$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: kaJt8E1oOGiz3IfG6xVS2r/1irJmVJ+d3TQC1cYaln0= Subject key identifier: AC:ED:1A:7B:48:47:A6:B9:17:52:B1:F7:1F:C8:1F:6F:AF:89:CB:44 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019F9022F7702FE40AA7B60AB33C7ECECB03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 1A02 Signing time: Thu 23 Jul 2026 18:00:38 +0000 Manifest this update: Thu 23 Jul 2026 18:00:38 +0000 Manifest next update: Fri 24 Jul 2026 18:00:38 +0000 Files and hashes: 1: 6nfKLOxto_YJYq2hDB97wz66l7E.roa (hash: nCd4ej6s8SzPKiU6agc04bISSI9GsH2UwtiXrQMxtRs=) 2: 8BGOgyvTM3cQVZkmabNpYxGe_9s.roa (hash: 9bggmjWraVwIQX28xZSm8TmHWMkhlleKkSUw+UjkIs4=) 3: 8BokwqNdAZw-F0ecrcKpG0HfvdE.roa (hash: p4KMplmsFd8hmDW0qUXNZiwtSy0rhvkuFzg9slKSx6o=) 4: B_Oas4WgmVIGn-3rrNhZeLW80Lo.roa (hash: D3jA3MorfBqB+MfUHf0sPY50LeECj4jpZHTJI+CUbGU=) 5: HP4h8_-ij1bAYdXbX3Z1R7TdJ9g.roa (hash: h5J4pV3iFw9aHd46YGtejZF/piq/CX6ObP5wMogmeI8=) 6: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: L6xG2SEuxqHz5hclKZmP5c8PcnS5yGZAIMt6C2ipExQ=) 7: JRsFGSId3TzORTpxmswJLHlu4I8.roa (hash: 5ygqb7D/I+BTjwmlYor1uSAyPC9t0hkED6pGiyYg/78=) 8: OfMasiijhAZchYy0030zvbrlt-8.roa (hash: JAjJ4Bw+aA7TY1if9MpoLvJnduTs4THfiTVv+9chKF4=) 9: QIm7dSvtcpzFOIMcrTzwe_OIWNQ.roa (hash: Ch8UtIUviSsaCVKNk2Yb1YCrdhDpRUHvwacjcC2l2ow=) 10: _6MH9zVVkOeMpELiq5Cuz4TxPq4.roa (hash: Yf/0SmZ5VEph+y/wLg+PuwUwXOxrukDOWnmf2A7NDUI=) 11: bKam-QF0hAVKIr7uU4GhnjFhoNw.roa (hash: IiEAHA6LBRwbMc3DI0Wp/JgQMj2jSHonSenES30jsQk=) 12: p0p2OO5fAMJ3EsixMPWafbErHR8.roa (hash: AW4TgH3P5L8EKPSHOfhLkGluDRU0yoKTmN94YBIvSR8=) 13: pwK5uipUW01i-Mazx5XzNaCOMgE.roa (hash: 9YzuOYyTTU1NxOO3ZjZHRys+tph7wfbixRzNg7hF41o=) 14: rcW2Ii7PaBs2Uy4l6LWyLkHdSMo.roa (hash: 4rDXiZIxTJhAB4SWesiReJpAQSLBHJqIt+2m35EFqOU=) 15: tEM3cdsPlnnUtLjCCZyMoawWAtg.roa (hash: 6h53cAP7YwqSOqXrW0Uk5ZovRw+2Dyi+jtBDIPvi2c0=) 16: tqaZWzQOONuL8X5Ttv1_aR0SBeA.roa (hash: I8ohGSxZ/k/bp4akujtG1SbYswguKs5oqy4Uk65ywNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:22:f7:70:2f:e4:0a:a7:b6:0a:b3:3c:7e:ce:cb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jul 23 18:00:38 2026 GMT Not After : Jul 24 18:00:38 2026 GMT Subject: CN=aced1a7b4847a6b91752b1f71fc81f6faf89cb44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:5a:94:21:8a:d6:e9:f9:fc:ca:5b:1a:fc: 6d:fe:fd:83:e9:be:07:0e:3c:45:17:e4:21:63:26: 1e:43:a3:54:82:3f:61:f8:17:f9:cb:68:d3:f3:19: ad:f0:ac:05:99:94:f0:04:2f:3a:be:7b:36:7d:f2: 71:35:62:a4:7d:fe:1d:d6:64:db:be:7b:67:cf:bf: 95:39:89:e8:b7:8e:23:23:3c:7f:bc:91:d5:f8:e9: 06:d9:5d:e6:cd:c5:0e:e5:c3:00:62:ee:26:f0:76: 48:7c:3f:36:04:e7:6f:28:8d:9a:04:4b:79:63:0d: 32:73:e8:71:9a:3a:30:b0:91:63:10:e9:61:ad:44: c8:ac:86:c1:81:1e:5a:80:b9:24:9c:22:f8:6d:a4: f9:01:37:36:c7:4c:de:bb:55:f0:33:7b:fc:09:ad: 9a:99:5c:91:77:3d:e8:47:2b:19:a7:5d:38:51:be: ca:76:22:b2:f0:8f:51:7d:6d:98:3f:44:72:11:aa: 56:25:38:4b:d2:2a:c9:b9:01:89:79:f0:21:7f:da: a2:ac:54:f6:02:55:3d:62:81:25:11:3a:49:e4:27: 5c:ac:67:3f:3e:dd:e6:4d:17:b7:67:30:ee:3a:2f: 6e:cd:a6:78:8f:76:c2:b7:96:3c:bf:bf:77:49:d6: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:ED:1A:7B:48:47:A6:B9:17:52:B1:F7:1F:C8:1F:6F:AF:89:CB:44 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:97:e4:1b:b1:7e:6f:50:42:dc:0b:81:e0:74:dd:42:d5:6b: 60:ee:1d:ab:05:67:7c:26:ea:78:f8:34:16:b5:58:c0:2e:0b: 86:ae:30:1a:fe:80:da:5a:67:ab:49:07:2a:66:0a:55:e3:85: b4:54:f8:9c:c4:eb:cf:a0:2c:f4:77:72:88:35:f6:9a:a9:64: 09:8c:01:6c:cf:24:09:7d:1e:f1:a3:be:4a:13:f4:1a:76:87: 7f:d2:9b:fe:18:c9:bd:d7:f0:11:83:24:0b:75:86:c4:c4:b2: f7:74:e6:d4:f4:68:87:c1:24:bd:a0:87:8f:10:43:71:6d:e3: d4:47:54:27:12:a8:70:50:47:2c:8a:89:3f:99:02:37:00:8b: 4d:44:70:0f:77:e7:31:47:8c:56:44:7c:6a:a9:ee:e9:a2:28: aa:36:53:b3:49:29:2f:82:44:0f:55:58:69:a8:b7:04:bc:18: 34:3d:90:e5:ef:5c:a2:e1:78:76:a3:12:a8:56:0d:99:e0:47: 82:c5:d1:0b:02:0d:f5:5f:50:21:5d:63:40:a6:d6:26:f3:33: a9:92:5a:3d:c4:7b:8c:14:3f:79:8e:82:99:56:d1:2e:75:69: 50:4f:a3:ae:01:35:8a:6c:78:68:c8:68:91:aa:de:d7:2c:5f: 01:38:43:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIvdwL+QKp7YKszx+zssDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwNzIzMTgwMDM4WhcNMjYwNzI0MTgwMDM4WjAzMTEwLwYDVQQD EyhhY2VkMWE3YjQ4NDdhNmI5MTc1MmIxZjcxZmM4MWY2ZmFmODljYjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlntalCGK1un5/MpbGvxt/v2D6b4H DjxFF+QhYyYeQ6NUgj9h+Bf5y2jT8xmt8KwFmZTwBC86vns2ffJxNWKkff4d1mTb vntnz7+VOYnot44jIzx/vJHV+OkG2V3mzcUO5cMAYu4m8HZIfD82BOdvKI2aBEt5 Yw0yc+hxmjowsJFjEOlhrUTIrIbBgR5agLkknCL4baT5ATc2x0zeu1XwM3v8Ca2a mVyRdz3oRysZp104Ub7KdiKy8I9RfW2YP0RyEapWJThL0irJuQGJefAhf9qirFT2 AlU9YoElETpJ5CdcrGc/Pt3mTRe3ZzDuOi9uzaZ4j3bCt5Y8v793SdboCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKztGntIR6a5F1Kx9x/IH2+victEMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpfkG7F+ b1BC3AuB4HTdQtVrYO4dqwVnfCbqePg0FrVYwC4Lhq4wGv6A2lpnq0kHKmYKVeOF tFT4nMTrz6As9HdyiDX2mqlkCYwBbM8kCX0e8aO+ShP0GnaHf9Kb/hjJvdfwEYMk C3WGxMSy93Tm1PRoh8EkvaCHjxBDcW3j1EdUJxKocFBHLIqJP5kCNwCLTURwD3fn MUeMVkR8aqnu6aIoqjZTs0kpL4JED1VYaai3BLwYND2Q5e9couF4dqMSqFYNmeBH gsXRCwIN9V9QIV1jQKbWJvMzqZJaPcR7jBQ/eY6CmVbRLnVpUE+jrgE1imx4aMho kare1yxfAThDIg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:03:23 2026 by rpki-client