$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: 12RlvcnLMt3c68AuRNP1ryrE+bFnU+KDVTEWaTNG0RA= Subject key identifier: D9:7D:45:50:0D:26:70:C0:75:CA:BA:A7:06:33:09:00:9E:95:AA:8E Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019FAC3ED1C97C0FE51C08C6133D895B4D5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 19F0 Signing time: Wed 29 Jul 2026 05:00:25 +0000 Manifest this update: Wed 29 Jul 2026 05:00:25 +0000 Manifest next update: Thu 30 Jul 2026 05:00:25 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: cEpS/ivRBVKQHrwLGmLKNttJA1WmbzHYCj4rtHViTrM=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:3e:d1:c9:7c:0f:e5:1c:08:c6:13:3d:89:5b:4d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jul 29 05:00:25 2026 GMT Not After : Jul 30 05:00:25 2026 GMT Subject: CN=d97d45500d2670c075cabaa7063309009e95aa8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:9f:18:e9:cb:6b:e7:01:a0:ce:d2:0a:0f: 17:30:af:a3:17:71:1c:49:69:c4:d4:4c:d2:57:91: 8c:ae:04:f5:88:48:32:58:6b:6f:dd:69:8d:7e:30: 52:a1:8f:63:b8:d5:9e:4b:35:f2:a3:21:75:b8:3f: 34:59:a2:00:81:b5:ff:e1:88:a7:3d:7a:a6:0d:f1: 66:62:3a:71:dc:3c:35:f8:fe:da:50:47:83:53:24: 53:a6:b5:a3:c1:34:00:ad:dd:5b:45:44:65:0e:d2: 79:08:30:4e:6e:d4:ec:a7:99:1e:3b:d7:75:44:7c: 2f:c4:39:1b:18:ce:53:70:03:6d:8d:a7:39:0a:d4: aa:d4:1d:69:a4:80:b5:87:4e:00:e9:95:42:d8:7b: a4:de:19:45:3e:e9:73:59:e5:0f:2d:a7:d4:94:28: 8a:7d:b5:2d:79:7a:39:82:59:18:6f:50:55:f6:22: 2f:64:ff:58:c1:84:35:61:d1:5a:50:dc:d6:8b:9a: 25:b7:40:2a:33:dd:6f:33:00:94:d3:f1:a5:8e:13: 73:68:c4:97:90:fa:37:cc:eb:86:89:d8:80:0e:91: 64:54:47:11:5d:a1:f1:de:f2:41:1a:70:bf:84:a4: a1:b4:63:76:8d:13:d1:41:00:d4:2f:b1:f9:1b:4f: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:45:50:0D:26:70:C0:75:CA:BA:A7:06:33:09:00:9E:95:AA:8E X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:00:4d:a3:71:60:7d:0f:b2:8a:ed:70:a0:80:c1:b8:32:e8: cb:32:85:82:7f:c9:1c:ab:5f:9c:6b:6e:be:5e:58:d5:7d:b3: da:8e:17:f8:03:ca:eb:07:10:18:4a:ef:4b:19:5d:96:ab:c5: 8b:eb:34:7e:b7:3d:2d:c4:e7:a1:71:68:45:95:28:bd:3d:bf: 48:09:cd:4d:54:c0:4c:a1:c7:a7:bd:31:f8:04:c2:ca:f8:fb: a8:26:f6:42:bd:83:2b:63:4b:fd:29:3a:80:e4:21:77:91:1d: 75:ab:94:b7:6b:6b:cf:a8:30:43:ed:06:f6:81:65:ad:63:d4: bd:85:67:6c:c0:b2:2e:4f:9b:1b:c2:af:ec:f9:b8:54:c3:d6: 1d:11:c1:2d:44:8d:0d:66:de:8d:97:0c:d8:68:87:b2:d8:c6: fe:6d:1a:09:6b:a0:a9:d3:b0:59:c4:39:9a:8b:36:ab:49:27: 9e:c0:e8:f6:67:04:5f:76:a2:0f:de:08:a8:6c:50:bc:33:e5: 83:2d:07:23:b0:9d:02:69:d1:d4:ce:e3:7c:3a:be:d9:36:2f: 1d:39:71:f1:78:d9:03:e1:02:68:6e:07:05:d0:be:52:39:b9: f5:ad:ca:9a:3e:be:66:22:4f:ec:18:7b:c8:08:d0:a6:0a:eb: d1:5a:a2:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sPtHJfA/lHAjGEz2JW01aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwNzI5MDUwMDI1WhcNMjYwNzMwMDUwMDI1WjAzMTEwLwYDVQQD EyhkOTdkNDU1MDBkMjY3MGMwNzVjYWJhYTcwNjMzMDkwMDllOTVhYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOOfGOnLa+cBoM7SCg8XMK+jF3Ec SWnE1EzSV5GMrgT1iEgyWGtv3WmNfjBSoY9juNWeSzXyoyF1uD80WaIAgbX/4Yin PXqmDfFmYjpx3Dw1+P7aUEeDUyRTprWjwTQArd1bRURlDtJ5CDBObtTsp5keO9d1 RHwvxDkbGM5TcANtjac5CtSq1B1ppIC1h04A6ZVC2Huk3hlFPulzWeUPLafUlCiK fbUteXo5glkYb1BV9iIvZP9YwYQ1YdFaUNzWi5olt0AqM91vMwCU0/GljhNzaMSX kPo3zOuGidiADpFkVEcRXaHx3vJBGnC/hKShtGN2jRPRQQDUL7H5G0++9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl9RVANJnDAdcq6pwYzCQCelaqOMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogBNo3Fg fQ+yiu1woIDBuDLoyzKFgn/JHKtfnGtuvl5Y1X2z2o4X+APK6wcQGErvSxldlqvF i+s0frc9LcTnoXFoRZUovT2/SAnNTVTATKHHp70x+ATCyvj7qCb2Qr2DK2NL/Sk6 gOQhd5EddauUt2trz6gwQ+0G9oFlrWPUvYVnbMCyLk+bG8Kv7Pm4VMPWHRHBLUSN DWbejZcM2GiHstjG/m0aCWugqdOwWcQ5mos2q0knnsDo9mcEX3aiD94IqGxQvDPl gy0HI7CdAmnR1M7jfDq+2TYvHTlx8XjZA+ECaG4HBdC+Ujm59a3Kmj6+ZiJP7Bh7 yAjQpgrr0Vqifg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:49:58 2026 by rpki-client