$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: WMjsSMoaoO28CLBCdkhQ2ZL1/Kfv01eChxkaKNveMtI= Subject key identifier: AE:FF:5C:76:B4:5C:FC:D1:AB:67:A5:90:E6:70:0C:5D:2B:1F:C4:AB Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019E48E8CB2915E28BFE63E42A7988C9A9C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1938 Signing time: Thu 21 May 2026 05:01:16 +0000 Manifest this update: Thu 21 May 2026 05:01:16 +0000 Manifest next update: Fri 22 May 2026 05:01:16 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: +A3/N3/+Jh5RkYa481KMDTMPFzqPsts5xLLmb9w15FI=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 May 2026 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:48:e8:cb:29:15:e2:8b:fe:63:e4:2a:79:88:c9:a9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: May 21 05:01:16 2026 GMT Not After : May 22 05:01:16 2026 GMT Subject: CN=aeff5c76b45cfcd1ab67a590e6700c5d2b1fc4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:8a:20:22:d0:b2:47:cb:d6:0c:97:af:df: 8e:ee:0d:c5:cf:9d:c9:89:5a:84:d6:14:0c:6a:30: 66:f3:68:11:41:7d:53:f8:50:43:cb:54:45:c9:d8: 25:fa:06:81:3d:8e:45:e3:cc:c7:49:50:13:8a:9c: 5f:82:85:79:33:60:7d:91:5a:f2:2a:c9:1f:4c:04: 0c:7f:36:9c:35:f2:b7:bc:d2:32:c5:62:4e:8b:92: 78:d8:06:56:4a:f0:81:f2:19:1e:7f:17:84:a4:82: 04:58:54:0e:f3:f5:83:cd:55:ec:53:a8:2a:f5:68: 6d:70:83:fa:49:f3:f7:ee:ce:f0:e2:60:16:ca:7f: 0d:5d:6e:39:ae:2e:da:c7:c4:51:9f:97:03:12:46: f6:c1:34:61:2c:8d:74:bf:61:39:71:e5:08:a8:f2: a0:34:25:86:b2:ef:ce:e9:63:05:23:91:53:56:54: 53:9e:d9:eb:dd:64:f1:51:d0:7d:f8:ce:46:1c:4d: d1:63:7e:d8:40:26:29:c0:fe:34:8e:41:da:43:21: 5b:83:75:f3:05:ab:da:08:29:a5:99:65:40:75:9f: 11:69:d6:a2:7d:5d:56:e1:77:26:bc:c0:0e:4a:67: fd:59:d3:8c:07:b9:dc:f1:1e:28:58:c0:f0:02:ed: 73:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FF:5C:76:B4:5C:FC:D1:AB:67:A5:90:E6:70:0C:5D:2B:1F:C4:AB X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:83:72:ae:b3:e4:a0:d8:0b:06:57:36:c1:9d:6d:7c:c9:18: 8f:d5:a5:c4:c8:9f:de:b5:cf:42:f7:15:d5:f5:98:9a:45:0d: 22:b9:b9:5f:71:89:25:94:d5:cc:82:4d:84:5d:74:78:c7:57: 07:8c:f6:a5:6f:7b:42:39:f8:51:26:5c:57:57:db:e9:18:9f: 64:93:2a:77:0c:4d:7b:c7:f7:9e:48:ef:8e:c1:a2:af:b6:c9: b0:ac:88:53:ec:f3:ae:30:84:60:c4:e5:5f:11:07:a9:d1:27: ba:48:b4:58:80:34:f8:37:e6:fc:6c:05:05:89:7c:6f:7e:55: d8:31:b1:07:6d:9c:07:4d:6d:6f:3c:c3:37:15:94:9a:d2:60: 5c:77:2e:3f:c9:86:86:bd:af:b3:dd:1c:e4:a4:bd:af:3a:c2: ed:03:e1:f2:7b:6c:05:a5:10:3f:40:9c:9d:84:a4:6c:a8:fc: a2:f8:1d:8e:c3:94:4f:5f:27:ea:f6:3e:72:21:a9:73:6c:38: f3:20:08:2b:03:66:19:f0:4e:0b:d3:70:73:1b:10:dd:48:a9: fd:18:3b:4d:f4:e1:91:7b:22:02:90:f8:6f:d7:35:64:d3:7c: eb:a3:11:ef:ed:97:e3:2d:5a:e5:49:d3:8c:d8:12:c0:b9:90: 55:62:a2:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5I6MspFeKL/mPkKnmIyanCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwNTIxMDUwMTE2WhcNMjYwNTIyMDUwMTE2WjAzMTEwLwYDVQQD EyhhZWZmNWM3NmI0NWNmY2QxYWI2N2E1OTBlNjcwMGM1ZDJiMWZjNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+GKICLQskfL1gyXr9+O7g3Fz53J iVqE1hQMajBm82gRQX1T+FBDy1RFydgl+gaBPY5F48zHSVATipxfgoV5M2B9kVry KskfTAQMfzacNfK3vNIyxWJOi5J42AZWSvCB8hkefxeEpIIEWFQO8/WDzVXsU6gq 9WhtcIP6SfP37s7w4mAWyn8NXW45ri7ax8RRn5cDEkb2wTRhLI10v2E5ceUIqPKg NCWGsu/O6WMFI5FTVlRTntnr3WTxUdB9+M5GHE3RY37YQCYpwP40jkHaQyFbg3Xz BavaCCmlmWVAdZ8RadaifV1W4XcmvMAOSmf9WdOMB7nc8R4oWMDwAu1zVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7/XHa0XPzRq2elkOZwDF0rH8SrMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALINyrrPk oNgLBlc2wZ1tfMkYj9WlxMif3rXPQvcV1fWYmkUNIrm5X3GJJZTVzIJNhF10eMdX B4z2pW97Qjn4USZcV1fb6RifZJMqdwxNe8f3nkjvjsGir7bJsKyIU+zzrjCEYMTl XxEHqdEnuki0WIA0+Dfm/GwFBYl8b35V2DGxB22cB01tbzzDNxWUmtJgXHcuP8mG hr2vs90c5KS9rzrC7QPh8ntsBaUQP0CcnYSkbKj8ovgdjsOUT18n6vY+ciGpc2w4 8yAIKwNmGfBOC9NwcxsQ3Uip/Rg7TfThkXsiApD4b9c1ZNN866MR7+2X4y1a5UnT jNgSwLmQVWKiIQ== -----END CERTIFICATE-----Generated at Thu May 21 14:44:04 2026 by rpki-client