$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: DyU9a2IZks7xaYlyyayMNh4f0WDRglZkbv5lVgUH2cA= Subject key identifier: D7:60:AE:39:1E:0B:25:44:84:6C:AF:82:1E:E2:F1:38:0A:36:75:0E Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019D371BF1075C6EFFCEF2631F2EE35C7CE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 18AA Signing time: Sun 29 Mar 2026 01:01:11 +0000 Manifest this update: Sun 29 Mar 2026 01:01:11 +0000 Manifest next update: Mon 30 Mar 2026 01:01:11 +0000 Files and hashes: 1: 1-8Xc5UhFkFkeSelBI1ZmGsTtfcs.roa (hash: 1mzRg3BR7/9e9rE+yCo+M4yRQvpuIjuIUDfelxbti2I=) 2: 59HvWrjKihKr9RdDPWkA9dnGxCc.roa (hash: MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=) 3: 6Iy2stVYyAOK3cFHUzFrtU3yqqk.roa (hash: bKEKJSPPjiwCBk9eimfoK2bSfRI82vMED1F3ZbZRo7E=) 4: 6USQ73XXsQADDlfFBQNXc85exUE.roa (hash: XmLK0DybWGoRs5MTUY2Nj2ixVMkyxHtj6DtfEJI8ixE=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: 9YD7+3iR4mC2+cC1riElda7qCKdvmu64AMcJlztibP8=) 6: Le7cGt8gFm-3H1_D11mNwj1gXMA.roa (hash: NtLDjbklMV+RuIaTJkQFxSif/6pLvKFSJw+ywJEjef0=) 7: Nx6wDnUBSBZqmYN5kHz4xnaVIhE.roa (hash: 5HADbF1OJPVJpyW+dJGox7lC/+M8lgU6YWr2jOeJnE0=) 8: PMxI7Khe9mL0Ix-EqVQT_g2Ff2Q.roa (hash: 5XODEN9rRRm2dM3oH3gBFCGCtoFnoh8oCN423lWgCcI=) 9: TdMbLOSHOW5Od2MPBqFS6Pw8TSY.roa (hash: wSA7n34Q3CSKY3OiMDAvE3mXUvYqFJEZqY3Hqxwarms=) 10: VzkSF7bgEl_NmJPWbUZpB-EUDe4.roa (hash: EnUNWpRNvkvAjAmUGHpkas0UHyHzVNeGZiQl2yGA6v4=) 11: bbThswnkhw-bsj-vAKq8IB9dXpM.roa (hash: Nb9Ott1uEv3G40TjTTxbjKlZ7pPmNwUJi/cgL9PKkzU=) 12: kUD3jEAbAGAKDX2nv1zzjqjtMrQ.roa (hash: iBrbRN5yHaZOz0YkAMPBtq5LTXkFb5Xddgxj4tmhvZE=) 13: lYvJamI0tAc8O4FaFwfruFjjg1E.roa (hash: Lelyen9OZ6dgoQ+3TXtV9LvI+T8OFkWP8/FsYBQdW78=) 14: mkgv9CXQEP8is4ZPhhRRMZkYHyQ.roa (hash: mg6by9JUfFJTsvfd9EIcTnTwvudsayBS4KSqWbGT7yc=) 15: o9zphKniYIOfAnPWBApq0ZN0I4E.roa (hash: rM6KeHfnaZs9yCKg/r/d2uBME8rRmVa/Tvj5BfxU1s8=) 16: sEXydrzCXf04rWIN9LpWOjThmHM.roa (hash: WCqgnou3LY8rem0Uil4eZIZXMoISTpCpJAoKXdmaj2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 01:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:1b:f1:07:5c:6e:ff:ce:f2:63:1f:2e:e3:5c:7c:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Mar 29 01:01:11 2026 GMT Not After : Mar 30 01:01:11 2026 GMT Subject: CN=d760ae391e0b2544846caf821ee2f1380a36750e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:71:40:63:14:db:85:5e:77:3c:45:36:c2: e8:1a:18:fe:9e:8b:b1:29:6a:28:9b:8d:db:a7:84: da:16:b8:aa:f0:6c:e2:55:ea:f3:a8:56:a5:b7:a2: d7:d4:b6:aa:c4:4e:ff:36:59:45:b8:3c:4c:f0:68: 23:37:e9:40:e5:5f:09:8e:50:a0:7d:d7:30:a1:be: 00:c7:64:4a:37:1a:47:91:ee:30:ec:f1:76:c0:74: e1:bd:15:04:ad:26:72:92:95:93:c8:ca:a6:d0:9c: e9:ee:ea:24:6c:be:e3:72:f2:1c:16:d2:ec:83:39: da:02:07:6b:2f:aa:9d:6f:82:05:8b:56:58:1b:e9: 74:cf:64:cd:23:f1:df:c7:35:8b:ff:49:12:24:23: 14:82:9b:45:fa:7e:15:b0:a9:9f:12:38:fd:06:62: db:4d:8f:e0:22:bf:e1:06:27:ab:27:b8:ae:44:71: c5:f3:cc:84:38:27:c3:fb:c3:4d:a3:11:ed:c0:b5: da:2e:45:c4:78:fa:4b:d4:c5:dc:35:56:57:0c:38: e5:f4:91:b3:dc:eb:8d:76:87:98:f5:be:76:a6:86: 97:a6:a0:9e:d9:9b:d5:56:75:1f:79:fc:9b:43:f5: 70:f3:d3:9d:65:bd:a3:dc:a6:d9:e1:be:38:1d:1a: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:60:AE:39:1E:0B:25:44:84:6C:AF:82:1E:E2:F1:38:0A:36:75:0E X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:04:57:0f:d7:e5:d7:8a:d6:75:45:e4:46:0f:3a:f2:06:c6: 67:dc:76:6e:e5:14:91:dc:c4:10:34:6d:d2:b2:ae:07:8a:03: 31:3b:6b:59:23:64:15:4a:c5:f3:81:a8:16:c4:95:7f:1e:42: 30:25:e0:0e:4e:44:2b:0c:1f:4c:00:14:4b:b6:bc:16:90:22: 37:c8:35:6b:a3:7a:9d:80:df:65:ac:c1:be:9c:50:03:59:fb: 2a:3e:5b:7b:de:4a:d4:33:21:e7:d0:8c:5e:26:f0:62:68:26: c7:30:d0:d0:de:71:e1:3d:73:1a:30:27:58:5a:a1:35:3f:16: 0a:93:6a:94:df:03:74:d7:53:68:04:ba:7b:ed:72:10:8f:b6: 48:37:db:7a:2e:c0:3b:0a:e8:7a:a8:26:f5:b5:95:89:58:be: 39:5a:e0:b7:b2:73:6b:d1:4c:e8:46:35:d4:51:7f:91:b0:17: 1c:92:dd:18:72:0b:e6:89:b4:9c:21:c2:66:47:8d:00:2e:76: 4e:b4:e1:ce:e4:31:d7:03:01:e8:b6:e4:b1:36:44:68:77:12: d4:c3:08:f5:27:f6:37:8f:e4:2d:83:87:b5:99:ec:9b:da:62: f1:df:13:1f:b9:b9:82:17:9e:75:95:bc:91:db:0e:ba:72:55: 4e:62:9b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ03G/EHXG7/zvJjHy7jXHznMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjYwMzI5MDEwMTExWhcNMjYwMzMwMDEwMTExWjAzMTEwLwYDVQQD EyhkNzYwYWUzOTFlMGIyNTQ0ODQ2Y2FmODIxZWUyZjEzODBhMzY3NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uVxQGMU24VedzxFNsLoGhj+noux KWoom43bp4TaFriq8GziVerzqFalt6LX1LaqxE7/NllFuDxM8GgjN+lA5V8JjlCg fdcwob4Ax2RKNxpHke4w7PF2wHThvRUErSZykpWTyMqm0Jzp7uokbL7jcvIcFtLs gznaAgdrL6qdb4IFi1ZYG+l0z2TNI/HfxzWL/0kSJCMUgptF+n4VsKmfEjj9BmLb TY/gIr/hBierJ7iuRHHF88yEOCfD+8NNoxHtwLXaLkXEePpL1MXcNVZXDDjl9JGz 3OuNdoeY9b52poaXpqCe2ZvVVnUfefybQ/Vw89OdZb2j3KbZ4b44HRr/nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdgrjkeCyVEhGyvgh7i8TgKNnUOMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQRXD9fl 14rWdUXkRg868gbGZ9x2buUUkdzEEDRt0rKuB4oDMTtrWSNkFUrF84GoFsSVfx5C MCXgDk5EKwwfTAAUS7a8FpAiN8g1a6N6nYDfZazBvpxQA1n7Kj5be95K1DMh59CM XibwYmgmxzDQ0N5x4T1zGjAnWFqhNT8WCpNqlN8DdNdTaAS6e+1yEI+2SDfbei7A Owroeqgm9bWViVi+OVrgt7Jza9FM6EY11FF/kbAXHJLdGHIL5om0nCHCZkeNAC52 TrThzuQx1wMB6LbksTZEaHcS1MMI9Sf2N4/kLYOHtZnsm9pi8d8TH7m5gheedZW8 kdsOunJVTmKbgw== -----END CERTIFICATE-----Generated at Sun Mar 29 11:14:10 2026 by rpki-client