$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json) Hash identifier: dDHTOQFYP3Yt/M7UWpYk0HHT+gv704dzi23Be23hrMg= Subject key identifier: 65:12:9A:40:E5:2A:C0:36:4F:2E:D5:A1:34:49:AE:C4:63:47:82:13 Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Certificate serial: 019F83B11DDFE3399A31B02870776F607181 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft Manifest number: 02BD Signing time: Tue 21 Jul 2026 08:00:50 +0000 Manifest this update: Tue 21 Jul 2026 08:00:50 +0000 Manifest next update: Wed 22 Jul 2026 08:00:50 +0000 Files and hashes: 1: 6pKfmev0hnHoQYvyLlxq6lN61Ac.roa (hash: oED6iNOIvqNMWfh9ZbIfZ0p3WvaM7LQ4X8hPxL6izFc=) 2: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=) 3: IGonrweKcV3pBiFmxgMN0Hhq74c.roa (hash: YkHvQYVpbz1V6t76f23kYkJHWGSnZkMw7J+Y7FV0iWY=) 4: ZPkrtvVur46cS-5w8dwIkAjNZYE.roa (hash: vPaByPHtcOmoXzXWkiUeeFN03AP9nPQMC4Ibqh8NElg=) 5: ZvN7c-NtqYH-PaeLJUmdEPO5iC8.roa (hash: RkOPQkujkcLmBf4maBg9uGkdxV/kCwgeqMyADPSii/E=) 6: bGlKraIhhwlevroXgB4rLlo-YME.roa (hash: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=) 7: cS-CHZnD9x2r2milTiF4ty-pgr0.roa (hash: MZhAAC778dSXeMdXPPUw8mMDqULLoQ1Gr89ChrEv90Y=) 8: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: gB8CdC2h9vwmKMxAeSMLEw6LQ8fkkwArhRqi4BYk0IU=) 9: nu8XADsimCod0_uWl8egJ3aFHEw.roa (hash: H55dZSXKTNI4+9o7BFR1/GCpspjJcbHLdvt5EmFjk+U=) 10: q1_uvTwS2odl5ebIbbIhhY5492k.roa (hash: rcptFlj+yIPXEnP3ZQnKAkTZfAlxMM8LHnpHcZGEHWI=) 11: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=) 12: zK5cZx2ZW-xmyDIJU358ymaV5Ak.roa (hash: 3S5vYbxXzZt2zqDtbG7ZnUleaiNLeLPmjTrEYTmSEuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:83:b1:1d:df:e3:39:9a:31:b0:28:70:77:6f:60:71:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6 Validity Not Before: Jul 21 08:00:50 2026 GMT Not After : Jul 22 08:00:50 2026 GMT Subject: CN=65129a40e52ac0364f2ed5a13449aec463478213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:6b:b9:e5:ce:13:c7:b4:f9:5e:26:9c:f4: 51:46:0c:05:ec:70:ef:77:43:4a:00:65:c6:22:7f: 19:32:70:6a:49:7d:c2:a7:5a:a5:69:30:d4:26:95: 65:45:b0:28:49:52:f2:d3:e1:c9:b0:b7:24:2a:ff: 76:83:d6:e7:2a:b9:bd:9b:8d:54:e6:00:a4:c5:78: 8b:d6:86:ea:82:52:a8:5c:1e:bc:f5:34:b2:6c:75: 81:b4:97:fc:47:f9:eb:44:6c:af:60:b0:96:9b:a4: b8:c0:f8:81:be:28:a8:86:eb:23:2c:24:00:32:b0: 8d:4b:b3:e7:bb:37:23:dc:77:8e:47:e5:b7:e4:d9: 91:a3:a6:35:a6:6c:ac:a3:97:10:11:80:a1:46:98: 26:73:aa:1c:cd:8b:60:f0:eb:22:f1:9b:f4:e4:8f: 79:ea:59:fc:07:6c:8c:3b:17:2a:a6:e9:0a:68:c3: 8c:cd:a6:00:54:e1:ef:6a:f7:eb:f3:49:8a:e6:af: 42:fe:1e:00:b8:cd:cf:f7:b7:8f:a5:0f:19:84:0c: a7:70:51:e1:c6:92:d8:af:f5:b0:91:31:1f:e9:1b: 06:d0:3a:ad:49:87:18:7b:5e:0f:6a:1e:11:90:ee: e0:7b:b9:3e:62:62:cf:47:f6:e5:31:47:cc:e5:06: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:12:9A:40:E5:2A:C0:36:4F:2E:D5:A1:34:49:AE:C4:63:47:82:13 X509v3 Authority Key Identifier: keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:af:3e:6d:cc:19:c4:a0:b1:92:34:b6:cc:20:24:47:d8:be: b1:f2:dc:b1:33:05:f4:84:6d:b7:81:5b:97:dc:98:80:60:7b: b8:0b:44:6a:8b:67:fb:95:13:96:20:82:e9:10:84:de:9b:98: cc:1c:22:ad:5a:a0:cf:33:5b:d8:e5:13:bc:58:3d:36:83:5a: 12:75:4c:81:79:5c:44:bd:5e:12:43:4a:ca:f0:92:91:74:78: 3a:3a:66:24:84:75:fb:aa:67:18:44:6d:2c:ae:f5:f1:a0:80: 57:81:5e:d9:54:bb:c3:9d:ca:b1:b8:c0:10:b0:67:89:4b:89: 99:52:a9:f7:3c:17:7c:80:bb:18:41:2c:ee:10:f6:aa:6b:8f: dc:3f:69:09:3c:e1:ef:53:ee:0c:07:d6:30:bf:d3:97:a9:e1: 2a:d4:ae:8f:87:3d:f1:88:59:43:94:18:ba:f8:e6:57:ee:50: 55:bf:a3:b8:db:bd:64:e1:90:d3:cd:d5:c2:6e:07:4b:60:1b: 03:37:97:ff:1a:51:85:66:51:28:d2:e6:ea:fb:73:7b:56:0d: c3:74:f6:d9:ef:b2:8d:f3:98:5d:74:1f:fb:87:16:a8:45:93: d7:df:ef:8a:41:cd:76:70:35:9c:3a:ac:68:5b:78:45:24:8c: 71:35:be:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+DsR3f4zmaMbAocHdvYHGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MTcwMzM5YzJiYzY2NGQ2MDBmYTk4YjgwNjEyNjlkNDhl NGYyYzYwHhcNMjYwNzIxMDgwMDUwWhcNMjYwNzIyMDgwMDUwWjAzMTEwLwYDVQQD Eyg2NTEyOWE0MGU1MmFjMDM2NGYyZWQ1YTEzNDQ5YWVjNDYzNDc4MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8RrueXOE8e0+V4mnPRRRgwF7HDv d0NKAGXGIn8ZMnBqSX3Cp1qlaTDUJpVlRbAoSVLy0+HJsLckKv92g9bnKrm9m41U 5gCkxXiL1obqglKoXB689TSybHWBtJf8R/nrRGyvYLCWm6S4wPiBviiohusjLCQA MrCNS7Pnuzcj3HeOR+W35NmRo6Y1pmyso5cQEYChRpgmc6oczYtg8Osi8Zv05I95 6ln8B2yMOxcqpukKaMOMzaYAVOHvavfr80mK5q9C/h4AuM3P97ePpQ8ZhAyncFHh xpLYr/WwkTEf6RsG0DqtSYcYe14Pah4RkO7ge7k+YmLPR/blMUfM5QabVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUSmkDlKsA2Ty7VoTRJrsRjR4ITMB8GA1UdIwQY MBaAFIYXAznCvGZNYA+pi4BhJp1I5PLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMt NzRkOTFjZGJlMTk1LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9jOThhYTMtMGUwYy00ZDk3LTliYzMtNzRkOTFjZGJlMTk1 LzEvaGhjRE9jSzhaazFnRDZtTGdHRW1uVWprOHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF68+bcwZ xKCxkjS2zCAkR9i+sfLcsTMF9IRtt4Fbl9yYgGB7uAtEaotn+5UTliCC6RCE3puY zBwirVqgzzNb2OUTvFg9NoNaEnVMgXlcRL1eEkNKyvCSkXR4OjpmJIR1+6pnGERt LK718aCAV4Fe2VS7w53KsbjAELBniUuJmVKp9zwXfIC7GEEs7hD2qmuP3D9pCTzh 71PuDAfWML/Tl6nhKtSuj4c98YhZQ5QYuvjmV+5QVb+juNu9ZOGQ083Vwm4HS2Ab AzeX/xpRhWZRKNLm6vtze1YNw3T22e+yjfOYXXQf+4cWqEWT19/vikHNdnA1nDqs aFt4RSSMcTW+tg== -----END CERTIFICATE-----Generated at Tue Jul 21 17:27:10 2026 by rpki-client