$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: +JHgBVHU+fW0PdQQc489Z9s+fIb7kTpGRSyYygpAhN4= Subject key identifier: 33:AB:0D:07:34:38:25:01:B9:83:A4:7E:77:47:4A:D0:F2:52:AF:C0 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 01A180ABC838148619A1F6DBB40086103E22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1AF1 Signing time: Wed 28 Oct 2026 04:01:43 +0000 Manifest this update: Wed 28 Oct 2026 04:01:43 +0000 Manifest next update: Thu 29 Oct 2026 04:01:43 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 3: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (hash: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: h6XwTk5E+LB/WBAQkzGcU71D/6L+6V8H13E4258Q/rk=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 8: ajchcB005SwdhHOonkg_FPYCObk.roa (hash: iRaNo1hXeWmGHavpqJaMPyQrwMjNl6Bwb7CatuzhcAo=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:ab:c8:38:14:86:19:a1:f6:db:b4:00:86:10:3e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Oct 28 04:01:43 2026 GMT Not After : Oct 29 04:01:43 2026 GMT Subject: CN=33ab0d0734382501b983a47e77474ad0f252afc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:83:21:9b:ac:dc:75:ad:0f:b8:d3:50:32: c1:a4:17:00:47:f2:06:e8:14:71:c9:f9:a9:2a:15: f5:cf:78:68:3c:75:00:8f:4c:a9:50:3e:65:f2:34: 8e:af:44:16:06:1e:9c:5b:2f:d0:54:a2:d3:c6:55: e5:88:cf:25:3b:af:e4:55:f1:cf:9c:bf:b9:3f:42: 8f:1c:c9:6a:68:b6:36:0e:90:19:f5:ab:d1:77:d8: 30:28:f7:25:1d:0e:27:85:7b:6f:38:b9:1b:fc:98: a6:ba:02:f8:56:4a:db:96:a3:b2:78:b4:02:3d:ba: a9:4c:ef:1c:87:45:f6:e4:db:b5:3e:34:28:28:e5: 2b:8c:f2:d6:6a:2c:2a:6d:7d:f4:d4:a6:7e:c0:06: 96:52:47:b8:9a:d0:db:95:04:dc:9a:4e:83:8c:74: 3b:7a:7a:0c:f5:a5:b6:24:5b:25:41:f6:03:72:4c: 39:79:40:13:c5:c9:1b:e7:7f:70:80:3e:55:b9:57: f9:d0:1e:98:ee:f8:c7:a2:b8:ad:40:d1:5f:07:ca: 4f:6d:2f:0a:30:4a:e3:15:52:bd:2c:9e:d2:ad:e3: 49:6d:56:64:3e:88:ff:6b:80:84:f0:9b:5f:42:fa: c2:e4:60:a9:d4:3a:83:80:6d:4d:97:42:15:84:ba: 9e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AB:0D:07:34:38:25:01:B9:83:A4:7E:77:47:4A:D0:F2:52:AF:C0 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:d1:53:f4:c6:e4:c3:bc:20:ae:2b:c8:92:74:0b:0c:45:f0: 9c:0f:cd:15:e5:f2:9c:7d:73:53:7f:27:15:d0:36:97:fb:93: fd:cf:bb:e6:cc:e1:0b:ac:ba:67:5e:aa:db:e5:c6:6c:bd:80: 83:44:b6:d1:8d:6b:37:23:3a:ab:cf:72:7b:78:bb:0c:c1:09: f6:9c:12:46:0c:23:af:f1:28:6c:81:6a:df:73:00:9c:f3:a7: a2:f6:a6:35:be:77:0a:a7:41:1a:3d:28:d9:30:5a:7d:c5:b7: 65:b2:bb:5a:0d:6e:10:3b:ec:84:ec:92:44:d9:ac:a8:48:3a: 33:18:d0:c7:a4:c9:31:e3:d0:97:47:8c:d7:43:02:ac:9e:a6: 81:bd:d6:8e:e0:cc:b2:de:73:01:ba:0e:89:af:d8:d1:a8:31: f5:f2:2a:6b:3a:bc:4d:7a:82:69:ee:da:8b:24:60:1c:3d:6a: fb:c6:c1:69:d0:f7:5c:0d:e0:07:10:71:58:6e:1b:6b:bd:11: d2:19:a5:24:a4:83:3f:f4:b3:6f:26:1f:e3:56:cd:c6:18:a1: 95:ab:9e:d3:92:ca:4f:18:c8:f3:f8:dc:84:fb:41:6f:46:49: d6:a4:ea:fe:df:40:2c:52:2d:d1:0c:d6:c3:f6:8c:2f:a9:47: b2:71:d1:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGAq8g4FIYZofbbtACGED4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYxMDI4MDQwMTQzWhcNMjYxMDI5MDQwMTQzWjAzMTEwLwYDVQQD EygzM2FiMGQwNzM0MzgyNTAxYjk4M2E0N2U3NzQ3NGFkMGYyNTJhZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BeDIZus3HWtD7jTUDLBpBcAR/IG 6BRxyfmpKhX1z3hoPHUAj0ypUD5l8jSOr0QWBh6cWy/QVKLTxlXliM8lO6/kVfHP nL+5P0KPHMlqaLY2DpAZ9avRd9gwKPclHQ4nhXtvOLkb/JimugL4VkrblqOyeLQC PbqpTO8ch0X25Nu1PjQoKOUrjPLWaiwqbX301KZ+wAaWUke4mtDblQTcmk6DjHQ7 enoM9aW2JFslQfYDckw5eUATxckb539wgD5VuVf50B6Y7vjHoritQNFfB8pPbS8K MErjFVK9LJ7SreNJbVZkPoj/a4CE8JtfQvrC5GCp1DqDgG1Nl0IVhLqe1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOrDQc0OCUBuYOkfndHStDyUq/AMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA59FT9Mbk w7wgrivIknQLDEXwnA/NFeXynH1zU38nFdA2l/uT/c+75szhC6y6Z16q2+XGbL2A g0S20Y1rNyM6q89ye3i7DMEJ9pwSRgwjr/EobIFq33MAnPOnovamNb53CqdBGj0o 2TBafcW3ZbK7Wg1uEDvshOySRNmsqEg6MxjQx6TJMePQl0eM10MCrJ6mgb3WjuDM st5zAboOia/Y0agx9fIqazq8TXqCae7aiyRgHD1q+8bBadD3XA3gBxBxWG4ba70R 0hmlJKSDP/SzbyYf41bNxhihlaue05LKTxjI8/jchPtBb0ZJ1qTq/t9ALFIt0QzW w/aML6lHsnHRCA== -----END CERTIFICATE-----Generated at Wed Oct 28 10:28:13 2026 by rpki-client