$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: HIxHR1yT8PPI3lCg95qk2eFvp4oMBQrCSQ1bDOZ0SSQ= Subject key identifier: 3E:91:2D:01:EB:19:8E:1E:07:E0:CD:7F:B5:13:76:AA:06:9B:3D:F4 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019CAB6B4092141EB46C928AC362FBCE7650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1861 Signing time: Sun 01 Mar 2026 22:00:58 +0000 Manifest this update: Sun 01 Mar 2026 22:00:58 +0000 Manifest next update: Mon 02 Mar 2026 22:00:58 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: 7b21kRHbye2v_dmZV5VUK_LJnVA.roa (hash: EN+RdTeUkPgyWw2KZHhbSo6oaTjE7NLfzP0K37REluE=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: UwInXj7Ftjb8dV6T0OAo9vrZG2OyIkNyn2hhVG3gMI4=) 7: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 8: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 9: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 18:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:ab:6b:40:92:14:1e:b4:6c:92:8a:c3:62:fb:ce:76:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Mar 1 22:00:58 2026 GMT Not After : Mar 2 22:00:58 2026 GMT Subject: CN=3e912d01eb198e1e07e0cd7fb51376aa069b3df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:15:f2:e8:74:5b:d5:e7:21:02:c2:8f:40: f6:36:c1:cf:4c:de:84:50:86:10:de:56:e4:2d:4a: b7:db:ed:c4:5b:49:3d:c0:ee:79:c4:9f:f2:2f:2b: 64:e5:c2:e4:70:fa:fa:c5:23:d1:6c:6f:c4:9e:63: b9:09:db:6f:7a:e8:eb:19:04:72:a1:53:73:63:88: 98:a3:c3:33:54:1f:3a:e0:37:ae:96:cc:4e:73:91: b4:0b:07:5b:6a:eb:a2:1b:81:5d:3b:8a:e4:dd:ca: 93:a2:81:65:27:da:90:28:f0:77:77:82:c5:2b:2f: f3:59:2a:d2:6a:3e:ec:e8:8e:50:d8:ae:dc:a4:f5: d8:aa:0e:d8:40:bb:b7:1b:39:fb:c0:41:28:d2:8d: 1b:a2:09:ba:3b:2d:5b:2b:cd:fa:95:30:02:a3:7e: 3d:6b:d7:44:c1:da:8d:f5:db:0a:35:38:29:d7:51: b6:9b:75:b3:fa:bb:4e:d0:ec:d7:c2:e3:74:b7:42: f2:db:a3:52:58:5d:eb:43:02:c6:b3:53:c2:f2:a7: 38:a9:71:ef:76:72:f0:e3:3e:0e:99:ad:76:f4:9f: 1d:09:23:07:d1:bb:4a:ce:c4:d8:c6:c8:c0:3a:a5: 98:39:98:6a:c4:a5:3f:3a:88:12:c4:7a:dd:bd:b7: fd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:2D:01:EB:19:8E:1E:07:E0:CD:7F:B5:13:76:AA:06:9B:3D:F4 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:fb:e1:a3:75:ae:b6:fa:ba:6e:b2:5d:6d:0a:4d:2c:92:7c: 06:5e:6c:8b:c1:a6:f2:58:8e:a3:aa:6d:a1:6f:41:72:06:76: 28:59:cd:6e:7d:ae:6e:74:f6:22:e0:4f:bb:86:11:3b:e7:f5: 86:2e:ca:99:a8:ee:e8:fd:a3:61:6f:3a:fc:d1:d1:11:de:0f: 92:68:97:69:42:17:1a:2c:0c:2a:00:f6:6c:05:dc:c1:bb:75: 60:06:5e:0a:f3:b1:c8:91:24:a3:85:20:49:47:71:b3:86:f3: f6:45:d6:04:6e:b1:81:5f:62:c3:fe:6f:44:c2:7c:a7:51:f8: 97:50:06:35:7f:27:af:cf:b9:a0:fc:7b:12:0d:20:a3:1a:0b: 7d:3a:7e:d3:9d:65:fe:ac:9a:8d:a6:d0:2d:0f:da:df:f7:cb: 45:79:4b:6e:a0:e8:54:d1:66:a5:c9:f7:e0:0f:43:b4:30:76: ea:19:93:ac:97:83:5c:21:76:ec:c5:1b:2a:99:0a:e9:34:71: d0:00:b6:f7:4d:6c:a2:ba:88:9a:4d:f7:58:47:58:aa:28:5d: 59:ad:2e:87:13:01:38:ab:77:42:90:86:79:b2:15:f3:98:82: c7:5d:cf:68:23:45:cc:9b:d7:7e:ff:f8:2b:c6:9d:bd:bb:4c: 60:a2:00:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyra0CSFB60bJKKw2L7znZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMzAxMjIwMDU4WhcNMjYwMzAyMjIwMDU4WjAzMTEwLwYDVQQD EygzZTkxMmQwMWViMTk4ZTFlMDdlMGNkN2ZiNTEzNzZhYTA2OWIzZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/kV8uh0W9XnIQLCj0D2NsHPTN6E UIYQ3lbkLUq32+3EW0k9wO55xJ/yLytk5cLkcPr6xSPRbG/EnmO5CdtveujrGQRy oVNzY4iYo8MzVB864DeulsxOc5G0CwdbauuiG4FdO4rk3cqTooFlJ9qQKPB3d4LF Ky/zWSrSaj7s6I5Q2K7cpPXYqg7YQLu3Gzn7wEEo0o0bogm6Oy1bK836lTACo349 a9dEwdqN9dsKNTgp11G2m3Wz+rtO0OzXwuN0t0Ly26NSWF3rQwLGs1PC8qc4qXHv dnLw4z4Oma129J8dCSMH0btKzsTYxsjAOqWYOZhqxKU/OogSxHrdvbf90QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6RLQHrGY4eB+DNf7UTdqoGmz30MB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfvho3Wu tvq6brJdbQpNLJJ8Bl5si8Gm8liOo6ptoW9BcgZ2KFnNbn2ubnT2IuBPu4YRO+f1 hi7Kmaju6P2jYW86/NHREd4PkmiXaUIXGiwMKgD2bAXcwbt1YAZeCvOxyJEko4Ug SUdxs4bz9kXWBG6xgV9iw/5vRMJ8p1H4l1AGNX8nr8+5oPx7Eg0goxoLfTp+051l /qyajabQLQ/a3/fLRXlLbqDoVNFmpcn34A9DtDB26hmTrJeDXCF27MUbKpkK6TRx 0AC2901sorqImk33WEdYqihdWa0uhxMBOKt3QpCGebIV85iCx13PaCNFzJvXfv/4 K8advbtMYKIAoA== -----END CERTIFICATE-----Generated at Mon Mar 2 03:26:55 2026 by rpki-client