$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: 3D4oEcsf6WQnjCj3KJSnuAKm0axkhoy/oD59wmvcvIU= Subject key identifier: F7:C8:70:68:8C:ED:03:C3:1D:FF:4F:AF:E8:41:E1:24:AD:A9:DC:2D Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019F55582C9CD7BF3E33013B58916034EA6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 19C3 Signing time: Sun 12 Jul 2026 08:01:09 +0000 Manifest this update: Sun 12 Jul 2026 08:01:09 +0000 Manifest next update: Mon 13 Jul 2026 08:01:09 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: 6d2ca75EAeB1GlzZDpTKJVUL+/6/3WHj+Za8hLkFECU=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jul 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:55:58:2c:9c:d7:bf:3e:33:01:3b:58:91:60:34:ea:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jul 12 08:01:09 2026 GMT Not After : Jul 13 08:01:09 2026 GMT Subject: CN=f7c870688ced03c31dff4fafe841e124ada9dc2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:5c:3d:a7:a1:f5:14:e8:df:2d:58:68:24: 9a:0e:00:be:67:a3:52:4f:bb:17:58:3b:ff:e3:b8: 6d:3a:04:2c:f3:14:ba:0f:cc:31:f7:11:36:ca:31: bf:02:51:b4:d2:08:e1:c5:ac:56:49:fe:b1:33:ad: 45:fb:ff:90:d7:bf:66:16:67:97:8a:fd:5c:36:88: e3:91:99:f9:00:cc:47:7d:59:7b:18:e5:ca:9a:1f: 15:20:3a:ec:93:71:5f:58:76:31:25:d2:a1:9a:87: d2:b2:af:0d:e7:b5:1c:1d:7f:9f:a7:90:f6:d2:1a: c7:3a:10:64:6d:8a:95:42:b1:1b:c3:a0:98:44:d8: 33:0c:a4:a1:7e:fc:d5:c8:e9:19:17:38:20:ee:d9: fb:12:bc:c4:b9:92:33:5c:e6:5e:7d:e5:11:53:9e: 43:d8:35:a3:2c:2d:e5:62:5c:04:08:0a:d0:61:c6: 41:de:ed:e4:8d:14:e0:a7:d9:0a:ec:ed:25:c8:8f: b0:20:90:47:4b:eb:26:f8:c1:d0:8b:b8:59:a7:36: b8:d9:08:bd:36:3d:47:be:1b:5f:9d:6c:09:54:f8: 99:54:f5:f5:77:5d:5d:ca:e7:36:c6:f8:7d:05:9a: ba:df:0e:11:6d:f5:0f:31:49:51:9c:a4:c6:a9:24: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C8:70:68:8C:ED:03:C3:1D:FF:4F:AF:E8:41:E1:24:AD:A9:DC:2D X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bb:83:9e:1e:68:58:f5:64:db:20:d7:a8:e2:0b:97:37:0e: 4f:9d:a8:1d:bf:69:04:7b:4f:a7:a8:dd:1b:b8:32:4b:70:58: ce:d2:fb:7c:73:9c:38:57:bc:a2:01:df:eb:8d:1c:7e:3c:8e: 4d:0e:b5:c4:67:07:56:8e:85:65:99:fe:4c:91:3f:97:5c:94: b1:86:f7:9c:d8:70:4c:31:d1:5c:8b:08:b0:69:c8:90:a0:29: fa:28:ae:f1:fc:df:85:a8:52:f9:28:e7:5c:8d:e4:d4:f5:e7: 2b:75:73:4f:39:e2:5f:97:b3:1c:fd:6e:59:99:7e:8b:79:f4: e8:aa:fd:42:6b:78:90:cf:ab:09:6a:84:12:de:b5:43:b4:91: 65:08:b2:b0:b9:81:b3:50:aa:40:8f:81:ff:61:3d:45:dd:db: ba:11:73:0a:96:49:c5:20:5f:95:f7:62:0e:db:0e:d4:07:83: 75:25:96:08:1b:f3:25:40:96:5a:f9:62:c7:15:ab:1b:65:9a: ff:8f:59:81:8c:0b:81:40:61:cd:5b:e5:4f:c5:f5:50:2d:25: b7:26:28:ea:ad:49:7d:90:8d:5e:92:4c:58:27:8c:50:dc:cb: ed:1c:a3:0b:9d:bf:ea:da:49:0b:96:d1:4a:a1:18:90:db:9d: 83:87:6d:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9VWCyc178+MwE7WJFgNOprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwNzEyMDgwMTA5WhcNMjYwNzEzMDgwMTA5WjAzMTEwLwYDVQQD EyhmN2M4NzA2ODhjZWQwM2MzMWRmZjRmYWZlODQxZTEyNGFkYTlkYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJFcPaeh9RTo3y1YaCSaDgC+Z6NS T7sXWDv/47htOgQs8xS6D8wx9xE2yjG/AlG00gjhxaxWSf6xM61F+/+Q179mFmeX iv1cNojjkZn5AMxHfVl7GOXKmh8VIDrsk3FfWHYxJdKhmofSsq8N57UcHX+fp5D2 0hrHOhBkbYqVQrEbw6CYRNgzDKShfvzVyOkZFzgg7tn7ErzEuZIzXOZefeURU55D 2DWjLC3lYlwECArQYcZB3u3kjRTgp9kK7O0lyI+wIJBHS+sm+MHQi7hZpza42Qi9 Nj1HvhtfnWwJVPiZVPX1d11dyuc2xvh9BZq63w4RbfUPMUlRnKTGqSRAoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfIcGiM7QPDHf9Pr+hB4SStqdwtMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7uDnh5o WPVk2yDXqOILlzcOT52oHb9pBHtPp6jdG7gyS3BYztL7fHOcOFe8ogHf640cfjyO TQ61xGcHVo6FZZn+TJE/l1yUsYb3nNhwTDHRXIsIsGnIkKAp+iiu8fzfhahS+Sjn XI3k1PXnK3VzTzniX5ezHP1uWZl+i3n06Kr9Qmt4kM+rCWqEEt61Q7SRZQiysLmB s1CqQI+B/2E9Rd3buhFzCpZJxSBflfdiDtsO1AeDdSWWCBvzJUCWWvlixxWrG2Wa /49ZgYwLgUBhzVvlT8X1UC0ltyYo6q1JfZCNXpJMWCeMUNzL7RyjC52/6tpJC5bR SqEYkNudg4dtSA== -----END CERTIFICATE-----Generated at Sun Jul 12 16:36:20 2026 by rpki-client