$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: FvJmXVG1pGd2RkgueSHfpuFS4elxqcCf/KBBwILeTnE= Subject key identifier: 79:6C:FF:42:16:5E:7D:05:2A:84:62:FD:D2:DE:6E:8A:C2:2B:B3:F5 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 01A0F11E8719457CB0CB5665AE968BF87B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 154A Signing time: Wed 30 Sep 2026 07:01:44 +0000 Manifest this update: Wed 30 Sep 2026 07:01:44 +0000 Manifest next update: Thu 01 Oct 2026 07:01:44 +0000 Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=) 2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=) 3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: gyBWjPvSeJsApNOpZB3eEk9NEkvtBLjBNbNPm9QN7c8=) 4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=) 5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=) 6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=) 7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=) 8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=) 9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=) 10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f1:1e:87:19:45:7c:b0:cb:56:65:ae:96:8b:f8:7b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Sep 30 07:01:44 2026 GMT Not After : Oct 1 07:01:44 2026 GMT Subject: CN=796cff42165e7d052a8462fdd2de6e8ac22bb3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:e6:f7:14:b7:c6:ee:8b:8e:da:50:38:70: 6c:d7:9b:a5:27:a4:a2:b3:b4:24:34:bb:63:fc:a4: ff:94:2a:29:b5:2f:c6:60:8b:4d:ca:b7:f6:d1:df: b5:d0:99:e3:06:c6:b4:a7:7e:cf:69:92:94:4e:ca: ee:10:91:40:7b:6e:91:d2:3a:0f:f8:3d:9e:55:53: b3:2a:6b:94:ad:38:f6:b2:9e:13:53:d8:92:7c:21: f0:af:49:a0:e5:91:7c:8b:77:7e:00:f9:19:7f:87: a9:af:6b:1c:70:a3:d1:24:96:dc:e4:7a:0f:3e:33: 58:b0:2e:05:02:85:8f:26:43:c2:61:28:b4:67:72: 24:56:af:91:5a:e8:93:0d:f8:5b:25:42:b5:90:ae: 4b:9d:33:f4:d1:0b:14:53:68:5b:a5:6f:16:e3:85: 0f:8a:04:22:3c:67:0c:aa:37:39:6d:44:e3:55:73: b3:41:3e:7a:ed:6d:74:56:55:b0:10:c5:bd:2b:d4: d6:51:f8:b0:35:4e:46:2b:05:af:75:bb:69:6d:50: 46:eb:aa:5e:56:91:9a:67:09:f5:04:fe:44:cd:ad: 4a:2d:a5:a2:b6:2f:70:7b:a5:a4:86:d0:2f:bf:60: 6d:4e:09:e7:b4:e2:d4:bd:35:0e:99:6c:6f:5e:e3: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6C:FF:42:16:5E:7D:05:2A:84:62:FD:D2:DE:6E:8A:C2:2B:B3:F5 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:66:d3:77:ba:b5:15:fb:6e:a4:e0:78:e3:16:bf:ed:d6:6b: cf:e2:4b:2f:2a:23:45:3d:f7:50:27:6f:bf:7e:54:ca:c8:70: bd:07:a1:4c:8c:63:6b:8f:3f:0e:c8:c2:df:86:73:78:e7:9a: d7:b7:54:4a:62:5e:98:ca:7f:fe:ee:1d:74:09:69:b3:dc:8b: 2b:f4:97:da:e3:ae:cd:ea:2a:d4:17:59:12:f8:4f:00:86:d2: c6:df:80:24:e0:d1:04:15:57:d0:80:0c:04:d9:f7:e9:12:a6: 0d:41:4f:75:57:8e:74:a6:e4:47:61:b5:a6:ae:d8:51:8a:d8: 51:b2:a1:c0:14:c5:cc:30:af:9b:db:5b:a9:e3:a6:82:42:02: 35:cb:63:cd:52:c8:22:8f:81:56:98:f7:63:e0:8d:ba:17:89: 4f:31:d5:68:95:db:33:d0:0c:db:87:30:d8:7d:f7:bc:bf:a8: 35:c5:63:d1:1b:d9:34:ac:9b:21:7d:5c:2f:6d:ff:70:51:41: 1c:f4:b9:c9:be:87:4d:dd:66:e9:4e:0a:d2:f5:8e:5f:4d:a3: 08:1a:bb:05:3a:ac:65:ad:e2:bd:eb:31:c4:46:99:9c:23:78: 46:05:c6:cf:1a:83:32:cb:6f:8e:44:4b:cc:9a:d0:26:bf:7d: f3:1d:70:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDxHocZRXywy1ZlrpaL+HsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwOTMwMDcwMTQ0WhcNMjYxMDAxMDcwMTQ0WjAzMTEwLwYDVQQD Eyg3OTZjZmY0MjE2NWU3ZDA1MmE4NDYyZmRkMmRlNmU4YWMyMmJiM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw73m9xS3xu6LjtpQOHBs15ulJ6Si s7QkNLtj/KT/lCoptS/GYItNyrf20d+10JnjBsa0p37PaZKUTsruEJFAe26R0joP +D2eVVOzKmuUrTj2sp4TU9iSfCHwr0mg5ZF8i3d+APkZf4epr2sccKPRJJbc5HoP PjNYsC4FAoWPJkPCYSi0Z3IkVq+RWuiTDfhbJUK1kK5LnTP00QsUU2hbpW8W44UP igQiPGcMqjc5bUTjVXOzQT567W10VlWwEMW9K9TWUfiwNU5GKwWvdbtpbVBG66pe VpGaZwn1BP5Eza1KLaWiti9we6WkhtAvv2BtTgnntOLUvTUOmWxvXuOJhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHls/0IWXn0FKoRi/dLeborCK7P1MB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWbTd7q1 FftupOB44xa/7dZrz+JLLyojRT33UCdvv35UyshwvQehTIxja48/DsjC34ZzeOea 17dUSmJemMp//u4ddAlps9yLK/SX2uOuzeoq1BdZEvhPAIbSxt+AJODRBBVX0IAM BNn36RKmDUFPdVeOdKbkR2G1pq7YUYrYUbKhwBTFzDCvm9tbqeOmgkICNctjzVLI Io+BVpj3Y+CNuheJTzHVaJXbM9AM24cw2H33vL+oNcVj0RvZNKybIX1cL23/cFFB HPS5yb6HTd1m6U4K0vWOX02jCBq7BTqsZa3ivesxxEaZnCN4RgXGzxqDMstvjkRL zJrQJr998x1wRQ== -----END CERTIFICATE-----Generated at Wed Sep 30 12:08:05 2026 by rpki-client