$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: drTV0cXCgbFgp7f6jBqblOnO7lmfohD8cLT0MoJ9Z5I= Subject key identifier: CC:12:27:4F:61:6D:9D:56:B6:49:BE:77:BE:7C:D0:9A:92:3A:69:20 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 01A1807478A673422EAA5FB272618DB60F2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 10DA Signing time: Wed 28 Oct 2026 03:01:18 +0000 Manifest this update: Wed 28 Oct 2026 03:01:18 +0000 Manifest next update: Thu 29 Oct 2026 03:01:18 +0000 Files and hashes: 1: 1dOygqG-hc35q8L_vPnh02DPox4.roa (hash: 88NIkR0RlyPWrnXMJoYPGQ6RYYK/Lrh3CYH/T8a52+U=) 2: 4c6dEd4uIsnbXj6vFcI3hcqgpM0.roa (hash: ydoVXubxnFkYFM9DvCghwZFyS6hJrLHvByD2RsQTuEE=) 3: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (hash: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w=) 4: Ekl9ZAps39mDJpOJE5wsb3KHTLQ.roa (hash: AILUV+bAy5BNQCock6QMXr1jIcW4CIK7KD8/fnpnc3Y=) 5: H1T7Z3E6x7Uh_Pe2DfmLOr0l4Lg.roa (hash: GJaojjFU2dWve2zGy6EwxcIu2oDXii8RKXpBX1h+V2A=) 6: HWeoGI8bSPm_NqHZm92XdX9TYk0.roa (hash: u3mXxiyjIsoywfMmTD3C7UEDYkxAKFfqwDHl41MKpZU=) 7: HgGkGBstyKsZBFCaKLv9CJKNyro.roa (hash: klemyl3LyPK3NCSjEkKCCRHmMvzRtXaWKBO10cWuRcM=) 8: KBZ3p_x3e30GCC3kqHt-9FKuBzY.roa (hash: II/pLWG8MBEYIcI7IT3hmbldHukEfpnwrqnjSMYNI5I=) 9: NN0D0_aIw84B94C96rasFNPLuDM.roa (hash: 4M3sZ2OAV1tYhO68Cgmzb+j2eJ2SJlkEM4hO+HztHes=) 10: ODSmnD95d2Jr_JTaPe13IWewOF0.roa (hash: 6ppsymssal4/4jSeEiGkK1Zc02HPAUAf6tg24yy7s8A=) 11: QBQ6UrNfdmOJ5LiH_jniQBS9lnM.roa (hash: 0vMXpkUay9t5dPiHXGwHHtx/tEoJJV1kaTq7T1ZzaOo=) 12: STr_X7ibHgCYQT1JgQlGopp14g8.roa (hash: y24Cni2O9MPOu7XilBVsJKEMbbOZSFF4Ez3QvgN8otE=) 13: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (hash: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA=) 14: YqH5ViRSiucJOkvTwawjBZ6eu8U.roa (hash: e2G1zMakCaR6O9s9Kn/rE1e5BtZjPP+SArEPvRA0t6E=) 15: Z0t9Up-qusxTZUub1_7i1G-MClE.roa (hash: 1AKwn++qphvp/qWk80/k40hKx3NcCwxBsdn95svRFzc=) 16: b62jiGCoCOfphBx0Greu8Z3ZdAo.roa (hash: N2bkdZ8aXFOh9sHRAusfds2dYfIx15jqEswpLMEWjX0=) 17: d1TClHLhcUMb8ncWrYUz4SmBQ2I.roa (hash: JEzpI03bgbERXMtAE8lIFvppXbv5/QDuRJO76VwhXqE=) 18: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (hash: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=) 19: fhSQAcZN8M6MJU6eEJr0ezOSCK8.roa (hash: rc7dx3g8G6YHWVGxgJ+kLpSnSIHQ09DGq1emkwDM/9w=) 20: gvoaeS97wHF5CUpDZpVYgi7zgTg.roa (hash: 357uWOB58dRDzehfWMSR+yhNnWHaYvHgZS75SBqw+ko=) 21: h8ELK9CFzkXB6XK2AuKxMI0Swjw.roa (hash: CltZB1er9V0ZoEnT4JOp3qmqP/k+HuSMIHey5mc3YYA=) 22: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: HyfnPTM2AeTwQO6ZVv+GzNjKiY2TP30wxd3lsUoHJNY=) 23: kVBqw1NBveCe29uXziyZqSZwkNE.roa (hash: 4QQTa0gtMgzzmsuQOSTk/eBtgGx9FmdkrEJEaJesrmA=) 24: l313G5r0ETGqqj4VTrFk6ALOLjM.roa (hash: ogr3bBOgVEvk+c192eg2fNivGrWZIbZIj0u+yGF08p0=) 25: mmG4pJmj7z2Az5Ui4s_hphr63S0.roa (hash: uZlPkfj6+bh3BTkidqql3eRIHjdgVPBhdwvXm+Nmss8=) 26: n-SWN9_U0QnfWb9w6GSUOvm8HsM.roa (hash: JDcExmHtPZWjyzSGJVwEGZeKlUGQym5Wz3A3In/NaI0=) 27: pgGjwO06WQVAvwzBQEHFretYh38.roa (hash: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o=) 28: r99rOOaMkroRtHNbl2UPuFgp7DY.roa (hash: NX5vhg+l01K0I1XIeq5Y/RGJiIN8n7JnSu9Mdl8VFng=) 29: rl0M30YO5mRmzIuJlkR5ZaoyPC8.roa (hash: DY2o9+D2ZHXHEUpUvBqYBEqDRVNq1b2i/dUfV4RFSfw=) 30: ro2RvjjFNcXTnQybEB-FD_xVXhc.roa (hash: CCMDp6Lf8I24gWjfMef01ZKQhRfyaZ5bPi56f2dw+oE=) 31: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (hash: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI=) 32: yZd-e1Cgfg54_wRXQGztzANFdXA.roa (hash: 43pYXIunEZL1QXffvjKPXvNtdGuparc6EWtl328qkG4=) 33: zJI4zSSM-Xy6elTtEF_q-CJi8yY.roa (hash: xng5AIPJ0J4tevNEcvOUyGzNk+so0PlV4aKAtc56ndQ=) 34: zNTFGEPEh8qqzqNMzOpUeRDtxwU.roa (hash: j0HPyx5ONwiROSYYU5lNSQQAA2ej51YSP8XbO8OmqdM=) 35: zVvwsIDTtPD5LwNtcXQIaTBmUTw.roa (hash: GhveRO7EM7KYB5SoiKcdWplUvmvegcQT3X89sQDRTT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:74:78:a6:73:42:2e:aa:5f:b2:72:61:8d:b6:0f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Oct 28 03:01:18 2026 GMT Not After : Oct 29 03:01:18 2026 GMT Subject: CN=cc12274f616d9d56b649be77be7cd09a923a6920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:a1:69:47:9b:57:ee:2c:ca:27:7d:ee:9c: 1a:10:00:90:fc:f8:05:97:db:d2:e3:7f:3c:4e:67: d6:2a:f4:88:ce:64:26:f5:89:80:47:1c:bc:f7:d8: 57:96:75:c5:12:a4:bf:a1:20:11:4c:a7:fb:32:66: 3c:7f:38:55:34:68:39:d6:d9:05:90:44:e4:02:21: a7:1e:a0:0e:7e:ac:05:02:12:56:b3:76:11:aa:32: 29:71:1a:ac:a2:c1:8b:61:09:44:c7:87:cd:e7:b3: 33:20:22:50:93:1a:a4:46:2a:1d:b3:83:4b:5c:e6: 4a:07:59:07:bc:8b:76:18:43:60:b4:20:ca:ca:87: 5f:91:8e:de:7a:a1:70:35:ae:c1:93:41:6a:f1:ec: d1:74:a8:f9:b0:a7:cf:e5:35:c2:fa:86:d1:9e:b2: fd:05:c3:95:de:f9:0a:62:4b:48:05:44:8f:ea:b6: b3:d1:1e:95:97:ad:8e:e9:3b:d2:65:87:aa:25:c8: 20:ca:3a:00:fa:8b:31:20:8b:4b:66:a8:61:d6:5b: 86:c8:d0:f8:6b:55:13:31:4f:16:9d:26:bb:ba:e9: d3:74:2a:b6:a0:80:7d:5c:8b:fa:a4:61:4d:4e:28: 0d:83:8b:56:47:1d:37:fa:59:42:c0:08:29:9f:6d: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:12:27:4F:61:6D:9D:56:B6:49:BE:77:BE:7C:D0:9A:92:3A:69:20 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:18:5f:9d:bd:d2:01:38:a9:92:0e:b2:90:95:08:2d:70:e7: 1e:2d:34:ce:7d:d8:2e:2d:a8:52:89:89:65:14:10:f1:ff:02: 39:2c:45:85:1f:e5:b0:68:0f:02:26:9b:bb:59:32:98:b3:51: 24:22:6c:3a:1a:e4:f0:70:7b:8f:ee:2a:8c:9e:68:d1:e3:8b: ee:bd:b2:3b:2a:ac:21:53:ea:c6:7d:f2:0b:b9:b9:72:fd:49: f6:1f:89:17:58:48:74:77:ec:05:49:59:69:71:fb:ef:43:e2: 1b:49:38:41:f4:66:34:57:ac:c9:e1:57:10:39:14:23:ae:a0: 0a:97:d1:ce:75:32:88:b6:ea:54:45:37:9d:a1:bb:a8:16:6d: e6:3c:ec:4a:23:38:24:5a:7a:e0:d5:79:96:82:7c:2c:0f:b2: 7d:b2:eb:c6:49:79:86:e6:57:8e:e2:15:22:bd:fa:01:ad:4b: 62:19:d5:2f:cb:83:51:e3:e7:09:f2:54:72:e0:54:76:98:b0: 80:92:ce:64:b0:86:c9:21:85:e7:e4:f2:8c:33:2a:f7:7a:7a: 19:e0:bb:ab:5c:bb:31:76:36:57:c9:67:a3:f1:11:a4:3f:9f: a7:dc:27:e8:3b:d5:d3:f7:41:2d:d0:96:d5:59:8d:77:3d:51: 63:72:ee:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGAdHimc0Iuql+ycmGNtg8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYxMDI4MDMwMTE4WhcNMjYxMDI5MDMwMTE4WjAzMTEwLwYDVQQD EyhjYzEyMjc0ZjYxNmQ5ZDU2YjY0OWJlNzdiZTdjZDA5YTkyM2E2OTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA262haUebV+4syid97pwaEACQ/PgF l9vS4388TmfWKvSIzmQm9YmARxy899hXlnXFEqS/oSARTKf7MmY8fzhVNGg51tkF kETkAiGnHqAOfqwFAhJWs3YRqjIpcRqsosGLYQlEx4fN57MzICJQkxqkRiods4NL XOZKB1kHvIt2GENgtCDKyodfkY7eeqFwNa7Bk0Fq8ezRdKj5sKfP5TXC+obRnrL9 BcOV3vkKYktIBUSP6raz0R6Vl62O6TvSZYeqJcggyjoA+osxIItLZqhh1luGyND4 a1UTMU8WnSa7uunTdCq2oIB9XIv6pGFNTigNg4tWRx03+llCwAgpn21a+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwSJ09hbZ1Wtkm+d7580JqSOmkgMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxhfnb3S ATipkg6ykJUILXDnHi00zn3YLi2oUomJZRQQ8f8COSxFhR/lsGgPAiabu1kymLNR JCJsOhrk8HB7j+4qjJ5o0eOL7r2yOyqsIVPqxn3yC7m5cv1J9h+JF1hIdHfsBUlZ aXH770PiG0k4QfRmNFesyeFXEDkUI66gCpfRznUyiLbqVEU3naG7qBZt5jzsSiM4 JFp64NV5loJ8LA+yfbLrxkl5huZXjuIVIr36Aa1LYhnVL8uDUePnCfJUcuBUdpiw gJLOZLCGySGF5+TyjDMq93p6GeC7q1y7MXY2V8lno/ERpD+fp9wn6DvV0/dBLdCW 1VmNdz1RY3Lu9A== -----END CERTIFICATE-----Generated at Wed Oct 28 11:23:18 2026 by rpki-client