$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: dpu+FGvFK8eEVnscSsWx9sRLu5Gcm+bOMqhC80OSMp4= Subject key identifier: 15:8C:0A:AE:F1:29:AE:4E:C2:76:8B:2F:BB:F2:89:54:C5:98:98:49 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019EECA21E477520A76F8C0FD59126B01222 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 198F Signing time: Mon 22 Jun 2026 00:01:47 +0000 Manifest this update: Mon 22 Jun 2026 00:01:47 +0000 Manifest next update: Tue 23 Jun 2026 00:01:47 +0000 Files and hashes: 1: 2SgtXArHa91zHSP62V3VxCstPjQ.roa (hash: V4cGQtg2SBaCI8DVoJaqr+ulcrK5fl4LGupKdqP0XPQ=) 2: 2pWoRlgTXbKVX-Pjg4QmOZkMdQc.roa (hash: JZbkKUO0JB2SSX19jfhYYhBc4c8q+WYE6k6SKK4z740=) 3: Ae57O12AoGSXg6OjRfpvqk40IWY.roa (hash: jqB4zbEQVsVqha6FZMRqBv2gE+Oo/oekXl882sDWeVU=) 4: B-5LpHxABUdZLyscoHErjkqyIKk.roa (hash: O/ISaaNiYJWY/Osy259CyKWIm66WcENOZJ8/yUUM18U=) 5: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (hash: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0=) 6: G6LlelllmoaLjy6pGMovpp7eiKE.roa (hash: i0/dkXUXtTkS5bDtqW3KTO/a6C0FHwJWrOLBcdXePK8=) 7: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: B0+YiteZmHWRSTVqx6QPMUYVf8r6UeE4ixhFqzXPBcE=) 8: Ooo27uikwPKyN38Vc6E5PiPp16o.roa (hash: ysIkELBvjUmxilhHd/e1/CduTTEPJwJqPubCz95v0Yk=) 9: Qe1ETKwQBAYElN8qCmX-ZaM8UHw.roa (hash: PTOGD+XV9y0QkR0kx84XCCF1nWNGNBQ/AqHfSIRK6JI=) 10: R3DBHKjE8ohxKxzIJk7-VPvPd-w.roa (hash: 926NNVMN0dOUlotEee8GGLB2yhZRvKk278w8BXpKBWc=) 11: SKmtQkELvPXhrLNDFKGCzGQ-a9A.roa (hash: R2Ulh0OWrTfBVFa/oSxJhAwaFvEKQ4zUakZOAQnMxc8=) 12: SmdyvtG_Yr4JXEJCTVqNOsLKCxI.roa (hash: IKCVvcTAPNdNWxaMhV5j9dp59UVvAETJogxmpd5B1IE=) 13: UgQXPpoAPzzEY23clmnNXDMzKII.roa (hash: wVgI0/jKoNmP2W8lcpq9i62znX0LDf4x7s4+L/CLD44=) 14: VYgE8-UEudg3YNUfBmaafWIWqbY.roa (hash: JxhGY6dK9SUdetgzpCLPv5EvQwiRqHi3C+Rjc1w+Nx4=) 15: VulRC4nGRSWh634vxQHiExAKf1w.roa (hash: pU+A0lUoH6DQvksFwyWjaM1SkQ2OEMmZ30T/nm+6dqA=) 16: WyhDt_oaTKQN4eZu64NsYbZl4yg.roa (hash: 6ciQpQA0xk5YF/RtEahhFIWkqj1pqFVjXnDAnpgxo9s=) 17: YNMGJ_GCiK2Fi13G2Jq0qQdFgi8.roa (hash: yFLoxqOVICN4QBajonvWQfdIkbyqD9W6GTNUrK2yjZo=) 18: ap_KBBwMetCUgf_yqig9NPG5GpY.roa (hash: 9v8lmt7h/soP3D+lntkITlcRnDn6phDZu9Zze6nhdUM=) 19: ayw9hP-juqBVUYhL4659BWRbagM.roa (hash: GLutlgyBzkV4tGAVG5CwDMmdYLkbefgbgEpP3APu1Jo=) 20: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (hash: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA=) 21: fCPsVmQYESXsIrFzghBdJCH1miI.roa (hash: w0YUnPbD+SIAOv8xIs4vR52GvWAb785T1PJzGOLTe/A=) 22: ge_qG75CaLMKt1s8rP1tYixjlSM.roa (hash: KgSOhN8VDoDw2ctu7y0Z8Aqh13VkWXvib2gbxMkFp90=) 23: if7HhXNRoDw1TnbTu8jR1pBkTZc.roa (hash: 8a3JrsC30tF9jpJNG+DBi1BkDJl3zSelO4aQKYLFjnI=) 24: kB1VAe7IiWttP305SpTIQdMVrgs.roa (hash: 317W73vQ+ktqI7vunTSNBr39CAMFJ4AGWozNVMt/2j4=) 25: lT10uf8B-zB2W7pPHONV8j5w1EU.roa (hash: YP+nZP9+eePypNGYgLu6JQ6qv1UZQzTSxNte2fmvVXA=) 26: m1mZNmGn3cQt2RJZqOQ6x8zlSxQ.roa (hash: QoWaAUlMFh1lhiMZuHSFJG4B7Vf6yI8ZyqsNOBMC67Q=) 27: n8NL6vGQtAkm4gMaIcDuJBP2IEE.roa (hash: jjvwqzXmoxW8cyo92Sd5PIndz67V2dJl+O50LnTVHRU=) 28: nzTl8UF3p7e9FvS0wb6zPjc4FHQ.roa (hash: gedwjVpwIHP4TjyyTazQknsPogKpR2m/8Qa6aAsv0F4=) 29: oMXKRKWkDw3BU5VHnmmfZczo3WU.roa (hash: 0w07L0habLvL3NwvX3KWEEL46dhGeHcv8F5gRgN4UD8=) 30: pqPIqfuErD5mbtSplqtkA0QY6aE.roa (hash: 6vvDbqxKmpWsHd5Wn/2ZoKbmAa7IUMY34ZPHLrIESc8=) 31: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (hash: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o=) 32: sfOxzLZiwEG7r5SeUCMuTrf1tvI.roa (hash: ZUuD5UEFtBeOCS9rptJ0iK7dObQgDw9xm9i0pDpXHUA=) 33: uixetmUNITGIE12MemXK43h0QKQ.roa (hash: LX2K4eqH4TnMxGBuhGigtPQYwuhHnTXNUjj69t8yapQ=) 34: v-ikOphb6e29hpwrNQIcQpcHAak.roa (hash: Pq9zDPP4BdGhk0vZiCEnuLu/9tRKgBub5R+cAWgzevE=) 35: w_A8FIo2-eV1ikzinAoy11bKCzM.roa (hash: LSQro8lyduG8gw0AhNa9mNG1JTNi93nM2iVzU2UVVdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Jun 2026 00:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:ec:a2:1e:47:75:20:a7:6f:8c:0f:d5:91:26:b0:12:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jun 22 00:01:47 2026 GMT Not After : Jun 23 00:01:47 2026 GMT Subject: CN=158c0aaef129ae4ec2768b2fbbf28954c5989849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:7b:d0:2d:e9:20:b0:91:42:a0:bb:1f:eb: 3a:99:8e:56:7e:fa:3f:39:35:9b:67:c7:5c:26:c9: 3b:73:35:76:1c:ad:5c:a8:52:92:1a:0f:81:1b:cd: f8:b2:d6:b6:61:00:66:5b:48:6d:51:e3:4c:25:3a: 33:1c:1d:7f:5e:05:56:b0:9d:03:bb:19:7b:98:07: 89:3b:35:bf:c0:c9:8b:8e:92:d2:a8:6e:41:de:1c: d5:70:fc:d2:4f:b7:15:bf:0d:10:14:90:61:00:01: 60:5a:65:2d:0a:f9:ee:62:d6:36:8e:16:61:16:e7: 34:90:25:ed:8b:f5:52:89:f6:7f:37:29:5d:83:e9: 24:da:02:e7:f7:fa:16:6b:a6:4d:53:00:01:4a:76: d9:77:3c:14:53:9b:c0:6a:de:17:63:2d:da:13:6e: d3:02:2f:70:6e:80:69:8c:65:52:8d:63:a0:15:9c: a0:74:ea:6c:35:d3:38:a6:b8:74:98:00:1a:c8:97: e8:39:40:26:d4:ef:d5:a2:f6:93:53:02:26:83:d1: 06:6d:0a:2b:58:42:33:ad:83:cc:74:2d:e8:5f:4a: 59:8f:db:70:8c:2b:6f:4b:70:0f:c4:c3:f0:60:31: 8e:67:89:dd:71:6a:06:18:4a:7c:57:4a:2c:83:7f: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8C:0A:AE:F1:29:AE:4E:C2:76:8B:2F:BB:F2:89:54:C5:98:98:49 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1f:6e:c6:8c:c2:f8:a4:de:17:41:4b:c7:11:97:80:bf:ac: 73:aa:3b:a0:d9:ec:96:36:05:64:66:d1:9d:1d:6d:22:c5:fb: 21:fa:6c:97:ee:30:28:ed:60:6d:43:a1:58:65:95:8c:2b:e7: d6:8a:d0:a5:35:a6:32:0d:08:d1:ae:15:db:16:4a:f7:bb:68: 0c:55:f5:8f:f9:b9:9c:f8:86:8a:76:16:0c:bc:e5:73:66:7d: de:2c:ef:38:27:90:e8:0a:c3:9c:0d:cd:8a:c5:76:53:e4:d5: db:1b:87:6f:af:54:e0:e9:07:9e:c6:dc:a4:91:5b:24:14:d7: 41:e4:e8:89:db:77:19:dc:73:aa:01:eb:4f:e8:57:33:d7:d1: 9d:3d:29:8f:a7:94:9d:2c:67:50:18:f0:ab:be:01:1c:d7:49: 5d:b0:81:e7:2d:21:5c:52:cd:78:c7:03:58:aa:21:57:16:37: 00:ea:41:11:14:43:e7:16:6a:2b:42:54:0b:c6:82:56:e5:91: 66:27:58:7c:52:30:87:a8:02:4d:99:72:c3:ca:9b:ee:53:26: 21:f4:93:78:bf:df:91:5b:03:ea:06:7d:b9:80:93:a9:4f:31: ad:b1:8d:ac:06:6e:19:99:c5:ed:9b:c2:bb:af:f1:a5:00:01: 6b:5f:02:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7soh5HdSCnb4wP1ZEmsBIiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwNjIyMDAwMTQ3WhcNMjYwNjIzMDAwMTQ3WjAzMTEwLwYDVQQD EygxNThjMGFhZWYxMjlhZTRlYzI3NjhiMmZiYmYyODk1NGM1OTg5ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ut70C3pILCRQqC7H+s6mY5Wfvo/ OTWbZ8dcJsk7czV2HK1cqFKSGg+BG834sta2YQBmW0htUeNMJTozHB1/XgVWsJ0D uxl7mAeJOzW/wMmLjpLSqG5B3hzVcPzST7cVvw0QFJBhAAFgWmUtCvnuYtY2jhZh Fuc0kCXti/VSifZ/Nyldg+kk2gLn9/oWa6ZNUwABSnbZdzwUU5vAat4XYy3aE27T Ai9wboBpjGVSjWOgFZygdOpsNdM4prh0mAAayJfoOUAm1O/VovaTUwImg9EGbQor WEIzrYPMdC3oX0pZj9twjCtvS3APxMPwYDGOZ4ndcWoGGEp8V0osg3+nYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWMCq7xKa5OwnaLL7vyiVTFmJhJMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPh9uxozC +KTeF0FLxxGXgL+sc6o7oNnsljYFZGbRnR1tIsX7Ifpsl+4wKO1gbUOhWGWVjCvn 1orQpTWmMg0I0a4V2xZK97toDFX1j/m5nPiGinYWDLzlc2Z93izvOCeQ6ArDnA3N isV2U+TV2xuHb69U4OkHnsbcpJFbJBTXQeToidt3GdxzqgHrT+hXM9fRnT0pj6eU nSxnUBjwq74BHNdJXbCB5y0hXFLNeMcDWKohVxY3AOpBERRD5xZqK0JUC8aCVuWR ZidYfFIwh6gCTZlyw8qb7lMmIfSTeL/fkVsD6gZ9uYCTqU8xrbGNrAZuGZnF7ZvC u6/xpQABa18Cnw== -----END CERTIFICATE-----Generated at Mon Jun 22 07:07:13 2026 by rpki-client