$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: WS0rtTysrY/IASucqSPx0nrZCXMGZKS15tRORs+a+sM= Subject key identifier: 4F:5E:3F:1C:60:13:CA:3E:6D:A9:F9:B4:67:C5:14:75:52:EB:E9:65 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019DCE996CC35FBF58F890FAEFC8C564F887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 0EF0 Signing time: Mon 27 Apr 2026 11:00:54 +0000 Manifest this update: Mon 27 Apr 2026 11:00:54 +0000 Manifest next update: Tue 28 Apr 2026 11:00:54 +0000 Files and hashes: 1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=) 2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=) 3: 59xHeQcfN9MrHnGV12N9v9XcThY.roa (hash: Elta/uOtbtWIHwKEBTZUqwVybQem3iwKx6GhTo1J6rY=) 4: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=) 5: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=) 6: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=) 7: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=) 8: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=) 9: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=) 10: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=) 11: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=) 12: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=) 13: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=) 14: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=) 15: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=) 16: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=) 17: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=) 18: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=) 19: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=) 20: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=) 21: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=) 22: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=) 23: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: e0+2t1hQkX+K5NQCvKY7Yb9oT2ePf8N3s/5m4Lj+rFA=) 24: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=) 25: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=) 26: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=) 27: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=) 28: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=) 29: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=) 30: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=) 31: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=) 32: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=) 33: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=) 34: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=) 35: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=) 36: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Apr 2026 08:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:ce:99:6c:c3:5f:bf:58:f8:90:fa:ef:c8:c5:64:f8:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Apr 27 11:00:54 2026 GMT Not After : Apr 28 11:00:54 2026 GMT Subject: CN=4f5e3f1c6013ca3e6da9f9b467c5147552ebe965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:4c:68:1f:d2:e3:62:b3:2f:c7:c5:3d:6e: 41:75:93:f9:38:46:fa:f8:54:1f:3c:f6:66:6e:cd: 22:d1:af:71:1c:ff:9f:97:48:56:66:20:47:83:ab: dc:9f:45:a4:1e:79:19:27:4d:7c:f2:4f:78:98:cb: a8:20:3e:ab:7c:d8:1e:1c:15:91:88:b5:97:f8:f5: 5c:1f:3f:2c:00:c1:10:16:9a:2a:fc:8e:57:ed:67: 6a:3c:90:dc:e4:2d:7d:eb:c7:b2:49:b5:ae:5d:c4: 04:43:f2:dc:0d:bb:8b:d4:12:16:55:90:4a:e4:18: 66:ca:2f:74:56:d0:90:6a:9d:4d:92:60:91:71:e7: f5:6a:31:a2:5a:cb:31:a1:7b:a8:ac:bd:94:47:9f: 7c:a6:95:3d:de:a6:4a:88:19:94:5b:f6:62:37:13: fd:25:9c:60:24:f9:33:f1:ba:2e:e7:91:96:a3:a9: 59:0d:4f:1f:0a:18:7e:90:c7:a9:bd:f7:6b:7b:37: e9:83:d0:c4:cf:3e:63:ac:d7:7f:1b:68:f5:4e:7e: 7e:72:36:a7:d2:29:36:f7:bb:75:9b:93:6e:9a:9e: 95:d0:b9:57:9d:fb:52:fe:2e:2c:3f:da:e4:27:61: c4:6e:45:ee:63:03:10:47:89:8e:c5:e5:75:64:e2: 9a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5E:3F:1C:60:13:CA:3E:6D:A9:F9:B4:67:C5:14:75:52:EB:E9:65 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:50:95:38:ae:bc:98:7d:b5:5c:3e:ca:a6:7e:e6:3b:b1:92: 30:5d:cd:91:23:4e:c7:8d:fa:14:cf:be:c2:5f:ca:9a:a9:b5: ff:65:78:f1:53:6f:0b:06:de:0f:36:0c:43:55:54:d7:a3:aa: 12:e1:e9:f4:41:e5:7b:60:31:de:0c:fc:6c:2f:fd:63:7c:05: c4:dd:75:43:1a:6a:9b:0b:7c:e9:e3:92:d2:b5:c9:6e:3f:85: de:91:c3:84:20:e1:d5:92:ba:4e:84:75:22:af:0a:f1:09:26: 63:31:07:1c:c4:74:06:5a:18:de:a8:6b:dc:7a:01:63:af:9d: 56:b0:b4:fb:ba:e7:94:fe:5a:65:36:82:15:96:fd:98:68:57: e5:c9:43:3c:32:81:9f:fc:65:ce:8a:57:8c:57:ee:cf:77:69: 73:cd:b9:92:b9:6b:82:18:68:b3:59:27:79:74:4b:82:bc:97: 29:99:b0:4c:41:55:7d:d5:01:7e:30:8b:e5:42:1d:20:9a:26: 7d:ca:44:15:5a:3f:20:8a:10:24:8e:3c:d1:55:f5:3f:36:3c: 41:c9:5a:be:07:dd:9a:24:4c:d1:64:4b:b2:8e:a5:63:e3:25: 32:2a:6a:0b:cd:fa:d6:a5:1a:b8:c2:d5:41:8f:5d:a5:92:4d: 73:5d:ab:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3OmWzDX79Y+JD678jFZPiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwNDI3MTEwMDU0WhcNMjYwNDI4MTEwMDU0WjAzMTEwLwYDVQQD Eyg0ZjVlM2YxYzYwMTNjYTNlNmRhOWY5YjQ2N2M1MTQ3NTUyZWJlOTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1hMaB/S42KzL8fFPW5BdZP5OEb6 +FQfPPZmbs0i0a9xHP+fl0hWZiBHg6vcn0WkHnkZJ0188k94mMuoID6rfNgeHBWR iLWX+PVcHz8sAMEQFpoq/I5X7WdqPJDc5C1968eySbWuXcQEQ/LcDbuL1BIWVZBK 5Bhmyi90VtCQap1NkmCRcef1ajGiWssxoXuorL2UR598ppU93qZKiBmUW/ZiNxP9 JZxgJPkz8bou55GWo6lZDU8fChh+kMepvfdrezfpg9DEzz5jrNd/G2j1Tn5+cjan 0ik297t1m5Nump6V0LlXnftS/i4sP9rkJ2HEbkXuYwMQR4mOxeV1ZOKaWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9ePxxgE8o+ban5tGfFFHVS6+llMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlCVOK68 mH21XD7Kpn7mO7GSMF3NkSNOx436FM++wl/Kmqm1/2V48VNvCwbeDzYMQ1VU16Oq EuHp9EHle2Ax3gz8bC/9Y3wFxN11Qxpqmwt86eOS0rXJbj+F3pHDhCDh1ZK6ToR1 Iq8K8QkmYzEHHMR0BloY3qhr3HoBY6+dVrC0+7rnlP5aZTaCFZb9mGhX5clDPDKB n/xlzopXjFfuz3dpc825krlrghhos1kneXRLgryXKZmwTEFVfdUBfjCL5UIdIJom fcpEFVo/IIoQJI480VX1PzY8QclavgfdmiRM0WRLso6lY+MlMipqC8361qUauMLV QY9dpZJNc12r9w== -----END CERTIFICATE-----Generated at Mon Apr 27 14:36:01 2026 by rpki-client