$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: el16y7pmOgq8HCqq+Jo36E0EdaBLCAieQbJUAPkgubs= Subject key identifier: E8:D7:A6:EF:20:B7:39:2A:4C:9F:A3:F4:97:46:B7:17:EE:48:5E:07 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019E1DFE7EE139F43111A98F3DC9DE1B1FA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1924 Signing time: Tue 12 May 2026 21:01:18 +0000 Manifest this update: Tue 12 May 2026 21:01:18 +0000 Manifest next update: Wed 13 May 2026 21:01:18 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: lhS5Jypp6W7HB8iUHG8rGZTPHVl6uChLLNpUKbAHEDE=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1d:fe:7e:e1:39:f4:31:11:a9:8f:3d:c9:de:1b:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: May 12 21:01:18 2026 GMT Not After : May 13 21:01:18 2026 GMT Subject: CN=e8d7a6ef20b7392a4c9fa3f49746b717ee485e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:64:72:1f:6a:21:0d:17:8d:16:74:58:d5: 2e:dc:e8:f4:61:14:05:9b:5e:88:83:88:33:a2:1f: 9f:40:4a:17:66:a2:23:8a:3a:ee:5d:93:57:db:e3: 13:93:6b:dc:ca:ea:81:50:c4:72:ee:a0:36:d0:b1: 7c:a4:8d:39:49:45:97:d4:ae:4c:d5:9c:a5:1f:9b: 4f:a8:05:29:38:8d:fc:ad:49:11:ec:3f:18:b0:93: a8:9d:cc:4b:c7:b9:40:0d:a4:b4:55:e5:b7:3e:fd: e9:03:83:59:7e:d6:05:08:e8:2e:08:72:76:f6:23: 7e:23:9f:8c:ef:ef:f0:08:b6:39:71:3a:c1:98:fb: b2:b9:f3:cd:54:2e:89:f4:32:5f:ef:d1:1e:f9:80: d4:03:56:f1:c6:4e:d5:04:74:61:2d:8a:0d:3c:de: 76:73:e7:14:5e:52:47:8e:f1:46:69:3c:5b:8e:7f: 62:00:24:1e:24:d6:d2:1f:c9:cd:88:58:11:61:91: 62:76:80:7d:28:6f:e2:91:88:4a:d9:65:8a:c0:ef: 2c:e9:38:9c:1d:e4:c3:89:64:89:9e:88:43:9b:d5: e4:54:e6:9a:41:af:85:c9:7d:6f:28:7e:b9:af:50: 9c:a4:14:0a:a6:7e:82:de:7b:9e:8f:1b:21:02:63: c4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D7:A6:EF:20:B7:39:2A:4C:9F:A3:F4:97:46:B7:17:EE:48:5E:07 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:68:c8:57:05:b1:c4:96:99:4a:23:14:58:e0:99:c4:d6:b8: bd:50:c9:b9:ca:b6:b8:83:09:fb:4a:73:fb:ef:53:2d:14:44: 6e:53:00:44:28:a7:86:f4:5a:e3:b0:fc:bb:cd:e9:df:07:83: 7a:0d:f4:a7:b6:33:7a:89:1e:7f:4f:0f:1f:78:3c:0a:55:7b: 9d:e7:7b:9f:02:b8:fa:ab:bc:63:f1:03:28:93:94:94:2f:58: 5a:f2:ad:3b:82:67:d2:ea:01:65:9c:a5:af:99:f7:39:ea:02: db:ea:89:c0:c9:e6:9f:6b:80:a9:7b:9d:06:da:b3:fd:e4:b4: bc:3a:c6:54:0b:6d:6b:7c:eb:bc:92:9a:6e:5f:9e:13:59:af: 93:bd:85:67:16:8b:86:25:a9:70:dc:69:bd:3b:93:c1:82:2c: ca:70:2f:88:b6:75:43:78:ff:6e:d1:40:68:82:02:28:a5:9d: 38:b2:65:23:2d:4b:b9:95:d1:4f:28:02:b3:e4:95:cd:8f:27: 14:09:b1:9e:bd:f7:97:54:50:17:39:3e:08:f0:0e:f3:ae:6e: 30:16:e6:f6:2f:53:05:7c:cd:a4:47:10:ef:7b:08:31:b3:cf: 41:71:23:1b:00:a7:39:b4:65:1f:a0:f4:3f:7e:44:4a:76:52: e8:8d:89:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4d/n7hOfQxEamPPcneGx+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwNTEyMjEwMTE4WhcNMjYwNTEzMjEwMTE4WjAzMTEwLwYDVQQD EyhlOGQ3YTZlZjIwYjczOTJhNGM5ZmEzZjQ5NzQ2YjcxN2VlNDg1ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GVkch9qIQ0XjRZ0WNUu3Oj0YRQF m16Ig4gzoh+fQEoXZqIjijruXZNX2+MTk2vcyuqBUMRy7qA20LF8pI05SUWX1K5M 1ZylH5tPqAUpOI38rUkR7D8YsJOoncxLx7lADaS0VeW3Pv3pA4NZftYFCOguCHJ2 9iN+I5+M7+/wCLY5cTrBmPuyufPNVC6J9DJf79Ee+YDUA1bxxk7VBHRhLYoNPN52 c+cUXlJHjvFGaTxbjn9iACQeJNbSH8nNiFgRYZFidoB9KG/ikYhK2WWKwO8s6Tic HeTDiWSJnohDm9XkVOaaQa+FyX1vKH65r1CcpBQKpn6C3nuejxshAmPEtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjXpu8gtzkqTJ+j9JdGtxfuSF4HMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWjIVwWx xJaZSiMUWOCZxNa4vVDJucq2uIMJ+0pz++9TLRREblMARCinhvRa47D8u83p3weD eg30p7Yzeokef08PH3g8ClV7ned7nwK4+qu8Y/EDKJOUlC9YWvKtO4Jn0uoBZZyl r5n3OeoC2+qJwMnmn2uAqXudBtqz/eS0vDrGVAtta3zrvJKabl+eE1mvk72FZxaL hiWpcNxpvTuTwYIsynAviLZ1Q3j/btFAaIICKKWdOLJlIy1LuZXRTygCs+SVzY8n FAmxnr33l1RQFzk+CPAO865uMBbm9i9TBXzNpEcQ73sIMbPPQXEjGwCnObRlH6D0 P35ESnZS6I2JJw== -----END CERTIFICATE-----Generated at Wed May 13 03:25:11 2026 by rpki-client