$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json) Hash identifier: dyzcmUQS3QzH+J+O4WwRlr6PLbcGkwb8se8vxiFdH74= Subject key identifier: DC:4F:AC:68:4A:58:69:76:24:EB:B7:12:E0:5C:B8:5D:BA:DD:B4:1A Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019D25BACA3F82AF5C55E31BC16E03DDA15C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft Manifest number: 05AA Signing time: Wed 25 Mar 2026 16:01:31 +0000 Manifest this update: Wed 25 Mar 2026 16:01:31 +0000 Manifest next update: Thu 26 Mar 2026 16:01:31 +0000 Files and hashes: 1: 1-5PJEN9Zlj95GybZ6SDZCDM9Ux4.roa (hash: Iy5yXXvGVPR+2adaggKxnJKpE+OnqOlK+rwcp8Q3SZ8=) 2: 30dkveMmzQoC--vIo2-VkK-wZoI.asa (hash: YEsva8h0Cx1XqT9wd/RInpTp2lVj0U8gXWpYKxW5QKU=) 3: 3ASB5zCrDemZKSAs0Zx9k2F_c8E.roa (hash: 0vj83vMIqnpXNhmG4mayWQ/wJnUNYY8OdPbnu2KwES4=) 4: 5JXq104FYzVfyXXDzJAAFJW2oSU.roa (hash: QBSTq0ftAdHw8K8kTH1q6gST/SRrdjkonrYKEiBUX1g=) 5: BEhnA8HlzocKBTFbTGvomzgDLXw.roa (hash: mgS7+wib0aUsSecsF7X4olbYLZrwELJ+ASFG23dhOnM=) 6: C138aOzacLuaGW8kvfeS05DZ2lE.roa (hash: 9U8phWYYVslUCCZLy5I+OdIKw1yMdq5fsrBfxYCaSm8=) 7: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: D/oD13+zzNoS16ANY67Yf/LPLyXTqauApp9mipTVF0M=) 8: JleZX8if8WA6QvsWXYtqxQfBCcs.roa (hash: 1ll4zDHOZ05sGRKZZ3BGPEykyJEMaM9UeWgswVdnjIU=) 9: N3w35B6tJjZBnG0TN049ln5pJ7s.roa (hash: s8TVxsDKxlSUH4tgci4aH3x9HRphwx/toiD82zV03+I=) 10: NjqAS56phIFTEiKBVTRmrN3WBY8.roa (hash: umrFlXJkBxsfwL4GX6/fEeuG83MP4Q8vA7igYpxacmI=) 11: UAg-lvUrA3pIOde0diAUpR2UidM.roa (hash: 1kpFDgrIlgt14TuAZasJeZ5bfTPc/oBkNiktiRjkFbs=) 12: W8I_idCkalQgPt3zPRafZ7zdG9Y.asa (hash: XyO0X/V8GssHY7K5eOx+Kfra7ZStOnq0x/bI6zsMvbs=) 13: WAXt2WMEO5cBuMrwsGsqVBjWUPA.roa (hash: GlzXILsF+JcJcxfYLpToMyEOPpjWZmyYuo748X7dvz0=) 14: b-G-n76UplLDML9ZYaCG4jf9KfY.roa (hash: 0zoirdXafxrobAC7OR+ynQby1MZQpAcCBCyGFMfHAQs=) 15: bGhjO_TlM1MQryfy6uCOOW98qU8.roa (hash: 3vFjot7XrftGag9PpmZqtnmIjwjNv7hhUabTVeeBipw=) 16: dBrnX8_98iFuWVrHOU52Q1wSEaw.roa (hash: +3ET58K23eX4vtwsNdX0TYNPsJEkZj/XezMR0jBc+EA=) 17: e8o9eE4Ll42uOW4-5Vfvz5NDkIs.roa (hash: 51N+vFv/j40ASUl/9DN8HQurrtN+zYKS6P9w8wpKe6o=) 18: fliT7CSN0P7IrthmgvKtOYpdfus.roa (hash: QUoQumbQ45G7hWmpRNJQSWIwGg7+LCw3mLegafNHnAg=) 19: gNGCtakJ63HNmb2cUTy0u-qp3f0.roa (hash: 6bq9JK8sv1GmS2NkhZSO0stGxzDjR88qEWqAWE8rgeM=) 20: gaPdTUi6Zv6lDCLDjVNSeOj00TA.roa (hash: iddnFzVd2NO0LQ+RrEgnt3+9d3P9fueV4LLcUDR95FU=) 21: mrFztnv8Kfb7yJhZvxUSHMp__q8.roa (hash: QVL/wxxs5Db8S0AcSXC68a3V1OrVioU5o6PR478XfGo=) 22: oacHEmo910_7FyFGjXuLGPuPf4w.roa (hash: 5yXvh0dr2O8Z495Ml7vtmfwFXDGTeO1Z+hG/BEJhEPg=) 23: paD1BPZjWTHybcQ4vrsY_ps4XCI.roa (hash: lQg77lyx9OAdTCrugz62otTkN8DkRaywe+CQcDmWoEo=) 24: x2F-aA7j3hCD_v3kf_KQT1UcABA.roa (hash: cojgCaOFTZkckHxe1r8Zk9LrAv/VUW0HDYue21C7/i8=) 25: zsyPeh8m8sjguCrl4OEWWZFzySo.roa (hash: TcB5Dwpz6Z4jJ4wGIGEdlsvXaH5/dLHAqc6cpVGM8N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:25:ba:ca:3f:82:af:5c:55:e3:1b:c1:6e:03:dd:a1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Mar 25 16:01:31 2026 GMT Not After : Mar 26 16:01:31 2026 GMT Subject: CN=dc4fac684a58697624ebb712e05cb85dbaddb41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7e:61:75:33:fa:e2:5a:10:50:53:f4:84:c4: 38:5b:4e:95:ca:85:ff:e6:92:d4:cc:3c:e2:41:96: 71:9d:7f:ab:30:6f:a3:15:a4:b6:6b:5c:04:20:d6: f9:b7:41:ba:ac:5e:81:c5:ed:df:3e:54:6a:a5:25: 1f:82:8a:55:8f:d7:8c:50:54:9a:a1:ec:f3:4f:85: e0:cf:cf:41:4c:be:e0:9f:e6:41:64:c6:48:ba:87: f5:5b:b5:50:ad:27:04:42:83:d9:c4:ef:e7:f8:ff: 39:76:59:b6:34:9e:e3:64:1c:b8:a6:3f:51:ce:d3: 19:13:03:70:f3:d1:eb:2b:ec:a6:5e:ea:ae:b4:4e: e2:c5:cd:80:41:26:42:6e:e3:29:92:39:c5:60:b7: d2:e3:ec:c2:9a:e0:ae:6c:59:60:95:75:19:ce:4c: 48:f0:f2:9a:9b:f2:6f:3a:ec:70:fc:ec:7b:a6:cd: b3:8e:6d:38:af:13:7d:f1:53:2f:52:aa:5c:ca:25: c7:d8:52:26:68:90:f8:67:1e:d7:8c:0c:4d:e8:f7: 6c:58:9e:c2:97:b1:89:fb:cd:f0:95:67:b5:66:2b: ff:e7:cd:d2:d8:7d:50:07:56:f1:60:98:93:2f:f3: c3:2f:47:f2:10:05:7f:d5:79:81:6a:80:4d:e6:b0: 4b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:AC:68:4A:58:69:76:24:EB:B7:12:E0:5C:B8:5D:BA:DD:B4:1A X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:ae:df:8f:43:75:6c:31:77:34:c4:15:25:d4:85:07:51:77: d8:e4:20:30:0f:f8:c1:01:d6:74:31:14:d2:05:79:a5:c5:18: 83:a5:02:45:f0:b6:30:6c:3c:e7:a6:e5:84:dd:9e:4f:2b:a7: e0:65:5b:a0:44:f4:83:e5:0f:91:65:b1:18:36:dd:7c:26:73: 1e:d2:6b:d7:21:99:b5:87:dc:40:e7:80:69:79:0f:7d:14:14: 80:fa:7f:93:08:a1:0c:21:15:ef:13:26:93:1c:56:7a:f6:3f: 94:3b:34:46:4c:cf:c1:b9:ec:c5:ef:fa:58:af:bf:c9:16:79: bd:74:87:ec:6d:cc:ff:c1:04:04:53:d6:9d:97:9a:5c:83:90: 5e:05:f3:2e:c3:41:27:83:17:7a:94:5b:76:f7:29:07:b1:2d: 93:ce:85:b1:dc:79:8b:05:87:be:99:12:1e:7b:00:c7:1b:96: e7:1d:1f:dd:3d:d6:44:fa:71:bf:f5:d7:94:10:97:f3:bc:d4: 0e:d8:63:8a:98:3b:e5:ad:3b:3c:ac:cb:cd:2e:e6:c6:10:39: 64:b3:2d:78:9d:2a:ba:47:c9:23:ec:40:13:4f:0d:fb:80:21: 21:ca:bf:14:83:26:f1:b3:07:66:18:88:32:48:a4:35:83:36: 8d:0d:22:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0luso/gq9cVeMbwW4D3aFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMzI1MTYwMTMxWhcNMjYwMzI2MTYwMTMxWjAzMTEwLwYDVQQD EyhkYzRmYWM2ODRhNTg2OTc2MjRlYmI3MTJlMDVjYjg1ZGJhZGRiNDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn35hdTP64loQUFP0hMQ4W06VyoX/ 5pLUzDziQZZxnX+rMG+jFaS2a1wEINb5t0G6rF6Bxe3fPlRqpSUfgopVj9eMUFSa oezzT4Xgz89BTL7gn+ZBZMZIuof1W7VQrScEQoPZxO/n+P85dlm2NJ7jZBy4pj9R ztMZEwNw89HrK+ymXuqutE7ixc2AQSZCbuMpkjnFYLfS4+zCmuCubFlglXUZzkxI 8PKam/JvOuxw/Ox7ps2zjm04rxN98VMvUqpcyiXH2FImaJD4Zx7XjAxN6PdsWJ7C l7GJ+83wlWe1Ziv/583S2H1QB1bxYJiTL/PDL0fyEAV/1XmBaoBN5rBLSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxPrGhKWGl2JOu3EuBcuF263bQaMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACa7fj0N1 bDF3NMQVJdSFB1F32OQgMA/4wQHWdDEU0gV5pcUYg6UCRfC2MGw856blhN2eTyun 4GVboET0g+UPkWWxGDbdfCZzHtJr1yGZtYfcQOeAaXkPfRQUgPp/kwihDCEV7xMm kxxWevY/lDs0RkzPwbnsxe/6WK+/yRZ5vXSH7G3M/8EEBFPWnZeaXIOQXgXzLsNB J4MXepRbdvcpB7Etk86Fsdx5iwWHvpkSHnsAxxuW5x0f3T3WRPpxv/XXlBCX87zU Dthjipg75a07PKzLzS7mxhA5ZLMteJ0qukfJI+xAE08N+4AhIcq/FIMm8bMHZhiI MkikNYM2jQ0iew== -----END CERTIFICATE-----Generated at Wed Mar 25 23:22:57 2026 by rpki-client