$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: m43p8BKYJcSVhBg7BBpIRJZwTqBqK9LqM68NeLmI/mk= Subject key identifier: 29:2A:D7:64:7C:05:16:EB:0A:8D:CA:1B:58:B4:48:B0:5C:F6:BA:80 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019D2704851A805D56C525CF6B502F58D6B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 0E98 Signing time: Wed 25 Mar 2026 22:01:40 +0000 Manifest this update: Wed 25 Mar 2026 22:01:40 +0000 Manifest next update: Thu 26 Mar 2026 22:01:40 +0000 Files and hashes: 1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=) 2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=) 3: 59xHeQcfN9MrHnGV12N9v9XcThY.roa (hash: Elta/uOtbtWIHwKEBTZUqwVybQem3iwKx6GhTo1J6rY=) 4: 6PnH-I0v0o7AGL6ifiGT8peyJ0k.roa (hash: tFSqOOC1Lg0SA1A3rDQWgBL5K2qm5q+QWpyCruQ1mJU=) 5: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=) 6: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=) 7: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=) 8: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=) 9: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=) 10: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=) 11: Le82C6pXnzW7IxXdGJLWL7-aOrU.roa (hash: QElIq8TT7E1GaFXwqMBgfp+5OsT2hRS1zDV8eeFQVmg=) 12: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=) 13: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=) 14: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=) 15: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=) 16: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=) 17: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=) 18: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=) 19: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=) 20: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=) 21: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=) 22: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=) 23: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=) 24: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=) 25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: Ca4I1vPzuqEJkruTw4/tlTvEDU6I19wt6Mfenlw2TEA=) 26: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=) 27: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=) 28: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=) 29: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=) 30: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=) 31: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=) 32: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=) 33: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=) 34: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=) 35: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=) 36: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=) 37: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 15:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:27:04:85:1a:80:5d:56:c5:25:cf:6b:50:2f:58:d6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Mar 25 22:01:40 2026 GMT Not After : Mar 26 22:01:40 2026 GMT Subject: CN=292ad7647c0516eb0a8dca1b58b448b05cf6ba80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6d:ba:37:7a:c4:ce:27:26:26:df:da:37:8f: da:ed:61:cf:66:4a:d6:00:c8:c8:95:48:2b:88:14: 17:46:5a:fc:47:43:3e:27:ff:c7:0c:9b:9b:4b:6e: 65:59:13:2b:9b:c1:ce:50:5a:16:4e:72:9a:18:ca: 42:a4:11:68:57:bd:0b:17:cb:98:ae:74:12:03:58: 0d:71:e5:e7:94:5f:d4:6c:42:90:f5:21:01:d9:58: aa:0e:35:86:d8:1e:e2:63:51:4c:8f:ab:b4:95:68: d1:31:93:72:66:39:f0:b3:12:d0:a1:05:cb:5d:75: 90:b2:52:b4:7c:6c:27:b4:2c:b3:a9:9d:30:f4:e1: 45:e5:9e:42:a0:ff:b0:69:92:d5:22:ee:2c:cd:e7: ce:4e:d4:d4:9c:ce:cc:ba:4d:c5:a5:7b:f1:8b:0b: e4:9d:88:fe:af:54:21:11:c4:db:70:0e:57:ea:90: d9:41:54:99:aa:ad:d6:dd:02:87:03:8e:94:26:02: 01:2c:e5:c7:02:32:01:cb:31:3d:a0:d8:d6:dc:d1: 35:4b:12:52:fe:ed:df:28:3d:3c:f2:f5:90:2b:8c: fa:1a:1a:bb:0e:bc:e0:53:45:0e:7f:a4:70:c4:81: 82:38:6f:86:92:a3:74:a7:c3:f3:e1:c4:64:a4:a6: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2A:D7:64:7C:05:16:EB:0A:8D:CA:1B:58:B4:48:B0:5C:F6:BA:80 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4f:68:00:e2:5b:32:ac:9f:3d:83:53:08:92:77:97:ed:62: 1c:3b:d0:44:c4:15:a4:ff:86:56:67:2b:fb:29:e5:09:46:54: 46:77:3d:24:60:92:dd:9a:1b:e2:5e:c5:25:d2:b8:e8:c1:f4: c2:5e:78:f8:61:a9:cd:de:96:be:ee:ac:bb:61:4b:33:be:02: 77:a1:3a:c0:4e:b9:67:4c:a3:59:4f:aa:4a:01:d9:42:6b:6c: aa:bf:37:18:3e:34:96:76:e7:71:d0:52:6e:e7:4f:cf:53:70: 15:78:9b:4c:8b:96:0c:00:13:c2:35:a3:79:bd:9d:d5:dd:02: 31:f0:9a:ab:d3:7a:34:30:2d:d2:05:7f:77:0e:26:cf:d3:df: 32:4d:63:6b:51:80:5a:89:c6:4a:94:7b:98:0a:30:1a:06:e1: 59:46:04:9c:19:22:ce:80:ce:d5:ab:d0:03:98:31:7c:21:9e: d0:53:e1:08:df:16:a0:9f:91:61:8e:07:c5:ff:9a:92:eb:07: 60:8d:2b:f2:48:e6:2c:12:e0:23:41:ea:7a:cf:7e:4c:00:ec: 53:50:9a:2b:ea:55:5d:3e:59:c0:2e:d7:05:11:e9:55:3f:47: 16:c8:dd:c3:85:93:a7:8e:89:f4:9b:ef:d1:c4:dc:cf:90:64: 2d:04:f3:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0nBIUagF1WxSXPa1AvWNa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMzI1MjIwMTQwWhcNMjYwMzI2MjIwMTQwWjAzMTEwLwYDVQQD EygyOTJhZDc2NDdjMDUxNmViMGE4ZGNhMWI1OGI0NDhiMDVjZjZiYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5226N3rEzicmJt/aN4/a7WHPZkrW AMjIlUgriBQXRlr8R0M+J//HDJubS25lWRMrm8HOUFoWTnKaGMpCpBFoV70LF8uY rnQSA1gNceXnlF/UbEKQ9SEB2ViqDjWG2B7iY1FMj6u0lWjRMZNyZjnwsxLQoQXL XXWQslK0fGwntCyzqZ0w9OFF5Z5CoP+waZLVIu4szefOTtTUnM7Muk3FpXvxiwvk nYj+r1QhEcTbcA5X6pDZQVSZqq3W3QKHA46UJgIBLOXHAjIByzE9oNjW3NE1SxJS /u3fKD088vWQK4z6Ghq7DrzgU0UOf6RwxIGCOG+GkqN0p8Pz4cRkpKa6kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkq12R8BRbrCo3KG1i0SLBc9rqAMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE9oAOJb MqyfPYNTCJJ3l+1iHDvQRMQVpP+GVmcr+ynlCUZURnc9JGCS3Zob4l7FJdK46MH0 wl54+GGpzd6Wvu6su2FLM74Cd6E6wE65Z0yjWU+qSgHZQmtsqr83GD40lnbncdBS budPz1NwFXibTIuWDAATwjWjeb2d1d0CMfCaq9N6NDAt0gV/dw4mz9PfMk1ja1GA WonGSpR7mAowGgbhWUYEnBkizoDO1avQA5gxfCGe0FPhCN8WoJ+RYY4Hxf+akusH YI0r8kjmLBLgI0Hqes9+TADsU1CaK+pVXT5ZwC7XBRHpVT9HFsjdw4WTp46J9Jvv 0cTcz5BkLQTztA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:37:41 2026 by rpki-client