$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: m19OPngYDbOVlGcmrEmwcDjEyzPbvqWUdX0g4UcjIqI= Subject key identifier: 45:2D:44:9D:69:79:BF:A3:64:BC:F6:8D:FB:FD:A2:03:6B:0A:A8:3D Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019F91A432AC0C5A2A9EE93ED7F2C01A1DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 1494 Signing time: Fri 24 Jul 2026 01:01:24 +0000 Manifest this update: Fri 24 Jul 2026 01:01:24 +0000 Manifest next update: Sat 25 Jul 2026 01:01:24 +0000 Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=) 2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=) 3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: M6X1PKU6YQFIxNVzoRaqc8VXIuJWCZuXD8KClq+N4z8=) 4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=) 5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=) 6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=) 7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=) 8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=) 9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=) 10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a4:32:ac:0c:5a:2a:9e:e9:3e:d7:f2:c0:1a:1d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Jul 24 01:01:24 2026 GMT Not After : Jul 25 01:01:24 2026 GMT Subject: CN=452d449d6979bfa364bcf68dfbfda2036b0aa83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fe:bf:5c:f1:96:d5:c3:4d:af:98:1b:dc:0a: a8:33:e9:fe:f1:2e:76:d8:bc:df:8e:36:97:df:97: 06:21:7a:e3:91:93:10:63:c0:b8:9e:e1:5e:71:c0: 54:71:d5:bc:ed:9b:56:49:51:4b:34:c9:aa:27:4a: d0:a4:5a:05:8a:ca:8f:36:81:20:f5:3c:93:0f:ca: 89:41:a0:1f:4b:2e:55:75:9a:67:f6:60:d0:b2:1b: d5:c8:a3:ef:93:3e:78:6e:14:35:cf:fe:4f:48:4c: 1c:eb:93:2c:ae:74:ed:12:cc:e3:eb:3c:11:39:9a: f7:98:40:05:09:40:66:ad:91:cf:f9:a5:f9:36:a4: 1c:69:72:a4:8b:76:ae:9f:c5:a8:f7:b5:10:7a:e5: b3:97:74:77:d3:61:e8:04:c4:7c:92:51:c6:e3:2e: 6f:cf:b2:7e:23:8f:7c:22:d7:12:13:6d:2c:38:10: 6f:91:10:dc:83:e2:d6:5e:84:0e:72:d6:91:76:8c: 02:68:23:ff:ee:c5:8b:4e:d9:0f:30:d1:45:3e:83: 03:a4:b9:30:e7:9b:18:19:10:71:10:2b:ac:5b:e7: c9:7c:60:1c:52:13:18:61:7c:e2:97:1f:be:ce:30: b7:e6:f6:14:e3:db:27:8f:d1:49:f7:0e:fd:89:87: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2D:44:9D:69:79:BF:A3:64:BC:F6:8D:FB:FD:A2:03:6B:0A:A8:3D X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fa:0c:2b:43:01:72:e5:d2:fa:08:e0:d4:eb:2e:db:2f:fa: a4:90:e7:40:2d:4b:88:12:3d:71:76:7b:ec:ab:1d:fb:17:05: f3:57:d7:86:59:e9:ef:e1:73:fa:60:26:2e:67:17:94:3a:e3: c8:48:63:5b:f7:3b:8f:5a:e1:1f:5e:e2:64:74:b4:b1:ad:ff: 1f:17:78:4d:7f:a1:e2:3e:6d:ab:62:a7:b3:a3:2a:c5:97:19: 8d:24:a1:ad:b8:4e:16:bd:1a:8c:d6:48:b9:23:d0:bb:86:7f: 89:82:4d:5e:90:4f:7a:4c:50:0e:66:69:2a:2c:4e:4e:ac:2f: 73:87:35:f9:a2:09:65:02:1e:1f:d2:25:5f:4e:8b:0c:f0:e6: 18:2a:b7:a3:34:bd:54:4c:40:e6:1f:9c:aa:d6:e4:43:64:3d: 93:86:cd:14:3d:bc:5f:a1:5c:00:19:f2:ed:42:54:91:c0:b7: b2:38:02:ad:9d:2d:ed:a5:64:14:2a:e4:58:67:b9:77:a8:a4: b7:57:cf:89:be:1a:61:87:17:b9:b8:dc:5d:25:62:8d:0b:9c: 2f:ff:90:c4:30:f1:e2:55:75:0f:7b:f1:6c:c0:ca:96:b2:76: e1:e3:61:76:11:67:e9:2b:ce:a8:a4:44:8d:7c:1c:4a:46:a0: c1:7c:e5:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RpDKsDFoqnuk+1/LAGh30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwNzI0MDEwMTI0WhcNMjYwNzI1MDEwMTI0WjAzMTEwLwYDVQQD Eyg0NTJkNDQ5ZDY5NzliZmEzNjRiY2Y2OGRmYmZkYTIwMzZiMGFhODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P6/XPGW1cNNr5gb3AqoM+n+8S52 2LzfjjaX35cGIXrjkZMQY8C4nuFeccBUcdW87ZtWSVFLNMmqJ0rQpFoFisqPNoEg 9TyTD8qJQaAfSy5VdZpn9mDQshvVyKPvkz54bhQ1z/5PSEwc65MsrnTtEszj6zwR OZr3mEAFCUBmrZHP+aX5NqQcaXKki3aun8Wo97UQeuWzl3R302HoBMR8klHG4y5v z7J+I498ItcSE20sOBBvkRDcg+LWXoQOctaRdowCaCP/7sWLTtkPMNFFPoMDpLkw 55sYGRBxECusW+fJfGAcUhMYYXzilx++zjC35vYU49snj9FJ9w79iYe7+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUtRJ1peb+jZLz2jfv9ogNrCqg9MB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/oMK0MB cuXS+gjg1Osu2y/6pJDnQC1LiBI9cXZ77Ksd+xcF81fXhlnp7+Fz+mAmLmcXlDrj yEhjW/c7j1rhH17iZHS0sa3/Hxd4TX+h4j5tq2Kns6MqxZcZjSShrbhOFr0ajNZI uSPQu4Z/iYJNXpBPekxQDmZpKixOTqwvc4c1+aIJZQIeH9IlX06LDPDmGCq3ozS9 VExA5h+cqtbkQ2Q9k4bNFD28X6FcABny7UJUkcC3sjgCrZ0t7aVkFCrkWGe5d6ik t1fPib4aYYcXubjcXSVijQucL/+QxDDx4lV1D3vxbMDKlrJ24eNhdhFn6SvOqKRE jXwcSkagwXzl7g== -----END CERTIFICATE-----Generated at Fri Jul 24 11:20:24 2026 by rpki-client