$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: b2hZSMLiN7S//Z++zu6Yb8ERSzpIgxNHXhX7U4D2LTs= Subject key identifier: 2D:F6:B7:FB:A5:0D:88:B0:02:EA:79:7B:57:26:4F:97:79:5C:A8:6F Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 01A08D56D7C3FFF9E48DB0BBDC5A85BD4718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1A73 Signing time: Thu 10 Sep 2026 22:01:13 +0000 Manifest this update: Thu 10 Sep 2026 22:01:13 +0000 Manifest next update: Fri 11 Sep 2026 22:01:13 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 3: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (hash: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: 6nAEYKBPE+MkcY6eZGPtG+YA6Q/QTjWNVH13pusdcdM=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 8: ajchcB005SwdhHOonkg_FPYCObk.roa (hash: iRaNo1hXeWmGHavpqJaMPyQrwMjNl6Bwb7CatuzhcAo=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8d:56:d7:c3:ff:f9:e4:8d:b0:bb:dc:5a:85:bd:47:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Sep 10 22:01:13 2026 GMT Not After : Sep 11 22:01:13 2026 GMT Subject: CN=2df6b7fba50d88b002ea797b57264f97795ca86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f6:a1:f7:e3:d7:f9:8a:77:1c:73:71:9e:22: 72:30:2e:da:b5:8b:ba:ba:02:dd:8a:1b:0c:2c:65: 65:62:22:9c:18:cb:4e:7f:b3:52:23:33:7e:8d:1e: e9:fa:4f:e0:b0:b3:d9:40:10:b1:80:4f:1d:e0:45: ac:5d:b0:1f:35:73:b0:84:e0:a8:dd:ff:f8:c1:d9: da:b7:c9:3a:5a:6c:c6:51:2d:d4:03:16:bb:7c:c6: c4:46:9e:58:f3:c3:8e:49:8a:21:17:2b:36:e8:7d: 26:f3:d1:2d:a8:4e:28:39:c1:41:a2:f6:e7:d0:2b: 7c:d7:82:fa:10:5e:13:49:ab:4b:13:f4:8d:73:0f: b5:47:df:d8:a5:9e:21:7e:d9:e5:a7:3c:e2:7f:c0: cf:87:93:1c:d7:67:0c:25:eb:e9:d1:dc:79:1f:bf: 3a:ed:49:a8:14:48:f7:70:23:e3:47:c2:40:3e:6b: ba:c9:60:df:0e:36:07:04:c8:d7:03:18:d4:9f:2d: 91:50:ce:40:45:38:d9:f9:28:73:d4:bb:50:6e:b8: 3b:6b:83:1b:24:87:2e:bd:90:ba:82:01:62:95:5c: ce:5b:91:56:01:57:3d:2a:ec:54:5c:60:fb:b9:72: fb:99:50:54:9b:60:f1:f7:27:b3:1f:f5:a2:3e:db: 3d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F6:B7:FB:A5:0D:88:B0:02:EA:79:7B:57:26:4F:97:79:5C:A8:6F X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:bb:17:b6:ed:a4:88:4f:cd:94:31:d1:1b:cd:60:a6:4a:a1: 56:4d:f9:1b:7c:4d:2c:33:b4:3f:56:b9:9b:c5:ea:0b:f9:bd: 71:7c:f8:5c:a5:47:07:00:1d:bf:e3:6f:13:f7:b3:36:b9:5b: 20:d3:cd:b2:0c:85:6d:c4:c3:e5:a2:5f:7a:41:97:e5:f3:b3: a0:84:cc:d0:0e:33:0b:a7:02:ba:fa:da:17:4e:79:7a:4b:7d: c6:7b:5d:c3:c5:34:9b:69:82:36:30:d5:d0:03:7c:ca:76:a2: ab:ae:29:24:2e:0c:c7:ab:f9:2d:59:c7:81:1a:82:46:ee:57: 8f:7b:5b:fb:5e:3e:ce:4b:17:36:e3:18:78:ac:ea:b6:d4:86: 48:84:c7:ee:3d:13:52:51:22:b2:03:65:a2:c1:fe:6e:c5:45: de:ca:eb:7b:bb:75:27:b7:2b:45:c6:7d:de:11:cb:30:0f:40: ca:ed:22:3e:4b:74:61:0e:35:8b:2b:66:b9:1b:43:da:08:33: 50:a0:a0:f2:3f:b4:c1:30:6f:71:18:22:c8:6d:47:ba:11:97: 34:dd:f1:5b:2c:39:6d:b0:a4:16:68:56:35:a0:6c:57:24:1c: 95:ea:cf:5e:65:33:e6:fe:f9:78:de:7b:aa:09:4c:5e:83:75: 7a:ed:65:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCNVtfD//nkjbC73FqFvUcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwOTEwMjIwMTEzWhcNMjYwOTExMjIwMTEzWjAzMTEwLwYDVQQD EygyZGY2YjdmYmE1MGQ4OGIwMDJlYTc5N2I1NzI2NGY5Nzc5NWNhODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/ah9+PX+Yp3HHNxniJyMC7atYu6 ugLdihsMLGVlYiKcGMtOf7NSIzN+jR7p+k/gsLPZQBCxgE8d4EWsXbAfNXOwhOCo 3f/4wdnat8k6WmzGUS3UAxa7fMbERp5Y88OOSYohFys26H0m89EtqE4oOcFBovbn 0Ct814L6EF4TSatLE/SNcw+1R9/YpZ4hftnlpzzif8DPh5Mc12cMJevp0dx5H786 7UmoFEj3cCPjR8JAPmu6yWDfDjYHBMjXAxjUny2RUM5ARTjZ+Shz1LtQbrg7a4Mb JIcuvZC6ggFilVzOW5FWAVc9KuxUXGD7uXL7mVBUm2Dx9yezH/WiPts9/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC32t/ulDYiwAup5e1cmT5d5XKhvMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLsXtu2k iE/NlDHRG81gpkqhVk35G3xNLDO0P1a5m8XqC/m9cXz4XKVHBwAdv+NvE/ezNrlb INPNsgyFbcTD5aJfekGX5fOzoITM0A4zC6cCuvraF055ekt9xntdw8U0m2mCNjDV 0AN8ynaiq64pJC4Mx6v5LVnHgRqCRu5Xj3tb+14+zksXNuMYeKzqttSGSITH7j0T UlEisgNlosH+bsVF3srre7t1J7crRcZ93hHLMA9Ayu0iPkt0YQ41iytmuRtD2ggz UKCg8j+0wTBvcRgiyG1HuhGXNN3xWyw5bbCkFmhWNaBsVyQclerPXmUz5v75eN57 qglMXoN1eu1lIw== -----END CERTIFICATE-----Generated at Fri Sep 11 03:33:09 2026 by rpki-client