$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: mgawOzh8J3GJnfnAqjqWw3QVuUnVTP85suO929tvRc0= Subject key identifier: D5:21:2C:F1:EC:00:D7:7A:5A:23:96:1A:43:55:DA:5C:2D:09:BA:C9 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 0198D6985A0086146D8686FF5A4316FAF37E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 16BF Signing time: Sat 23 Aug 2025 11:02:45 +0000 Manifest this update: Sat 23 Aug 2025 11:02:45 +0000 Manifest next update: Sun 24 Aug 2025 11:02:45 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: ORqmIJQNvQRvCejPnuXjaiyf0sR2/H52Z4u00Uv6mkI=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: A-FcY1w1X7TzQFigxT1IrWquTEc.roa (hash: VdZxwPXAYD5eXobUjd0+WlugUlYZzKWPDmGfZNzWyp8=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 11: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 12: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (hash: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: LbbuvYNCQUioVv8zQH-Fc5UlHII.roa (hash: YzZ+diVYTspWHIE3LvR+g+W1S6ZTUYeSZQdRtZ8vrSI=) 16: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 17: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 18: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 19: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 20: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 21: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 22: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 23: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 24: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 25: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 26: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 27: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 28: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:5a:00:86:14:6d:86:86:ff:5a:43:16:fa:f3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Aug 23 11:02:45 2025 GMT Not After : Aug 24 11:02:45 2025 GMT Subject: CN=d5212cf1ec00d77a5a23961a4355da5c2d09bac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:26:99:0b:b7:60:11:24:65:92:7a:62:42: 6c:6c:9e:61:a5:c4:01:3c:9c:f0:55:67:ee:1b:d9: d6:08:1d:99:83:7b:97:be:b1:a5:9c:01:4e:40:03: de:48:4c:8a:73:ab:42:dd:e7:9e:c1:cb:e5:bf:02: 57:57:bb:0b:66:6e:c1:53:47:38:21:56:61:63:fd: 18:7c:2f:88:1b:77:56:7d:79:de:f9:40:30:b5:13: 38:d6:6f:3c:35:6a:02:07:31:92:8d:c5:02:f2:8f: 85:7e:76:d4:cc:df:75:29:ac:ba:57:df:f8:2a:d8: 85:e3:3c:fe:70:52:8c:5d:d1:31:1f:75:24:b6:85: f6:2d:9e:e5:e4:09:97:79:b7:75:15:47:b8:0c:33: 42:7f:17:e4:01:96:45:b5:4c:df:67:f3:8c:95:66: fd:41:27:35:9c:0f:80:82:52:78:5e:10:01:82:f6: 75:67:94:cb:02:23:7a:63:df:b9:e4:a3:95:39:63: d4:87:6f:64:ad:1d:7f:0c:8a:b1:f5:00:cd:68:dc: 7d:2b:8f:fb:3f:c6:cb:1c:b2:9c:4f:7d:12:32:d3: 84:30:b1:89:e6:85:4a:9e:2d:e3:82:75:6c:42:47: 52:e6:7c:63:f7:09:c0:cd:92:10:f4:8b:3d:09:b5: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:21:2C:F1:EC:00:D7:7A:5A:23:96:1A:43:55:DA:5C:2D:09:BA:C9 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:43:87:a8:dd:fe:dd:b9:b8:1f:d8:a1:a7:ac:cd:b8:f4:17: 2a:3d:7f:ab:f3:b6:ed:b6:62:87:5f:36:3d:74:d2:3c:92:30: 79:4f:9d:0f:ab:04:2d:fc:a4:61:6f:c1:d7:78:d9:21:46:75: 09:52:b8:dc:16:03:cf:6b:15:a6:07:56:9a:67:41:5c:02:e9: 39:26:fa:b5:10:6e:20:d8:31:d1:e5:d4:68:da:b4:88:f5:2a: e2:b7:73:8a:06:e5:c7:a0:d2:65:f9:36:c6:f1:cf:69:80:0d: 3e:65:1c:f1:9f:b0:3b:6a:7d:8c:80:f9:88:c9:3b:00:20:2b: 18:24:cf:cd:52:60:15:a7:a8:70:f4:5c:92:41:c9:2f:da:e5: c3:b1:8f:2a:39:70:ed:e2:11:0c:26:78:af:6e:ee:c6:67:c4: 4c:44:05:00:de:01:66:cb:e3:c3:92:42:70:35:1a:01:e3:44: 7e:3c:08:02:d2:5c:27:b6:35:89:f0:bf:3c:fa:db:c5:46:be: fc:e0:b7:ce:93:ea:9a:de:43:01:d2:f0:98:75:16:cf:ba:71: 1c:1c:77:98:89:0d:ff:ba:57:2e:02:f0:37:a0:f4:c2:3b:7f: cc:74:25:37:54:a1:bb:31:3f:76:ac:d4:8c:e9:f8:a2:d9:b7: e4:6a:ed:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmFoAhhRthob/WkMW+vN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwODIzMTEwMjQ1WhcNMjUwODI0MTEwMjQ1WjAzMTEwLwYDVQQD EyhkNTIxMmNmMWVjMDBkNzdhNWEyMzk2MWE0MzU1ZGE1YzJkMDliYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpQmmQu3YBEkZZJ6YkJsbJ5hpcQB PJzwVWfuG9nWCB2Zg3uXvrGlnAFOQAPeSEyKc6tC3eeewcvlvwJXV7sLZm7BU0c4 IVZhY/0YfC+IG3dWfXne+UAwtRM41m88NWoCBzGSjcUC8o+FfnbUzN91Kay6V9/4 KtiF4zz+cFKMXdExH3UktoX2LZ7l5AmXebd1FUe4DDNCfxfkAZZFtUzfZ/OMlWb9 QSc1nA+AglJ4XhABgvZ1Z5TLAiN6Y9+55KOVOWPUh29krR1/DIqx9QDNaNx9K4/7 P8bLHLKcT30SMtOEMLGJ5oVKni3jgnVsQkdS5nxj9wnAzZIQ9Is9CbUHoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUhLPHsANd6WiOWGkNV2lwtCbrJMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0OHqN3+ 3bm4H9ihp6zNuPQXKj1/q/O27bZih182PXTSPJIweU+dD6sELfykYW/B13jZIUZ1 CVK43BYDz2sVpgdWmmdBXALpOSb6tRBuINgx0eXUaNq0iPUq4rdzigblx6DSZfk2 xvHPaYANPmUc8Z+wO2p9jID5iMk7ACArGCTPzVJgFaeocPRckkHJL9rlw7GPKjlw 7eIRDCZ4r27uxmfETEQFAN4BZsvjw5JCcDUaAeNEfjwIAtJcJ7Y1ifC/PPrbxUa+ /OC3zpPqmt5DAdLwmHUWz7pxHBx3mIkN/7pXLgLwN6D0wjt/zHQlN1ShuzE/dqzU jOn4otm35GrthQ== -----END CERTIFICATE-----Generated at Sat Aug 23 18:43:08 2025 by rpki-client