$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: 4O3fpUQmN+kF0unZ0DHS0coTLMbfc3V33+FNaHDYjzc= Subject key identifier: 35:34:4E:19:48:13:A0:F0:1E:83:B9:BF:5F:EB:C2:07:14:4F:88:93 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019FAA507A8C0395B3123C7DA452C8A3CC1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 16E8 Signing time: Tue 28 Jul 2026 20:00:28 +0000 Manifest this update: Tue 28 Jul 2026 20:00:28 +0000 Manifest next update: Wed 29 Jul 2026 20:00:28 +0000 Files and hashes: 1: 4cLeBIUzolxvixomGkjZcKiBte8.roa (hash: N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=) 2: 746QFPJyT0Rq24L0EZYCq84Zm3c.roa (hash: AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=) 3: 8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (hash: /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=) 4: CjPEg_1_YC8pnKYDbVJlTX6LL9M.roa (hash: zyX+uPItpF4LWUTzRFEpi3sBDAJ/wqUUHQFbPwYtfPk=) 5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: uVApP1Cwm3rx0WPg4Oz2lzp2JN0LUYPmm3Zor4PhUiw=) 6: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (hash: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI=) 7: VOEqbHkGWWPCfYghmq_qCzJyCks.roa (hash: DW2E3Bv+Uu/QtgNYK+Kni5CDezUiIfsMXJ3wb8ndf9s=) 8: _SvrltKT2d95s4aJXfwotwRjxTs.roa (hash: x78Dq5GqOFiqHEpOdeEmGfWK4U05pqaKZhv6jrrmznc=) 9: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (hash: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE=) 10: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (hash: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ=) 11: r29J5i1S1Gu8Uj_A_Wz6NKuvkEs.roa (hash: 8e0tYCtiI0iNQahlyYDb4Q4Izluuf3hdqVeE3n5XNmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:7a:8c:03:95:b3:12:3c:7d:a4:52:c8:a3:cc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Jul 28 20:00:28 2026 GMT Not After : Jul 29 20:00:28 2026 GMT Subject: CN=35344e194813a0f01e83b9bf5febc207144f8893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ba:c4:65:d4:c0:9a:3a:0b:c2:16:71:4f:55: d5:fd:91:41:bc:e4:b6:55:20:3a:00:61:bc:3c:ea: a8:19:df:cf:06:6f:c4:3c:68:58:e6:23:aa:47:19: 15:e8:fd:63:e8:21:ee:cb:12:a4:19:33:e7:43:45: 0f:78:5f:47:85:23:81:c0:fa:87:28:c3:06:c2:55: a9:7a:58:f6:34:73:fc:31:f7:3f:a7:fd:94:7a:6c: 1f:83:ba:7b:d7:4f:7e:8b:43:15:32:4c:6a:c3:ae: dd:18:8a:6f:18:cf:bc:13:8e:2a:55:09:9f:3d:03: 55:1b:0b:33:87:05:c2:c4:e4:d7:ed:4a:d6:d4:02: 61:d6:5c:69:90:1e:bb:6a:14:99:8d:6a:38:68:40: 0d:61:c7:11:32:e3:39:c1:a6:af:3a:4c:18:70:1f: 11:e6:57:20:c7:08:7f:23:6f:a1:02:f2:9d:9b:ac: 8f:2e:22:fe:eb:10:e5:61:1f:e7:5c:5a:67:ef:5f: 3f:dd:74:a6:e7:b1:19:47:80:a8:99:dc:63:3f:2b: 3b:b6:be:bc:a9:f7:3c:60:d9:87:47:88:83:f0:31: 93:7b:bd:cd:e5:27:90:95:d9:96:be:98:20:48:eb: 81:d6:08:f0:99:8a:71:48:b7:d6:59:02:f0:5e:ca: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:34:4E:19:48:13:A0:F0:1E:83:B9:BF:5F:EB:C2:07:14:4F:88:93 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c5:e7:49:4c:09:c3:59:03:ac:3a:13:6f:f3:bb:37:58:6f: 33:7f:92:1e:51:71:82:c5:34:3c:a5:9a:ee:da:21:5d:a3:ea: 97:7f:cc:99:3c:0b:13:cb:8f:2a:75:d0:a8:d6:de:e4:95:4d: 70:a7:61:83:b6:73:5e:de:32:80:09:4b:be:46:49:b4:01:d2: 35:24:6a:45:71:fe:6b:7b:0f:78:f8:07:94:83:d4:45:8f:88: a2:89:9a:de:e1:8d:66:c1:20:b6:56:8b:84:17:c0:a0:1b:f3: 77:94:37:69:22:2c:d0:35:00:13:02:2c:32:4c:47:da:4d:2c: e6:d6:30:fe:59:8a:55:a5:d9:88:ec:9c:3e:4d:a3:9f:ec:2f: 3f:d0:4e:41:bc:3f:4e:c3:22:37:82:34:a9:31:d4:77:24:73: eb:d9:4c:7b:c0:48:94:4f:30:6a:9f:e1:6e:03:d1:b9:d6:12: 66:8b:33:71:83:ac:4d:c3:24:30:b7:63:37:bb:24:ae:28:8d: 90:8a:63:74:20:2d:18:c1:a3:06:3d:9f:f1:30:2d:48:a3:62: 28:3d:eb:fd:95:6a:b9:71:ca:18:83:a8:d5:f3:a7:b9:7e:c6: 77:b3:5a:d1:7a:19:5a:89:6a:7a:f8:b0:ed:73:be:00:b5:ce: 33:73:26:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qUHqMA5WzEjx9pFLIo8wcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjYwNzI4MjAwMDI4WhcNMjYwNzI5MjAwMDI4WjAzMTEwLwYDVQQD EygzNTM0NGUxOTQ4MTNhMGYwMWU4M2I5YmY1ZmViYzIwNzE0NGY4ODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLrEZdTAmjoLwhZxT1XV/ZFBvOS2 VSA6AGG8POqoGd/PBm/EPGhY5iOqRxkV6P1j6CHuyxKkGTPnQ0UPeF9HhSOBwPqH KMMGwlWpelj2NHP8Mfc/p/2Uemwfg7p7109+i0MVMkxqw67dGIpvGM+8E44qVQmf PQNVGwszhwXCxOTX7UrW1AJh1lxpkB67ahSZjWo4aEANYccRMuM5waavOkwYcB8R 5lcgxwh/I2+hAvKdm6yPLiL+6xDlYR/nXFpn718/3XSm57EZR4ComdxjPys7tr68 qfc8YNmHR4iD8DGTe73N5SeQldmWvpggSOuB1gjwmYpxSLfWWQLwXsp3lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDU0ThlIE6DwHoO5v1/rwgcUT4iTMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMXnSUwJ w1kDrDoTb/O7N1hvM3+SHlFxgsU0PKWa7tohXaPql3/MmTwLE8uPKnXQqNbe5JVN cKdhg7ZzXt4ygAlLvkZJtAHSNSRqRXH+a3sPePgHlIPURY+Iooma3uGNZsEgtlaL hBfAoBvzd5Q3aSIs0DUAEwIsMkxH2k0s5tYw/lmKVaXZiOycPk2jn+wvP9BOQbw/ TsMiN4I0qTHUdyRz69lMe8BIlE8wap/hbgPRudYSZoszcYOsTcMkMLdjN7skriiN kIpjdCAtGMGjBj2f8TAtSKNiKD3r/ZVquXHKGIOo1fOnuX7Gd7Na0XoZWolqeviw 7XO+ALXOM3Mmrw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:32:53 2026 by rpki-client