$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: ajVHoYduB/Tzo9Z2e8WNWM9gD9DzYCwPilRPgtk2IwY= Subject key identifier: 80:59:23:F6:CB:40:00:F0:13:56:A2:1E:CF:C2:B9:CD:9C:93:98:22 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019DCB98B0A2737B673AD8ACC6054C347215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1905 Signing time: Sun 26 Apr 2026 21:01:14 +0000 Manifest this update: Sun 26 Apr 2026 21:01:14 +0000 Manifest next update: Mon 27 Apr 2026 21:01:14 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 1CdaDEMYuczsE5fB0W--_kjgKz4.roa (hash: eLlevVfSpCGIySbdmJVMxY3O6xhqpu9HHp+hjTsXa+Y=) 3: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: l8Zhb1X7hBTEk1j5hW9hD8D+ikZkLbcPVOs4R6zD5Ws=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: XfKFQ0jrYjUJX2-xXdeOtI2PwBA.roa (hash: Dv4g2hdF2DWTn9KmOFquly3+gEa0c48Mrasajz85cj8=) 8: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Apr 2026 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:cb:98:b0:a2:73:7b:67:3a:d8:ac:c6:05:4c:34:72:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Apr 26 21:01:14 2026 GMT Not After : Apr 27 21:01:14 2026 GMT Subject: CN=805923f6cb4000f01356a21ecfc2b9cd9c939822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:72:f2:c1:1b:4b:5f:58:35:06:8e:00:2f: 31:06:9a:91:5d:f8:8d:cc:00:76:89:50:f8:09:5c: 05:73:37:d2:31:82:92:7e:06:c6:bd:0f:11:d3:6e: 3e:cf:5e:19:75:91:ca:8c:f0:56:ef:5e:03:c0:6e: 6d:dc:85:23:9b:e1:9a:9c:9d:ba:9b:f7:00:7e:d6: 6c:0a:44:75:60:48:55:ca:45:25:f5:4a:b8:a3:f7: 01:aa:69:95:60:4d:ab:23:4f:52:76:ac:aa:a1:a7: 50:16:51:a0:9e:08:0a:88:3e:80:a0:d7:28:ec:0d: e4:6b:77:44:34:1a:61:c0:f0:0d:e1:c4:a6:ff:55: f0:97:24:40:08:e8:2e:21:96:f8:c9:fd:f5:fe:95: 84:72:e0:aa:f2:89:c5:f5:c9:db:6f:02:fb:ca:42: f3:c1:97:65:b5:eb:d7:95:08:11:87:76:c8:b8:3e: f4:40:1a:14:44:6c:d2:de:4c:ef:d0:56:b0:ae:51: 91:a6:a4:22:61:03:13:d3:c4:02:4f:f3:35:b5:e2: e0:7f:f2:4e:0e:b3:c4:3d:c0:40:d2:09:21:0c:32: b6:c4:e1:4d:9a:48:96:a6:a2:95:a4:7d:a3:c2:5d: 19:35:2d:f1:bc:9d:13:b8:68:f1:2a:0c:81:98:ca: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:59:23:F6:CB:40:00:F0:13:56:A2:1E:CF:C2:B9:CD:9C:93:98:22 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:ea:23:c0:98:27:29:3b:ca:71:46:d6:57:e4:79:a1:94:5f: 77:50:e2:1a:6e:23:50:1d:2a:9c:f2:ae:61:f8:e4:b7:e0:72: 0f:5c:ff:d6:93:3b:93:2b:a8:02:90:b0:9d:6d:9d:d5:00:81: 4e:ee:08:2e:c2:34:fa:b7:61:b0:1d:75:66:ed:f1:b9:6a:1b: 62:25:9b:dd:b5:1e:e9:63:ea:9a:a1:bd:f4:8d:f1:d1:da:10: 91:06:08:0f:26:53:fc:0c:f0:16:2e:43:8c:08:e9:e8:b0:05: b1:da:ac:57:a7:ba:4a:97:07:c0:9f:bf:e5:47:62:7d:02:51: 4b:70:c3:39:ef:99:1d:de:f0:36:13:60:15:3e:79:f2:3e:be: b8:85:26:4d:b9:2f:4b:0e:3a:96:c4:07:fa:ff:bb:56:30:87: 9e:0e:b9:e3:6f:0f:68:65:44:8d:7e:87:06:fb:7f:53:e1:e7: 2e:ca:e9:4c:2f:4b:c9:3d:5a:fc:2d:17:1c:8f:7f:e8:83:46: 84:80:be:ec:8c:d5:f6:1d:75:ac:37:b8:64:37:55:0d:37:26: 1b:30:90:3c:ad:27:88:ec:9e:0a:95:11:ef:52:36:8e:35:2a: cf:13:08:87:fd:9f:e0:80:99:5b:4e:6e:d4:58:51:e4:f2:bb: 89:52:ae:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3LmLCic3tnOtisxgVMNHIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwNDI2MjEwMTE0WhcNMjYwNDI3MjEwMTE0WjAzMTEwLwYDVQQD Eyg4MDU5MjNmNmNiNDAwMGYwMTM1NmEyMWVjZmMyYjljZDljOTM5ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcpy8sEbS19YNQaOAC8xBpqRXfiN zAB2iVD4CVwFczfSMYKSfgbGvQ8R024+z14ZdZHKjPBW714DwG5t3IUjm+GanJ26 m/cAftZsCkR1YEhVykUl9Uq4o/cBqmmVYE2rI09SdqyqoadQFlGgnggKiD6AoNco 7A3ka3dENBphwPAN4cSm/1XwlyRACOguIZb4yf31/pWEcuCq8onF9cnbbwL7ykLz wZdltevXlQgRh3bIuD70QBoURGzS3kzv0FawrlGRpqQiYQMT08QCT/M1teLgf/JO DrPEPcBA0gkhDDK2xOFNmkiWpqKVpH2jwl0ZNS3xvJ0TuGjxKgyBmMpYGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBZI/bLQADwE1aiHs/Cuc2ck5giMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0eojwJgn KTvKcUbWV+R5oZRfd1DiGm4jUB0qnPKuYfjkt+ByD1z/1pM7kyuoApCwnW2d1QCB Tu4ILsI0+rdhsB11Zu3xuWobYiWb3bUe6WPqmqG99I3x0doQkQYIDyZT/AzwFi5D jAjp6LAFsdqsV6e6SpcHwJ+/5UdifQJRS3DDOe+ZHd7wNhNgFT558j6+uIUmTbkv Sw46lsQH+v+7VjCHng65428PaGVEjX6HBvt/U+HnLsrpTC9LyT1a/C0XHI9/6ING hIC+7IzV9h11rDe4ZDdVDTcmGzCQPK0niOyeCpUR71I2jjUqzxMIh/2f4ICZW05u 1FhR5PK7iVKuOA== -----END CERTIFICATE-----Generated at Mon Apr 27 05:25:06 2026 by rpki-client