$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: vw7tug671KwqpfBKxKA0xxS4w7YYLLJHQxbAbdTD9xU= Subject key identifier: 00:FA:12:CF:11:8A:5F:05:3F:25:5E:29:85:AC:80:F6:12:E0:35:60 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019FA907279FAB6FDDBC5C19C9F53A891346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1A72 Signing time: Tue 28 Jul 2026 14:00:46 +0000 Manifest this update: Tue 28 Jul 2026 14:00:46 +0000 Manifest next update: Wed 29 Jul 2026 14:00:46 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: hoDdlaDWAKAxXsiBWd9pMpg05LCrlPPZEUy3UHrDRmo=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:07:27:9f:ab:6f:dd:bc:5c:19:c9:f5:3a:89:13:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jul 28 14:00:46 2026 GMT Not After : Jul 29 14:00:46 2026 GMT Subject: CN=00fa12cf118a5f053f255e2985ac80f612e03560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:fe:e3:a6:fd:a7:8b:c7:3f:10:b7:9f:b8: 06:30:8e:01:f6:f4:ef:02:7b:bf:68:0c:a6:f2:a0: 33:7c:7f:f6:a1:99:3c:f5:48:27:01:0e:f4:46:da: 5b:f1:46:8c:0c:63:96:3e:fe:95:71:20:1f:18:65: 91:12:a3:24:34:9d:14:0a:cd:28:b7:94:bd:70:5c: 6b:3c:6c:be:a2:78:f7:c7:01:cf:05:3c:bf:d9:9f: 22:97:b2:3e:7c:44:d7:1c:a3:54:76:f4:c3:53:e7: 34:81:d8:6c:af:4e:0a:22:a5:70:8c:e3:a3:5d:0c: a2:cb:76:02:c3:80:ae:03:dc:b7:e2:3d:8b:82:2f: fc:df:00:21:b6:b6:25:93:17:18:d2:28:dd:dd:53: a4:d0:04:6e:4c:9f:b0:07:48:02:08:66:bc:55:d5: c3:40:53:d5:63:a6:d8:74:56:92:9e:09:15:3b:6d: f7:6b:af:d5:5a:d4:05:3e:de:3f:9f:1e:c4:35:d8: 2a:2d:3a:1b:d4:f3:b4:9f:cd:59:6c:69:e1:3a:28: 4c:59:53:ae:ad:8c:be:2b:b6:0a:6a:f9:0a:01:6d: 5c:dd:5d:82:44:ae:7d:46:ce:5e:fb:1f:93:a6:b0: 02:ff:2a:a8:04:03:4d:25:bb:5a:15:a9:01:4f:78: 8f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:FA:12:CF:11:8A:5F:05:3F:25:5E:29:85:AC:80:F6:12:E0:35:60 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:83:54:08:d2:6d:9a:ca:fb:97:7e:c7:21:2b:e1:58:db:0f: 67:03:13:6e:e2:7d:d8:ed:34:25:9f:da:99:78:ca:b2:02:b3: 70:ec:14:31:13:d1:23:ea:d1:a7:f4:3c:84:72:a6:eb:30:e4: 72:c3:f5:fb:a6:5e:14:62:2c:f4:2d:c1:c1:79:2b:82:f2:13: 99:29:65:0a:d1:4d:e9:d3:0b:b2:cc:88:82:5b:19:f2:f3:fa: 9f:b6:84:70:24:19:a0:e2:92:8c:7d:7d:01:ac:82:36:b2:41: 01:48:2f:9e:b9:9c:79:ca:b3:b1:20:76:85:99:f5:7e:5c:49: 3c:be:0a:3e:41:93:59:6b:96:d8:b8:6e:8b:9b:98:f7:22:be: aa:9f:07:ca:94:ee:3e:de:ea:27:11:19:fc:b2:b8:de:be:4f: 65:9b:71:9e:74:17:b2:2a:c0:8b:91:28:99:52:50:8c:4a:a1: 9d:dc:1b:21:e7:56:61:99:d5:b8:5e:28:3f:82:2f:2e:09:56: 55:6e:bc:05:8b:9b:0c:e7:5b:09:8a:e7:22:bb:5d:ab:69:23: ec:50:ca:7b:ce:73:cd:12:93:c2:90:e0:ff:9b:bd:21:d7:df: 2b:bc:b2:73:c2:a3:ed:27:84:fe:0c:83:40:51:a7:5d:c6:ed: 71:c3:91:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pByefq2/dvFwZyfU6iRNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNzI4MTQwMDQ2WhcNMjYwNzI5MTQwMDQ2WjAzMTEwLwYDVQQD EygwMGZhMTJjZjExOGE1ZjA1M2YyNTVlMjk4NWFjODBmNjEyZTAzNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkj+46b9p4vHPxC3n7gGMI4B9vTv Anu/aAym8qAzfH/2oZk89UgnAQ70Rtpb8UaMDGOWPv6VcSAfGGWREqMkNJ0UCs0o t5S9cFxrPGy+onj3xwHPBTy/2Z8il7I+fETXHKNUdvTDU+c0gdhsr04KIqVwjOOj XQyiy3YCw4CuA9y34j2Lgi/83wAhtrYlkxcY0ijd3VOk0ARuTJ+wB0gCCGa8VdXD QFPVY6bYdFaSngkVO233a6/VWtQFPt4/nx7ENdgqLTob1PO0n81ZbGnhOihMWVOu rYy+K7YKavkKAW1c3V2CRK59Rs5e+x+TprAC/yqoBANNJbtaFakBT3iPJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAD6Es8Ril8FPyVeKYWsgPYS4DVgMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYNUCNJt msr7l37HISvhWNsPZwMTbuJ92O00JZ/amXjKsgKzcOwUMRPRI+rRp/Q8hHKm6zDk csP1+6ZeFGIs9C3BwXkrgvITmSllCtFN6dMLssyIglsZ8vP6n7aEcCQZoOKSjH19 AayCNrJBAUgvnrmcecqzsSB2hZn1flxJPL4KPkGTWWuW2Lhui5uY9yK+qp8HypTu Pt7qJxEZ/LK43r5PZZtxnnQXsirAi5EomVJQjEqhndwbIedWYZnVuF4oP4IvLglW VW68BYubDOdbCYrnIrtdq2kj7FDKe85zzRKTwpDg/5u9IdffK7yyc8Kj7SeE/gyD QFGnXcbtccORKQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:21:39 2026 by rpki-client