$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: 88csu5iw7IcI6sMjssAOBNGDG2WzHXEHC7dFo/F4YfA= Subject key identifier: E3:D2:43:DA:AE:8D:D7:68:D5:0E:35:11:B1:6E:BC:53:F3:87:17:6A Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 0197B70E8D48B9801F5704671B7CA6321462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 137A Signing time: Sat 28 Jun 2025 15:01:13 +0000 Manifest this update: Sat 28 Jun 2025 15:01:13 +0000 Manifest next update: Sun 29 Jun 2025 15:01:13 +0000 Files and hashes: 1: 0dOOZcxouEyBwDParynks7StwHE.roa (hash: JJ6ZudJMCas3SwJxwt6lm5WwMowMP1vWjiYzBqRT97Y=) 2: 0j_F7ObjeWM_-MDv2vnltyDHFUk.roa (hash: OsaLtzwPIW8gqCsltJsusg8e34JBn85Om/z5CrRK5Uo=) 3: 2sVCpnUAKblWh9v7qVEsEKRUfWA.roa (hash: 1CKYprr2EavvDbIEOzey7tbCXji3ClAfurVr7rHadc8=) 4: 7-L8h3vxgPMOucvJUyn6jvtlWq4.roa (hash: JqzKMiGM9qG/KoIssHAuY0XkXfUrBvh/Eg7mCU+N938=) 5: 9oLYcSPHMvCe-Pv2M_rza63XTow.roa (hash: wcB89ybRT1IhIFGZVbatLp94YXi4OhrbT8jvmNnsE+Y=) 6: FlI6inWj2TmnnIGOS7ZVGBf_bD0.roa (hash: 5X+YWS6gSiJ/Tn7alo0GG3dyffx54L0u6yH14DDRlbA=) 7: GaWyzUO0HJeBjasyRqC97NsCSD4.roa (hash: UvlgjWI3E2c5HU/6Dd5CAeuvj7bfQfjld2BSF5GNKKQ=) 8: IVO47FxImh-y3rWgAak5j9Lhqu0.roa (hash: UCZgxxNbeCBV4XvQFqq64x8nscbBvfYrvynDklgIEQw=) 9: JA31DZScZvYIwJfErV7LU6Pm8FI.roa (hash: j2dwdPSin1EaN8bZ47DvZWD73l5sMHPdzBMxjZwMols=) 10: OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa (hash: CYtkRKt0tKCgVnuKUn9N15L60FkF9ZK/0wKUSmI7zGM=) 11: P3PfwPwkcE040d3Qr-D90iwF4_k.roa (hash: T1rptYAIYRS6lWsTlrVwQbPRhxvEwgxKU1Xm6hHDr7M=) 12: SYg89xuEXUG6bMD7Pl2CsVBcmVo.roa (hash: FafX8OoXWchxsyj8C7cAZtH+8tr3bEqU6ajEo9eZfcQ=) 13: V05XtxLuNAQpoO5H9P1IS4dSoX4.roa (hash: LXCIEksdGEPZzBTCWjbFwGM6+GL06zblhdET9a+UUAU=) 14: h6WkXFQCalKSUE8qQsL0s6At9NA.roa (hash: xC7sZws2p6+JMX2/NZkkNUsOt0/rPDjC11vfXSnqVOc=) 15: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: PdWOtMvCbu7T2gTIfctnXX7zKbFsR+GBkXRuv+p+ZHE=) 16: ijQaYqsX36Iual-crRkacGaVc58.roa (hash: ccJw28PP5f/TupBMNwlADhguaBvKtjfCXWHuFYXPLzA=) 17: tta7Y8CGam3Bk5ymO6HtDo5JmhU.roa (hash: XDbIU4BmGkvASLJz4BGT9b/lR8c31GenOVU33j6ph6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:8d:48:b9:80:1f:57:04:67:1b:7c:a6:32:14:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jun 28 15:01:13 2025 GMT Not After : Jun 29 15:01:13 2025 GMT Subject: CN=e3d243daae8dd768d50e3511b16ebc53f387176a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:67:ed:6d:b7:ab:b6:bc:77:e9:14:ad:25: 89:a6:0f:c1:4f:74:18:dd:aa:25:25:10:fc:95:b3: ca:e3:c1:55:41:34:26:ca:ca:67:94:a2:9d:bd:a7: de:8c:ab:12:ea:6e:c9:49:f5:4c:c1:94:bc:ac:eb: e9:26:b4:72:d5:9b:0a:28:69:96:5b:5d:5a:dd:2b: ab:4f:7e:e4:92:94:24:03:b4:69:23:d4:7d:0a:69: ec:9b:33:25:d6:5b:47:05:e7:0c:b3:55:a5:59:e0: 45:37:72:46:3c:e3:b7:77:d1:05:8f:90:50:70:6f: 19:a9:3d:ec:00:35:2d:05:4c:61:35:ba:f4:b4:d0: e4:6e:2f:99:ea:1b:6c:a0:66:1b:db:3e:5e:5c:fb: f4:1d:b8:be:ba:cb:4e:89:b9:e2:f5:f9:18:54:7d: 42:8f:d1:e3:b3:c2:b8:d3:25:e9:39:35:04:7e:a8: ef:a5:91:54:35:f1:aa:f5:8e:be:9e:47:2b:8d:05: df:db:a2:4c:1b:dc:2a:f0:aa:a4:d5:d4:ee:ff:80: ac:04:96:ba:9e:cf:cc:4b:33:1b:b9:2f:78:b1:5b: b6:dc:c5:ac:bd:c8:32:53:99:7c:0f:de:35:e1:4c: 16:27:0e:02:b8:0b:f3:74:d2:9b:fd:f9:0c:51:1e: e9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D2:43:DA:AE:8D:D7:68:D5:0E:35:11:B1:6E:BC:53:F3:87:17:6A X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fb:56:af:68:38:69:4e:92:07:67:a3:e2:1c:da:97:3e:c6: 41:3c:13:40:a4:15:52:4e:b5:fc:70:09:62:3a:46:3a:79:8f: c4:a9:15:94:94:4d:69:57:f0:29:30:f0:f2:d7:87:6d:67:9a: ab:f0:b8:5d:6d:0e:5e:ba:1f:3e:64:53:51:e1:fa:d9:cf:4d: 5f:03:f1:a8:54:32:59:c8:3e:14:f2:a5:67:b0:2f:26:39:e5: 5c:3d:ce:4d:9d:49:f7:eb:c1:f0:a3:db:30:3b:5e:85:ac:9b: 5f:94:8f:59:44:36:61:49:b8:27:33:fd:3a:86:f2:4f:b9:97: cd:32:8f:a0:35:c6:8e:e7:1e:3f:4e:db:32:b2:3b:93:6d:9c: 13:56:d2:b7:1f:9c:94:32:69:aa:77:e9:e8:c7:48:93:08:79: f0:7f:e3:a9:2c:41:4f:f6:6d:fe:1a:96:09:08:f6:36:6a:32: 19:9e:29:69:f3:f3:7a:2a:aa:f9:b6:83:38:1d:cb:0d:cd:ef: 25:07:13:c2:bf:8b:f1:d1:df:b0:f4:f2:55:aa:47:0a:24:37: 35:79:20:58:c5:5f:24:1b:2a:ae:42:d9:c4:cb:39:4d:9a:ca: 2d:91:1e:30:02:f4:e4:c3:44:c5:5f:89:a6:12:33:82:62:d0: 8f:97:06:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3Do1IuYAfVwRnG3ymMhRiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjUwNjI4MTUwMTEzWhcNMjUwNjI5MTUwMTEzWjAzMTEwLwYDVQQD EyhlM2QyNDNkYWFlOGRkNzY4ZDUwZTM1MTFiMTZlYmM1M2YzODcxNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP5n7W23q7a8d+kUrSWJpg/BT3QY 3aolJRD8lbPK48FVQTQmyspnlKKdvafejKsS6m7JSfVMwZS8rOvpJrRy1ZsKKGmW W11a3SurT37kkpQkA7RpI9R9CmnsmzMl1ltHBecMs1WlWeBFN3JGPOO3d9EFj5BQ cG8ZqT3sADUtBUxhNbr0tNDkbi+Z6htsoGYb2z5eXPv0Hbi+ustOibni9fkYVH1C j9Hjs8K40yXpOTUEfqjvpZFUNfGq9Y6+nkcrjQXf26JMG9wq8Kqk1dTu/4CsBJa6 ns/MSzMbuS94sVu23MWsvcgyU5l8D9414UwWJw4CuAvzdNKb/fkMUR7pcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPSQ9qujddo1Q41EbFuvFPzhxdqMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPtWr2g4 aU6SB2ej4hzalz7GQTwTQKQVUk61/HAJYjpGOnmPxKkVlJRNaVfwKTDw8teHbWea q/C4XW0OXrofPmRTUeH62c9NXwPxqFQyWcg+FPKlZ7AvJjnlXD3OTZ1J9+vB8KPb MDtehaybX5SPWUQ2YUm4JzP9OobyT7mXzTKPoDXGjuceP07bMrI7k22cE1bStx+c lDJpqnfp6MdIkwh58H/jqSxBT/Zt/hqWCQj2NmoyGZ4pafPzeiqq+baDOB3LDc3v JQcTwr+L8dHfsPTyVapHCiQ3NXkgWMVfJBsqrkLZxMs5TZrKLZEeMAL05MNExV+J phIzgmLQj5cGQA== -----END CERTIFICATE-----Generated at Sat Jun 28 22:33:33 2025 by rpki-client