$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: Q3iJlfq+O34UfYZrbjMvTU2PiUFDBqIn4/J3bLpAWVk= Subject key identifier: 65:6E:78:F0:F2:EF:06:CD:54:E8:67:6A:19:97:DD:A2:90:BC:D4:A0 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019FABD14C17F9236DDC6EFB0317BD81D7FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 19F2 Signing time: Wed 29 Jul 2026 03:00:48 +0000 Manifest this update: Wed 29 Jul 2026 03:00:48 +0000 Manifest next update: Thu 30 Jul 2026 03:00:48 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: vyc7sq2tX8PFELcxzVe7gCEhG193p6hLYIXn9dgxN2g=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:d1:4c:17:f9:23:6d:dc:6e:fb:03:17:bd:81:d7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jul 29 03:00:48 2026 GMT Not After : Jul 30 03:00:48 2026 GMT Subject: CN=656e78f0f2ef06cd54e8676a1997dda290bcd4a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:ee:9f:9e:f3:5f:88:30:f8:26:57:4d:42: a9:8c:6a:d3:ef:65:c8:10:2a:a8:05:ce:10:09:d2: ca:36:21:07:79:ae:e2:b3:12:c9:4a:6e:c3:78:38: a9:2e:31:40:ce:15:6a:4a:c9:64:11:b2:22:b8:59: f2:cb:cf:71:b4:9d:58:4d:c6:7f:d7:94:a1:55:44: 07:2f:27:1d:11:19:a9:44:6d:21:b3:79:35:94:87: 1c:66:e7:19:79:73:e9:ee:4e:0b:cf:b7:cc:88:55: 13:3d:19:15:4d:cb:6c:52:df:ab:6f:cb:41:49:ac: f8:06:80:7d:f3:71:47:e2:f9:d5:a4:21:82:6c:ee: 6a:9a:a1:35:01:da:90:5e:03:18:6b:4f:5d:79:7e: ec:63:49:78:78:c9:03:98:3a:aa:4f:f0:93:b2:08: 04:33:59:33:7f:cd:8f:c8:f4:1d:1d:9b:27:cd:e9: 61:7c:7d:0e:c2:07:4e:06:ff:66:1c:15:97:47:af: c8:a6:1a:70:3b:87:16:7d:39:60:68:47:f5:68:73: 99:0c:7c:93:99:a0:f1:93:5a:9b:8e:15:f9:7d:5a: a2:4e:31:ed:1c:f2:ef:45:8f:35:99:1f:aa:39:1c: 6d:53:c4:ab:4e:b7:74:59:dd:7c:37:1f:10:84:02: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:78:F0:F2:EF:06:CD:54:E8:67:6A:19:97:DD:A2:90:BC:D4:A0 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f8:c7:8e:47:14:61:53:32:14:5c:d1:86:88:0f:59:7c:83: fd:89:fa:6a:40:cb:2e:0e:8d:5e:c7:db:c4:5c:df:bd:51:3d: a8:44:02:0d:6b:f3:99:d9:fb:ae:4a:54:74:82:3c:67:4b:39: 46:ed:ad:65:69:ff:80:11:62:c4:4f:83:e9:71:e7:8a:01:ec: 22:06:b9:a6:ac:76:b9:3f:b4:e5:fa:3d:8e:d8:e8:cb:86:a4: 52:58:10:6e:ed:0f:1e:05:cf:73:ba:69:db:4d:42:b1:7b:ae: 1a:d6:d6:6a:4d:ce:26:f9:5c:b5:4e:a9:c4:3b:61:eb:c4:be: fc:43:6c:5d:1d:23:29:ac:ea:ff:db:a3:ec:d4:c8:93:12:71: de:dc:c6:85:3d:05:f9:f3:a9:9c:0f:85:c5:ed:38:da:dc:15: 33:75:db:7a:26:26:b7:c2:62:69:85:a9:89:e5:31:9f:5e:1d: af:a7:2c:08:68:7e:ae:1f:c6:74:9f:93:81:02:18:ea:bf:d6: 2e:c5:26:12:c6:71:2a:2d:35:35:7b:63:14:31:03:d4:67:63: 13:5a:d0:09:c7:56:a4:20:a2:d4:80:ea:61:2b:31:d0:98:fc: 9b:39:43:94:90:c4:82:02:84:53:48:0a:98:4f:09:d7:eb:4d: 58:11:49:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+r0UwX+SNt3G77Axe9gdf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwNzI5MDMwMDQ4WhcNMjYwNzMwMDMwMDQ4WjAzMTEwLwYDVQQD Eyg2NTZlNzhmMGYyZWYwNmNkNTRlODY3NmExOTk3ZGRhMjkwYmNkNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOrun57zX4gw+CZXTUKpjGrT72XI ECqoBc4QCdLKNiEHea7isxLJSm7DeDipLjFAzhVqSslkEbIiuFnyy89xtJ1YTcZ/ 15ShVUQHLycdERmpRG0hs3k1lIccZucZeXPp7k4Lz7fMiFUTPRkVTctsUt+rb8tB Saz4BoB983FH4vnVpCGCbO5qmqE1AdqQXgMYa09deX7sY0l4eMkDmDqqT/CTsggE M1kzf82PyPQdHZsnzelhfH0OwgdOBv9mHBWXR6/IphpwO4cWfTlgaEf1aHOZDHyT maDxk1qbjhX5fVqiTjHtHPLvRY81mR+qORxtU8SrTrd0Wd18Nx8QhAKduQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVuePDy7wbNVOhnahmX3aKQvNSgMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfjHjkcU YVMyFFzRhogPWXyD/Yn6akDLLg6NXsfbxFzfvVE9qEQCDWvzmdn7rkpUdII8Z0s5 Ru2tZWn/gBFixE+D6XHnigHsIga5pqx2uT+05fo9jtjoy4akUlgQbu0PHgXPc7pp 201CsXuuGtbWak3OJvlctU6pxDth68S+/ENsXR0jKazq/9uj7NTIkxJx3tzGhT0F +fOpnA+Fxe042twVM3XbeiYmt8JiaYWpieUxn14dr6csCGh+rh/GdJ+TgQIY6r/W LsUmEsZxKi01NXtjFDED1GdjE1rQCcdWpCCi1IDqYSsx0Jj8mzlDlJDEggKEU0gK mE8J1+tNWBFJrw== -----END CERTIFICATE-----Generated at Wed Jul 29 06:39:55 2026 by rpki-client