$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: Nsfk3BIf/AGtJuYIUzQ0qHhgTxAMA2DcLd6EPtzYpEI= Subject key identifier: 7B:2D:E0:2B:0F:9F:66:05:70:83:FE:61:45:6F:B4:04:A2:16:05:24 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019FF7FE3D8A2C55485DF61D0DB0E67AB463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 14C9 Signing time: Wed 12 Aug 2026 22:01:01 +0000 Manifest this update: Wed 12 Aug 2026 22:01:01 +0000 Manifest next update: Thu 13 Aug 2026 22:01:01 +0000 Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=) 2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=) 3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: OURwKOuOFhr7+TVG7EjlJOeypSEtuzewHUqOPKACoiE=) 4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=) 5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=) 6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=) 7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=) 8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=) 9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=) 10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 16:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f7:fe:3d:8a:2c:55:48:5d:f6:1d:0d:b0:e6:7a:b4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Aug 12 22:01:01 2026 GMT Not After : Aug 13 22:01:01 2026 GMT Subject: CN=7b2de02b0f9f66057083fe61456fb404a2160524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:75:e6:e2:71:4c:4d:c6:38:f5:44:72:27: 66:86:ba:c6:a7:a8:28:e2:18:a5:e5:92:5e:83:87: 61:40:0a:73:28:35:cd:e9:2d:3c:31:43:7b:61:0c: f0:36:f8:d7:30:b1:ce:c9:68:94:48:4f:12:01:37: 97:c3:77:3d:04:a9:35:bb:f1:34:2b:1f:c3:c2:b5: 5b:ed:c5:ab:c3:30:fb:e5:3d:7d:54:73:05:fa:9a: 39:6a:4d:8a:fb:d1:07:96:dd:64:66:2a:8d:90:d1: ab:b9:80:92:9f:5a:b4:eb:b8:24:f0:1f:67:aa:15: 75:4f:16:83:07:b7:0c:c1:fd:47:71:0f:03:3d:2d: 3a:ae:d2:69:2e:49:d3:08:b5:28:5f:f1:cb:30:16: e3:a4:c5:f8:57:db:d6:2f:bc:5f:8b:3a:cb:f8:14: 61:16:b1:20:28:4d:e7:ff:a6:d3:44:84:80:9b:46: ae:38:33:4a:bf:bb:85:63:87:9d:26:ab:30:a6:9e: e9:d2:1d:47:e4:e5:b2:04:d6:d2:63:9e:26:73:47: d4:b1:b7:74:b0:97:1d:74:5d:ef:8d:19:96:49:e0: 36:19:01:f0:b7:21:38:c3:b0:21:83:16:d5:9e:12: 94:8f:82:2f:8d:53:a5:47:6c:fd:02:7c:f4:4b:1d: 82:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2D:E0:2B:0F:9F:66:05:70:83:FE:61:45:6F:B4:04:A2:16:05:24 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d5:9d:02:a4:b4:d9:6c:92:27:80:9d:9c:8d:6f:b9:12:1a: d5:43:b5:46:c8:90:1f:a1:a4:7b:5f:7e:9f:98:c3:fb:b7:0d: 87:aa:69:ec:b4:1a:c8:ec:c9:9c:88:36:49:e0:ba:43:90:b4: db:9d:c8:07:be:8a:19:ad:79:48:a3:bf:a8:40:23:b6:91:e0: 16:1b:11:fa:d3:c5:f7:99:f9:d0:a2:7b:cc:ea:83:d4:77:3e: 38:26:dd:9b:e3:a8:ce:b4:a0:6d:47:30:e7:4a:c4:65:d8:e9: dc:06:10:6e:d4:2c:55:f6:98:72:90:4f:db:fd:b2:24:b6:e3: dc:7c:8a:13:1f:23:d2:98:13:79:ef:ce:ed:e0:b4:96:1f:b8: a6:c4:6f:91:65:9b:55:b5:05:17:bc:05:fe:15:ae:04:3a:e8: 36:65:7d:ad:3f:08:b0:1b:fc:3b:fc:c2:e0:33:ca:46:3c:b0: 2f:39:f2:55:18:18:46:eb:75:39:bc:7b:a8:68:05:b9:8b:83: 0e:2f:65:f9:ae:7d:36:32:cd:36:d7:d2:46:89:73:aa:b5:bc: 80:9e:6c:34:2e:6f:32:02:fc:68:ed:01:9d:96:9f:19:7c:7a: 90:b3:bf:1e:db:20:13:22:38:93:91:9e:5d:8c:af:ce:f7:9d: 7f:24:44:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/3/j2KLFVIXfYdDbDmerRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwODEyMjIwMTAxWhcNMjYwODEzMjIwMTAxWjAzMTEwLwYDVQQD Eyg3YjJkZTAyYjBmOWY2NjA1NzA4M2ZlNjE0NTZmYjQwNGEyMTYwNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0F15uJxTE3GOPVEcidmhrrGp6go 4hil5ZJeg4dhQApzKDXN6S08MUN7YQzwNvjXMLHOyWiUSE8SATeXw3c9BKk1u/E0 Kx/DwrVb7cWrwzD75T19VHMF+po5ak2K+9EHlt1kZiqNkNGruYCSn1q067gk8B9n qhV1TxaDB7cMwf1HcQ8DPS06rtJpLknTCLUoX/HLMBbjpMX4V9vWL7xfizrL+BRh FrEgKE3n/6bTRISAm0auODNKv7uFY4edJqswpp7p0h1H5OWyBNbSY54mc0fUsbd0 sJcddF3vjRmWSeA2GQHwtyE4w7AhgxbVnhKUj4IvjVOlR2z9Anz0Sx2ChQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHst4CsPn2YFcIP+YUVvtASiFgUkMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdWdAqS0 2WySJ4CdnI1vuRIa1UO1RsiQH6Gke19+n5jD+7cNh6pp7LQayOzJnIg2SeC6Q5C0 253IB76KGa15SKO/qEAjtpHgFhsR+tPF95n50KJ7zOqD1Hc+OCbdm+OozrSgbUcw 50rEZdjp3AYQbtQsVfaYcpBP2/2yJLbj3HyKEx8j0pgTee/O7eC0lh+4psRvkWWb VbUFF7wF/hWuBDroNmV9rT8IsBv8O/zC4DPKRjywLznyVRgYRut1Obx7qGgFuYuD Di9l+a59NjLNNtfSRolzqrW8gJ5sNC5vMgL8aO0BnZafGXx6kLO/HtsgEyI4k5Ge XYyvzvedfyRE4A== -----END CERTIFICATE-----Generated at Thu Aug 13 01:33:37 2026 by rpki-client