$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: hP1meU2KGZV2k9d6BsILaLhrh310QMSJdyH97jN3nBQ= Subject key identifier: 02:0D:1A:E8:36:0B:04:9A:E6:68:B2:FA:57:55:CC:51:32:59:FF:42 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019FA184AA5A0E7A6AAA974B579333BAFFBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 0FE2 Signing time: Mon 27 Jul 2026 03:00:53 +0000 Manifest this update: Mon 27 Jul 2026 03:00:53 +0000 Manifest next update: Tue 28 Jul 2026 03:00:53 +0000 Files and hashes: 1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=) 2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=) 3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=) 4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=) 5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=) 6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=) 7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=) 8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=) 9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=) 10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=) 11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=) 12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=) 13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=) 14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=) 15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=) 16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=) 17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=) 18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=) 19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=) 20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=) 21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=) 22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: PJilHeX9zRoT/taBjkinUXEeoj1z+OqGpyhH/Q3hP34=) 23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=) 24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=) 25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=) 26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=) 27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=) 28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=) 29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=) 30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=) 31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=) 32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=) 33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=) 34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=) 35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:84:aa:5a:0e:7a:6a:aa:97:4b:57:93:33:ba:ff:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jul 27 03:00:53 2026 GMT Not After : Jul 28 03:00:53 2026 GMT Subject: CN=020d1ae8360b049ae668b2fa5755cc513259ff42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:f1:6c:31:72:8d:94:c2:70:aa:47:20:78: 9b:a5:0c:57:9a:c7:51:6d:8c:d9:a0:73:b1:4c:f8: 5c:d9:20:8c:00:d0:57:50:71:94:8d:6c:66:92:b1: a4:e1:5b:1f:de:58:18:f1:09:de:49:82:4c:19:b9: 3b:a9:7c:48:ff:9a:58:24:70:b6:85:4f:dd:1b:a2: 4c:46:31:e3:05:4b:d6:ae:1a:2a:5f:ce:26:4e:74: af:36:72:c6:ea:48:ca:d2:75:94:c1:be:b8:23:4e: 91:55:fa:d0:fd:c2:92:8e:ae:89:c6:c0:64:47:9f: 47:5e:fb:b6:b7:ad:38:d1:d7:78:2f:e5:e0:73:95: d2:43:2a:0b:72:ae:21:0a:a3:33:a4:36:53:f3:97: ca:c8:85:51:4f:44:e0:67:05:2c:4a:c7:34:b7:b1: f6:b2:6d:8f:34:ed:e0:8c:d8:51:36:e5:2e:5c:f2: 40:5c:c8:b0:7c:c2:19:83:84:ee:ca:cb:56:f7:da: 78:f3:4a:9a:47:a1:5d:1c:14:58:cd:62:c2:04:92: fd:ba:ae:29:e2:bc:24:0a:c3:62:27:d5:7a:94:83: ad:83:c7:aa:a5:3c:88:65:01:47:4c:48:40:2a:f6: 58:6a:dd:ec:2c:79:8e:33:44:b6:e6:93:73:14:8d: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0D:1A:E8:36:0B:04:9A:E6:68:B2:FA:57:55:CC:51:32:59:FF:42 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:26:fe:2b:f5:bb:17:00:d3:b5:79:0d:76:f2:d3:96:1b:5b: 66:e0:8d:8c:f0:be:3a:31:9f:80:a0:51:7d:67:ea:0a:e7:c0: 16:fc:fc:45:02:49:79:19:70:b0:58:68:a5:44:52:a3:e1:98: e6:a6:1e:fe:09:55:c4:a6:b6:9f:21:a2:c3:24:8e:cf:ea:65: 80:cb:97:11:be:48:2e:38:79:98:cb:5f:ee:7a:c0:62:c1:26: 61:fa:3d:ff:c1:6d:93:30:1a:b3:8f:82:49:62:61:58:90:1f: 29:3d:81:fd:9e:ef:02:24:db:af:d0:1f:60:37:02:d0:80:b4: d4:c5:d5:93:12:b5:eb:31:7e:7e:f3:6b:3e:64:55:ec:ac:db: 31:63:7b:2e:fe:8b:d2:96:aa:a7:ad:6c:70:e3:87:38:c0:c4: c9:37:e4:06:fb:37:69:ed:0e:c0:fa:ff:6a:da:9b:7a:00:32: 27:05:b0:3d:2a:73:50:dc:06:52:f7:76:c1:65:21:07:f8:f8: 23:bc:bf:0a:9c:34:35:65:31:8e:bc:b6:1c:32:a3:e5:c5:30: a3:1b:fc:e8:26:4c:8e:4c:b9:37:69:ef:a7:fd:30:65:11:aa: 97:3c:2d:ce:5d:3b:3b:5a:54:c8:5b:70:8c:93:d5:f0:95:0b: 8f:28:47:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hhKpaDnpqqpdLV5Mzuv+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwNzI3MDMwMDUzWhcNMjYwNzI4MDMwMDUzWjAzMTEwLwYDVQQD EygwMjBkMWFlODM2MGIwNDlhZTY2OGIyZmE1NzU1Y2M1MTMyNTlmZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBnxbDFyjZTCcKpHIHibpQxXmsdR bYzZoHOxTPhc2SCMANBXUHGUjWxmkrGk4Vsf3lgY8QneSYJMGbk7qXxI/5pYJHC2 hU/dG6JMRjHjBUvWrhoqX84mTnSvNnLG6kjK0nWUwb64I06RVfrQ/cKSjq6JxsBk R59HXvu2t6040dd4L+Xgc5XSQyoLcq4hCqMzpDZT85fKyIVRT0TgZwUsSsc0t7H2 sm2PNO3gjNhRNuUuXPJAXMiwfMIZg4TuystW99p480qaR6FdHBRYzWLCBJL9uq4p 4rwkCsNiJ9V6lIOtg8eqpTyIZQFHTEhAKvZYat3sLHmOM0S25pNzFI2SJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAINGug2CwSa5miy+ldVzFEyWf9CMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyb+K/W7 FwDTtXkNdvLTlhtbZuCNjPC+OjGfgKBRfWfqCufAFvz8RQJJeRlwsFhopURSo+GY 5qYe/glVxKa2nyGiwySOz+plgMuXEb5ILjh5mMtf7nrAYsEmYfo9/8FtkzAas4+C SWJhWJAfKT2B/Z7vAiTbr9AfYDcC0IC01MXVkxK16zF+fvNrPmRV7KzbMWN7Lv6L 0paqp61scOOHOMDEyTfkBvs3ae0OwPr/atqbegAyJwWwPSpzUNwGUvd2wWUhB/j4 I7y/Cpw0NWUxjry2HDKj5cUwoxv86CZMjky5N2nvp/0wZRGqlzwtzl07O1pUyFtw jJPV8JULjyhHXQ== -----END CERTIFICATE-----Generated at Mon Jul 27 06:05:46 2026 by rpki-client