$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: WodOJoKIgPZiJgTX3BsY6tCIo9G8Fxn7NEZjeR3OU5E= Subject key identifier: 65:2C:EE:E2:29:5C:FE:98:47:A5:EA:6F:62:EE:2C:A9:11:FB:7D:94 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 01A0F30CC0513F0E94C948FEB30E41251975 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 154B Signing time: Wed 30 Sep 2026 16:01:34 +0000 Manifest this update: Wed 30 Sep 2026 16:01:34 +0000 Manifest next update: Thu 01 Oct 2026 16:01:34 +0000 Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=) 2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=) 3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: 0AZPpEsf1WfbAkWipiMnmzY7NN1GDwvHcQD3oi+u4zM=) 4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=) 5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=) 6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=) 7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=) 8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=) 9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=) 10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f3:0c:c0:51:3f:0e:94:c9:48:fe:b3:0e:41:25:19:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Sep 30 16:01:34 2026 GMT Not After : Oct 1 16:01:34 2026 GMT Subject: CN=652ceee2295cfe9847a5ea6f62ee2ca911fb7d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:f1:50:9e:ba:66:a1:ac:bd:0b:45:48:57: 11:c4:7c:aa:95:84:39:61:90:36:fc:7f:f6:da:1e: 3c:5b:a5:14:e6:9f:c3:8c:50:d7:d3:55:f5:b0:c5: a2:87:78:a8:19:8c:28:5b:01:ae:4f:0d:f3:e3:f1: 19:41:4e:c1:28:90:e0:63:e2:e9:d3:14:60:11:77: c4:e0:0b:07:fa:56:f2:4c:1e:ad:aa:b1:81:1d:87: ad:e7:22:65:5e:56:ae:32:da:57:f8:8b:8c:a4:50: 9d:d6:ee:71:4a:0e:ef:55:03:77:28:ab:05:63:6b: 75:23:19:6d:8c:b7:1b:8e:24:e5:3c:a1:8d:dd:e7: a5:6a:7b:1b:f1:c8:05:86:bc:2e:c9:3b:0c:69:74: af:bd:69:62:ec:69:1c:3f:c4:e7:aa:8f:fb:78:6a: 7b:f3:b4:cf:8a:6a:cd:4f:8d:bb:25:5b:42:28:ee: 1d:5e:f0:20:b6:52:51:f3:77:0a:73:dc:d6:d6:7c: bf:99:ed:4d:fc:8b:16:aa:cc:77:31:d8:16:1c:6b: 93:4d:ee:32:fa:a3:3e:bf:aa:b3:61:2b:f6:35:89: bd:8e:41:91:a1:2f:77:f4:44:98:a5:41:a0:e1:1c: c2:46:3c:6e:c4:a7:1e:25:b1:ea:e5:04:86:01:96: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2C:EE:E2:29:5C:FE:98:47:A5:EA:6F:62:EE:2C:A9:11:FB:7D:94 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e1:fa:bb:8f:72:70:d6:41:9c:f8:55:37:b9:ec:d0:20:bf: 0d:5d:00:c6:52:8e:92:ac:e2:49:15:cb:21:eb:e2:b9:dc:a9: 68:5c:b9:bc:ba:15:2d:41:3b:fa:b8:b8:14:87:24:d0:29:73: 17:50:d8:5a:69:43:03:9d:b5:66:13:00:b1:17:a5:da:1f:dc: 2a:53:c9:3b:aa:c5:1d:8b:78:3d:09:29:1a:6d:eb:7e:37:a1: 9f:9f:97:88:b1:0c:c1:cc:a8:3f:22:c4:6e:c4:a8:ae:81:d5: ef:1e:76:d4:77:a6:1a:bc:b2:ec:97:7e:f3:ca:33:47:bf:6f: 95:d6:c7:f5:23:91:fe:0e:4a:eb:60:68:5b:92:d3:6c:56:4a: 88:5f:8c:ef:6f:30:87:ec:9c:a5:be:00:5a:85:b2:5a:95:f6: 56:a4:25:23:64:6c:b8:ce:9b:da:20:8c:4d:52:54:22:05:c0: 9b:77:da:b7:3b:c5:0e:f9:03:32:2c:ed:c6:21:db:c6:51:e4: 60:91:3f:e1:e6:ee:59:dd:60:55:29:30:08:b7:a0:8a:40:c9: ca:27:f0:f9:da:b6:7c:1e:9d:98:fb:d5:86:ca:0e:4e:f1:f7: 6c:33:9a:26:93:84:8d:03:a2:d2:94:9e:e1:c6:fc:b7:cc:4e: 7a:c1:38:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDzDMBRPw6UyUj+sw5BJRl1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwOTMwMTYwMTM0WhcNMjYxMDAxMTYwMTM0WjAzMTEwLwYDVQQD Eyg2NTJjZWVlMjI5NWNmZTk4NDdhNWVhNmY2MmVlMmNhOTExZmI3ZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQHxUJ66ZqGsvQtFSFcRxHyqlYQ5 YZA2/H/22h48W6UU5p/DjFDX01X1sMWih3ioGYwoWwGuTw3z4/EZQU7BKJDgY+Lp 0xRgEXfE4AsH+lbyTB6tqrGBHYet5yJlXlauMtpX+IuMpFCd1u5xSg7vVQN3KKsF Y2t1IxltjLcbjiTlPKGN3eelansb8cgFhrwuyTsMaXSvvWli7GkcP8Tnqo/7eGp7 87TPimrNT427JVtCKO4dXvAgtlJR83cKc9zW1ny/me1N/IsWqsx3MdgWHGuTTe4y +qM+v6qzYSv2NYm9jkGRoS939ESYpUGg4RzCRjxuxKceJbHq5QSGAZZyJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUs7uIpXP6YR6Xqb2LuLKkR+32UMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeH6u49y cNZBnPhVN7ns0CC/DV0AxlKOkqziSRXLIeviudypaFy5vLoVLUE7+ri4FIck0Clz F1DYWmlDA521ZhMAsRel2h/cKlPJO6rFHYt4PQkpGm3rfjehn5+XiLEMwcyoPyLE bsSoroHV7x521HemGryy7Jd+88ozR79vldbH9SOR/g5K62BoW5LTbFZKiF+M728w h+ycpb4AWoWyWpX2VqQlI2RsuM6b2iCMTVJUIgXAm3fatzvFDvkDMiztxiHbxlHk YJE/4ebuWd1gVSkwCLegikDJyifw+dq2fB6dmPvVhsoOTvH3bDOaJpOEjQOi0pSe 4cb8t8xOesE41g== -----END CERTIFICATE-----Generated at Wed Sep 30 19:53:23 2026 by rpki-client