$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: UDZ1ClYpRP4oYrt4ca/jOVL8tSEwiCaUAJH4D4/MF6c= Subject key identifier: 11:0B:35:3E:97:AA:55:71:1D:4A:6E:88:FC:16:A8:B5:D9:BE:6A:F6 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019E2A024B53AC474F0F69969E2204584BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 1621 Signing time: Fri 15 May 2026 05:00:53 +0000 Manifest this update: Fri 15 May 2026 05:00:53 +0000 Manifest next update: Sat 16 May 2026 05:00:53 +0000 Files and hashes: 1: 4cLeBIUzolxvixomGkjZcKiBte8.roa (hash: N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=) 2: 746QFPJyT0Rq24L0EZYCq84Zm3c.roa (hash: AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=) 3: 8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (hash: /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=) 4: CjPEg_1_YC8pnKYDbVJlTX6LL9M.roa (hash: zyX+uPItpF4LWUTzRFEpi3sBDAJ/wqUUHQFbPwYtfPk=) 5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: /g3tZsX70oRwH+AmCKizLL4W73JtTHf5p1sNcYk3Tcg=) 6: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (hash: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI=) 7: VOEqbHkGWWPCfYghmq_qCzJyCks.roa (hash: DW2E3Bv+Uu/QtgNYK+Kni5CDezUiIfsMXJ3wb8ndf9s=) 8: _SvrltKT2d95s4aJXfwotwRjxTs.roa (hash: x78Dq5GqOFiqHEpOdeEmGfWK4U05pqaKZhv6jrrmznc=) 9: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (hash: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE=) 10: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (hash: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ=) 11: r29J5i1S1Gu8Uj_A_Wz6NKuvkEs.roa (hash: 8e0tYCtiI0iNQahlyYDb4Q4Izluuf3hdqVeE3n5XNmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 05:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2a:02:4b:53:ac:47:4f:0f:69:96:9e:22:04:58:4b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: May 15 05:00:53 2026 GMT Not After : May 16 05:00:53 2026 GMT Subject: CN=110b353e97aa55711d4a6e88fc16a8b5d9be6af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:bd:9c:04:20:6a:0c:fc:24:71:2b:3b:1d: f0:9f:44:7f:53:2e:5e:bd:ed:b6:b2:9f:6d:3b:4f: 7e:2c:aa:1d:99:33:1e:c3:e7:47:44:57:ef:9d:69: 42:94:78:15:dc:59:94:a9:e3:34:7c:c1:f6:73:b4: f6:7f:0e:0d:c5:99:66:2c:f2:9c:f3:b9:59:4f:f0: 87:d4:f3:41:4e:1e:c9:28:b5:32:d4:fe:0d:27:b1: 79:5f:b3:b2:b0:0d:06:d2:29:07:a2:6c:2a:b4:0f: 0f:09:4f:f7:a0:36:e5:98:e8:29:6d:55:33:61:f7: 0e:bf:82:8e:76:11:e0:d5:21:db:f4:07:68:88:50: 34:f8:f6:35:b5:ae:31:5c:8f:44:43:c3:06:be:71: f8:81:63:68:57:c6:b9:a4:48:08:fb:7c:e0:7e:0f: 5b:85:28:39:a2:bc:d2:5f:44:fb:6d:85:29:55:a1: 21:a3:43:f6:16:1c:f8:e4:d1:78:5d:69:9f:8b:12: ea:df:59:a8:01:ec:83:c6:46:0a:60:69:8b:21:35: 5f:76:3b:9a:ef:22:6c:f1:dd:76:5f:5e:03:4e:f4: 6b:9c:27:89:9d:e2:7c:23:7c:77:5c:b3:4f:c0:98: 5b:be:60:be:0d:2d:be:fe:db:31:68:41:39:56:4d: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0B:35:3E:97:AA:55:71:1D:4A:6E:88:FC:16:A8:B5:D9:BE:6A:F6 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:16:37:c5:11:62:b2:75:34:62:13:70:c6:b9:e1:dc:f6:bf: 1e:ff:dd:33:97:c2:67:6e:71:b2:7a:f4:69:5d:83:54:97:ea: 60:c0:85:63:e6:31:e1:b9:b2:57:e0:7a:b0:b7:10:bf:93:8c: b1:ee:98:f3:06:8e:b4:9b:80:84:6f:82:27:bf:c8:0c:57:b6: 21:34:b5:87:ec:99:49:2a:6b:05:18:64:c4:10:77:63:94:c8: ce:13:31:ce:44:43:3b:54:4a:36:f8:ac:56:7e:8a:bc:77:0f: da:61:ce:80:c1:6b:08:21:c8:7c:11:c3:e6:61:7a:6e:92:94: ca:27:03:fe:73:73:ec:90:64:6e:ff:be:a1:a4:4c:6e:94:3e: 02:01:55:6e:db:02:cd:26:24:38:cf:80:52:54:09:20:32:18: 51:3d:a4:c5:2b:87:af:fa:82:4a:a7:29:5f:be:d7:ed:67:7f: 79:ce:d2:7a:e3:b4:94:7d:8f:71:02:05:81:e4:86:dd:db:82: 00:4c:92:83:51:6b:4c:3d:2d:2b:12:8b:cc:af:d0:9c:29:1b: 16:4b:4c:b0:b6:e2:72:7c:51:f6:62:e6:d1:a1:53:46:e4:59: a5:a5:08:74:f7:c9:cb:62:71:10:6e:43:91:5b:ce:e0:bc:04: fc:05:e9:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4qAktTrEdPD2mWniIEWEvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjYwNTE1MDUwMDUzWhcNMjYwNTE2MDUwMDUzWjAzMTEwLwYDVQQD EygxMTBiMzUzZTk3YWE1NTcxMWQ0YTZlODhmYzE2YThiNWQ5YmU2YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxO9nAQgagz8JHErOx3wn0R/Uy5e ve22sp9tO09+LKodmTMew+dHRFfvnWlClHgV3FmUqeM0fMH2c7T2fw4NxZlmLPKc 87lZT/CH1PNBTh7JKLUy1P4NJ7F5X7OysA0G0ikHomwqtA8PCU/3oDblmOgpbVUz YfcOv4KOdhHg1SHb9AdoiFA0+PY1ta4xXI9EQ8MGvnH4gWNoV8a5pEgI+3zgfg9b hSg5orzSX0T7bYUpVaEho0P2Fhz45NF4XWmfixLq31moAeyDxkYKYGmLITVfdjua 7yJs8d12X14DTvRrnCeJneJ8I3x3XLNPwJhbvmC+DS2+/tsxaEE5Vk0aeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBELNT6XqlVxHUpuiPwWqLXZvmr2MB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyhY3xRFi snU0YhNwxrnh3Pa/Hv/dM5fCZ25xsnr0aV2DVJfqYMCFY+Yx4bmyV+B6sLcQv5OM se6Y8waOtJuAhG+CJ7/IDFe2ITS1h+yZSSprBRhkxBB3Y5TIzhMxzkRDO1RKNvis Vn6KvHcP2mHOgMFrCCHIfBHD5mF6bpKUyicD/nNz7JBkbv++oaRMbpQ+AgFVbtsC zSYkOM+AUlQJIDIYUT2kxSuHr/qCSqcpX77X7Wd/ec7SeuO0lH2PcQIFgeSG3duC AEySg1FrTD0tKxKLzK/QnCkbFktMsLbicnxR9mLm0aFTRuRZpaUIdPfJy2JxEG5D kVvO4LwE/AXpQQ== -----END CERTIFICATE-----Generated at Fri May 15 13:29:05 2026 by rpki-client