$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: b0ThySfk6a+VHUV/RM5o/M8UTWGjidfyXg9Ccorx2pg= Subject key identifier: ED:EA:D8:D5:CF:0E:5D:90:69:D4:D5:B2:17:97:FD:46:BC:A8:90:66 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 01A155F7CCE229E3D67A81ED47942EEBE1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 1877 Signing time: Mon 19 Oct 2026 21:01:05 +0000 Manifest this update: Mon 19 Oct 2026 21:01:05 +0000 Manifest next update: Tue 20 Oct 2026 21:01:05 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: Iz-RnZB4CPBnQJYhfp0OAhLrcMM.roa (hash: FaucEzJxlOy2Yut4nsgevP064GyqmURdESpVYmPVMZw=) 7: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 8: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 9: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 10: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 11: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 12: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: vblaB/ssMtjCYedvtBnN+WJnRhPwipFg4618N1z+Iz8=) 13: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 14: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:55:f7:cc:e2:29:e3:d6:7a:81:ed:47:94:2e:eb:e1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Oct 19 21:01:05 2026 GMT Not After : Oct 20 21:01:05 2026 GMT Subject: CN=edead8d5cf0e5d9069d4d5b21797fd46bca89066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:31:53:e8:c2:9e:51:8d:c4:5c:9f:4f:f9: 74:f3:02:48:98:92:b4:38:db:8a:81:f5:ed:31:e5: 72:90:e4:e2:9a:5e:77:32:aa:30:8c:00:dd:5c:bd: 17:7e:77:15:12:64:29:82:f0:17:d1:85:02:20:2a: 9d:92:35:99:bc:c0:6f:c4:b1:77:80:88:32:40:93: d6:c3:e2:57:42:c1:50:f1:34:07:25:8c:40:3a:e5: 23:cb:ef:6d:dd:b3:57:48:8f:2c:50:40:74:58:27: d7:19:e0:e6:1b:35:00:a3:67:74:20:c8:fa:50:56: 28:8b:29:73:e7:81:3d:28:e4:be:d1:10:a0:d8:42: 73:71:93:b9:31:e6:2e:bf:4a:96:47:7e:4a:d0:a3: cf:6f:4a:52:eb:3d:25:8b:33:e7:59:74:05:2c:26: 20:1f:03:c4:6a:15:80:5b:ab:4f:99:f3:07:25:60: aa:0d:e6:89:45:f0:54:36:de:26:06:53:79:e0:21: 37:17:1e:af:aa:dd:69:77:cb:78:90:c6:35:7c:35: 27:1a:6e:a0:bb:1e:3c:b5:9d:4f:b5:8b:a6:97:89: 54:60:30:12:df:3e:b8:35:ee:2d:ef:05:8f:1e:72: f8:9b:f8:59:06:c0:c0:3a:00:ca:eb:88:a8:4a:2b: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EA:D8:D5:CF:0E:5D:90:69:D4:D5:B2:17:97:FD:46:BC:A8:90:66 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:38:38:ae:a2:17:33:f4:c6:d1:7b:9f:66:06:1a:13:6a:60: 52:38:37:bb:dd:5a:94:ce:91:e2:5c:5d:a5:9b:98:7d:77:26: e2:64:33:1a:0b:b8:7e:70:4c:50:a1:32:f0:66:85:d5:cf:f0: aa:eb:d9:eb:81:2a:ed:2b:74:b0:8b:87:5d:15:fa:00:96:ab: 90:78:fc:df:60:32:4d:02:15:08:4f:96:d8:39:29:ed:41:14: ce:63:8c:a0:41:b1:62:fa:08:fc:d9:b6:27:b9:8b:51:56:c8: 59:7f:37:14:df:8f:5a:7b:1a:ce:de:9b:71:16:6f:6f:c7:e1: 5a:60:42:7a:15:c4:61:f0:26:07:7d:06:33:0b:54:de:ea:5d: 69:9a:25:d8:56:92:aa:95:97:21:02:e2:30:b1:68:fa:4a:c2: 55:92:2f:23:ae:70:1e:94:2f:92:a3:92:0e:8e:de:80:41:7b: 93:ca:37:26:f6:84:fd:32:60:1d:9a:5f:15:27:2d:99:ef:15: 6c:53:3b:a4:d6:83:b4:1b:07:8b:21:d6:5c:cb:cc:ea:36:07: 6c:ca:79:9e:60:bc:2c:bf:52:98:47:53:7e:cf:1b:67:21:65: 23:2c:c1:05:cf:5d:15:27:c2:10:da:ef:1b:ab:1a:e9:4c:90: f7:45:b9:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFV98ziKePWeoHtR5Qu6+GuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYxMDE5MjEwMTA1WhcNMjYxMDIwMjEwMTA1WjAzMTEwLwYDVQQD EyhlZGVhZDhkNWNmMGU1ZDkwNjlkNGQ1YjIxNzk3ZmQ0NmJjYTg5MDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvgxU+jCnlGNxFyfT/l08wJImJK0 ONuKgfXtMeVykOTiml53MqowjADdXL0XfncVEmQpgvAX0YUCICqdkjWZvMBvxLF3 gIgyQJPWw+JXQsFQ8TQHJYxAOuUjy+9t3bNXSI8sUEB0WCfXGeDmGzUAo2d0IMj6 UFYoiylz54E9KOS+0RCg2EJzcZO5MeYuv0qWR35K0KPPb0pS6z0lizPnWXQFLCYg HwPEahWAW6tPmfMHJWCqDeaJRfBUNt4mBlN54CE3Fx6vqt1pd8t4kMY1fDUnGm6g ux48tZ1PtYuml4lUYDAS3z64Ne4t7wWPHnL4m/hZBsDAOgDK64ioSivjNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3q2NXPDl2QadTVsheX/Ua8qJBmMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDg4rqIX M/TG0XufZgYaE2pgUjg3u91alM6R4lxdpZuYfXcm4mQzGgu4fnBMUKEy8GaF1c/w quvZ64Eq7St0sIuHXRX6AJarkHj832AyTQIVCE+W2Dkp7UEUzmOMoEGxYvoI/Nm2 J7mLUVbIWX83FN+PWnsazt6bcRZvb8fhWmBCehXEYfAmB30GMwtU3updaZol2FaS qpWXIQLiMLFo+krCVZIvI65wHpQvkqOSDo7egEF7k8o3JvaE/TJgHZpfFSctme8V bFM7pNaDtBsHiyHWXMvM6jYHbMp5nmC8LL9SmEdTfs8bZyFlIyzBBc9dFSfCENrv G6sa6UyQ90W5sg== -----END CERTIFICATE-----Generated at Tue Oct 20 07:28:04 2026 by rpki-client