$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: zlogkP4G/WCfwSbuAarOyhxkhSWWL7CNCVDZg6P1tJU= Subject key identifier: A7:D0:15:BC:71:56:A5:C4:95:F5:20:FE:0E:38:39:46:71:0C:33:0F Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019FAB2CA34C58A1D19D86F6C787152DB18C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 0FE7 Signing time: Wed 29 Jul 2026 00:00:56 +0000 Manifest this update: Wed 29 Jul 2026 00:00:56 +0000 Manifest next update: Thu 30 Jul 2026 00:00:56 +0000 Files and hashes: 1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=) 2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=) 3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=) 4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=) 5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=) 6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=) 7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=) 8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=) 9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=) 10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=) 11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=) 12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=) 13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=) 14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=) 15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=) 16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=) 17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=) 18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=) 19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=) 20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=) 21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=) 22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: Su8P+CexNBCmUnHcKR8+dUVchHg05163zVhc7cuIzlU=) 23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=) 24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=) 25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=) 26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=) 27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=) 28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=) 29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=) 30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=) 31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=) 32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=) 33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=) 34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=) 35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:a3:4c:58:a1:d1:9d:86:f6:c7:87:15:2d:b1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jul 29 00:00:56 2026 GMT Not After : Jul 30 00:00:56 2026 GMT Subject: CN=a7d015bc7156a5c495f520fe0e383946710c330f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:f8:91:75:6b:1f:87:fc:74:3d:a5:01:94: ac:5b:c7:24:93:0d:80:74:d5:fd:a3:06:fe:d0:79: ed:a3:b8:f7:c2:63:e6:17:80:17:3f:7c:03:fc:2b: 32:f0:5e:ab:f5:e8:aa:12:ed:52:1a:bd:20:02:6a: 20:e7:47:20:4d:77:8a:dd:2a:a9:c5:64:48:af:28: 05:5f:a2:7b:12:6e:cc:01:1e:cf:c5:2c:5c:c0:cc: 63:15:89:5b:17:8f:ed:33:8f:a7:1a:35:e9:8e:31: bd:1a:6f:a0:54:d7:ff:f1:75:be:a2:2c:0c:8d:c7: ef:22:59:cf:59:eb:18:13:c4:52:b7:d4:c5:73:77: cd:6b:b7:2e:93:1a:13:b7:58:b9:bc:04:da:63:ad: 17:c7:3b:be:d0:56:69:8a:80:d5:79:02:8e:69:cc: 65:48:e9:3b:b2:22:92:70:b9:c3:ea:21:50:01:5f: 4a:06:8b:cb:cc:36:11:dd:9f:95:23:fd:fb:58:b2: 2c:70:4e:6d:2d:ca:cc:90:a8:62:01:3b:9a:40:4c: d5:24:77:90:5e:a2:ba:6f:9c:81:98:9c:ef:29:19: 21:fc:fb:5c:93:86:b0:25:6b:d3:48:68:44:98:11: 01:c8:6c:34:60:da:ef:63:13:cb:f6:89:00:29:c5: f0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D0:15:BC:71:56:A5:C4:95:F5:20:FE:0E:38:39:46:71:0C:33:0F X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3f:7b:f3:73:68:5b:2f:df:71:a1:37:57:f0:ad:e2:55:6f: f7:3d:78:b4:28:c9:19:95:58:1a:b7:dc:ab:d5:f7:2d:28:22: f6:41:9d:b1:5f:65:78:bc:07:70:bc:cc:4a:51:e5:71:26:cf: 23:46:d1:6a:1c:78:19:74:9a:13:7d:a5:d6:83:5f:b7:43:0d: e0:3a:7d:cf:b3:12:cd:47:fe:d5:53:07:c0:de:f0:a5:0b:84: 47:57:4a:7a:d8:db:8b:59:4f:eb:5b:21:5f:61:bb:56:66:42: e3:c3:b6:66:4a:ca:a7:7d:57:25:b0:6d:2b:1a:e9:27:96:4d: 65:8c:83:06:bd:8d:15:ba:84:7f:22:97:54:b2:1d:ef:6d:15: d4:52:46:6f:81:3e:e7:5c:bf:3c:af:82:bb:f9:28:d0:6d:50: 8d:e4:2e:8c:fe:b1:b1:6a:0a:98:9b:73:79:fc:d5:81:de:57: c1:90:a8:ed:8d:a1:a0:e4:ac:27:62:67:72:ba:5c:83:e4:c9: 19:c1:80:e0:d6:2d:4f:6c:a0:5e:79:09:54:18:89:cb:41:ca: 97:71:fe:0d:65:eb:7c:74:6b:55:44:9a:3b:04:51:57:08:f6: 5f:7f:f8:3f:2e:2a:40:fc:51:2b:24:96:5e:10:7c:73:fa:93: 56:ca:a2:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLKNMWKHRnYb2x4cVLbGMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwNzI5MDAwMDU2WhcNMjYwNzMwMDAwMDU2WjAzMTEwLwYDVQQD EyhhN2QwMTViYzcxNTZhNWM0OTVmNTIwZmUwZTM4Mzk0NjcxMGMzMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw74kXVrH4f8dD2lAZSsW8ckkw2A dNX9owb+0Hnto7j3wmPmF4AXP3wD/Csy8F6r9eiqEu1SGr0gAmog50cgTXeK3Sqp xWRIrygFX6J7Em7MAR7PxSxcwMxjFYlbF4/tM4+nGjXpjjG9Gm+gVNf/8XW+oiwM jcfvIlnPWesYE8RSt9TFc3fNa7cukxoTt1i5vATaY60Xxzu+0FZpioDVeQKOacxl SOk7siKScLnD6iFQAV9KBovLzDYR3Z+VI/37WLIscE5tLcrMkKhiATuaQEzVJHeQ XqK6b5yBmJzvKRkh/Ptck4awJWvTSGhEmBEByGw0YNrvYxPL9okAKcXwzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfQFbxxVqXElfUg/g44OUZxDDMPMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj9783No Wy/fcaE3V/Ct4lVv9z14tCjJGZVYGrfcq9X3LSgi9kGdsV9leLwHcLzMSlHlcSbP I0bRahx4GXSaE32l1oNft0MN4Dp9z7MSzUf+1VMHwN7wpQuER1dKetjbi1lP61sh X2G7VmZC48O2ZkrKp31XJbBtKxrpJ5ZNZYyDBr2NFbqEfyKXVLId720V1FJGb4E+ 51y/PK+Cu/ko0G1QjeQujP6xsWoKmJtzefzVgd5XwZCo7Y2hoOSsJ2Jncrpcg+TJ GcGA4NYtT2ygXnkJVBiJy0HKl3H+DWXrfHRrVUSaOwRRVwj2X3/4Py4qQPxRKySW XhB8c/qTVsqi9g== -----END CERTIFICATE-----Generated at Wed Jul 29 06:43:33 2026 by rpki-client