$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: JqnaYSsHWVFR0cZM5MEvQY+r6ll0ObL85mDyxX2zJB0= Subject key identifier: 02:68:0B:00:4A:68:85:4B:D8:B7:CC:04:5E:F4:CF:6F:18:8A:A3:D4 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019E1CEB8AA0F548309665A5F9400A3BBD0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1921 Signing time: Tue 12 May 2026 16:00:58 +0000 Manifest this update: Tue 12 May 2026 16:00:58 +0000 Manifest next update: Wed 13 May 2026 16:00:58 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: HwIXgVQRneoOCnqnmX3FtAvcQN1kAN3h7rj6IxzSGHo=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:eb:8a:a0:f5:48:30:96:65:a5:f9:40:0a:3b:bd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: May 12 16:00:58 2026 GMT Not After : May 13 16:00:58 2026 GMT Subject: CN=02680b004a68854bd8b7cc045ef4cf6f188aa3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:e2:97:f9:53:cf:35:99:6c:d7:96:b0:d4: f6:2f:10:9a:e3:55:66:50:83:0e:70:57:0f:a7:ba: d1:9e:ef:90:36:d7:13:7f:e4:79:ca:b4:a7:9c:42: 66:f7:dc:24:5f:d2:bf:a8:c0:06:23:58:72:5b:b7: f0:76:97:87:3b:c2:fd:d8:b9:06:d6:73:ae:39:00: 21:16:36:f8:91:28:e4:11:60:60:55:58:2d:a6:9a: 28:0e:fc:d4:9c:c7:3e:a8:83:9e:7b:c8:e5:a9:92: fa:3e:44:29:ef:57:a2:3e:0a:29:d6:33:69:8f:48: ec:d9:a4:e0:e0:3c:17:ca:10:b5:07:be:fe:25:ac: 7c:83:c6:2c:2f:17:89:bc:08:dc:11:b2:c4:70:03: 45:27:0e:12:a4:77:1e:f4:60:b3:9c:4e:33:1f:f4: e3:0b:b3:06:8e:86:9e:91:06:1c:0f:ad:2f:ad:32: 57:c2:ca:b5:dc:2e:21:db:ab:2c:49:21:cf:65:4a: 46:8c:8d:f9:23:14:7a:9b:51:fa:89:6c:8b:ec:9f: 38:33:fc:35:05:4b:65:ec:41:82:8a:95:5f:c6:4c: 07:65:9f:77:5e:24:ed:bb:47:df:2c:6b:79:07:22: 2e:93:ca:65:97:cd:be:35:a9:78:29:0b:bc:43:84: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:68:0B:00:4A:68:85:4B:D8:B7:CC:04:5E:F4:CF:6F:18:8A:A3:D4 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c1:c5:70:1c:9a:d8:1d:dd:dd:b8:89:71:11:5e:85:c9:44: b7:c9:51:2e:2c:f6:b2:8c:81:f3:ae:1c:8b:b7:1c:9d:28:3f: 5c:70:44:53:18:9a:3c:14:60:b7:86:c7:7e:ad:e8:56:98:2e: 91:a3:64:4e:d8:c8:97:cd:b1:0c:9e:d6:dd:d5:4e:4c:b6:ff: 7d:77:c4:20:2a:7f:5f:d9:e5:38:40:6b:1f:7b:5a:96:4a:96: 13:a4:42:22:83:b2:60:a9:db:92:81:44:44:b0:37:de:89:08: cc:87:c4:7e:73:e7:29:58:25:1e:07:9d:9d:35:2a:1d:31:0b: a0:2d:5f:a1:10:c2:c2:04:94:88:26:0e:02:61:ec:cf:4f:9f: 0e:ea:b6:7f:78:a8:a8:5d:07:a1:59:73:71:62:2a:4a:53:17: 6f:a3:ac:d0:f1:2d:3a:8b:73:8c:35:7c:9c:e0:83:78:68:e0: 73:cf:48:86:ca:91:d3:63:8e:86:ac:d3:70:4c:e3:9a:06:c8: 33:7e:c3:c8:dd:c6:c4:0f:8a:36:7b:be:18:12:44:eb:77:a6: bd:14:55:1f:da:b9:9d:fb:3a:05:6b:47:07:45:4d:f1:5f:86: 0b:79:c1:db:b3:84:fa:68:00:2a:1d:6a:f8:36:88:a8:82:b8: b3:04:fa:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4c64qg9UgwlmWl+UAKO70MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwNTEyMTYwMDU4WhcNMjYwNTEzMTYwMDU4WjAzMTEwLwYDVQQD EygwMjY4MGIwMDRhNjg4NTRiZDhiN2NjMDQ1ZWY0Y2Y2ZjE4OGFhM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy/il/lTzzWZbNeWsNT2LxCa41Vm UIMOcFcPp7rRnu+QNtcTf+R5yrSnnEJm99wkX9K/qMAGI1hyW7fwdpeHO8L92LkG 1nOuOQAhFjb4kSjkEWBgVVgtppooDvzUnMc+qIOee8jlqZL6PkQp71eiPgop1jNp j0js2aTg4DwXyhC1B77+Jax8g8YsLxeJvAjcEbLEcANFJw4SpHce9GCznE4zH/Tj C7MGjoaekQYcD60vrTJXwsq13C4h26ssSSHPZUpGjI35IxR6m1H6iWyL7J84M/w1 BUtl7EGCipVfxkwHZZ93XiTtu0ffLGt5ByIuk8pll82+Nal4KQu8Q4QpzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJoCwBKaIVL2LfMBF70z28YiqPUMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMHFcBya 2B3d3biJcRFehclEt8lRLiz2soyB864ci7ccnSg/XHBEUxiaPBRgt4bHfq3oVpgu kaNkTtjIl82xDJ7W3dVOTLb/fXfEICp/X9nlOEBrH3talkqWE6RCIoOyYKnbkoFE RLA33okIzIfEfnPnKVglHgednTUqHTELoC1foRDCwgSUiCYOAmHsz0+fDuq2f3io qF0HoVlzcWIqSlMXb6Os0PEtOotzjDV8nOCDeGjgc89IhsqR02OOhqzTcEzjmgbI M37DyN3GxA+KNnu+GBJE63emvRRVH9q5nfs6BWtHB0VN8V+GC3nB27OE+mgAKh1q +DaIqIK4swT6Eg== -----END CERTIFICATE-----Generated at Wed May 13 03:04:51 2026 by rpki-client