$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: iPTYyf9Yc35jL3daLHN244iXAxJ55imagEAdUE0qZrg= Subject key identifier: A7:6F:01:D4:DD:A1:78:81:E7:47:1E:D0:0F:89:B0:39:AD:8D:FE:22 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019D265FF383AF319F32CE7D79926CE13886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0EF3 Signing time: Wed 25 Mar 2026 19:01:55 +0000 Manifest this update: Wed 25 Mar 2026 19:01:55 +0000 Manifest next update: Thu 26 Mar 2026 19:01:55 +0000 Files and hashes: 1: 1r2LQ6g1ZJE6hel-jMzhct5sTsY.roa (hash: e2t3PSk6fkCAVOGxFdKf4KKM2aYvRs4qINXC9/zr8dI=) 2: 27TAzNHTsDDgDvy1DWRFa9KtpOA.roa (hash: 03B6diiG8VWq3AqkcUsboVkHGhFPe3ztNp+fTz5k0PI=) 3: 3t0Qh1teY6OuWuD5eux2hDRDsok.roa (hash: AEOYyQYZger6I0vrFZcgHsYcO9T8vKWws/4ZrI8XgKc=) 4: Av4AEb3AIMSJrm9oqXNHYRa1IvY.roa (hash: b9S9sSQ039Hfar43NcPA4QYcrUjHPUS2YNtOtXh620E=) 5: CLwxXV-UTIW5CICgniFlt29cmYk.roa (hash: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM=) 6: CRNGBIgOAqgVM21KZhIoo9_853k.roa (hash: /efEvDvn7uCH8uEj3lOvf7OI0RjTqwidLcJ4RWs4Nvk=) 7: DMOM5WICfpERQnLeugI7Z84T3ts.roa (hash: DMtTzWxdL0vVHy+36/iL/8Id1aRd6wjD66FDUVPqRos=) 8: FWGJ0ZbSTgVIubiaw4dd5jNIaPA.roa (hash: 6HJCa4AjDeGNzbrzAtTTFZ47JbqJPDDrlYN1WdGf0N4=) 9: Foozh9139Ob3t6yalUoc2B8jzgg.roa (hash: R87wLYq01GyFUCIGs0k6z98fcx0Fx69moha+KyH758M=) 10: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: rKAJ4DgNqOKBnQEzJLJH3numND74qNEm00YKsAssPgE=) 11: PJ01KwZveYqSS_zaKxdrOHuL4vc.roa (hash: hPll/4aY3dQHo7d1zF9p0hKYMTIewxbPc9PnI4t0cDo=) 12: S2oSU95Bc5KHamK5aDSJ9nLc7Ps.roa (hash: jo9uW/EfFrv7avMQwhlQaDKV2tu9K+V96NtiixNAWjo=) 13: Sk7t1MTLy-mE6ILTeU920PY_M-g.roa (hash: OLnK8J+KbB8wVrBQPdBasMW3N+QmDq4FYwGFqKzTkEk=) 14: Uy72jUxgOXJIgs7T4DZejwWDKy4.roa (hash: e+N6lBT3rf/haiXAn+O11QG5l4fWSj8f+0jPE8bUCC4=) 15: V3YqRPKSUH-foFbHPxvbyjVKdpY.roa (hash: 3lxhIWrwHJ2pcw14sUC2CvPq9CC/durXP0Qi9EPkRk0=) 16: Z5lU04kxmRQjP5y9d8CXPEtSKUk.roa (hash: J3r9yVR3CZVWf8GJhGyyvWxNOu9sWxX92RskBJqe4m8=) 17: ZGpkpSAMeO1WMKT0kMgL1XrOOiI.roa (hash: +58mQxHwIY7KXTJKFotYUhr5PFSgp/yNeQPjJQppI/8=) 18: dYVn5RtizjVWkp5TudS-AMiFrc8.roa (hash: RqHx1OJqax6NYSIkM2V9SaaVgrhL2LtyeDlF3nLqbNA=) 19: eTCiSmuoWFijzZh_Acv2-p3I8fA.roa (hash: 5J8sJeCq5t5Oe5MEOITTIHqmAWC6PJAMCFo6Tx/jlFs=) 20: gz44IlwvmdngJ7MAvWa0_CxpoGM.roa (hash: D9bXyYSFewFXreZW5UnraVgjdDmrZtmTiT8UuzTqJgw=) 21: lJi-AmlIqZQ1gcNQIyUFYUOm0Pw.roa (hash: fbq+zZC6sfQ551koVyp5Nwfh5P9jJz4NuFz7lPvTb/0=) 22: mzjreCh1UKp6Tw01JHK_gKRYkGg.roa (hash: 8KHhl+lFh6yPZptHPK8f1cx7zO0RSCaz8HUst/vhTr0=) 23: pI-1z9oenJG3IzakWANawyG6_9s.roa (hash: wdFoSde/WnFTGchK6FtkX1aAoOPlIKGYqQ2hymhH8ng=) 24: qbNLGzUPzdee_zmhNJhp9VjVIkE.roa (hash: Y21NJ26lVTq8SP1t5+hJ94cDO+ixbMvSuoWbEJG1+mg=) 25: v0XRgn6n2BEuTWfvoYIwNLMGJKw.roa (hash: igBtoDyVBEbjI/mSyOvKahfq3gKP1NRUpt2A8pY2chQ=) 26: vU4V_ymVM6NFSJaPCkiiYYCa4fY.roa (hash: AigX6dvAIUofXTRi33gFfja+JrlpjhZ39UPL3gOu8n0=) 27: xcl8Mchdt2Btj0g0JgHt3h-tIy4.roa (hash: twnaq1xQPxN5fRVUCsGjR65lc9BgzkyPJDAj5uIrBv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 19:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:26:5f:f3:83:af:31:9f:32:ce:7d:79:92:6c:e1:38:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Mar 25 19:01:55 2026 GMT Not After : Mar 26 19:01:55 2026 GMT Subject: CN=a76f01d4dda17881e7471ed00f89b039ad8dfe22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:41:28:9f:6d:73:0a:1f:a2:1a:9a:27:ba:2c: 86:1b:a5:53:af:8f:08:ca:00:27:c9:ad:7b:8e:58: db:0f:72:08:4e:0c:48:44:25:10:cd:b5:f7:9d:6c: c7:14:9f:29:6b:7f:f9:bb:5c:38:19:78:78:47:14: 35:e6:9d:01:cf:63:a0:93:f1:0f:b1:b5:c5:2b:59: a7:5a:13:5e:0e:87:a4:01:6c:64:4a:18:b8:8a:c7: 30:15:a8:88:16:70:16:e2:b2:87:9b:d4:6a:47:8b: 9c:0a:19:22:fb:d2:49:f1:35:8b:9d:4d:9d:55:72: 0b:ab:eb:db:4e:c9:67:51:5a:ba:c7:2e:e1:ac:5c: 11:c7:be:5c:f1:3b:51:ae:42:96:33:82:2b:6c:93: a6:6a:cc:6b:c4:2f:a5:26:f6:18:27:33:23:f6:30: 14:83:d5:2b:a9:21:ec:65:ce:08:58:1a:50:59:64: f0:12:f3:70:bd:a7:e3:28:d6:8a:57:99:f3:96:23: c9:51:b1:0c:7c:95:c5:e5:ab:df:e5:7b:d2:26:f3: d6:1b:9a:d3:66:b8:41:d1:05:88:d7:fa:cd:9e:b5: 34:18:66:31:6e:b6:ce:b1:83:e8:9a:d9:d8:cd:dd: 02:d6:ed:6b:0d:67:fa:34:30:19:1b:27:02:6c:ed: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6F:01:D4:DD:A1:78:81:E7:47:1E:D0:0F:89:B0:39:AD:8D:FE:22 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e9:dc:5d:08:df:dc:b8:91:fd:b0:22:00:e6:4c:18:66:2b: 39:6b:78:0c:e0:ac:c2:cf:e1:47:33:cc:08:8d:b5:00:26:43: 17:cb:53:7a:31:24:c6:ce:39:dd:72:57:18:48:c1:0c:5d:4a: 8d:6a:3a:9a:ab:3f:aa:9f:13:d7:35:e2:e2:3f:d8:ad:03:e9: 13:55:6f:31:57:df:69:ec:ed:11:21:a4:e8:9d:fa:10:05:44: 26:68:e7:7c:65:d3:00:38:7d:8d:05:14:1b:dd:7f:40:55:dd: a7:03:63:e6:c7:d0:f5:2b:7f:f2:9e:b0:6c:56:79:11:34:55: 18:ca:7e:5d:1d:d7:14:17:5d:e6:13:7f:0e:bb:6f:1b:ad:e1: 7d:62:eb:c0:3a:5d:04:8f:0c:e6:d0:cf:ea:b1:56:fa:19:7f: 3a:2b:93:70:f6:d8:24:33:98:7e:a9:fb:8a:df:68:d1:5a:25: a3:85:04:cb:56:a9:09:52:10:68:2c:f8:ca:a3:89:f3:b5:e2: a6:a9:eb:e0:5f:ca:63:4d:a8:31:5c:d6:db:95:31:35:4c:74: 74:34:01:62:4b:55:25:7d:ce:ed:47:01:7f:f9:44:2e:9c:dd: ca:b0:f4:1f:2e:8e:f7:18:d9:24:8a:82:1a:cf:fa:69:0b:e2: 55:1d:02:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0mX/ODrzGfMs59eZJs4TiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMzI1MTkwMTU1WhcNMjYwMzI2MTkwMTU1WjAzMTEwLwYDVQQD EyhhNzZmMDFkNGRkYTE3ODgxZTc0NzFlZDAwZjg5YjAzOWFkOGRmZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUEon21zCh+iGponuiyGG6VTr48I ygAnya17jljbD3IITgxIRCUQzbX3nWzHFJ8pa3/5u1w4GXh4RxQ15p0Bz2Ogk/EP sbXFK1mnWhNeDoekAWxkShi4iscwFaiIFnAW4rKHm9RqR4ucChki+9JJ8TWLnU2d VXILq+vbTslnUVq6xy7hrFwRx75c8TtRrkKWM4IrbJOmasxrxC+lJvYYJzMj9jAU g9UrqSHsZc4IWBpQWWTwEvNwvafjKNaKV5nzliPJUbEMfJXF5avf5XvSJvPWG5rT ZrhB0QWI1/rNnrU0GGYxbrbOsYPomtnYzd0C1u1rDWf6NDAZGycCbO3H6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdvAdTdoXiB50ce0A+JsDmtjf4iMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASencXQjf 3LiR/bAiAOZMGGYrOWt4DOCsws/hRzPMCI21ACZDF8tTejEkxs453XJXGEjBDF1K jWo6mqs/qp8T1zXi4j/YrQPpE1VvMVffaeztESGk6J36EAVEJmjnfGXTADh9jQUU G91/QFXdpwNj5sfQ9St/8p6wbFZ5ETRVGMp+XR3XFBdd5hN/DrtvG63hfWLrwDpd BI8M5tDP6rFW+hl/OiuTcPbYJDOYfqn7it9o0Volo4UEy1apCVIQaCz4yqOJ87Xi pqnr4F/KY02oMVzW25UxNUx0dDQBYktVJX3O7UcBf/lELpzdyrD0Hy6O9xjZJIqC Gs/6aQviVR0CXg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:54:34 2026 by rpki-client