$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: YQax+T3DguuQsz9tLcpMWUtRyrPmDx1lDrmx/Vor9jY= Subject key identifier: 6B:ED:9B:C1:28:AC:08:A4:DB:EA:23:41:3A:54:1F:D9:58:8C:AE:92 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019D284E8561393A1F854E347324D86D61E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0EF4 Signing time: Thu 26 Mar 2026 04:02:07 +0000 Manifest this update: Thu 26 Mar 2026 04:02:07 +0000 Manifest next update: Fri 27 Mar 2026 04:02:07 +0000 Files and hashes: 1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=) 2: 27TAzNHTsDDgDvy1DWRFa9KtpOA.roa (hash: 03B6diiG8VWq3AqkcUsboVkHGhFPe3ztNp+fTz5k0PI=) 3: 3t0Qh1teY6OuWuD5eux2hDRDsok.roa (hash: AEOYyQYZger6I0vrFZcgHsYcO9T8vKWws/4ZrI8XgKc=) 4: Av4AEb3AIMSJrm9oqXNHYRa1IvY.roa (hash: b9S9sSQ039Hfar43NcPA4QYcrUjHPUS2YNtOtXh620E=) 5: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=) 6: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=) 7: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=) 8: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=) 9: Foozh9139Ob3t6yalUoc2B8jzgg.roa (hash: R87wLYq01GyFUCIGs0k6z98fcx0Fx69moha+KyH758M=) 10: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: oPFlZTxoJxL8Elrp71ussfp0PUJrGCWzyejsdPlTNKg=) 11: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=) 12: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (hash: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=) 13: Sk7t1MTLy-mE6ILTeU920PY_M-g.roa (hash: OLnK8J+KbB8wVrBQPdBasMW3N+QmDq4FYwGFqKzTkEk=) 14: Uy72jUxgOXJIgs7T4DZejwWDKy4.roa (hash: e+N6lBT3rf/haiXAn+O11QG5l4fWSj8f+0jPE8bUCC4=) 15: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=) 16: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=) 17: ZGpkpSAMeO1WMKT0kMgL1XrOOiI.roa (hash: +58mQxHwIY7KXTJKFotYUhr5PFSgp/yNeQPjJQppI/8=) 18: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=) 19: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=) 20: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=) 21: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=) 22: mzjreCh1UKp6Tw01JHK_gKRYkGg.roa (hash: 8KHhl+lFh6yPZptHPK8f1cx7zO0RSCaz8HUst/vhTr0=) 23: pI-1z9oenJG3IzakWANawyG6_9s.roa (hash: wdFoSde/WnFTGchK6FtkX1aAoOPlIKGYqQ2hymhH8ng=) 24: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=) 25: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=) 26: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=) 27: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:28:4e:85:61:39:3a:1f:85:4e:34:73:24:d8:6d:61:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Mar 26 04:02:07 2026 GMT Not After : Mar 27 04:02:07 2026 GMT Subject: CN=6bed9bc128ac08a4dbea23413a541fd9588cae92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:cf:48:51:00:28:13:5d:a2:a4:ac:f7:7f: f0:1b:f4:1e:91:36:4b:ee:c1:f8:eb:8e:a9:c2:53: e3:d8:d5:8b:e0:95:83:f4:2f:be:96:c4:8f:be:84: 27:80:4b:35:62:22:7a:86:60:25:8a:1f:0e:a3:e1: d0:66:80:42:18:11:3c:93:56:4a:80:ca:ae:fd:06: ad:8e:d8:4d:d2:ce:29:e1:42:3a:62:d1:da:e7:37: 68:c1:12:fb:0b:06:1b:1f:d8:16:bb:50:73:8b:c8: ab:4c:cd:d9:5b:25:b6:3e:2b:40:de:8a:1a:32:0b: 7a:ee:71:a1:1e:88:ff:78:53:a1:a0:57:6d:d8:87: 6f:f2:92:f2:7a:91:da:38:6a:71:c0:3c:51:87:ae: 9a:2b:81:d7:6e:6a:d2:1c:60:cd:d8:46:86:1c:d7: db:8a:20:2e:69:04:35:5f:d2:2b:f8:5f:7b:0d:4e: cf:40:b8:f7:f4:6e:78:73:45:90:bc:6c:23:f8:84: 7e:7c:fd:78:95:61:ad:f3:52:fc:6a:2d:1c:a1:92: 8d:7d:da:43:f4:65:24:1a:3b:7b:de:2d:72:9b:10: 6f:f7:1b:5a:ec:45:66:e2:08:5f:b7:8b:4e:05:27: 60:88:3b:98:d7:71:17:03:c2:6b:fa:74:31:7c:3c: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:ED:9B:C1:28:AC:08:A4:DB:EA:23:41:3A:54:1F:D9:58:8C:AE:92 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:98:d1:62:0e:57:d2:8d:b9:c8:c4:5c:aa:b4:66:0d:e2:ed: 1f:62:ab:e8:24:32:40:f9:1c:64:8d:a5:91:42:e4:d8:6b:bc: 57:c7:ad:33:21:0e:70:05:5f:26:d1:61:79:a2:20:76:70:a7: fe:c0:1f:d7:e3:f1:ce:f7:1b:28:6c:ff:2b:61:99:f0:92:69: 8c:cb:de:c1:7e:af:95:64:6f:c2:14:17:1c:25:f4:97:fa:03: 76:d1:d4:10:e9:bd:61:c0:ae:ed:d0:ca:7c:b1:9d:1b:38:a5: 55:98:62:d3:e4:12:74:6d:e7:46:f1:56:d9:ed:63:4c:74:f4: 3d:af:52:7e:4f:68:2c:b9:c7:5b:6a:b4:76:8c:26:4b:ef:bb: e3:15:28:81:8e:4c:22:f6:79:9e:d9:e4:ca:b0:56:7a:ca:ef: a9:dc:bb:0b:a7:fc:cd:0c:4b:5e:a1:bc:49:f4:ab:b1:72:30: 41:08:b4:ce:74:9f:2c:31:0b:ab:76:4d:20:94:d5:56:0c:97: dc:ba:ed:ca:9d:ad:28:b0:3c:d9:28:70:39:be:b5:ce:ac:19: f7:e0:27:a1:ef:9a:7c:73:c8:90:71:68:d3:5c:fe:0f:53:2d: 1a:93:f1:be:5d:8d:79:e8:cb:51:62:98:34:83:3e:d7:08:aa: ea:70:e4:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0oToVhOTofhU40cyTYbWHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMzI2MDQwMjA3WhcNMjYwMzI3MDQwMjA3WjAzMTEwLwYDVQQD Eyg2YmVkOWJjMTI4YWMwOGE0ZGJlYTIzNDEzYTU0MWZkOTU4OGNhZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19vPSFEAKBNdoqSs93/wG/QekTZL 7sH4646pwlPj2NWL4JWD9C++lsSPvoQngEs1YiJ6hmAlih8Oo+HQZoBCGBE8k1ZK gMqu/QatjthN0s4p4UI6YtHa5zdowRL7CwYbH9gWu1Bzi8irTM3ZWyW2PitA3ooa Mgt67nGhHoj/eFOhoFdt2Idv8pLyepHaOGpxwDxRh66aK4HXbmrSHGDN2EaGHNfb iiAuaQQ1X9Ir+F97DU7PQLj39G54c0WQvGwj+IR+fP14lWGt81L8ai0coZKNfdpD 9GUkGjt73i1ymxBv9xta7EVm4ghft4tOBSdgiDuY13EXA8Jr+nQxfDwBJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvtm8EorAik2+ojQTpUH9lYjK6SMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJjRYg5X 0o25yMRcqrRmDeLtH2Kr6CQyQPkcZI2lkULk2Gu8V8etMyEOcAVfJtFheaIgdnCn /sAf1+PxzvcbKGz/K2GZ8JJpjMvewX6vlWRvwhQXHCX0l/oDdtHUEOm9YcCu7dDK fLGdGzilVZhi0+QSdG3nRvFW2e1jTHT0Pa9Sfk9oLLnHW2q0dowmS++74xUogY5M IvZ5ntnkyrBWesrvqdy7C6f8zQxLXqG8SfSrsXIwQQi0znSfLDELq3ZNIJTVVgyX 3Lrtyp2tKLA82ShwOb61zqwZ9+Anoe+afHPIkHFo01z+D1MtGpPxvl2NeejLUWKY NIM+1wiq6nDk9A== -----END CERTIFICATE-----Generated at Thu Mar 26 07:45:08 2026 by rpki-client