$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: lfkUbVSs2edws0SXdDEMz3KHzQCs3TPOXc4emk1CZCY= Subject key identifier: 6E:13:BA:1E:12:1B:3E:CA:61:05:60:5E:5E:85:41:78:08:2F:13:2C Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019FAAF54617A6363CFC8717996F9C7AB91D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1A73 Signing time: Tue 28 Jul 2026 23:00:28 +0000 Manifest this update: Tue 28 Jul 2026 23:00:28 +0000 Manifest next update: Wed 29 Jul 2026 23:00:28 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: skJnPTfqaZJDe7VaGJMDFFWBxBHHS/TeHv2+M4tTETo=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:46:17:a6:36:3c:fc:87:17:99:6f:9c:7a:b9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jul 28 23:00:28 2026 GMT Not After : Jul 29 23:00:28 2026 GMT Subject: CN=6e13ba1e121b3eca6105605e5e854178082f132c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:bb:92:42:f0:9a:a2:be:d2:9c:bb:87:9d: 7f:c6:ad:b5:27:0a:4f:ed:86:94:9b:65:0d:9d:18: df:ce:cc:b3:de:ee:49:a9:14:5b:e1:65:a8:5f:f9: 0f:00:ce:ea:76:80:9f:e6:1b:cf:e9:70:0b:27:d4: bd:60:a1:b9:98:61:ae:e1:2b:80:4b:02:63:38:f2: af:86:3d:69:c3:83:2b:eb:a0:28:c1:87:d8:db:fd: 52:81:d7:1a:9a:4a:4c:4f:03:de:46:c1:0d:d0:ca: f7:9d:8a:2f:a1:b8:13:a8:0f:6b:b9:6b:3c:10:89: 67:f8:2a:d3:c7:94:da:62:b7:89:d5:77:30:3b:1c: 3a:17:7d:cb:4b:2e:e4:04:ad:3b:03:e5:35:97:27: 0a:0b:2e:6b:1c:0a:ad:63:c1:98:8f:71:c2:90:69: 23:d1:e9:79:53:c7:f0:03:65:ff:4c:b5:44:bb:f0: 38:3c:0d:31:33:cd:c8:e8:69:8d:ef:30:00:9a:1f: 2e:c2:71:91:69:da:f0:de:eb:11:65:fe:90:f6:05: c7:e7:51:0d:a3:8a:29:0b:ce:bc:a2:e1:28:d6:04: db:29:1c:03:c6:ce:6f:2f:a3:6d:eb:b3:5c:4f:46: 66:b0:bf:51:75:a6:59:11:1a:62:d5:ef:ff:6d:d3: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:13:BA:1E:12:1B:3E:CA:61:05:60:5E:5E:85:41:78:08:2F:13:2C X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:a8:75:a1:c1:21:71:ed:74:50:98:b3:a1:bd:1f:4a:e3:0f: f0:55:10:16:64:f6:f1:ff:72:1a:c5:28:a3:51:b3:42:a7:01: f4:bb:8f:53:52:7d:fc:26:7d:90:92:8c:5d:94:c3:6c:2c:f2: 38:4f:47:db:d1:94:00:75:e4:0c:67:5d:f4:76:36:ec:e3:7e: c9:ed:74:74:a8:79:70:01:01:6b:9e:0c:b1:47:d7:2c:14:98: 99:0c:ca:7b:a7:b3:13:ab:1b:ea:fa:35:a6:79:5d:e6:61:27: 5d:30:f6:96:45:2d:b4:88:3b:98:75:80:42:43:2a:02:3a:d9: 92:e3:2e:5e:00:bf:ea:f3:be:dc:b3:26:35:64:b2:9c:75:63: 98:43:4e:87:19:94:fd:69:19:5e:f5:92:3a:ba:b2:f4:d0:42: 7f:1c:e0:0e:24:5f:d2:72:6c:14:75:7e:2b:ef:87:f6:73:d7: ac:fb:ae:55:d7:88:f3:d9:49:56:98:94:4a:b1:62:76:b2:33: 75:21:47:f8:ab:d3:b3:1e:68:f8:2b:95:f5:bd:c0:1e:96:b1: 54:ba:c7:19:8a:06:31:2d:54:31:7f:77:7d:ae:5b:1e:68:64: c2:74:4b:72:4d:63:dc:80:3b:43:57:c4:29:fd:63:b5:a5:cb: 4f:4e:92:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9UYXpjY8/IcXmW+cerkdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNzI4MjMwMDI4WhcNMjYwNzI5MjMwMDI4WjAzMTEwLwYDVQQD Eyg2ZTEzYmExZTEyMWIzZWNhNjEwNTYwNWU1ZTg1NDE3ODA4MmYxMzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE67kkLwmqK+0py7h51/xq21JwpP 7YaUm2UNnRjfzsyz3u5JqRRb4WWoX/kPAM7qdoCf5hvP6XALJ9S9YKG5mGGu4SuA SwJjOPKvhj1pw4Mr66AowYfY2/1SgdcamkpMTwPeRsEN0Mr3nYovobgTqA9ruWs8 EIln+CrTx5TaYreJ1XcwOxw6F33LSy7kBK07A+U1lycKCy5rHAqtY8GYj3HCkGkj 0el5U8fwA2X/TLVEu/A4PA0xM83I6GmN7zAAmh8uwnGRadrw3usRZf6Q9gXH51EN o4opC868ouEo1gTbKRwDxs5vL6Nt67NcT0ZmsL9RdaZZERpi1e//bdO0gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4Tuh4SGz7KYQVgXl6FQXgILxMsMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqh1ocEh ce10UJizob0fSuMP8FUQFmT28f9yGsUoo1GzQqcB9LuPU1J9/CZ9kJKMXZTDbCzy OE9H29GUAHXkDGdd9HY27ON+ye10dKh5cAEBa54MsUfXLBSYmQzKe6ezE6sb6vo1 pnld5mEnXTD2lkUttIg7mHWAQkMqAjrZkuMuXgC/6vO+3LMmNWSynHVjmENOhxmU /WkZXvWSOrqy9NBCfxzgDiRf0nJsFHV+K++H9nPXrPuuVdeI89lJVpiUSrFidrIz dSFH+KvTsx5o+CuV9b3AHpaxVLrHGYoGMS1UMX93fa5bHmhkwnRLck1j3IA7Q1fE Kf1jtaXLT06S7A== -----END CERTIFICATE-----Generated at Wed Jul 29 01:44:54 2026 by rpki-client