$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: 8+gdG9MVxU3njFoVj4ZumYYqz4oVPOr8dTur89LvEN8= Subject key identifier: 81:82:16:B2:FA:28:41:6F:DB:40:9E:B8:BB:47:F1:A4:C5:A8:E0:8C Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019E1CB4727C642A44F52975A35D4A6A5DDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0F7C Signing time: Tue 12 May 2026 15:00:48 +0000 Manifest this update: Tue 12 May 2026 15:00:48 +0000 Manifest next update: Wed 13 May 2026 15:00:48 +0000 Files and hashes: 1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=) 2: 3t0Qh1teY6OuWuD5eux2hDRDsok.roa (hash: AEOYyQYZger6I0vrFZcgHsYcO9T8vKWws/4ZrI8XgKc=) 3: 4BgA-ABWSArgHx-ygbshx6JYrTY.roa (hash: bvv8kgY0ZVnm7qvnIwLD4R0xE7EezfYihSBw0uGEums=) 4: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=) 5: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=) 6: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=) 7: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=) 8: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: O+xuNnOs+sJirE1XbaWiXFut+613sGxIM4INZvaJp2g=) 9: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=) 10: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (hash: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=) 11: Uy72jUxgOXJIgs7T4DZejwWDKy4.roa (hash: e+N6lBT3rf/haiXAn+O11QG5l4fWSj8f+0jPE8bUCC4=) 12: V-mPeNWyVIjQ1OUK2T2MFHuebKM.roa (hash: 2mcsTNBbXliMo6Xfl43UwD6c9ZLoqqEr0U1Zz/8r+ug=) 13: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=) 14: WMBLi809xVfbL9YQ-h4zFXr2k34.roa (hash: oDAficysVd+O+UrSq40v3FNQ4xTKVCMHE3CRxrYlHvA=) 15: WXAQVkTWgyoj3KPpi2VgFwniHvk.roa (hash: c0ZPszhFyOnuGmI8GLQRJm9JY3LUspp9dFqvFQbx9Dk=) 16: YirzWdKN_U3AavaC2kp3c2rUSss.roa (hash: TR/7M0fKT6FtF8D4wstKMvagF/Hr5cuvjm/5nxydRy8=) 17: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=) 18: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=) 19: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=) 20: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=) 21: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=) 22: mzjreCh1UKp6Tw01JHK_gKRYkGg.roa (hash: 8KHhl+lFh6yPZptHPK8f1cx7zO0RSCaz8HUst/vhTr0=) 23: nPxc_DR7riW4djuXQF4Kvchcvoc.roa (hash: BQAf/hujyNoVYOQ6yOoFjoADqe7tlFH5rZ/am35Np1s=) 24: pI-1z9oenJG3IzakWANawyG6_9s.roa (hash: wdFoSde/WnFTGchK6FtkX1aAoOPlIKGYqQ2hymhH8ng=) 25: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=) 26: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=) 27: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=) 28: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 14:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:b4:72:7c:64:2a:44:f5:29:75:a3:5d:4a:6a:5d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: May 12 15:00:48 2026 GMT Not After : May 13 15:00:48 2026 GMT Subject: CN=818216b2fa28416fdb409eb8bb47f1a4c5a8e08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:1b:f4:5f:be:8f:72:50:35:d0:39:06:ce: 46:1c:95:8a:17:f9:ba:71:a4:50:21:e1:8c:84:e4: 36:7a:65:0c:7e:d7:23:7c:aa:f2:97:ed:d0:ea:52: 3f:3b:01:76:6c:53:e3:4a:11:85:41:5c:bd:7f:a2: 6b:d8:b8:f7:a8:6f:ca:d4:74:92:07:d4:04:c4:31: 0b:25:59:6d:13:59:cd:4d:e3:c9:fe:eb:cf:59:08: f4:30:e8:27:f7:1d:e0:33:5b:db:87:8d:54:f8:bf: 00:99:13:2d:c1:02:d8:4d:72:3d:8d:fc:72:bc:a0: ad:63:d1:71:31:50:c8:45:53:e4:c6:c0:87:5a:7f: 0c:80:c8:2c:c7:90:29:f5:91:dc:02:bc:c7:44:94: 5e:4e:7e:59:c7:2b:04:c1:81:c9:c3:4c:c6:3a:57: 2f:d8:aa:2b:44:2e:22:4e:c9:85:43:3b:ea:aa:d0: 17:1e:67:d3:65:5f:70:2e:24:43:32:ab:92:72:88: c6:4c:b7:6b:71:e0:42:44:bc:14:75:2a:17:0c:92: d0:ae:51:88:b5:ff:e0:3e:6f:1a:da:48:f2:10:ac: ef:80:b1:50:9a:e6:d8:64:f5:a3:d0:95:b2:57:69: 9d:76:e2:99:00:eb:ca:67:7a:b9:96:ed:0d:a4:be: 03:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:82:16:B2:FA:28:41:6F:DB:40:9E:B8:BB:47:F1:A4:C5:A8:E0:8C X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:bc:3f:97:02:0d:ff:32:b9:0e:42:bf:c1:8b:77:15:68:7c: f1:ba:45:f0:68:f2:b9:9b:17:15:a7:13:f6:37:ea:d0:4a:8f: 91:72:a8:0c:12:5c:1b:c9:23:3a:93:cd:16:45:0e:5a:1e:9a: 1f:f3:1c:77:e3:06:c6:21:6e:6c:d0:3a:c0:3d:e3:1a:ee:a6: d9:89:89:00:ab:13:68:44:c8:c8:60:75:36:ef:de:c8:7b:e5: d5:3f:bf:ed:39:22:08:6e:ad:45:46:05:ef:af:54:e9:38:31: db:0a:0d:34:da:6f:71:21:48:b1:35:d5:39:2c:a4:04:02:f4: 0a:ee:65:97:2a:1b:3f:36:bb:13:51:e4:61:26:ba:fc:12:8a: f4:ef:ad:b5:a4:ed:1c:0d:78:0d:e9:f2:1c:35:f3:5c:37:55: f2:83:63:7f:35:77:89:50:76:d3:71:f9:39:e5:1a:e9:ca:1d: e4:ea:63:e0:c6:94:ca:30:0f:89:82:6c:34:6e:31:64:59:e9: f4:d3:89:54:d7:c4:d2:59:76:e2:b0:55:e2:22:7d:f3:23:8c: da:6f:04:ed:51:0c:05:89:0f:e3:cc:cf:be:7a:b2:5a:d0:9c: d6:9d:69:b3:88:01:98:b6:97:d3:d2:7c:df:a8:ed:d8:bf:59: 7e:6d:ca:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ctHJ8ZCpE9Sl1o11Kal3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwNTEyMTUwMDQ4WhcNMjYwNTEzMTUwMDQ4WjAzMTEwLwYDVQQD Eyg4MTgyMTZiMmZhMjg0MTZmZGI0MDllYjhiYjQ3ZjFhNGM1YThlMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPcb9F++j3JQNdA5Bs5GHJWKF/m6 caRQIeGMhOQ2emUMftcjfKryl+3Q6lI/OwF2bFPjShGFQVy9f6Jr2Lj3qG/K1HSS B9QExDELJVltE1nNTePJ/uvPWQj0MOgn9x3gM1vbh41U+L8AmRMtwQLYTXI9jfxy vKCtY9FxMVDIRVPkxsCHWn8MgMgsx5Ap9ZHcArzHRJReTn5ZxysEwYHJw0zGOlcv 2KorRC4iTsmFQzvqqtAXHmfTZV9wLiRDMquScojGTLdrceBCRLwUdSoXDJLQrlGI tf/gPm8a2kjyEKzvgLFQmubYZPWj0JWyV2mdduKZAOvKZ3q5lu0NpL4DYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGCFrL6KEFv20CeuLtH8aTFqOCMMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorw/lwIN /zK5DkK/wYt3FWh88bpF8GjyuZsXFacT9jfq0EqPkXKoDBJcG8kjOpPNFkUOWh6a H/Mcd+MGxiFubNA6wD3jGu6m2YmJAKsTaETIyGB1Nu/eyHvl1T+/7TkiCG6tRUYF 769U6Tgx2woNNNpvcSFIsTXVOSykBAL0Cu5llyobPza7E1HkYSa6/BKK9O+ttaTt HA14DenyHDXzXDdV8oNjfzV3iVB203H5OeUa6cod5Opj4MaUyjAPiYJsNG4xZFnp 9NOJVNfE0ll24rBV4iJ98yOM2m8E7VEMBYkP48zPvnqyWtCc1p1ps4gBmLaX09J8 36jt2L9Zfm3Khw== -----END CERTIFICATE-----Generated at Tue May 12 22:28:12 2026 by rpki-client