$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: GGnGl+lAd8FZ3WaL5dHfAIZJWqF9eADCxmV3F88o+3s= Subject key identifier: 7D:B6:DC:2F:35:73:71:59:76:60:D6:D3:FE:FC:C7:00:2F:E7:0C:9A Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 019F91A39E99FCEC3A9DDDEBA629464B0532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 19D7 Signing time: Fri 24 Jul 2026 01:00:46 +0000 Manifest this update: Fri 24 Jul 2026 01:00:46 +0000 Manifest next update: Sat 25 Jul 2026 01:00:46 +0000 Files and hashes: 1: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 2: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 3: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 4: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 5: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 6: foj3wxZ-vtEq-ZNGaHXGXJBPPZ4.roa (hash: YKATndLpT6xlZT8C0s4iCTzEsBCAnIUWa7dwMMehpso=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: qgcfueUwkS9ZTOV0lhwKQcZfRcirLe4EkBTmj0wJv8E=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a3:9e:99:fc:ec:3a:9d:dd:eb:a6:29:46:4b:05:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Jul 24 01:00:46 2026 GMT Not After : Jul 25 01:00:46 2026 GMT Subject: CN=7db6dc2f357371597660d6d3fefcc7002fe70c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:64:d3:9d:1a:79:0f:55:83:38:08:a2:33: 07:60:0a:14:ec:18:d8:dd:58:62:4e:90:70:5e:b6: 70:df:fe:5b:67:83:4d:88:c1:7c:00:78:9b:b4:08: 6b:5c:e5:b2:17:6b:46:c5:f5:3b:6b:61:23:99:08: 17:e2:52:0d:d0:a1:63:82:4b:45:58:0e:dc:7c:43: b4:a9:6b:06:a9:60:ab:ad:ec:30:5d:3e:1b:84:9a: 55:fb:13:0b:b6:ea:26:06:8b:34:ac:b5:a5:b7:f6: 9e:e9:29:46:de:d6:80:fd:c4:ce:ef:64:d7:e8:48: f6:bb:c8:01:ab:0c:83:34:80:13:af:e7:e3:7b:df: 5e:67:0b:f9:4d:fd:be:8b:3d:dd:01:08:70:a8:6d: ff:fa:b7:46:d3:2e:97:78:76:05:a0:52:9e:68:4b: ed:cb:96:6f:2c:03:0d:33:e9:b2:1c:95:66:62:db: 8c:b9:8e:03:88:08:46:6f:12:ec:05:26:e5:18:97: 82:66:4c:50:c3:2b:ad:4b:ca:62:60:a4:ba:4a:84: 4d:62:e1:20:3c:0e:7c:3f:ff:3b:32:ba:e2:cd:bd: cb:86:26:fd:3d:10:17:e0:9c:3f:5c:ff:0f:8a:86: 40:8b:33:86:48:ed:b7:d8:cd:54:a8:57:69:cf:be: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B6:DC:2F:35:73:71:59:76:60:D6:D3:FE:FC:C7:00:2F:E7:0C:9A X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:7b:09:db:92:1f:42:ef:b5:c8:41:95:c9:9d:08:d3:6e:9c: ab:a8:55:2b:60:55:ba:59:20:a5:9d:8c:bf:b8:27:7b:d1:dc: 90:63:b2:a7:77:e7:fb:d4:8b:2c:1f:61:0a:8a:e2:6f:c1:e3: ed:b1:30:3b:7d:0d:0a:38:c2:5f:ec:20:90:12:fe:3e:9d:aa: d5:3a:83:61:34:5c:88:27:40:8c:55:31:ed:c3:a7:fd:8b:37: 6f:d6:14:ae:5a:58:c4:bb:23:00:ba:77:a1:44:45:c6:35:90: df:87:e4:c6:b4:ef:38:5d:d7:f8:0c:b8:5a:c0:d8:86:9b:7d: 0d:bf:4a:1a:a6:fe:f9:ee:a8:ef:01:3e:60:cc:7c:be:e0:67: ef:ff:09:83:36:84:b1:16:08:2e:c2:b6:76:a7:72:8b:23:68: 8d:06:aa:61:48:28:39:ec:d0:12:e3:37:40:e2:ff:1b:3b:66: 20:51:56:b5:a6:b2:b7:c2:65:08:79:47:9f:d8:d2:a0:53:8c: 89:bf:2f:a9:90:19:6b:eb:40:34:fd:95:74:bc:73:40:78:9a: d4:df:c6:51:c2:24:3b:b2:bd:dc:fa:2a:ef:0b:57:5d:ce:4a: 22:8b:7e:62:49:26:59:3e:29:78:66:ff:c2:ce:80:31:d5:89: b3:2a:c9:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ro56Z/Ow6nd3rpilGSwUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwNzI0MDEwMDQ2WhcNMjYwNzI1MDEwMDQ2WjAzMTEwLwYDVQQD Eyg3ZGI2ZGMyZjM1NzM3MTU5NzY2MGQ2ZDNmZWZjYzcwMDJmZTcwYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHFk050aeQ9VgzgIojMHYAoU7BjY 3VhiTpBwXrZw3/5bZ4NNiMF8AHibtAhrXOWyF2tGxfU7a2EjmQgX4lIN0KFjgktF WA7cfEO0qWsGqWCrrewwXT4bhJpV+xMLtuomBos0rLWlt/ae6SlG3taA/cTO72TX 6Ej2u8gBqwyDNIATr+fje99eZwv5Tf2+iz3dAQhwqG3/+rdG0y6XeHYFoFKeaEvt y5ZvLAMNM+myHJVmYtuMuY4DiAhGbxLsBSblGJeCZkxQwyutS8piYKS6SoRNYuEg PA58P/87Mrrizb3Lhib9PRAX4Jw/XP8PioZAizOGSO232M1UqFdpz743rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH223C81c3FZdmDW0/78xwAv5wyaMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXsJ25If Qu+1yEGVyZ0I026cq6hVK2BVulkgpZ2Mv7gne9HckGOyp3fn+9SLLB9hCorib8Hj 7bEwO30NCjjCX+wgkBL+Pp2q1TqDYTRciCdAjFUx7cOn/Ys3b9YUrlpYxLsjALp3 oURFxjWQ34fkxrTvOF3X+Ay4WsDYhpt9Db9KGqb++e6o7wE+YMx8vuBn7/8JgzaE sRYILsK2dqdyiyNojQaqYUgoOezQEuM3QOL/GztmIFFWtaayt8JlCHlHn9jSoFOM ib8vqZAZa+tANP2VdLxzQHia1N/GUcIkO7K93Poq7wtXXc5KIot+YkkmWT4peGb/ ws6AMdWJsyrJHg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:57 2026 by rpki-client