$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: IpAqW3UfS77WSE0AF6J9j8rCOu3iSkWAc6Npd6gG4vg= Subject key identifier: AB:41:41:2A:88:05:D3:71:D8:FF:24:1C:13:B5:AF:22:AB:BE:C8:83 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019E1EA3B9DC77247BDD2E22D0B3BF9F4FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1930 Signing time: Wed 13 May 2026 00:01:46 +0000 Manifest this update: Wed 13 May 2026 00:01:46 +0000 Manifest next update: Thu 14 May 2026 00:01:46 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 1CdaDEMYuczsE5fB0W--_kjgKz4.roa (hash: eLlevVfSpCGIySbdmJVMxY3O6xhqpu9HHp+hjTsXa+Y=) 3: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: gmoT5sBtOosD3ynjDzCK1M6Mj6kNwjj7jCIHMEhvnMI=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: XfKFQ0jrYjUJX2-xXdeOtI2PwBA.roa (hash: Dv4g2hdF2DWTn9KmOFquly3+gEa0c48Mrasajz85cj8=) 8: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:a3:b9:dc:77:24:7b:dd:2e:22:d0:b3:bf:9f:4f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: May 13 00:01:46 2026 GMT Not After : May 14 00:01:46 2026 GMT Subject: CN=ab41412a8805d371d8ff241c13b5af22abbec883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:39:c5:ba:a7:59:7c:1c:6e:39:52:d9:93: 25:a2:96:08:cb:1d:ef:b7:b8:4e:dc:89:b0:65:40: 8c:99:85:75:2e:3a:29:77:39:5b:06:f0:ef:32:e6: 88:dd:36:ba:e1:ad:70:63:6f:1d:bd:d7:95:80:38: a5:da:33:45:c6:e0:6c:da:24:80:8b:45:bb:ca:e7: cd:2b:c4:37:64:46:7b:11:c5:5c:59:65:02:f8:36: 23:29:b3:63:3e:6e:72:01:5f:a5:5e:09:b3:9e:bb: cd:61:51:06:d1:83:ee:59:30:20:15:92:31:e3:1c: a1:98:62:db:2c:8f:9d:c6:de:b0:95:37:0a:f3:cb: 72:55:f2:2d:f6:94:22:92:4e:b8:2c:83:dd:8c:87: 81:3a:11:41:11:f8:df:f8:a5:cb:e3:9b:45:3e:db: 0c:b9:46:49:cf:e2:e5:13:58:e9:e2:5c:43:a6:c1: b3:e0:72:89:f7:d9:6d:e4:26:71:9e:c5:f5:ce:9e: 7f:87:f5:84:87:9e:b5:6c:d0:41:74:20:24:f8:9f: 11:d7:37:89:9c:be:4c:73:94:77:db:c1:f6:5f:7f: 50:75:e6:d8:85:c2:1e:73:d8:07:ee:e5:3f:4a:aa: 30:09:a6:3c:c9:45:f9:48:fa:7e:ae:2f:f2:7b:27: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:41:41:2A:88:05:D3:71:D8:FF:24:1C:13:B5:AF:22:AB:BE:C8:83 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ea:28:a3:15:3b:f5:41:bf:a8:8e:65:e5:0e:10:4b:b2:65: 7d:7d:5b:31:7d:ed:3f:68:00:43:11:04:5d:b1:c5:af:e6:9d: 24:76:53:57:c3:48:dc:08:8f:91:dc:ba:b5:7b:d2:e1:e3:2f: 7f:a3:63:bb:99:87:ad:e4:e4:35:17:72:b2:21:56:8e:ee:24: fc:74:8e:9a:73:ee:69:a9:77:e0:70:7f:cd:85:31:f0:d8:ad: a4:58:1c:8b:b5:34:11:ba:96:98:41:54:f4:f2:4f:39:6c:2d: e8:a3:b4:3e:4b:d4:77:c0:4d:02:a9:d3:b4:f0:5b:4e:5f:b4: 47:39:cc:de:0f:cc:3f:62:b9:8b:e3:13:37:81:b4:4b:19:d8: 32:7f:bc:60:b1:ed:d4:a9:0b:87:3f:38:45:81:b6:c1:f2:fa: 59:a5:5f:4d:b6:f4:be:7a:75:bb:56:ed:a6:4f:2c:36:80:8c: f6:6e:63:b4:b4:4c:12:cc:f7:e4:92:6f:22:be:0b:7c:2f:6a: d4:c3:2f:aa:71:37:21:18:7c:90:3c:f2:ed:c8:9b:6e:4e:f3: f0:96:ec:75:8b:f9:71:c7:39:c1:fd:e1:46:0c:be:73:0f:e2: 19:43:35:7f:b0:e4:18:2b:b8:31:fb:ed:fc:24:86:94:7b:81: 46:39:a7:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4eo7ncdyR73S4i0LO/n0/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwNTEzMDAwMTQ2WhcNMjYwNTE0MDAwMTQ2WjAzMTEwLwYDVQQD EyhhYjQxNDEyYTg4MDVkMzcxZDhmZjI0MWMxM2I1YWYyMmFiYmVjODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr485xbqnWXwcbjlS2ZMlopYIyx3v t7hO3ImwZUCMmYV1LjopdzlbBvDvMuaI3Ta64a1wY28dvdeVgDil2jNFxuBs2iSA i0W7yufNK8Q3ZEZ7EcVcWWUC+DYjKbNjPm5yAV+lXgmznrvNYVEG0YPuWTAgFZIx 4xyhmGLbLI+dxt6wlTcK88tyVfIt9pQikk64LIPdjIeBOhFBEfjf+KXL45tFPtsM uUZJz+LlE1jp4lxDpsGz4HKJ99lt5CZxnsX1zp5/h/WEh561bNBBdCAk+J8R1zeJ nL5Mc5R328H2X39QdebYhcIec9gH7uU/SqowCaY8yUX5SPp+ri/yeydSDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtBQSqIBdNx2P8kHBO1ryKrvsiDMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+oooxU7 9UG/qI5l5Q4QS7JlfX1bMX3tP2gAQxEEXbHFr+adJHZTV8NI3AiPkdy6tXvS4eMv f6Nju5mHreTkNRdysiFWju4k/HSOmnPuaal34HB/zYUx8NitpFgci7U0EbqWmEFU 9PJPOWwt6KO0PkvUd8BNAqnTtPBbTl+0RznM3g/MP2K5i+MTN4G0SxnYMn+8YLHt 1KkLhz84RYG2wfL6WaVfTbb0vnp1u1btpk8sNoCM9m5jtLRMEsz35JJvIr4LfC9q 1MMvqnE3IRh8kDzy7cibbk7z8JbsdYv5ccc5wf3hRgy+cw/iGUM1f7DkGCu4Mfvt /CSGlHuBRjmnUw== -----END CERTIFICATE-----Generated at Wed May 13 06:14:22 2026 by rpki-client