$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: lqZLm5TzZ70sy4thjLxXcWQ3a2R+X155NZxZZxLhWao= Subject key identifier: 91:8C:53:4E:7F:84:C8:DB:D5:3B:8C:5F:CD:5E:81:1E:73:98:EB:59 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019D273A9A1A887DE6EF920708A8B03D20A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 159B Signing time: Wed 25 Mar 2026 23:00:45 +0000 Manifest this update: Wed 25 Mar 2026 23:00:45 +0000 Manifest next update: Thu 26 Mar 2026 23:00:45 +0000 Files and hashes: 1: 4cLeBIUzolxvixomGkjZcKiBte8.roa (hash: N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=) 2: 746QFPJyT0Rq24L0EZYCq84Zm3c.roa (hash: AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=) 3: 8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (hash: /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=) 4: CjPEg_1_YC8pnKYDbVJlTX6LL9M.roa (hash: zyX+uPItpF4LWUTzRFEpi3sBDAJ/wqUUHQFbPwYtfPk=) 5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: 2xaN59SkJcpxGfUzis+uBTE+RffEZrLy3q0ak86qwvo=) 6: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (hash: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI=) 7: VOEqbHkGWWPCfYghmq_qCzJyCks.roa (hash: DW2E3Bv+Uu/QtgNYK+Kni5CDezUiIfsMXJ3wb8ndf9s=) 8: _SvrltKT2d95s4aJXfwotwRjxTs.roa (hash: x78Dq5GqOFiqHEpOdeEmGfWK4U05pqaKZhv6jrrmznc=) 9: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (hash: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE=) 10: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (hash: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ=) 11: r29J5i1S1Gu8Uj_A_Wz6NKuvkEs.roa (hash: 8e0tYCtiI0iNQahlyYDb4Q4Izluuf3hdqVeE3n5XNmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:3a:9a:1a:88:7d:e6:ef:92:07:08:a8:b0:3d:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Mar 25 23:00:45 2026 GMT Not After : Mar 26 23:00:45 2026 GMT Subject: CN=918c534e7f84c8dbd53b8c5fcd5e811e7398eb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:0e:90:9e:9d:b4:d5:95:35:8a:6a:9d:e5: 81:f8:b8:a6:7c:2c:df:c3:26:ef:c6:d7:b6:c2:d9: 0b:eb:b9:16:2d:32:c6:12:89:94:d7:ce:96:3f:61: d7:ed:9b:89:9a:90:49:4b:0e:cb:65:1d:f4:97:4c: c0:34:6f:86:b6:3b:9d:56:e0:ec:6d:b5:cf:4e:da: ce:88:23:83:00:b4:68:b1:d3:4f:6f:a4:06:2c:bc: d4:60:a2:fd:4f:a4:8f:de:2a:33:98:f6:93:0a:2a: ed:d7:fd:68:5e:c1:0a:27:a4:ff:17:c6:d5:e7:88: ff:c9:51:18:01:88:5a:bd:b2:fc:ab:82:8c:99:d5: 63:51:d2:c8:3d:e2:71:96:f1:56:d0:2f:ee:f5:23: 66:b5:53:2c:69:e8:5a:db:4a:b0:ce:36:0a:c3:a4: 08:47:14:f4:93:23:84:0b:73:17:0e:e9:4e:35:38: d2:7e:43:e2:bc:a0:ee:b4:98:69:80:cd:57:11:c1: f7:7f:ed:ba:54:5c:26:1a:af:26:24:6d:6b:c1:2a: 57:8e:84:7b:29:ef:e9:f8:2c:c6:48:e3:98:db:00: 8a:6c:4d:8f:eb:63:2f:76:9e:32:53:50:20:6e:4a: 1d:6f:26:b5:38:b7:de:b4:bf:07:07:e6:aa:4d:c6: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8C:53:4E:7F:84:C8:DB:D5:3B:8C:5F:CD:5E:81:1E:73:98:EB:59 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c7:13:29:a1:f9:19:f1:1e:ae:98:81:07:7c:68:c9:3a:bd: 2e:d9:a2:2a:df:73:0c:ca:5a:3a:88:ae:e6:1a:0c:8e:aa:c4: df:08:02:f4:7b:de:bc:a8:ea:0f:d0:dc:75:1e:1a:36:e3:c1: 20:f0:1a:f7:fc:9d:1b:1f:d3:1d:10:f3:27:05:fd:48:97:aa: 65:ed:a3:5b:c7:42:51:67:74:45:dc:7b:b8:8a:7b:4d:7f:e6: 99:47:fb:13:b2:77:1d:bd:73:60:12:f0:6d:75:90:4b:71:cf: ba:95:24:7f:f5:72:d1:a1:0e:43:ee:3c:4e:6b:06:ce:8b:12: 6c:72:91:e0:7c:d3:67:ad:4c:56:94:f3:dc:02:48:2e:1f:55: 26:11:b6:66:53:22:a9:96:d3:a0:88:e4:a3:8d:fc:14:0c:03: 9c:0e:96:a0:6f:0f:b6:f6:c7:a9:31:bb:e2:85:d6:18:40:e7: 7e:72:15:48:e8:96:0a:89:d9:71:39:50:59:66:1c:42:28:16: e8:3a:c6:b0:3a:30:60:1b:1c:26:55:cf:97:0f:60:47:1e:f9: 69:f2:17:0b:29:fe:f7:cc:ea:46:d8:72:16:a9:c7:11:8e:c8: e8:e2:d3:26:f4:94:5f:27:b6:2f:61:5e:fd:7b:ad:cf:24:4d: 0e:7f:d0:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nOpoaiH3m75IHCKiwPSCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjYwMzI1MjMwMDQ1WhcNMjYwMzI2MjMwMDQ1WjAzMTEwLwYDVQQD Eyg5MThjNTM0ZTdmODRjOGRiZDUzYjhjNWZjZDVlODExZTczOThlYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGEOkJ6dtNWVNYpqneWB+LimfCzf wybvxte2wtkL67kWLTLGEomU186WP2HX7ZuJmpBJSw7LZR30l0zANG+GtjudVuDs bbXPTtrOiCODALRosdNPb6QGLLzUYKL9T6SP3iozmPaTCirt1/1oXsEKJ6T/F8bV 54j/yVEYAYhavbL8q4KMmdVjUdLIPeJxlvFW0C/u9SNmtVMsaeha20qwzjYKw6QI RxT0kyOEC3MXDulONTjSfkPivKDutJhpgM1XEcH3f+26VFwmGq8mJG1rwSpXjoR7 Ke/p+CzGSOOY2wCKbE2P62Mvdp4yU1Agbkodbya1OLfetL8HB+aqTcbgLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGMU05/hMjb1TuMX81egR5zmOtZMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYccTKaH5 GfEerpiBB3xoyTq9LtmiKt9zDMpaOoiu5hoMjqrE3wgC9HvevKjqD9DcdR4aNuPB IPAa9/ydGx/THRDzJwX9SJeqZe2jW8dCUWd0Rdx7uIp7TX/mmUf7E7J3Hb1zYBLw bXWQS3HPupUkf/Vy0aEOQ+48TmsGzosSbHKR4HzTZ61MVpTz3AJILh9VJhG2ZlMi qZbToIjko438FAwDnA6WoG8PtvbHqTG74oXWGEDnfnIVSOiWConZcTlQWWYcQigW 6DrGsDowYBscJlXPlw9gRx75afIXCyn+98zqRthyFqnHEY7I6OLTJvSUXye2L2Fe /XutzyRNDn/QOA== -----END CERTIFICATE-----Generated at Thu Mar 26 03:41:22 2026 by rpki-client