$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: IBZf5YfOzr0p6NhzhSXlhLlHNLn+H+bGQf+5wR5eFJQ= Subject key identifier: A0:42:01:2E:9B:02:56:F7:8C:45:2B:18:FC:7B:DE:D5:88:D3:58:08 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019F9FCD9FE476599B268E2D733A30250E74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 19F8 Signing time: Sun 26 Jul 2026 19:01:20 +0000 Manifest this update: Sun 26 Jul 2026 19:01:20 +0000 Manifest next update: Mon 27 Jul 2026 19:01:20 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 3: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (hash: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: 7iX3YlU/e/y9gSW24l2fWMYLPCn/2IRn0OAm++vFAbQ=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 8: ajchcB005SwdhHOonkg_FPYCObk.roa (hash: iRaNo1hXeWmGHavpqJaMPyQrwMjNl6Bwb7CatuzhcAo=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:cd:9f:e4:76:59:9b:26:8e:2d:73:3a:30:25:0e:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jul 26 19:01:20 2026 GMT Not After : Jul 27 19:01:20 2026 GMT Subject: CN=a042012e9b0256f78c452b18fc7bded588d35808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4d:a4:a0:fd:24:a6:25:03:76:ab:f9:94:05: 23:45:80:f8:d1:fc:57:37:be:13:18:66:0e:e9:e5: f1:91:0d:1b:63:64:0d:d5:05:79:4f:19:b5:4d:98: 59:dd:23:36:39:1b:26:63:2b:44:97:50:ec:28:7c: 85:9f:e9:35:46:2e:b9:08:af:9b:3f:e0:c4:a0:58: e3:47:46:12:8e:78:22:83:96:48:8b:94:9c:85:7d: c8:69:af:bf:50:57:07:71:fa:79:a9:f6:46:29:49: fe:a9:9a:83:e7:81:26:32:0c:6e:16:ac:0a:3d:88: 85:d9:b3:24:e9:69:ce:8e:88:7b:99:2c:f2:77:28: dd:62:99:4d:c7:80:67:2a:24:20:5f:dd:80:f5:f8: 8f:ef:e7:8d:27:8b:3f:8a:19:da:86:e1:21:ea:0a: 71:22:4d:f7:c0:cf:d4:6f:bf:00:ff:87:2f:48:81: 16:ea:d3:ba:11:82:73:98:ab:9a:9a:bc:1b:e6:4d: f1:25:68:47:c0:75:23:6f:b9:1f:0a:90:47:a2:fe: 0e:6e:a0:0e:14:6c:3c:60:d7:30:46:41:ee:86:15: 1c:85:17:5c:9b:b8:3a:4f:0e:54:68:3c:fc:c5:86: ba:0b:d4:63:de:d6:9d:19:f6:bf:55:32:62:c1:80: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:42:01:2E:9B:02:56:F7:8C:45:2B:18:FC:7B:DE:D5:88:D3:58:08 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2a:6d:f2:bd:a9:c7:a6:60:c8:0c:7b:52:bb:cc:87:f8:b6: 55:75:e0:de:9c:cb:b7:02:27:d4:c7:3e:77:09:a4:08:48:b6: 8d:dd:d7:e2:b7:7a:5f:8c:f1:64:64:b9:6a:f3:6b:d4:f8:3d: 10:d8:fe:cc:39:3e:c4:d0:32:d7:ef:ab:f1:c1:4b:0f:2b:95: af:e5:41:46:22:9b:b6:4d:10:be:9b:35:8f:ef:aa:16:5a:2b: 90:a7:f8:5d:18:51:ce:47:c3:a1:e2:3e:f8:45:72:a1:25:6f: e3:95:83:b6:d2:7d:1c:d1:04:f9:16:4a:3b:b4:60:7c:93:b7: 58:c2:f4:5c:23:74:c6:5d:36:75:5e:6e:be:01:c9:d8:0c:5c: be:61:34:1a:da:fb:99:5e:39:85:b9:5d:34:e2:28:ac:70:1c: 85:1a:5b:6e:d0:52:4c:b2:c4:f9:fa:e4:7b:50:11:ca:b9:da: 3e:de:a5:30:b7:de:93:99:c0:74:dc:c7:2d:6d:12:c1:5f:e7: 3a:fb:02:35:bd:2d:4f:e7:ac:a3:d7:55:07:d4:06:3a:c6:74: 5f:af:67:78:ce:87:25:96:76:4c:92:62:1e:52:3e:5b:0a:77: 60:65:c1:f5:38:53:7c:3c:6a:bb:d0:51:2d:31:e9:c0:58:0d: 10:81:c3:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fzZ/kdlmbJo4tczowJQ50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwNzI2MTkwMTIwWhcNMjYwNzI3MTkwMTIwWjAzMTEwLwYDVQQD EyhhMDQyMDEyZTliMDI1NmY3OGM0NTJiMThmYzdiZGVkNTg4ZDM1ODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU2koP0kpiUDdqv5lAUjRYD40fxX N74TGGYO6eXxkQ0bY2QN1QV5Txm1TZhZ3SM2ORsmYytEl1DsKHyFn+k1Ri65CK+b P+DEoFjjR0YSjngig5ZIi5SchX3Iaa+/UFcHcfp5qfZGKUn+qZqD54EmMgxuFqwK PYiF2bMk6WnOjoh7mSzydyjdYplNx4BnKiQgX92A9fiP7+eNJ4s/ihnahuEh6gpx Ik33wM/Ub78A/4cvSIEW6tO6EYJzmKuamrwb5k3xJWhHwHUjb7kfCpBHov4ObqAO FGw8YNcwRkHuhhUchRdcm7g6Tw5UaDz8xYa6C9Rj3tadGfa/VTJiwYBfiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBCAS6bAlb3jEUrGPx73tWI01gIMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUypt8r2p x6ZgyAx7UrvMh/i2VXXg3pzLtwIn1Mc+dwmkCEi2jd3X4rd6X4zxZGS5avNr1Pg9 ENj+zDk+xNAy1++r8cFLDyuVr+VBRiKbtk0Qvps1j++qFlorkKf4XRhRzkfDoeI+ +EVyoSVv45WDttJ9HNEE+RZKO7RgfJO3WML0XCN0xl02dV5uvgHJ2AxcvmE0Gtr7 mV45hbldNOIorHAchRpbbtBSTLLE+frke1ARyrnaPt6lMLfek5nAdNzHLW0SwV/n OvsCNb0tT+eso9dVB9QGOsZ0X69neM6HJZZ2TJJiHlI+Wwp3YGXB9ThTfDxqu9BR LTHpwFgNEIHDng== -----END CERTIFICATE-----Generated at Mon Jul 27 00:02:24 2026 by rpki-client