$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: YE6XzLm9Glk7w0TRAa/kR9dPWUleYXIXb47wlvvZp/k= Subject key identifier: AE:40:B2:2B:F6:49:C8:2F:91:50:01:A4:5E:25:A7:47:98:CC:F3:E4 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019CABA1BDEDCCBBDAD0433932218AFA2C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 155B Signing time: Sun 01 Mar 2026 23:00:29 +0000 Manifest this update: Sun 01 Mar 2026 23:00:29 +0000 Manifest next update: Mon 02 Mar 2026 23:00:29 +0000 Files and hashes: 1: 4cLeBIUzolxvixomGkjZcKiBte8.roa (hash: N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=) 2: 746QFPJyT0Rq24L0EZYCq84Zm3c.roa (hash: AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=) 3: 8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (hash: /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=) 4: CjPEg_1_YC8pnKYDbVJlTX6LL9M.roa (hash: zyX+uPItpF4LWUTzRFEpi3sBDAJ/wqUUHQFbPwYtfPk=) 5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: GZKVTtlVqk6Kqa9L3bWOW1jVzppcUc5VGb0mPXFWLOU=) 6: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (hash: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI=) 7: VOEqbHkGWWPCfYghmq_qCzJyCks.roa (hash: DW2E3Bv+Uu/QtgNYK+Kni5CDezUiIfsMXJ3wb8ndf9s=) 8: _SvrltKT2d95s4aJXfwotwRjxTs.roa (hash: x78Dq5GqOFiqHEpOdeEmGfWK4U05pqaKZhv6jrrmznc=) 9: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (hash: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE=) 10: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (hash: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ=) 11: r29J5i1S1Gu8Uj_A_Wz6NKuvkEs.roa (hash: 8e0tYCtiI0iNQahlyYDb4Q4Izluuf3hdqVeE3n5XNmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:a1:bd:ed:cc:bb:da:d0:43:39:32:21:8a:fa:2c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Mar 1 23:00:29 2026 GMT Not After : Mar 2 23:00:29 2026 GMT Subject: CN=ae40b22bf649c82f915001a45e25a74798ccf3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:a0:1e:36:d7:9a:81:96:85:54:10:41:c1: 3c:6d:dd:f7:69:de:14:7d:a5:89:e4:d8:3e:e7:57: bf:a6:5e:0b:f5:34:57:d7:26:5c:b9:4d:64:06:64: e6:95:59:4a:06:c7:e5:48:19:66:79:81:3b:52:84: cc:13:39:e8:31:8b:c5:a5:b7:49:a8:9e:d7:a9:d1: f6:60:7c:a1:db:a7:aa:39:fc:46:b6:c5:ab:42:f3: c7:20:d1:85:94:fc:a3:b0:03:e6:c0:a2:ec:d5:57: 44:e3:90:41:c9:8c:56:b9:9f:2a:c2:e4:e0:eb:b7: f8:f2:35:16:f3:7b:e3:d7:65:cc:cb:5c:8f:06:20: be:c9:22:59:61:89:3b:b0:30:c0:97:44:e9:02:7f: 4f:46:a9:41:6e:36:01:b2:85:0d:e6:cd:8b:1e:a5: 79:49:bb:8c:6e:ca:24:7a:be:60:a1:89:af:40:79: 77:2e:86:0d:f8:cf:2f:7d:c0:14:9e:15:4f:60:e5: cb:a7:01:d9:c6:b1:ed:77:91:73:51:2d:a6:d2:77: 4f:ad:73:85:43:e1:d5:01:03:c9:46:76:c0:44:ca: 33:d7:09:38:3c:aa:bd:cb:86:6b:81:54:31:e5:c5: fd:94:55:b0:81:50:1b:c0:2d:e6:dd:19:c0:fb:34: 84:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:40:B2:2B:F6:49:C8:2F:91:50:01:A4:5E:25:A7:47:98:CC:F3:E4 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:aa:8d:2b:6d:4d:7a:6a:97:7b:2f:6b:69:30:c6:9c:13:42: c4:4c:3f:f1:51:f7:28:36:01:cb:c8:02:47:6e:e8:f0:79:63: 47:05:b1:b3:92:46:7c:3b:9c:19:b6:6a:fa:8d:c0:b0:9e:cd: 42:12:93:e3:12:0b:1c:dd:58:d3:6a:67:ad:b0:dc:04:a9:9f: e9:5d:d1:0e:48:37:1b:1e:49:cc:68:1f:58:a8:43:86:7c:8a: cc:43:f6:fd:52:06:87:4c:18:6e:50:4f:2f:77:68:3b:a1:4b: ab:e7:64:f8:14:1b:13:14:32:6e:f6:89:d4:2d:50:86:c0:38: 2d:33:00:fc:e8:cf:71:74:75:53:64:17:ce:a8:46:0b:02:b7: 9d:64:0d:d1:fc:94:3b:90:96:b3:41:a8:61:e4:86:d7:2e:e6: 36:73:92:43:69:b0:bb:07:2e:fa:e3:6e:4c:7d:10:8b:b6:a7: cd:54:83:21:07:d8:de:bb:b7:cf:a3:2e:02:5d:b7:71:d6:ee: 8f:f0:bf:7d:83:fb:e6:42:af:b5:50:4d:69:18:a1:50:8b:9f: fb:a7:d5:4e:27:f7:06:3b:f6:78:2f:05:9b:75:3f:62:11:18: 56:07:7b:b0:a2:bc:05:d1:b1:9e:2f:14:c4:bd:a9:03:7b:5a: 89:0f:0f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyrob3tzLva0EM5MiGK+ixtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjYwMzAxMjMwMDI5WhcNMjYwMzAyMjMwMDI5WjAzMTEwLwYDVQQD EyhhZTQwYjIyYmY2NDljODJmOTE1MDAxYTQ1ZTI1YTc0Nzk4Y2NmM2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdegHjbXmoGWhVQQQcE8bd33ad4U faWJ5Ng+51e/pl4L9TRX1yZcuU1kBmTmlVlKBsflSBlmeYE7UoTMEznoMYvFpbdJ qJ7XqdH2YHyh26eqOfxGtsWrQvPHINGFlPyjsAPmwKLs1VdE45BByYxWuZ8qwuTg 67f48jUW83vj12XMy1yPBiC+ySJZYYk7sDDAl0TpAn9PRqlBbjYBsoUN5s2LHqV5 SbuMbsoker5goYmvQHl3LoYN+M8vfcAUnhVPYOXLpwHZxrHtd5FzUS2m0ndPrXOF Q+HVAQPJRnbARMoz1wk4PKq9y4ZrgVQx5cX9lFWwgVAbwC3m3RnA+zSEHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5Asiv2ScgvkVABpF4lp0eYzPPkMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqqNK21N emqXey9raTDGnBNCxEw/8VH3KDYBy8gCR27o8HljRwWxs5JGfDucGbZq+o3AsJ7N QhKT4xILHN1Y02pnrbDcBKmf6V3RDkg3Gx5JzGgfWKhDhnyKzEP2/VIGh0wYblBP L3doO6FLq+dk+BQbExQybvaJ1C1QhsA4LTMA/OjPcXR1U2QXzqhGCwK3nWQN0fyU O5CWs0GoYeSG1y7mNnOSQ2mwuwcu+uNuTH0Qi7anzVSDIQfY3ru3z6MuAl23cdbu j/C/fYP75kKvtVBNaRihUIuf+6fVTif3Bjv2eC8Fm3U/YhEYVgd7sKK8BdGxni8U xL2pA3taiQ8P5w== -----END CERTIFICATE-----Generated at Mon Mar 2 08:53:26 2026 by rpki-client