$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: 8ECs+dZrDpqZoiJaYb00d5NynPXhoG9eXAEDUGqLpBk= Subject key identifier: 8B:D5:FB:FA:2C:8A:BC:62:93:E3:EB:65:0C:F6:CB:D7:F6:42:FD:26 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01A04084F5C1FB7DBF41B05DBE128DBF2592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1A3D Signing time: Thu 27 Aug 2026 00:00:50 +0000 Manifest this update: Thu 27 Aug 2026 00:00:50 +0000 Manifest next update: Fri 28 Aug 2026 00:00:50 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: CyZB8kDZ8orCNuNqD0jP-3JDzQ0.roa (hash: AOydhySyRx86U77hRjFuCY7jHngtnWo+Y3ruaih4/CY=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: Y/d5ViEMnRTXjsdo2fdB3m4ys6B94dL14U8p+TZV0yY=) 7: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 8: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 9: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) 17: xBSI8ulhxzPaD1wXzIlWHkfrMZE.roa (hash: xMJ4qKB6RaQDJudqrf471CfMp7Ryx25C6wOirJMZqoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:40:84:f5:c1:fb:7d:bf:41:b0:5d:be:12:8d:bf:25:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Aug 27 00:00:50 2026 GMT Not After : Aug 28 00:00:50 2026 GMT Subject: CN=8bd5fbfa2c8abc6293e3eb650cf6cbd7f642fd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:ca:22:19:2c:20:70:20:f9:59:a3:e6:50: 02:46:f7:27:c6:62:c8:3a:22:8e:44:b4:cb:f5:6a: 40:43:f6:46:20:48:09:2a:c7:70:38:01:16:bf:54: 94:85:5c:d4:0c:91:6b:5b:1e:a3:8a:70:3c:7d:92: c7:ca:54:59:c2:5e:2a:f6:30:fe:5c:80:fb:a2:8d: 3e:f8:53:00:7d:42:9d:54:b9:74:12:d2:b1:11:d8: 47:94:02:af:7c:2f:ba:24:f1:7f:45:d4:de:99:61: 27:84:6b:26:cf:5c:9b:bb:7a:33:4b:53:de:f2:cd: 8f:eb:4d:fb:e8:46:ee:88:21:b0:05:d6:33:a6:ab: 80:a4:ff:c0:42:d8:cf:ae:8a:60:0d:c6:4a:3c:f9: f2:b3:92:10:04:fd:25:28:7a:35:c7:d3:aa:63:c4: 88:9c:08:f2:b8:b0:2d:c3:5b:46:fa:3b:41:6f:cd: 66:65:62:b5:2a:53:36:db:2e:b4:26:b1:1d:bb:54: f7:ea:3f:69:d3:30:e7:3e:8d:6f:53:89:35:6a:98: 95:f8:84:f8:d3:b2:a0:b3:8f:9f:57:8b:02:0c:d0: 0c:8d:24:0b:2f:3a:39:cd:e0:e2:6d:d7:78:2a:1d: 06:6a:92:a4:72:95:ef:46:ab:5c:6f:98:74:7e:75: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D5:FB:FA:2C:8A:BC:62:93:E3:EB:65:0C:F6:CB:D7:F6:42:FD:26 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:71:bc:29:f9:8f:51:75:b1:40:dc:54:bb:07:d0:f5:8d:95: c6:a5:cf:bb:35:1e:01:c3:3d:b1:d4:e7:d1:bc:2c:4a:21:2a: fa:06:80:b2:82:54:59:9e:99:bf:9b:c6:37:66:55:ee:84:be: 76:0d:fb:b3:a0:08:f9:6e:cb:60:fc:76:0e:1a:68:d3:4c:16: d5:90:9c:a7:0e:76:fc:4b:a2:cd:0d:52:8e:94:65:24:9a:01: 02:c9:e1:91:e0:49:9a:53:c6:57:1e:cb:1e:7a:ef:25:d2:d4: a8:8c:0b:6f:c7:19:b8:e8:18:39:7f:f6:6c:fb:a0:26:6b:ae: 67:33:c4:ad:fe:1a:62:44:2d:c2:f4:af:a1:aa:90:74:e9:6b: 65:1c:fe:08:53:d6:8c:1a:56:fe:8d:ff:a2:20:d6:a5:f7:a4: 05:20:3f:52:8e:b8:a6:ba:5c:e3:1f:13:39:4e:d7:09:78:a7: f6:98:61:80:81:c0:05:e5:3f:15:90:df:69:3d:b4:0d:86:92: b6:bd:74:f8:4c:2c:56:be:bd:39:fa:52:8c:e9:e8:76:84:65: ed:ae:aa:56:0e:db:8c:da:75:99:d7:30:0a:01:32:6c:ec:eb: ea:41:dd:20:79:21:04:bc:a4:8b:3f:1c:b8:fc:31:ad:f2:42: 3c:2e:64:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBAhPXB+32/QbBdvhKNvyWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwODI3MDAwMDUwWhcNMjYwODI4MDAwMDUwWjAzMTEwLwYDVQQD Eyg4YmQ1ZmJmYTJjOGFiYzYyOTNlM2ViNjUwY2Y2Y2JkN2Y2NDJmZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1LKIhksIHAg+Vmj5lACRvcnxmLI OiKORLTL9WpAQ/ZGIEgJKsdwOAEWv1SUhVzUDJFrWx6jinA8fZLHylRZwl4q9jD+ XID7oo0++FMAfUKdVLl0EtKxEdhHlAKvfC+6JPF/RdTemWEnhGsmz1ybu3ozS1Pe 8s2P60376EbuiCGwBdYzpquApP/AQtjPropgDcZKPPnys5IQBP0lKHo1x9OqY8SI nAjyuLAtw1tG+jtBb81mZWK1KlM22y60JrEdu1T36j9p0zDnPo1vU4k1apiV+IT4 07Kgs4+fV4sCDNAMjSQLLzo5zeDibdd4Kh0GapKkcpXvRqtcb5h0fnWDyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvV+/osirxik+PrZQz2y9f2Qv0mMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXG8KfmP UXWxQNxUuwfQ9Y2VxqXPuzUeAcM9sdTn0bwsSiEq+gaAsoJUWZ6Zv5vGN2ZV7oS+ dg37s6AI+W7LYPx2Dhpo00wW1ZCcpw52/EuizQ1SjpRlJJoBAsnhkeBJmlPGVx7L HnrvJdLUqIwLb8cZuOgYOX/2bPugJmuuZzPErf4aYkQtwvSvoaqQdOlrZRz+CFPW jBpW/o3/oiDWpfekBSA/Uo64prpc4x8TOU7XCXin9phhgIHABeU/FZDfaT20DYaS tr10+EwsVr69OfpSjOnodoRl7a6qVg7bjNp1mdcwCgEybOzr6kHdIHkhBLykiz8c uPwxrfJCPC5kMA== -----END CERTIFICATE-----Generated at Thu Aug 27 07:55:55 2026 by rpki-client