1:87:77:63: ec:a4:03:aa:f6:1b:2b:8f:e5:a4:7a:b7:c2:3a:2e: c3:b7:9f:12:0e:52:62:73:32:8e:14:d4:f4:76:d2: a8:c1:26:39:78:69:6d:73:a8:73:8e:43:50:d3:eb: b4:0a:3e:5f:fd:60:b2:fd:05:21:bb:a8:92:0f:4e: c6:58:fa:de:2c:c4:00:f8:c2:37:36:3c:ed:1b:77: 53:33:eb:3a:9e:1a:79:46:e5:24:02:5c:70:f1:e5: 0e:87:75:49:6b:c4:10:1a:62:df:51:1a:be:25:55: 0d:81:14:04:a4:48:3d:28:2a:2c:22:83:4e:ce:50: 88:fb:96:a5:de:f6:f5:5a:d6:ba:14:01:4c:61:86: c8:97:01:e5:a2:67:94:12:b3:f5:0c:9a:d4:22:3d: ec:45:3b:28:e1:ba:c3:01:e5:95:93:49:7a:27:7e: 3a:ac:1c:b3:1e:3a:48:b6:09:0c:ac:c3:5f:0f:1c: 4f:7e:e8:f8:f5:6f:0c:bc:c8:65:44:08:7b:08:21: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:79:F5:4E:A0:9E:6E:19:69:29:41:1A:16:F2:52:7B:09:38:48:EA X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e4:a9:67:16:93:e6:37:7d:fd:57:7b:6a:5d:3e:90:46:de: 35:20:6b:e1:dc:46:3e:2b:cb:a2:f6:87:0a:d6:ed:64:80:8e: e3:66:15:49:f2:82:e7:4f:25:1f:20:42:ef:b2:21:c9:92:c2: 2a:c8:bd:ac:8f:ce:0d:61:58:e4:3f:99:94:3f:0a:a3:6c:c1: 19:24:c1:d4:14:b1:f2:d8:8f:ab:d5:24:25:c2:7c:3f:a7:35: 76:ab:dc:05:28:e9:10:fd:9e:2d:33:d9:85:96:fd:1c:7b:21: 89:e0:16:ce:ac:7e:98:d9:cf:c0:02:87:ff:28:aa:3d:32:cd: bc:9e:0a:2f:63:fd:09:8f:75:ac:92:7a:2f:ee:5d:55:fd:81: 10:89:c0:8b:f7:b3:1b:47:d2:da:e6:a6:ef:1d:9a:c2:cd:f3: d8:b4:fa:c0:71:77:fa:fc:e7:42:61:b5:00:e1:fd:04:af:ef: 48:c0:1a:8f:84:47:57:be:b9:ab:a2:4c:a1:ef:72:e3:6f:4e: 01:02:74:f7:fa:f8:5d:bc:28:02:f4:64:72:79:3f:9d:7e:8e: 9d:93:a5:61:5a:c0:02:c1:1c:f3:b0:e5:d9:cd:df:63:4c:a6: 03:d6:50:9e:0d:78:8b:76:43:c7:7f:af:2f:e2:02:87:f7:a1: 11:86:08:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZytIkUCDh/MZbkgqKfp1ZhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjYwMzAyMDYwMDMwWhcNMjYwMzAzMDYwMDMwWjAzMTEwLwYDVQQD EyhkYTc5ZjU0ZWEwOWU2ZTE5NjkyOTQxMWExNmYyNTI3YjA5Mzg0OGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7tpOiunOo+GFwVtLKl0oTPRrsDv YbNDVY7mIgpW+IVRcHB8sNjNxgzHNTXRBiSST1C5m598+NGHd2PspAOq9hsrj+Wk erfCOi7Dt58SDlJiczKOFNT0dtKowSY5eGltc6hzjkNQ0+u0Cj5f/WCy/QUhu6iS D07GWPreLMQA+MI3NjztG3dTM+s6nhp5RuUkAlxw8eUOh3VJa8QQGmLfURq+JVUN gRQEpEg9KCosIoNOzlCI+5al3vb1Wta6FAFMYYbIlwHlomeUErP1DJrUIj3sRTso 4brDAeWVk0l6J346rByzHjpItgkMrMNfDxxPfuj49W8MvMhlRAh7CCHD9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp59U6gnm4ZaSlBGhbyUnsJOEjqMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuSpZxaT 5jd9/Vd7al0+kEbeNSBr4dxGPivLovaHCtbtZICO42YVSfKC508lHyBC77IhyZLC Ksi9rI/ODWFY5D+ZlD8Ko2zBGSTB1BSx8tiPq9UkJcJ8P6c1dqvcBSjpEP2eLTPZ hZb9HHshieAWzqx+mNnPwAKH/yiqPTLNvJ4KL2P9CY91rJJ6L+5dVf2BEInAi/ez G0fS2uam7x2aws3z2LT6wHF3+vznQmG1AOH9BK/vSMAaj4RHV765q6JMoe9y429O AQJ09/r4XbwoAvRkcnk/nX6OnZOlYVrAAsEc87Dl2c3fY0ymA9ZQng14i3ZDx3+v L+ICh/ehEYYI8g== -----END CERTIFICATE-----Generated at Mon Mar 2 08:52:37 2026 by rpki-client