$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: RzJUmGy8GbUtENJSYbPpgTqXpVjvJHxG6dToGzIci/I= Subject key identifier: 5E:72:42:20:DF:06:07:67:66:89:5E:9E:61:25:74:E0:CB:56:E7:D0 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019E1EDA2B100FBE76BB508B80F7CA09B850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 13D4 Signing time: Wed 13 May 2026 01:01:14 +0000 Manifest this update: Wed 13 May 2026 01:01:14 +0000 Manifest next update: Thu 14 May 2026 01:01:14 +0000 Files and hashes: 1: 2YKU1ZIr104Nr6byLvuW2x4k40c.roa (hash: l9Z0hvVVupcLg12X1S4oqYfEgu/uSu//ojVLo4Xl8BM=) 2: 3KesuWRJfnUsYbbl-ge3IpkL8Qs.roa (hash: Zv5Dd9dzLjrbiTpK79whstk1Qsbu6/8Gy06b3Qo3wrk=) 3: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: N+0yHglgQMulsq7nq5XrCGR1sndx0nr0kI5+yofi7Lc=) 4: JJNZOR6X4rY_GOThrdjQRSXeXBg.roa (hash: /dhiOwJGHBoTv3UZTiG0d0sePUV70qGDTkgPdoGx4eI=) 5: Lw3ZnV1VpPuaAVB3OVp8SnNyb-4.roa (hash: nBTM7MD83GgGqveTlO6ZbvL/71fYF0IUBTMvcU7YdJ8=) 6: R6Ix8lNiS_uYFTygWXMHCyCDc5o.roa (hash: Tz7QLxwy5GRJiJxjhaOPZOg+bzVuulgIR4QG/ALYYl0=) 7: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (hash: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU=) 8: WKFrMc20v_3_nvwsEfVZ3pt8UJA.roa (hash: YVkbD8xPvWUS+BrYDoNJSYcp18Mk8k9LeJimBd71qQY=) 9: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (hash: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY=) 10: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (hash: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 01:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:da:2b:10:0f:be:76:bb:50:8b:80:f7:ca:09:b8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: May 13 01:01:14 2026 GMT Not After : May 14 01:01:14 2026 GMT Subject: CN=5e724220df06076766895e9e612574e0cb56e7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:e3:a3:81:35:d8:8b:b5:b5:ea:e4:d4:02: 45:82:0b:ad:a5:76:7a:73:d8:d3:4a:18:54:00:9e: 47:6e:c2:c5:00:aa:76:cb:22:f8:65:00:c7:71:ae: a7:19:68:4c:7a:5c:36:8d:73:e8:1d:94:06:89:b3: d3:26:af:cd:66:78:f2:fb:bb:6d:9e:6b:e0:b6:1a: e0:d0:7c:0e:ef:14:da:c6:11:73:a2:73:c4:4f:c0: de:34:5a:02:81:5b:d4:d7:d0:44:1b:5f:c2:56:d8: 0e:e2:bd:6c:60:6d:5e:dd:3d:68:a7:e2:0d:e6:2e: 38:9a:43:07:ca:51:a7:a0:c8:05:0e:e7:fd:84:cb: 8c:18:03:f7:31:05:1a:6d:6d:03:e4:19:30:bc:c9: ae:56:fe:04:bf:e7:d5:c1:ad:97:92:07:ed:25:4b: a4:db:15:55:14:6b:b8:74:97:70:74:3f:49:07:be: b3:45:2a:53:f0:99:e0:03:7e:37:5e:ce:04:b3:91: 36:45:35:fd:e4:33:fb:50:8c:86:7d:49:ff:9e:77: 78:a3:a8:c5:37:e8:3a:c3:7a:53:9a:0a:d8:47:88: be:10:b0:94:24:ad:58:db:75:c7:47:09:87:c0:12: b5:9d:14:79:b9:ea:1a:bc:26:cb:04:52:4b:9e:70: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:42:20:DF:06:07:67:66:89:5E:9E:61:25:74:E0:CB:56:E7:D0 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:94:ce:c0:27:65:e3:a8:b3:87:af:86:86:69:ec:2f:8e:e0: 1d:cd:3d:89:91:ea:09:7d:9a:90:6b:f4:86:cb:38:27:dd:c1: f3:e7:0b:32:11:2b:60:db:5b:0f:ab:79:1d:d0:d9:52:b4:af: d0:a5:89:2c:98:75:c5:32:5f:fc:1c:1b:b2:cb:72:ca:7f:42: 9c:cd:d1:df:b6:b6:50:5b:bf:7c:f0:df:9e:df:63:86:ca:1f: 4c:b9:0f:e5:b8:13:17:9b:93:b5:46:51:14:af:90:0a:6d:22: fb:26:2e:a0:9a:f6:2b:1e:d7:bc:c6:1e:81:14:86:49:aa:73: a1:fb:01:45:49:8f:c6:b9:da:22:ce:9e:b7:ff:64:cc:7a:bf: c3:16:c2:64:37:4d:25:8b:dc:49:e0:65:2f:af:f1:9c:b9:3d: 6b:e4:58:87:63:d7:46:71:86:a6:8b:80:f3:ce:2d:ca:d4:ee: bc:66:c9:81:50:f0:49:f0:9d:57:35:a6:2b:92:3c:03:1d:4d: fe:4c:49:e6:f3:b6:9f:5c:2a:6d:e1:e8:fd:af:2d:7e:23:2a: 8d:44:fb:bb:b7:0d:6f:85:cd:3f:63:e4:f1:e8:2f:00:34:63: 00:ab:77:0b:ca:a2:d4:39:bb:31:0a:d0:70:10:03:a7:fa:0e: 38:75:15:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4e2isQD752u1CLgPfKCbhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwNTEzMDEwMTE0WhcNMjYwNTE0MDEwMTE0WjAzMTEwLwYDVQQD Eyg1ZTcyNDIyMGRmMDYwNzY3NjY4OTVlOWU2MTI1NzRlMGNiNTZlN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cbjo4E12Iu1terk1AJFggutpXZ6 c9jTShhUAJ5HbsLFAKp2yyL4ZQDHca6nGWhMelw2jXPoHZQGibPTJq/NZnjy+7tt nmvgthrg0HwO7xTaxhFzonPET8DeNFoCgVvU19BEG1/CVtgO4r1sYG1e3T1op+IN 5i44mkMHylGnoMgFDuf9hMuMGAP3MQUabW0D5BkwvMmuVv4Ev+fVwa2XkgftJUuk 2xVVFGu4dJdwdD9JB76zRSpT8JngA343Xs4Es5E2RTX95DP7UIyGfUn/nnd4o6jF N+g6w3pTmgrYR4i+ELCUJK1Y23XHRwmHwBK1nRR5ueoavCbLBFJLnnCLAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5yQiDfBgdnZolenmEldODLVufQMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZTOwCdl 46izh6+GhmnsL47gHc09iZHqCX2akGv0hss4J93B8+cLMhErYNtbD6t5HdDZUrSv 0KWJLJh1xTJf/Bwbsstyyn9CnM3R37a2UFu/fPDfnt9jhsofTLkP5bgTF5uTtUZR FK+QCm0i+yYuoJr2Kx7XvMYegRSGSapzofsBRUmPxrnaIs6et/9kzHq/wxbCZDdN JYvcSeBlL6/xnLk9a+RYh2PXRnGGpouA884tytTuvGbJgVDwSfCdVzWmK5I8Ax1N /kxJ5vO2n1wqbeHo/a8tfiMqjUT7u7cNb4XNP2Pk8egvADRjAKt3C8qi1Dm7MQrQ cBADp/oOOHUVjA== -----END CERTIFICATE-----Generated at Wed May 13 10:50:57 2026 by rpki-client