$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: o21DrSNI0kYH6OSG/GiGbG9NThX+0nRzvq9sNzW0Cp0= Subject key identifier: B3:F0:02:62:EB:D9:BD:72:21:D6:51:95:48:A6:B3:E4:D2:23:44:B7 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019F82D593A630E8F11F0A734A2C7874AD77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 1784 Signing time: Tue 21 Jul 2026 04:01:02 +0000 Manifest this update: Tue 21 Jul 2026 04:01:02 +0000 Manifest next update: Wed 22 Jul 2026 04:01:02 +0000 Files and hashes: 1: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (hash: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI=) 2: 4KkUHNuHp_WUlcLV7ZmT-IELGLs.roa (hash: X02pU+wDvS97rZ0D42UQvqF9JhNnpzwkrnlhuhnewxY=) 3: An-h4kooPrBUGMT-6Nj0QudqGKE.roa (hash: 4VG1kUHyYf9yb01HKQwY97RZCAJU3VqeDAxr07wG4w0=) 4: DKJJrcnX3RnXlCDTnb0QnF9ph1c.roa (hash: FBpHgtUQjl2CKc1kAMv5YEG4ocTTbuqpzf8/LW2ex4k=) 5: GOgAejJFsLbsIoSjyXa89DsOln0.roa (hash: n61wmUPLOUsceRZoHaDl1wjd6NYSJP+7XllQ62IBWVA=) 6: JVIsfJ3DVyq9OG-AbEDRx8a3Bto.roa (hash: J8o+5Ee3eNiQKRGdXJdghD9ZXv8Izb9VeieBzPJF1ak=) 7: L3AHD1nIaJn-Qkxqjxi4waU1okM.roa (hash: MqsTHnRn4vzlkUHWrFaXq9Uo9UAjzsK7URiYSvcgf8k=) 8: NY2MX1mgk76QbEK78KfRCv9HXlc.roa (hash: n052UQO+ldLs19+3y0B7Wj4/DIUQ0nHDh3aGl0cSB9U=) 9: NgMsux-odmw_2otfxo6fwQPz6nk.roa (hash: acZbMbI5ZnLhauOT05TvSrJPxsUogE9hJcD3gMOAgYQ=) 10: SUe4J3Et3KgT01K3Zx9sbKaSGM0.roa (hash: LwIG+mDSylEHKB/dZoPmrJsG/6vCNLIoKeokQAgcByE=) 11: XdIic6TtMnHLSFKPt0NIgYA3BZE.roa (hash: Hz8Dp4xvPL6d1SZb+xVGL2Fnk7Ii6zPdDdS2xRff/c8=) 12: bFtTO9kUoK7V5nLLHjzqVj2iOcU.roa (hash: jJC/VOkqkEwdX7ejcOTbfcTesLG6OI5LMSL4JFJb9Ek=) 13: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: hWVBy3doNfNBYznu6AEEYqaqF4pKBykV2c/j4DI4kXg=) 14: mDj4POXBo_BA8ao0TEZHTmOo46s.roa (hash: Y2b4Ei43NJZ9dDiKlYc7gN5osX878buWXGf115YzawI=) 15: nFYGg4ZIP1H9kzcY434jAerp2kU.roa (hash: Y/IgWysEh1nmKw0nLD81dJWu3QFpKM+9pnP+lyeoZXo=) 16: obFwaT_4MZtX-dKod3UGli-Mmuo.roa (hash: S1tcUGtkx7R83UYo2rACVKW3cgPV5XEnzrmsW37TA/Q=) 17: y2mTo6HHgH1hIKjXLEt22HvPvrw.roa (hash: YRXm/TWE2LnDq+SOmryX5rTG96P5ANXEnONR2xUrL80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:d5:93:a6:30:e8:f1:1f:0a:73:4a:2c:78:74:ad:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jul 21 04:01:02 2026 GMT Not After : Jul 22 04:01:02 2026 GMT Subject: CN=b3f00262ebd9bd7221d6519548a6b3e4d22344b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:26:22:89:c9:20:cc:8b:e4:08:f4:df:b4: 42:f4:7a:0b:88:ee:99:9d:c4:50:6e:0e:67:56:ef: 2e:40:3d:0a:18:3d:58:53:6f:76:3e:86:45:f7:fd: 2b:5e:68:96:f6:4e:9a:75:41:26:95:ae:db:63:1f: 19:86:fa:ca:c2:6a:c0:e2:68:89:cf:7d:10:48:6c: fe:7c:a5:dd:9b:d3:88:23:c7:bc:3d:38:6f:f9:f7: d8:14:b8:d3:de:9e:cb:90:f3:eb:cc:94:82:cc:86: 9a:7f:84:08:dd:7f:16:2d:b9:5a:77:bb:b3:e2:80: c8:b7:99:68:d9:14:12:f6:84:cc:f2:8a:34:b0:11: 8b:42:cc:8f:17:98:e6:b5:89:f1:86:3d:f6:9b:7d: 39:0c:72:3a:16:57:c5:5e:e0:9f:55:51:dd:67:ed: dd:c0:80:75:a6:b4:4e:d9:5b:8f:84:c8:2b:d8:3f: 9a:4f:3e:69:f8:6e:bc:1a:c5:a6:97:6a:85:56:97: 73:b2:3d:9d:c0:15:63:e6:6c:0b:82:0c:20:04:4d: 7f:b0:95:d0:e8:89:70:ca:44:fb:35:72:98:ab:62: 27:a9:00:9f:d5:b8:e5:91:75:dc:b5:d5:37:97:ed: 77:25:ed:f7:dd:0b:d3:c0:84:1d:50:9b:9d:ea:b5: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F0:02:62:EB:D9:BD:72:21:D6:51:95:48:A6:B3:E4:D2:23:44:B7 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:83:a0:d7:49:68:98:f5:0a:d6:35:bd:ee:25:76:e4:bc:53: 27:a2:1b:71:a8:33:f8:ac:1b:93:43:0b:d2:44:60:6b:18:3d: 64:75:7c:cc:2d:37:9d:c8:58:d6:7b:27:24:bb:2b:87:30:d3: 00:30:b4:4b:6c:a2:49:62:8b:b1:95:00:d6:af:9a:08:bf:3c: e6:89:d2:c5:d0:e0:1b:c6:77:95:d4:ac:c9:12:cc:13:23:c6: 67:7e:1d:2c:fa:31:25:07:a0:a9:5a:d4:82:0e:6f:08:79:35: 7e:27:05:b8:33:41:42:e5:76:80:e2:4d:d4:77:78:70:08:e7: e9:e6:d7:23:d4:72:81:2d:27:66:5e:8c:f5:12:4a:f0:f9:d0: 65:bf:af:f0:56:9d:7f:ad:cf:11:17:4d:9e:21:97:27:19:5b: 99:a1:5d:91:aa:16:40:4f:a3:28:f6:22:aa:64:e5:1f:b8:7f: 03:47:84:42:39:42:a0:ce:ea:76:3d:1d:f2:75:6d:30:21:ff: f3:7c:10:bb:d0:8e:4a:3c:9c:37:52:8c:26:53:7c:0e:f6:8e: 97:74:08:98:cc:e7:a9:28:49:8c:6d:9e:fd:8f:df:d7:82:bc: 71:bc:17:92:00:11:a9:85:d1:f6:9e:09:61:f0:c5:06:00:27: 52:4c:c8:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+C1ZOmMOjxHwpzSix4dK13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwNzIxMDQwMTAyWhcNMjYwNzIyMDQwMTAyWjAzMTEwLwYDVQQD EyhiM2YwMDI2MmViZDliZDcyMjFkNjUxOTU0OGE2YjNlNGQyMjM0NGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWQmIonJIMyL5Aj037RC9HoLiO6Z ncRQbg5nVu8uQD0KGD1YU292PoZF9/0rXmiW9k6adUEmla7bYx8ZhvrKwmrA4miJ z30QSGz+fKXdm9OII8e8PThv+ffYFLjT3p7LkPPrzJSCzIaaf4QI3X8WLblad7uz 4oDIt5lo2RQS9oTM8oo0sBGLQsyPF5jmtYnxhj32m305DHI6FlfFXuCfVVHdZ+3d wIB1prRO2VuPhMgr2D+aTz5p+G68GsWml2qFVpdzsj2dwBVj5mwLggwgBE1/sJXQ 6IlwykT7NXKYq2InqQCf1bjlkXXctdU3l+13Je333QvTwIQdUJud6rWQ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPwAmLr2b1yIdZRlUims+TSI0S3MB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoOg10lo mPUK1jW97iV25LxTJ6Ibcagz+Kwbk0ML0kRgaxg9ZHV8zC03nchY1nsnJLsrhzDT ADC0S2yiSWKLsZUA1q+aCL885onSxdDgG8Z3ldSsyRLMEyPGZ34dLPoxJQegqVrU gg5vCHk1ficFuDNBQuV2gOJN1Hd4cAjn6ebXI9RygS0nZl6M9RJK8PnQZb+v8Fad f63PERdNniGXJxlbmaFdkaoWQE+jKPYiqmTlH7h/A0eEQjlCoM7qdj0d8nVtMCH/ 83wQu9COSjycN1KMJlN8DvaOl3QImMznqShJjG2e/Y/f14K8cbwXkgARqYXR9p4J YfDFBgAnUkzIIA== -----END CERTIFICATE-----Generated at Tue Jul 21 10:07:12 2026 by rpki-client