$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: i0PNyZnTLiv1/sy3j03s6eStwgHcdUSRF1H9UB4n/ro= Subject key identifier: 0D:B1:B5:09:AC:5A:79:BF:C4:71:10:A4:6B:E4:FE:0F:00:B1:66:4E Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019F8FB53F06D9B27B8DB4A5E3BF7F07F3D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 1049 Signing time: Thu 23 Jul 2026 16:00:47 +0000 Manifest this update: Thu 23 Jul 2026 16:00:47 +0000 Manifest next update: Fri 24 Jul 2026 16:00:47 +0000 Files and hashes: 1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=) 2: 4BgA-ABWSArgHx-ygbshx6JYrTY.roa (hash: bvv8kgY0ZVnm7qvnIwLD4R0xE7EezfYihSBw0uGEums=) 3: 5fcx8obVEyoTorLpIgirYEHl1Q0.roa (hash: m4mpP2IxkbLqcnmIfpJCCUpjWCW4dvvjytcLKpNKEZ4=) 4: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=) 5: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=) 6: D9IIvAjUBeonrUuAtA9-LP_kfxg.roa (hash: 2T3Qvn8J8uK4lzJw95imN9pofbDQi2ngOHPWAgyI0Cg=) 7: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=) 8: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=) 9: Hhx08W6yxhRbHfCLKYdHm13ozS0.roa (hash: jwpzK3qtdotyMub/ILdIHzVfvJLpMrtxw3Hz/Tq6IYI=) 10: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: 1w/2bE4Xdd7lQi7Uh+Lku1SU63d0ljFLBoe0YI9pkFI=) 11: JDgMbtzm9TbQ4eWyo_rVJwWaWOY.roa (hash: v4xwFMtuHO8ayfqB5VQBenyDwKgKi5kZP3vMs+HZh4g=) 12: KluRcqzajt5NKKtsXPOxDda7akI.roa (hash: zGTQ13vN7lvbq3YvrqjjFmI7sRLKlEZTIN2XpYjnbW4=) 13: MHuQ8PiuvraiDj3bDgh2i1ceH7w.roa (hash: pPpAjQ9/faa4QoYKDH51+jkG77bH512fpifEsnfi9LY=) 14: NcTDxTnFozsxKavcnlSTx2-OZis.roa (hash: QbtIW3hggcu4VmQX0Ylc1F26SWBEg6eUZGBBTmAdKG4=) 15: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=) 16: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (hash: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=) 17: V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa (hash: 2mcsTNBbXliMo6Xfl43UwD6c9ZLoqqEr0U1Zz/8r+ug=) 18: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=) 19: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=) 20: acgv97YNnbbDPyBz44KpDWdpOkQ.roa (hash: KyAE8oZNrznG/SETxn7e5ARXLp9M42t4EPdCRxa4IjY=) 21: c3qNueiGWk4Qn-ykN_QlCOGM37o.roa (hash: wnA6SEQc4U9MNJjFtGtJmJio/YAYcn579hZtE+0vJ/k=) 22: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=) 23: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=) 24: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=) 25: ioRtNTdinpYrcVf_jzCS5BV23i0.roa (hash: Ka+iUbIs4jDL+lzQs7AOTwqacQczetgn601hHQNpQS0=) 26: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=) 27: mzjreCh1UKp6Tw01JHK_gKRYkGg.roa (hash: 8KHhl+lFh6yPZptHPK8f1cx7zO0RSCaz8HUst/vhTr0=) 28: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=) 29: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=) 30: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=) 31: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b5:3f:06:d9:b2:7b:8d:b4:a5:e3:bf:7f:07:f3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jul 23 16:00:47 2026 GMT Not After : Jul 24 16:00:47 2026 GMT Subject: CN=0db1b509ac5a79bfc47110a46be4fe0f00b1664e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:82:e0:54:c5:12:54:84:6d:02:68:d0:15: 0e:59:15:36:ee:a1:3f:80:df:03:d5:44:75:15:17: a7:a0:35:95:56:70:56:5f:fb:60:f0:d7:bc:97:42: 6a:6c:42:9c:42:6e:05:b3:27:07:4c:df:4e:6d:42: f0:ef:9b:31:40:21:58:f5:61:07:ca:5d:43:fe:29: f9:74:eb:b7:d5:61:09:74:4e:69:9d:6d:7e:55:1e: f7:a3:9d:71:80:27:60:05:d3:44:6d:98:49:14:0e: 29:2c:2b:5b:ce:48:79:b4:b5:98:ce:49:15:ca:7a: 03:03:e9:86:fc:ff:ff:d7:f1:bf:60:78:d6:64:31: 7d:b7:4d:af:ae:b7:43:35:67:ed:f4:eb:74:a8:c5: 23:ac:76:dc:44:6b:cb:6b:48:0e:87:5c:4d:42:81: e2:31:fb:7f:21:ea:c5:1b:b9:f2:b8:39:46:ba:d1: a3:18:98:40:10:34:aa:20:8c:cb:9d:74:54:08:6f: 3f:d2:d6:c9:41:f8:bd:a7:dc:66:4e:27:40:ef:fc: 69:25:e6:7e:6c:2e:25:28:be:60:51:40:86:bb:4e: b3:35:1a:70:6d:0d:06:c2:46:86:8f:0c:de:6f:ca: ad:d0:bf:3a:48:34:8a:5c:7e:5c:0d:78:ac:bf:22: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B1:B5:09:AC:5A:79:BF:C4:71:10:A4:6B:E4:FE:0F:00:B1:66:4E X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:41:63:e4:11:c2:1b:5e:a3:4d:25:c7:81:1a:c3:d1:a5:0e: 09:90:5c:07:aa:8d:49:11:ee:a9:9a:7a:5f:42:f4:b4:39:af: 18:ea:d9:ea:32:ad:29:0f:8a:ff:01:89:68:b7:9f:5e:d7:42: 2f:24:38:ef:6c:94:37:12:2e:19:f2:69:f1:62:91:61:cd:db: 6c:90:4b:fc:89:a3:1a:75:6d:a5:77:a1:86:ed:18:1f:32:27: 69:48:88:10:c9:8e:f7:b2:09:5f:34:73:13:5c:be:0c:81:9d: 9f:92:b8:bb:3e:a4:8f:0c:65:b1:30:ea:4e:18:4a:75:3a:e3: b3:0c:78:af:ea:bf:4e:98:a5:7e:61:d4:27:32:79:13:ff:7d: 19:a6:e0:e4:44:28:67:f0:96:c4:66:57:7e:48:fe:b0:af:54: 78:1c:7f:69:95:bd:e6:41:0c:9a:12:02:33:c6:d7:0b:72:0c: 04:25:86:86:82:d5:b5:7b:52:4a:f5:85:3a:c4:1c:bc:24:a9: 31:6f:84:18:d9:8a:37:a2:2a:98:c6:fb:5b:09:ee:09:69:12: 81:b8:55:09:34:0e:8c:eb:96:31:0e:a8:e8:70:74:0f:5c:2d: f9:bb:43:da:c7:1f:f8:fd:a5:76:a7:e4:fe:61:52:24:5b:b1: bc:95:5e:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PtT8G2bJ7jbSl479/B/PTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwNzIzMTYwMDQ3WhcNMjYwNzI0MTYwMDQ3WjAzMTEwLwYDVQQD EygwZGIxYjUwOWFjNWE3OWJmYzQ3MTEwYTQ2YmU0ZmUwZjAwYjE2NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBiC4FTFElSEbQJo0BUOWRU27qE/ gN8D1UR1FRenoDWVVnBWX/tg8Ne8l0JqbEKcQm4FsycHTN9ObULw75sxQCFY9WEH yl1D/in5dOu31WEJdE5pnW1+VR73o51xgCdgBdNEbZhJFA4pLCtbzkh5tLWYzkkV ynoDA+mG/P//1/G/YHjWZDF9t02vrrdDNWft9Ot0qMUjrHbcRGvLa0gOh1xNQoHi Mft/IerFG7nyuDlGutGjGJhAEDSqIIzLnXRUCG8/0tbJQfi9p9xmTidA7/xpJeZ+ bC4lKL5gUUCGu06zNRpwbQ0GwkaGjwzeb8qt0L86SDSKXH5cDXisvyImOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2xtQmsWnm/xHEQpGvk/g8AsWZOMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekFj5BHC G16jTSXHgRrD0aUOCZBcB6qNSRHuqZp6X0L0tDmvGOrZ6jKtKQ+K/wGJaLefXtdC LyQ472yUNxIuGfJp8WKRYc3bbJBL/ImjGnVtpXehhu0YHzInaUiIEMmO97IJXzRz E1y+DIGdn5K4uz6kjwxlsTDqThhKdTrjswx4r+q/TpilfmHUJzJ5E/99Gabg5EQo Z/CWxGZXfkj+sK9UeBx/aZW95kEMmhICM8bXC3IMBCWGhoLVtXtSSvWFOsQcvCSp MW+EGNmKN6IqmMb7WwnuCWkSgbhVCTQOjOuWMQ6o6HB0D1wt+btD2scf+P2ldqfk /mFSJFuxvJVezA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:16:52 2026 by rpki-client