$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: FfUFLCL+ANt3O7HDFCLgBMq+9HDB6qnNUeFfgyNrGYo= Subject key identifier: 2F:BB:4E:A2:7E:EE:29:D4:D0:73:D8:97:B9:FE:67:E2:55:87:A8:45 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019CA97CE1F8E2E9504C14E02AC9F267D920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0EA5 Signing time: Sun 01 Mar 2026 13:00:59 +0000 Manifest this update: Sun 01 Mar 2026 13:00:59 +0000 Manifest next update: Mon 02 Mar 2026 13:00:59 +0000 Files and hashes: 1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=) 2: 2yaiEWtLmpPiapCWGtA7U5XvdOE.roa (hash: QTRjx2iDNf8MTubJB2iwk2hbKTf/IjC2lcxT2uexPfM=) 3: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=) 4: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=) 5: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=) 6: FAR4zBqp4RoZYr5b0dMP6oBvpWI.roa (hash: UT2+9N5QWjn08aZO5a7dP7t/RatuchrQ1QV+FC9TFKY=) 7: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=) 8: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: sJ+yXcWaxju9U0aOE+g2GID8WTgdh9t7XeXOJOYrWXM=) 9: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=) 10: QOchHly4SC4x8_sGVoN2QEAzdLk.roa (hash: 7kiQ/Lgo351/VabpZJu/jbKrDd0WC0FwJKPpg0ShOY4=) 11: RuweBzwiaFmz16Es8XHGXLl4_X0.roa (hash: OoIurQRUbMPe9Iil8UldbX5ooI0zQuKsatM6kvK2oY0=) 12: Sk7t1MTLy-mE6ILTeU920PY_M-g.roa (hash: OLnK8J+KbB8wVrBQPdBasMW3N+QmDq4FYwGFqKzTkEk=) 13: Uy72jUxgOXJIgs7T4DZejwWDKy4.roa (hash: e+N6lBT3rf/haiXAn+O11QG5l4fWSj8f+0jPE8bUCC4=) 14: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=) 15: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=) 16: ZGpkpSAMeO1WMKT0kMgL1XrOOiI.roa (hash: +58mQxHwIY7KXTJKFotYUhr5PFSgp/yNeQPjJQppI/8=) 17: cPtm9f5FeP4aDiZmtgAZeH6HS5c.roa (hash: MOhP1/09XQdhINCUAfcXO13xP8T5YClq0iYcFE3oubk=) 18: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=) 19: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=) 20: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=) 21: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=) 22: mzjreCh1UKp6Tw01JHK_gKRYkGg.roa (hash: 8KHhl+lFh6yPZptHPK8f1cx7zO0RSCaz8HUst/vhTr0=) 23: pI-1z9oenJG3IzakWANawyG6_9s.roa (hash: wdFoSde/WnFTGchK6FtkX1aAoOPlIKGYqQ2hymhH8ng=) 24: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=) 25: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=) 26: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=) 27: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:7c:e1:f8:e2:e9:50:4c:14:e0:2a:c9:f2:67:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Mar 1 13:00:59 2026 GMT Not After : Mar 2 13:00:59 2026 GMT Subject: CN=2fbb4ea27eee29d4d073d897b9fe67e25587a845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:79:49:ad:49:2a:43:1e:2f:31:a4:fb:da:e3: 50:1a:46:2b:65:bf:7c:3d:e4:6f:b2:28:3b:6b:b8: 8a:0e:99:11:01:28:09:b1:7d:f7:d1:2d:5c:b5:f2: f3:0a:00:84:ea:4d:98:68:6f:d2:cb:74:3a:9c:06: e3:46:9d:91:0d:95:49:eb:8c:19:78:f4:1b:31:54: 95:e7:0e:c0:d5:8f:44:3a:e8:55:42:14:e6:6f:0a: 7b:36:d1:9d:2f:1f:6a:cd:bd:4e:83:b5:3f:5b:ec: b0:60:1a:9e:fc:dd:0f:a6:70:15:88:78:f7:aa:a8: 77:db:8a:b9:43:18:1c:9a:9b:b4:71:8f:bc:e9:ab: a6:ac:4f:a0:74:60:56:53:52:41:8a:6d:59:67:09: 12:f2:61:56:f4:0e:67:41:a9:00:99:bd:f8:b8:1c: 90:e8:a9:24:bf:4c:a3:89:d4:97:11:e2:9a:ca:38: 42:e2:b9:93:94:33:ae:54:60:89:c9:a4:c2:47:e6: 71:3f:1c:b4:e5:b4:e7:a0:4f:b5:72:17:9a:45:53: 08:cb:d1:42:44:1c:88:b0:be:48:21:69:8a:bf:47: 32:48:00:ef:8e:c9:fb:3a:f4:0a:34:77:20:69:95: 40:e9:dd:95:e7:f8:84:f8:7e:4a:1b:bc:2b:31:f6: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BB:4E:A2:7E:EE:29:D4:D0:73:D8:97:B9:FE:67:E2:55:87:A8:45 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:27:24:54:83:35:98:05:2e:cc:75:33:60:4c:50:cc:96:af: 84:a8:24:e9:75:30:81:a4:c9:29:7c:7f:26:f8:44:bc:6a:b4: 7a:60:10:b7:31:7d:e1:dc:d2:9f:09:83:b7:2b:6b:2f:5f:21: 2d:2c:01:be:8e:ce:d2:7e:7b:f4:c0:c3:41:b8:69:90:6c:10: f6:d3:08:73:89:33:53:11:d3:c3:69:75:07:7d:10:71:fa:56: cc:32:f0:4a:30:1d:82:f2:2c:81:99:ab:02:5f:7e:b8:7f:6b: a9:48:a4:e8:23:25:da:86:a1:8d:8b:52:8f:1e:71:e3:59:10: 8b:fc:63:56:9d:d2:16:b5:fa:91:da:34:2d:d3:3f:be:af:6b: 03:97:ef:82:0b:d1:dd:7a:81:36:c2:67:ec:15:18:d6:8f:61: 06:29:7f:b0:73:39:a8:c8:fd:a4:91:ac:24:da:94:71:56:d6: 6e:99:b8:9c:63:34:92:ed:65:bc:0b:8e:38:fe:2b:9b:e6:50: 5c:1c:64:61:5b:aa:c4:6c:4f:60:1a:f6:cb:ee:2c:66:40:9a: 8c:71:5a:72:b9:97:89:9f:00:2c:e7:36:81:e0:39:54:df:c8: 73:c7:dd:e0:ab:24:ce:d2:98:ea:18:09:5e:12:b7:ba:8a:90: bf:f3:cb:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZypfOH44ulQTBTgKsnyZ9kgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMzAxMTMwMDU5WhcNMjYwMzAyMTMwMDU5WjAzMTEwLwYDVQQD EygyZmJiNGVhMjdlZWUyOWQ0ZDA3M2Q4OTdiOWZlNjdlMjU1ODdhODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXlJrUkqQx4vMaT72uNQGkYrZb98 PeRvsig7a7iKDpkRASgJsX330S1ctfLzCgCE6k2YaG/Sy3Q6nAbjRp2RDZVJ64wZ ePQbMVSV5w7A1Y9EOuhVQhTmbwp7NtGdLx9qzb1Og7U/W+ywYBqe/N0PpnAViHj3 qqh324q5Qxgcmpu0cY+86aumrE+gdGBWU1JBim1ZZwkS8mFW9A5nQakAmb34uByQ 6Kkkv0yjidSXEeKayjhC4rmTlDOuVGCJyaTCR+ZxPxy05bTnoE+1cheaRVMIy9FC RByIsL5IIWmKv0cySADvjsn7OvQKNHcgaZVA6d2V5/iE+H5KG7wrMfbTjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+7TqJ+7inU0HPYl7n+Z+JVh6hFMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSckVIM1 mAUuzHUzYExQzJavhKgk6XUwgaTJKXx/JvhEvGq0emAQtzF94dzSnwmDtytrL18h LSwBvo7O0n579MDDQbhpkGwQ9tMIc4kzUxHTw2l1B30QcfpWzDLwSjAdgvIsgZmr Al9+uH9rqUik6CMl2oahjYtSjx5x41kQi/xjVp3SFrX6kdo0LdM/vq9rA5fvggvR 3XqBNsJn7BUY1o9hBil/sHM5qMj9pJGsJNqUcVbWbpm4nGM0ku1lvAuOOP4rm+ZQ XBxkYVuqxGxPYBr2y+4sZkCajHFacrmXiZ8ALOc2geA5VN/Ic8fd4KskztKY6hgJ XhK3uoqQv/PLBQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:41:18 2026 by rpki-client