$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: liY2GTyBjWoicea76VFOXs3Qj/gpV5jJSUKWjy4G9rA= Subject key identifier: E2:B9:92:84:56:4C:D7:86:86:BE:DC:33:F6:14:1A:DE:B5:97:B9:DB Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019F91355D7683187743D95B1A5F7968DFDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 19E2 Signing time: Thu 23 Jul 2026 23:00:21 +0000 Manifest this update: Thu 23 Jul 2026 23:00:21 +0000 Manifest next update: Fri 24 Jul 2026 23:00:21 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: tioXXFdsdj199C9eGsYMbKbSeuKXo5zR0XkL9RTFysU=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:35:5d:76:83:18:77:43:d9:5b:1a:5f:79:68:df:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jul 23 23:00:21 2026 GMT Not After : Jul 24 23:00:21 2026 GMT Subject: CN=e2b99284564cd78686bedc33f6141adeb597b9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:35:2a:5e:3d:ee:7b:3b:10:7c:f2:41:8c: 2a:b6:ae:cd:f3:c7:0f:fd:a6:07:54:59:5f:d5:f6: 14:88:8d:e7:bb:50:8f:1b:59:ec:d9:e0:61:16:1e: 0e:d4:6a:62:f1:cf:95:ab:98:67:d4:11:cb:dd:3e: 41:13:d7:9e:31:16:b0:38:58:26:db:4d:f4:d1:d2: d8:eb:29:b6:86:b3:c4:e7:37:95:34:9e:fa:1c:6f: e0:c9:29:16:cf:2f:81:46:d7:30:2d:83:46:98:68: 51:d7:a6:fc:59:12:4c:fb:a6:fd:c8:23:a4:0f:13: 3a:21:81:9d:cd:86:06:99:8f:10:e4:f5:9e:a6:aa: 5f:4d:29:d2:d9:72:48:2b:ba:ed:a6:b6:f9:0b:eb: 32:f6:e1:01:49:c6:0f:45:2c:e6:a4:4a:37:a8:62: 66:5b:18:7b:3c:90:24:cb:e0:c7:ec:1f:9e:bf:34: 3b:b2:1d:eb:67:e0:8c:04:15:df:ca:49:e6:7c:70: d0:95:8a:19:f6:a4:16:89:85:c9:3a:bc:09:90:a2: 40:49:86:d1:71:d7:b4:2e:c4:c1:e1:de:ee:5b:98: 25:3c:a6:17:6b:b8:4d:94:23:6d:9a:55:bc:d8:71: 1d:ed:b5:53:24:a0:4a:f6:23:5e:4d:fb:42:bd:3e: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B9:92:84:56:4C:D7:86:86:BE:DC:33:F6:14:1A:DE:B5:97:B9:DB X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e3:3c:e9:d6:4f:79:78:84:67:75:c7:73:3d:8a:3e:a0:e9: 31:ed:bf:e6:f0:d4:8c:ce:a7:ee:83:a7:ef:05:6d:44:66:5d: 25:f7:2c:59:af:3a:6b:58:7c:82:21:df:c2:8b:33:a7:04:33: 60:7e:65:a8:06:9b:6c:8c:b7:e6:9e:55:27:79:10:ae:fe:6e: b0:b1:eb:b2:b8:52:ec:b3:cf:ff:f0:51:ea:0a:db:61:db:10: e9:56:87:09:65:6f:54:d6:1a:5d:59:56:80:5d:b0:75:87:63: 5a:12:09:98:e9:c1:85:85:73:20:04:d7:94:9e:fb:a6:ea:d8: 39:84:9c:14:19:d8:a8:90:be:39:d7:b9:ce:94:72:e5:de:e5: 32:64:c9:99:35:72:32:94:c7:9e:a9:6a:5c:f9:e1:30:e6:32: 2c:8c:5e:6a:cf:0a:7d:1d:f9:12:54:55:3d:1a:59:68:d0:b0: f7:c0:de:dc:33:7d:fe:93:85:86:4e:4f:94:e1:04:02:18:f4: c1:00:9e:6e:b4:8f:a4:03:a5:e5:80:91:f3:c0:b0:53:2b:bd: 24:e6:78:6d:3e:7c:21:85:4a:f6:f9:69:d7:96:98:a2:42:5a: b0:ec:94:fe:98:21:77:1d:f4:70:aa:9a:44:1e:87:44:ad:6e: 50:70:f2:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RNV12gxh3Q9lbGl95aN/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwNzIzMjMwMDIxWhcNMjYwNzI0MjMwMDIxWjAzMTEwLwYDVQQD EyhlMmI5OTI4NDU2NGNkNzg2ODZiZWRjMzNmNjE0MWFkZWI1OTdiOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOM1Kl497ns7EHzyQYwqtq7N88cP /aYHVFlf1fYUiI3nu1CPG1ns2eBhFh4O1Gpi8c+Vq5hn1BHL3T5BE9eeMRawOFgm 20300dLY6ym2hrPE5zeVNJ76HG/gySkWzy+BRtcwLYNGmGhR16b8WRJM+6b9yCOk DxM6IYGdzYYGmY8Q5PWepqpfTSnS2XJIK7rtprb5C+sy9uEBScYPRSzmpEo3qGJm Wxh7PJAky+DH7B+evzQ7sh3rZ+CMBBXfyknmfHDQlYoZ9qQWiYXJOrwJkKJASYbR cde0LsTB4d7uW5glPKYXa7hNlCNtmlW82HEd7bVTJKBK9iNeTftCvT7/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK5koRWTNeGhr7cM/YUGt61l7nbMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOM86dZP eXiEZ3XHcz2KPqDpMe2/5vDUjM6n7oOn7wVtRGZdJfcsWa86a1h8giHfwoszpwQz YH5lqAabbIy35p5VJ3kQrv5usLHrsrhS7LPP//BR6grbYdsQ6VaHCWVvVNYaXVlW gF2wdYdjWhIJmOnBhYVzIATXlJ77purYOYScFBnYqJC+Ode5zpRy5d7lMmTJmTVy MpTHnqlqXPnhMOYyLIxeas8KfR35ElRVPRpZaNCw98De3DN9/pOFhk5PlOEEAhj0 wQCebrSPpAOl5YCR88CwUyu9JOZ4bT58IYVK9vlp15aYokJasOyU/pghdx30cKqa RB6HRK1uUHDydw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:18:31 2026 by rpki-client