$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: TJ6GdT7dicgUUMfgZvRNfuWpCdkUC7lrBsbcUXyHIdI= Subject key identifier: ED:32:2D:78:CA:68:A2:45:6A:AB:E2:73:15:7C:33:D8:06:30:46:BB Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019F90C7CF2D45B81C869AE8AD481BA931D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 19E4 Signing time: Thu 23 Jul 2026 21:00:41 +0000 Manifest this update: Thu 23 Jul 2026 21:00:41 +0000 Manifest next update: Fri 24 Jul 2026 21:00:41 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: YTbx/I5SUbp1ZBZ7d6CEb6tGR9rri6m+wi7MBQF6jxs=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:cf:2d:45:b8:1c:86:9a:e8:ad:48:1b:a9:31:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jul 23 21:00:41 2026 GMT Not After : Jul 24 21:00:41 2026 GMT Subject: CN=ed322d78ca68a2456aabe273157c33d8063046bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:1b:41:fe:59:27:31:31:26:78:9a:26:4b: 57:04:47:f5:71:23:da:cc:03:28:1a:4a:f6:dc:90: 47:65:ad:18:82:ea:29:4d:3f:d0:65:76:48:6e:a6: 18:3a:f6:94:70:b7:6c:c7:91:4d:36:84:e6:57:35: ae:94:10:9a:fb:5c:6f:85:3b:13:6f:54:13:d6:c2: 14:99:3d:a2:9b:8b:da:9f:c4:1f:1f:83:2a:91:81: 2a:52:45:b1:c6:1e:36:a2:60:e4:c0:0e:1b:9b:b3: ac:e7:ae:c4:21:8e:33:42:4e:dc:91:2c:9d:48:02: 2c:18:f8:09:64:1a:36:d6:bf:80:a9:97:49:19:57: 50:84:b4:a5:6d:36:3f:95:97:60:85:25:87:95:1e: 99:a0:a9:1a:2f:f5:02:80:7e:e1:9b:b3:e1:7d:ea: 18:4a:90:a7:5c:d3:33:47:9e:d2:79:1b:8d:39:bf: 5a:1d:2e:96:1a:3c:1a:c6:55:46:be:21:cc:63:70: 7a:70:f5:35:23:b3:be:8f:d2:db:0b:3d:3f:8e:48: f9:b6:b3:5f:83:1d:41:80:4c:ad:b3:02:76:47:76: 5f:2e:9a:23:62:ca:c6:c5:c3:a6:51:4a:7e:0d:3d: e1:d6:62:3b:fc:8c:8f:fa:57:b9:d9:bc:2c:0f:3a: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:32:2D:78:CA:68:A2:45:6A:AB:E2:73:15:7C:33:D8:06:30:46:BB X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f2:ae:1b:16:fc:c0:39:dc:a6:5f:c7:35:b7:67:59:c6:1f: 64:7a:71:4c:e8:30:9c:c6:1f:db:1e:62:60:ff:96:f3:a4:aa: c2:70:cc:5f:e6:08:11:c6:2b:ac:3e:87:09:3f:be:c6:e3:b3: f3:3f:21:95:ec:a1:b2:56:8d:34:2b:24:f7:9d:2e:cf:86:a4: e2:18:a9:da:22:3f:61:ad:50:6b:a7:49:21:26:90:73:b2:59: 18:2c:77:95:50:7b:54:4d:82:46:60:d4:79:a8:e0:28:11:44: d7:d0:8c:dc:78:a5:aa:b6:4d:30:0e:d6:6d:e6:c6:6b:2b:b0: 26:ef:0b:e7:c0:ac:a0:d3:5a:c5:95:9b:4e:8e:63:bf:c3:eb: a4:2e:3c:17:5b:b4:4a:f8:cc:0c:1c:fa:0b:b0:6c:5d:12:e3: 0f:4e:30:1a:62:5d:6c:d9:8f:ce:ae:ad:81:17:e0:a0:30:8c: fa:04:d3:7d:bb:75:95:51:40:71:35:31:ea:9f:d8:30:96:02: d5:78:d9:dd:6a:90:fb:d5:82:5d:56:e0:b7:17:28:36:15:65: 29:07:a0:7f:b8:3e:8a:03:27:c2:e1:26:da:91:d2:0f:68:f7: 27:3f:14:91:a0:03:c1:5a:cb:a6:19:db:0f:94:a7:bc:9b:f3: 42:c4:58:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx88tRbgchprorUgbqTHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwNzIzMjEwMDQxWhcNMjYwNzI0MjEwMDQxWjAzMTEwLwYDVQQD EyhlZDMyMmQ3OGNhNjhhMjQ1NmFhYmUyNzMxNTdjMzNkODA2MzA0NmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfgbQf5ZJzExJniaJktXBEf1cSPa zAMoGkr23JBHZa0YguopTT/QZXZIbqYYOvaUcLdsx5FNNoTmVzWulBCa+1xvhTsT b1QT1sIUmT2im4van8QfH4MqkYEqUkWxxh42omDkwA4bm7Os567EIY4zQk7ckSyd SAIsGPgJZBo21r+AqZdJGVdQhLSlbTY/lZdghSWHlR6ZoKkaL/UCgH7hm7PhfeoY SpCnXNMzR57SeRuNOb9aHS6WGjwaxlVGviHMY3B6cPU1I7O+j9LbCz0/jkj5trNf gx1BgEytswJ2R3ZfLpojYsrGxcOmUUp+DT3h1mI7/IyP+le52bwsDzqhqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0yLXjKaKJFaqvicxV8M9gGMEa7MB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvKuGxb8 wDncpl/HNbdnWcYfZHpxTOgwnMYf2x5iYP+W86SqwnDMX+YIEcYrrD6HCT++xuOz 8z8hleyhslaNNCsk950uz4ak4hip2iI/Ya1Qa6dJISaQc7JZGCx3lVB7VE2CRmDU eajgKBFE19CM3HilqrZNMA7WbebGayuwJu8L58CsoNNaxZWbTo5jv8PrpC48F1u0 SvjMDBz6C7BsXRLjD04wGmJdbNmPzq6tgRfgoDCM+gTTfbt1lVFAcTUx6p/YMJYC 1XjZ3WqQ+9WCXVbgtxcoNhVlKQegf7g+igMnwuEm2pHSD2j3Jz8UkaADwVrLphnb D5SnvJvzQsRYwA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:02:57 2026 by rpki-client