$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: KjZZaZ9UPulvl8SIzXjrhbcc2UkEfKVUFT++VwXQ7ko= Subject key identifier: 74:28:D5:37:47:17:08:79:F1:AF:49:6E:13:83:1C:F2:B2:BB:97:E5 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 0198D4E02E2E80BF87F3EA298BF46BE3EDFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 140E Signing time: Sat 23 Aug 2025 03:01:58 +0000 Manifest this update: Sat 23 Aug 2025 03:01:58 +0000 Manifest next update: Sun 24 Aug 2025 03:01:58 +0000 Files and hashes: 1: 0dOOZcxouEyBwDParynks7StwHE.roa (hash: JJ6ZudJMCas3SwJxwt6lm5WwMowMP1vWjiYzBqRT97Y=) 2: 0j_F7ObjeWM_-MDv2vnltyDHFUk.roa (hash: OsaLtzwPIW8gqCsltJsusg8e34JBn85Om/z5CrRK5Uo=) 3: 2sVCpnUAKblWh9v7qVEsEKRUfWA.roa (hash: 1CKYprr2EavvDbIEOzey7tbCXji3ClAfurVr7rHadc8=) 4: 7-L8h3vxgPMOucvJUyn6jvtlWq4.roa (hash: JqzKMiGM9qG/KoIssHAuY0XkXfUrBvh/Eg7mCU+N938=) 5: 9oLYcSPHMvCe-Pv2M_rza63XTow.roa (hash: wcB89ybRT1IhIFGZVbatLp94YXi4OhrbT8jvmNnsE+Y=) 6: FlI6inWj2TmnnIGOS7ZVGBf_bD0.roa (hash: 5X+YWS6gSiJ/Tn7alo0GG3dyffx54L0u6yH14DDRlbA=) 7: GaWyzUO0HJeBjasyRqC97NsCSD4.roa (hash: UvlgjWI3E2c5HU/6Dd5CAeuvj7bfQfjld2BSF5GNKKQ=) 8: IVO47FxImh-y3rWgAak5j9Lhqu0.roa (hash: UCZgxxNbeCBV4XvQFqq64x8nscbBvfYrvynDklgIEQw=) 9: JA31DZScZvYIwJfErV7LU6Pm8FI.roa (hash: j2dwdPSin1EaN8bZ47DvZWD73l5sMHPdzBMxjZwMols=) 10: OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa (hash: CYtkRKt0tKCgVnuKUn9N15L60FkF9ZK/0wKUSmI7zGM=) 11: P3PfwPwkcE040d3Qr-D90iwF4_k.roa (hash: T1rptYAIYRS6lWsTlrVwQbPRhxvEwgxKU1Xm6hHDr7M=) 12: SYg89xuEXUG6bMD7Pl2CsVBcmVo.roa (hash: FafX8OoXWchxsyj8C7cAZtH+8tr3bEqU6ajEo9eZfcQ=) 13: V05XtxLuNAQpoO5H9P1IS4dSoX4.roa (hash: LXCIEksdGEPZzBTCWjbFwGM6+GL06zblhdET9a+UUAU=) 14: h6WkXFQCalKSUE8qQsL0s6At9NA.roa (hash: xC7sZws2p6+JMX2/NZkkNUsOt0/rPDjC11vfXSnqVOc=) 15: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: O7lm0L+3g+WLxKG+/JQNLYmZiVVcC+gy3qs9X2og99g=) 16: ijQaYqsX36Iual-crRkacGaVc58.roa (hash: ccJw28PP5f/TupBMNwlADhguaBvKtjfCXWHuFYXPLzA=) 17: tta7Y8CGam3Bk5ymO6HtDo5JmhU.roa (hash: XDbIU4BmGkvASLJz4BGT9b/lR8c31GenOVU33j6ph6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:2e:2e:80:bf:87:f3:ea:29:8b:f4:6b:e3:ed:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Aug 23 03:01:58 2025 GMT Not After : Aug 24 03:01:58 2025 GMT Subject: CN=7428d53747170879f1af496e13831cf2b2bb97e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:b1:68:0f:82:e7:42:15:aa:a0:15:11:d2: 40:c5:91:10:91:be:7d:22:91:85:9f:46:c8:fb:6c: 8e:e5:22:2d:07:47:e5:f0:6c:d4:9b:e2:59:42:e1: 25:04:b2:8f:1a:8d:14:69:c7:34:9e:47:ca:c8:eb: 62:71:de:88:cb:6f:1e:80:ea:0f:ea:c9:4e:6f:29: 49:ad:d4:d1:2d:53:8e:e0:1d:81:d6:d7:35:bd:01: e2:ed:73:29:b7:c5:72:94:17:75:4e:d4:ec:10:11: a5:1b:b1:76:a6:e2:63:35:94:27:e9:bf:38:df:84: cd:07:bc:a6:b4:a3:8d:af:14:6a:62:b6:c4:78:28: 1c:6b:17:4b:86:5b:3d:49:6d:3e:54:85:76:03:7a: 47:df:4e:2a:8b:d2:75:7e:48:f4:13:11:03:c5:a5: bd:9e:78:19:85:6f:54:7f:7d:7c:b4:c7:e3:38:09: 42:11:9a:b7:e2:cc:ba:eb:d7:bf:5e:da:e6:19:74: 07:ab:22:73:b5:cb:30:50:0f:b4:09:94:ba:e4:4c: 25:07:d1:af:fd:6c:09:a1:a5:57:2f:45:b2:76:1a: d0:c7:7e:b0:82:e1:ef:fb:97:61:7e:e1:a9:bb:aa: 50:d6:9b:55:e1:30:44:68:92:4d:21:b9:eb:e0:d2: c5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:28:D5:37:47:17:08:79:F1:AF:49:6E:13:83:1C:F2:B2:BB:97:E5 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4f:da:10:05:72:01:df:54:aa:84:a4:f0:0f:d0:ce:9d:c0: d4:36:63:80:60:14:19:f1:1b:25:87:02:e3:65:e6:a9:87:ec: c9:b7:6e:21:90:44:1b:b6:19:20:19:d3:da:70:2f:4e:d1:c2: fe:49:e7:f4:bc:f5:f9:dd:e8:b7:30:a8:b2:c7:85:4c:cd:5d: 63:5b:9e:7e:1f:12:6d:0b:71:3e:93:d2:74:1d:cc:35:a4:ef: ca:df:a3:91:28:b5:0b:6e:8a:9e:01:16:f4:ba:7a:ef:ca:f5: d6:05:ab:13:cc:fb:00:42:ec:7c:8a:f4:d9:e2:60:94:71:c5: 8d:08:4f:64:6f:6e:a0:0f:a0:f6:9e:95:8e:8e:88:df:20:9f: e1:30:65:c2:5b:a8:d0:bc:fc:9c:a0:d3:0c:c8:3d:67:bb:1f: 60:3a:a9:e8:85:95:e5:85:a2:47:92:d0:aa:aa:ca:aa:e5:b3: b0:de:32:3c:66:95:c3:1b:ca:c1:24:ea:55:e2:23:5e:08:cb: 4a:f1:e4:e8:b1:2a:ba:eb:ba:8c:0e:74:e7:50:58:fe:c3:df: fe:51:86:e1:79:a2:00:15:83:a2:67:d7:87:da:ed:d8:3e:e2: c9:fd:66:96:03:3d:fa:c3:07:3a:fc:e6:ec:32:63:67:29:29: c6:fd:fd:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4C4ugL+H8+opi/Rr4+39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjUwODIzMDMwMTU4WhcNMjUwODI0MDMwMTU4WjAzMTEwLwYDVQQD Eyg3NDI4ZDUzNzQ3MTcwODc5ZjFhZjQ5NmUxMzgzMWNmMmIyYmI5N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi+xaA+C50IVqqAVEdJAxZEQkb59 IpGFn0bI+2yO5SItB0fl8GzUm+JZQuElBLKPGo0Uacc0nkfKyOticd6Iy28egOoP 6slObylJrdTRLVOO4B2B1tc1vQHi7XMpt8VylBd1TtTsEBGlG7F2puJjNZQn6b84 34TNB7ymtKONrxRqYrbEeCgcaxdLhls9SW0+VIV2A3pH304qi9J1fkj0ExEDxaW9 nngZhW9Uf318tMfjOAlCEZq34sy669e/XtrmGXQHqyJztcswUA+0CZS65EwlB9Gv /WwJoaVXL0WydhrQx36wguHv+5dhfuGpu6pQ1ptV4TBEaJJNIbnr4NLFZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQo1TdHFwh58a9JbhODHPKyu5flMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0/aEAVy Ad9UqoSk8A/Qzp3A1DZjgGAUGfEbJYcC42XmqYfsybduIZBEG7YZIBnT2nAvTtHC /knn9Lz1+d3otzCosseFTM1dY1uefh8SbQtxPpPSdB3MNaTvyt+jkSi1C26KngEW 9Lp678r11gWrE8z7AELsfIr02eJglHHFjQhPZG9uoA+g9p6Vjo6I3yCf4TBlwluo 0Lz8nKDTDMg9Z7sfYDqp6IWV5YWiR5LQqqrKquWzsN4yPGaVwxvKwSTqVeIjXgjL SvHk6LEquuu6jA5051BY/sPf/lGG4XmiABWDomfXh9rt2D7iyf1mlgM9+sMHOvzm 7DJjZykpxv39XA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:47 2025 by rpki-client