$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: KAuf+yHk5OsR2scjuQLbZU9nhzI5u5ZbNvVxRg2MwOM= Subject key identifier: 30:13:DD:4F:31:1C:EA:3B:1B:DA:0F:82:98:25:16:99:6B:50:FB:B1 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019FACACE9063D8D32BCF6CBD018DF7729AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 14A2 Signing time: Wed 29 Jul 2026 07:00:40 +0000 Manifest this update: Wed 29 Jul 2026 07:00:40 +0000 Manifest next update: Thu 30 Jul 2026 07:00:40 +0000 Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=) 2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=) 3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: gTvseQFBIvSyokGaz9PtCNgZD4XS1uKTBwxZXl7ZioU=) 4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=) 5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=) 6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=) 7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=) 8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=) 9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=) 10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:ac:e9:06:3d:8d:32:bc:f6:cb:d0:18:df:77:29:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Jul 29 07:00:40 2026 GMT Not After : Jul 30 07:00:40 2026 GMT Subject: CN=3013dd4f311cea3b1bda0f82982516996b50fbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:eb:dc:66:82:73:da:47:03:22:03:22:1e:02: 79:36:22:91:db:11:2a:71:58:bd:96:27:88:92:e2: 2d:db:44:94:0d:67:e2:77:9e:36:37:36:1e:8f:db: 69:39:39:4b:0f:20:bf:0e:1c:91:7b:5c:21:3b:3a: 97:69:73:62:23:9a:67:3a:49:e1:9f:43:a1:6d:9c: 44:4c:da:5e:d9:83:55:7d:e5:9d:f7:49:70:81:37: 41:11:6a:8d:45:72:2b:97:6d:87:6a:d2:f0:35:2b: 06:20:22:38:2c:02:64:a1:69:a9:67:2d:a5:d9:96: b1:da:a3:d8:16:21:9e:0b:b1:00:ee:a0:b4:f7:61: 30:fc:97:78:48:83:d3:68:c3:05:b0:08:02:9e:93: e4:a3:d3:06:98:f0:9f:91:37:2e:d5:5e:e9:6f:42: d9:39:51:6e:43:9e:87:17:52:38:77:1d:b1:49:54: 06:78:11:d3:cf:5c:aa:82:e3:3c:f4:2b:42:2f:5b: 07:54:cf:11:32:22:7d:07:a9:80:d4:46:8e:7f:fe: 5a:e7:7c:15:47:04:7a:ce:2a:e1:67:e5:18:d4:bd: 6b:03:dc:f7:32:de:55:c1:10:0f:12:db:00:f8:69: 4c:a5:c0:ae:33:c9:3c:99:18:fc:c6:8e:d2:26:4a: 75:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:13:DD:4F:31:1C:EA:3B:1B:DA:0F:82:98:25:16:99:6B:50:FB:B1 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1f:e8:fd:f3:5f:29:7d:b3:81:9c:b7:44:57:48:2a:3c:00: 47:65:f5:a5:bd:23:59:11:ee:ad:c3:da:14:e0:11:34:24:d1: cb:59:61:45:29:58:8a:04:71:b5:a2:fa:f2:3d:0c:bd:b6:13: c5:e4:13:ea:3f:bf:c7:d4:22:62:5f:a6:33:f8:d7:4a:0c:b7: 24:29:1b:d3:ac:f3:24:d4:66:8d:97:a8:2e:92:27:b1:81:ee: 24:12:bc:95:20:24:13:a9:20:c2:e1:d6:e1:2e:9e:79:31:41: 3c:53:cb:62:19:5e:b7:7f:b0:5c:8c:07:d7:36:c4:8c:58:bc: eb:15:3b:74:ab:5b:2a:29:cf:c6:72:ff:10:8f:76:67:17:9f: d1:e2:9c:5d:86:41:40:e0:77:18:9d:82:66:ac:65:ee:d6:74: 48:eb:f0:6e:52:a0:47:ea:16:4a:62:4e:6c:a7:ae:40:58:1d: a4:15:31:d5:c1:be:80:e7:3c:a8:f2:c5:2e:69:bf:64:da:f8: fa:4b:e8:65:29:e6:c9:dc:83:33:f6:8f:7b:04:44:b5:ae:20: e3:89:37:71:27:15:44:32:25:2d:38:0e:c3:ec:03:d3:29:01: a2:90:52:1d:8f:01:dd:b2:b1:39:f7:c5:59:76:e8:06:1d:49: 4c:77:a5:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+srOkGPY0yvPbL0BjfdymuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwNzI5MDcwMDQwWhcNMjYwNzMwMDcwMDQwWjAzMTEwLwYDVQQD EygzMDEzZGQ0ZjMxMWNlYTNiMWJkYTBmODI5ODI1MTY5OTZiNTBmYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OvcZoJz2kcDIgMiHgJ5NiKR2xEq cVi9lieIkuIt20SUDWfid542NzYej9tpOTlLDyC/DhyRe1whOzqXaXNiI5pnOknh n0OhbZxETNpe2YNVfeWd90lwgTdBEWqNRXIrl22HatLwNSsGICI4LAJkoWmpZy2l 2Zax2qPYFiGeC7EA7qC092Ew/Jd4SIPTaMMFsAgCnpPko9MGmPCfkTcu1V7pb0LZ OVFuQ56HF1I4dx2xSVQGeBHTz1yqguM89CtCL1sHVM8RMiJ9B6mA1EaOf/5a53wV RwR6zirhZ+UY1L1rA9z3Mt5VwRAPEtsA+GlMpcCuM8k8mRj8xo7SJkp1aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDAT3U8xHOo7G9oPgpglFplrUPuxMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB/o/fNf KX2zgZy3RFdIKjwAR2X1pb0jWRHurcPaFOARNCTRy1lhRSlYigRxtaL68j0MvbYT xeQT6j+/x9QiYl+mM/jXSgy3JCkb06zzJNRmjZeoLpInsYHuJBK8lSAkE6kgwuHW 4S6eeTFBPFPLYhlet3+wXIwH1zbEjFi86xU7dKtbKinPxnL/EI92Zxef0eKcXYZB QOB3GJ2CZqxl7tZ0SOvwblKgR+oWSmJObKeuQFgdpBUx1cG+gOc8qPLFLmm/ZNr4 +kvoZSnmydyDM/aPewREta4g44k3cScVRDIlLTgOw+wD0ykBopBSHY8B3bKxOffF WXboBh1JTHelEg== -----END CERTIFICATE-----Generated at Wed Jul 29 11:42:44 2026 by rpki-client