$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: kd+4S9nPU3Woxw+leY92FqqPKKMaQ8auafABKjNmAx8= Subject key identifier: 0D:E4:01:9F:57:C6:DE:47:18:CC:13:B5:29:69:CC:A7:48:FC:BF:42 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 0197B9D876AD9D1AC7C30657788DCC9C6504 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 15C0 Signing time: Sun 29 Jun 2025 04:01:00 +0000 Manifest this update: Sun 29 Jun 2025 04:01:00 +0000 Manifest next update: Mon 30 Jun 2025 04:01:00 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: fG7+wbcolE9I13+41gu6qyvZkzZ0D2rQpSWexspQ128=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:d8:76:ad:9d:1a:c7:c3:06:57:78:8d:cc:9c:65:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jun 29 04:01:00 2025 GMT Not After : Jun 30 04:01:00 2025 GMT Subject: CN=0de4019f57c6de4718cc13b52969cca748fcbf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:84:a2:2c:99:86:c0:f0:30:07:46:4f:eb: 36:58:e9:34:12:ee:cf:d8:1b:ac:95:1d:e7:39:ea: 09:93:e1:c4:ad:ef:9d:27:b3:3b:8e:a0:4d:c6:55: fa:a6:b3:d0:49:86:74:5e:11:9e:34:68:25:0f:1d: e0:f4:b0:9b:90:f5:77:58:3e:1a:88:52:9d:82:be: 73:ab:5c:c0:e3:29:50:9e:43:b0:49:5b:5c:ec:57: 4a:95:1f:1b:17:0e:2a:54:b1:c9:a3:9a:80:8f:f4: 22:3f:b4:cb:61:2b:bb:bd:38:33:85:88:5d:38:b5: 37:ec:64:d7:8d:4b:ce:ad:8f:06:e7:dd:21:56:0b: 42:ce:4f:60:be:ae:9f:48:8f:d3:4d:19:31:74:64: b4:5e:a2:f9:b7:23:22:ba:ce:37:71:a3:6c:1b:ce: b9:0d:58:77:b7:52:9f:1f:58:ce:14:1f:b4:c4:67: 9d:cd:a3:f8:80:4f:de:a5:a0:00:ee:37:69:5f:18: 59:bd:6b:f0:9b:3e:e3:91:90:2c:b9:92:70:ea:bd: f8:d8:64:d2:5f:c5:5f:95:65:2e:30:6b:cd:8b:24: 7d:e2:7d:b7:70:2c:ed:f5:72:e6:71:98:f1:02:4f: 5a:5b:b0:07:41:b6:0b:13:a9:a7:ec:f3:42:a6:e0: 9c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E4:01:9F:57:C6:DE:47:18:CC:13:B5:29:69:CC:A7:48:FC:BF:42 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:37:f5:1b:be:5f:fc:63:ed:d5:7e:3c:a9:de:65:91:c0:03: ac:85:bf:30:b0:1d:c4:0e:86:7c:77:06:b0:97:33:49:35:7a: 90:c6:64:3a:37:52:2f:e0:c8:e9:87:6d:64:ef:4b:01:c9:31: d7:14:4f:ca:84:19:22:6b:74:19:b2:47:b6:61:f6:31:fd:34: 1d:9e:d5:fc:83:45:2e:bf:08:fa:e5:4f:ed:74:90:b5:41:f3: 41:69:ae:49:5a:95:e3:f0:b1:a5:47:ea:85:82:fd:f6:8b:13: 4c:28:64:bf:53:b4:58:c4:5c:29:9a:2b:f6:e0:37:2c:b7:41: 8b:47:40:8f:d1:4f:9d:70:c4:a5:d5:07:7e:a6:d2:51:cb:d2: dd:2c:df:c2:3a:70:6f:17:ae:27:b8:b2:63:a8:de:95:85:4a: 84:8c:1f:31:da:8d:7b:78:37:21:73:5b:e8:b2:ef:b0:e1:8f: 03:da:b8:62:6f:0b:6e:80:55:0c:cd:fb:65:44:b2:91:ca:c3: 22:81:f2:b3:49:39:5a:c3:d8:d4:01:c6:e5:c0:6c:9d:73:01: d0:4a:0e:98:e8:b7:67:97:dd:50:9b:3c:a9:ad:4b:c6:3f:79: 0d:f8:7d:5b:39:60:d0:8a:07:47:31:fa:98:ba:3c:95:7c:08: 7b:b2:63:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe52HatnRrHwwZXeI3MnGUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwNjI5MDQwMTAwWhcNMjUwNjMwMDQwMTAwWjAzMTEwLwYDVQQD EygwZGU0MDE5ZjU3YzZkZTQ3MThjYzEzYjUyOTY5Y2NhNzQ4ZmNiZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkiEoiyZhsDwMAdGT+s2WOk0Eu7P 2BuslR3nOeoJk+HEre+dJ7M7jqBNxlX6prPQSYZ0XhGeNGglDx3g9LCbkPV3WD4a iFKdgr5zq1zA4ylQnkOwSVtc7FdKlR8bFw4qVLHJo5qAj/QiP7TLYSu7vTgzhYhd OLU37GTXjUvOrY8G590hVgtCzk9gvq6fSI/TTRkxdGS0XqL5tyMius43caNsG865 DVh3t1KfH1jOFB+0xGedzaP4gE/epaAA7jdpXxhZvWvwmz7jkZAsuZJw6r342GTS X8VflWUuMGvNiyR94n23cCzt9XLmcZjxAk9aW7AHQbYLE6mn7PNCpuCcnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3kAZ9Xxt5HGMwTtSlpzKdI/L9CMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjf1G75f /GPt1X48qd5lkcADrIW/MLAdxA6GfHcGsJczSTV6kMZkOjdSL+DI6YdtZO9LAckx 1xRPyoQZImt0GbJHtmH2Mf00HZ7V/INFLr8I+uVP7XSQtUHzQWmuSVqV4/CxpUfq hYL99osTTChkv1O0WMRcKZor9uA3LLdBi0dAj9FPnXDEpdUHfqbSUcvS3Szfwjpw bxeuJ7iyY6jelYVKhIwfMdqNe3g3IXNb6LLvsOGPA9q4Ym8LboBVDM37ZUSykcrD IoHys0k5WsPY1AHG5cBsnXMB0EoOmOi3Z5fdUJs8qa1Lxj95Dfh9Wzlg0IoHRzH6 mLo8lXwIe7Jj/w== -----END CERTIFICATE-----Generated at Sun Jun 29 07:53:50 2025 by rpki-client