$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: fqm0TnwBpa5zh2gw4ec+UU0GcqA5uVCrypLv80sGfsQ= Subject key identifier: 81:53:7E:43:E1:3F:E2:2A:D6:05:3C:D2:42:55:02:D4:FB:A6:74:E5 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019F91DAE0C1037ECE54DB6A100ABAFABCDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1A66 Signing time: Fri 24 Jul 2026 02:01:08 +0000 Manifest this update: Fri 24 Jul 2026 02:01:08 +0000 Manifest next update: Sat 25 Jul 2026 02:01:08 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: 68w0M7JHcuzPMPQFDknerN7p/l2oJJbeF0mOAHervoU=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:da:e0:c1:03:7e:ce:54:db:6a:10:0a:ba:fa:bc:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jul 24 02:01:08 2026 GMT Not After : Jul 25 02:01:08 2026 GMT Subject: CN=81537e43e13fe22ad6053cd2425502d4fba674e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:07:f1:a9:d4:09:ae:2e:4c:7b:40:bc:3f: ec:ca:f0:f5:6d:64:4c:2a:38:53:ed:8c:8f:8d:d9: 65:3b:76:07:74:a5:4d:9d:ac:ef:87:6e:99:e9:61: ec:01:db:aa:6e:cd:13:8c:3b:e6:1f:55:ce:89:f2: b6:61:e4:72:f1:16:90:bd:22:b4:ad:e6:15:2f:38: d4:c3:21:20:b9:70:5c:72:4c:b6:4f:f8:f9:35:6c: 2b:6f:15:a6:3c:a8:b9:79:d4:26:ff:d9:b1:69:ed: 1f:db:97:e5:b0:1a:68:39:62:2c:a6:72:5c:13:21: c9:1c:de:0b:a5:f7:b1:1d:dd:38:db:e3:0d:15:21: f4:ed:f4:f1:5b:65:06:11:5e:00:ac:c0:20:b4:68: 32:12:7a:32:f2:99:e8:c1:3b:13:27:b5:4d:8f:4a: 00:9a:fc:bc:cc:23:ef:c8:99:ed:7b:80:5a:84:a6: a6:f0:7d:c1:ec:70:06:62:57:25:2d:3e:66:37:95: 83:fd:ca:5d:2e:d5:73:1f:ce:17:34:a6:85:0e:66: 34:9d:24:14:84:59:0e:c2:86:e6:95:73:f1:f0:5f: 4e:0c:e3:7f:6c:2e:ae:d1:10:c2:5e:02:32:64:72: 60:15:62:49:0b:d5:45:f8:60:6f:ee:2a:08:c3:92: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:53:7E:43:E1:3F:E2:2A:D6:05:3C:D2:42:55:02:D4:FB:A6:74:E5 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:04:21:0d:91:74:4b:6d:3e:8c:e6:4e:12:c5:a4:40:48:87: 0b:a6:cc:9c:d2:d8:5d:7f:05:e7:d3:32:e9:78:2e:a5:5a:df: e0:ee:84:31:86:89:59:61:a3:77:8d:61:1c:6b:63:5f:ea:1d: 96:c1:f3:f9:4c:c0:bf:9e:42:fe:95:bc:e6:ca:81:3f:fb:dc: 0a:78:db:31:0d:17:6c:ed:a5:9b:f1:54:b9:96:b5:cd:0e:63: 98:0a:34:b6:8b:d7:7f:7f:76:64:29:dd:c3:39:75:e0:72:80: 22:9a:35:47:64:8b:cc:ee:46:25:cd:8d:b3:44:fe:d9:17:0d: 7d:20:19:39:23:05:a4:f2:46:7f:fa:39:ad:a1:42:3e:7a:67: 80:ff:6e:be:c8:7e:6b:1d:86:95:2e:de:1b:be:e3:c8:91:45: fa:36:33:75:3e:0b:98:03:ec:bb:d2:4a:49:fe:66:b3:43:10: 89:42:78:f8:07:d3:fb:5e:d1:74:22:ee:27:1f:ad:da:54:b1: 8b:b7:4f:67:7c:12:9e:d5:ce:3d:2d:a4:10:c9:9f:48:01:e0: d1:b4:6d:3b:0b:54:18:56:ac:9d:8d:e5:2a:19:ac:18:7e:02: 51:c3:fe:c9:49:af:03:4b:2d:11:2c:8a:94:8e:15:15:0d:73: 18:25:84:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2uDBA37OVNtqEAq6+rzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNzI0MDIwMTA4WhcNMjYwNzI1MDIwMTA4WjAzMTEwLwYDVQQD Eyg4MTUzN2U0M2UxM2ZlMjJhZDYwNTNjZDI0MjU1MDJkNGZiYTY3NGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzMH8anUCa4uTHtAvD/syvD1bWRM KjhT7YyPjdllO3YHdKVNnazvh26Z6WHsAduqbs0TjDvmH1XOifK2YeRy8RaQvSK0 reYVLzjUwyEguXBccky2T/j5NWwrbxWmPKi5edQm/9mxae0f25flsBpoOWIspnJc EyHJHN4LpfexHd042+MNFSH07fTxW2UGEV4ArMAgtGgyEnoy8pnowTsTJ7VNj0oA mvy8zCPvyJnte4BahKam8H3B7HAGYlclLT5mN5WD/cpdLtVzH84XNKaFDmY0nSQU hFkOwobmlXPx8F9ODON/bC6u0RDCXgIyZHJgFWJJC9VF+GBv7ioIw5L0nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFTfkPhP+Iq1gU80kJVAtT7pnTlMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQQhDZF0 S20+jOZOEsWkQEiHC6bMnNLYXX8F59My6XgupVrf4O6EMYaJWWGjd41hHGtjX+od lsHz+UzAv55C/pW85sqBP/vcCnjbMQ0XbO2lm/FUuZa1zQ5jmAo0tovXf392ZCnd wzl14HKAIpo1R2SLzO5GJc2Ns0T+2RcNfSAZOSMFpPJGf/o5raFCPnpngP9uvsh+ ax2GlS7eG77jyJFF+jYzdT4LmAPsu9JKSf5ms0MQiUJ4+AfT+17RdCLuJx+t2lSx i7dPZ3wSntXOPS2kEMmfSAHg0bRtOwtUGFasnY3lKhmsGH4CUcP+yUmvA0stESyK lI4VFQ1zGCWE9g== -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:23 2026 by rpki-client