$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: //ZM1NkPKpo8jTFgx62+ipCJ0DFe1S5JQ1KTbIS6ywc= Subject key identifier: C7:DC:C8:12:CC:BC:87:97:80:2E:6B:A5:4E:48:22:BA:A9:75:E9:DA Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 0198D5BBFEE6EE409AB557D9323228440BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1653 Signing time: Sat 23 Aug 2025 07:02:04 +0000 Manifest this update: Sat 23 Aug 2025 07:02:04 +0000 Manifest next update: Sun 24 Aug 2025 07:02:04 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: x1gz+NTGwOWm/8NPLd9plKTIwWkPxeJf2LKhnwKqwr8=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:fe:e6:ee:40:9a:b5:57:d9:32:32:28:44:0b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Aug 23 07:02:04 2025 GMT Not After : Aug 24 07:02:04 2025 GMT Subject: CN=c7dcc812ccbc8797802e6ba54e4822baa975e9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:f3:94:0c:c7:21:df:06:b8:a9:2e:bc:f8: d6:60:b0:3a:52:f4:73:17:9a:2a:0c:99:8a:1b:6b: de:9c:0e:a9:ee:c0:69:4f:f6:b1:2c:f9:df:0c:d4: 84:4a:61:e6:09:46:eb:4e:22:ef:66:42:ff:ca:82: 7a:7a:87:36:db:6b:35:4c:f8:2f:e9:2a:b1:22:1c: ce:2f:56:27:d1:50:eb:e7:07:25:c9:dc:fb:3e:e2: f3:f9:55:c3:3c:ce:97:30:65:10:22:03:17:93:05: 17:dd:eb:dd:70:e8:39:9f:61:9b:0a:0e:a5:85:08: 52:f8:d1:d8:62:22:4e:b7:de:21:b6:c0:de:cc:03: 9c:11:d9:1e:c9:1e:1d:a8:9b:7b:42:85:bd:28:67: 11:d8:96:28:31:c6:2c:be:6d:de:14:fe:40:2b:5f: 09:39:15:bd:4d:69:a1:1c:c3:fe:f8:d5:e9:c2:64: 97:67:aa:54:75:59:d0:1e:f7:ad:a6:80:a2:e9:78: 66:6e:85:52:ad:5d:61:38:6f:92:39:d7:21:b5:2d: 59:4f:92:a7:90:86:74:30:d4:cf:9e:df:d1:8a:4d: 6d:f6:d8:71:69:56:a8:8f:bb:76:3d:8f:ac:c3:17: 9d:fa:97:45:67:de:cf:dd:58:3e:34:13:de:dd:2c: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DC:C8:12:CC:BC:87:97:80:2E:6B:A5:4E:48:22:BA:A9:75:E9:DA X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:27:e1:7e:a2:5f:39:6f:41:16:01:46:e9:f3:1b:10:e0:51: b2:44:c9:47:de:fa:ab:19:0a:db:b8:87:32:2f:8a:76:b2:b9: d3:23:91:ec:f9:71:98:80:1b:04:2a:62:a8:d5:76:77:41:d6: 41:a1:5a:ab:f8:00:eb:cf:2b:89:33:41:f1:71:a0:c2:70:93: 90:c3:5e:33:8f:b0:aa:50:13:f9:9a:e4:6c:f0:d2:5a:24:01: 24:f5:ff:0c:66:65:10:a6:24:b9:f4:ef:ea:72:4a:ce:37:e1: 95:b7:9d:e4:47:ec:7a:eb:d3:24:ca:f3:db:89:12:42:59:38: d5:ae:fd:69:35:56:67:b6:f3:89:53:8e:09:a5:86:c1:f1:16: 3e:85:6e:8c:01:65:bb:1b:1e:05:74:ec:65:69:0d:31:03:65: f0:e8:e4:73:ab:f5:3e:2b:e9:af:dd:e1:cc:11:90:e3:8a:d1: fc:8a:7a:b5:6c:a0:f3:94:9f:6d:e9:46:aa:65:97:ed:c3:36: c7:3a:41:eb:9e:d3:91:24:31:17:cb:68:14:92:89:45:13:0c: 81:93:58:34:28:d4:27:41:c4:e4:a4:8c:3f:7e:b5:17:fe:dd: 49:20:a1:cd:ad:eb:76:fa:a9:38:6f:8b:f8:46:bf:94:e9:40: f0:71:d3:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu/7m7kCatVfZMjIoRAutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwODIzMDcwMjA0WhcNMjUwODI0MDcwMjA0WjAzMTEwLwYDVQQD EyhjN2RjYzgxMmNjYmM4Nzk3ODAyZTZiYTU0ZTQ4MjJiYWE5NzVlOWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr/zlAzHId8GuKkuvPjWYLA6UvRz F5oqDJmKG2venA6p7sBpT/axLPnfDNSESmHmCUbrTiLvZkL/yoJ6eoc222s1TPgv 6SqxIhzOL1Yn0VDr5wclydz7PuLz+VXDPM6XMGUQIgMXkwUX3evdcOg5n2GbCg6l hQhS+NHYYiJOt94htsDezAOcEdkeyR4dqJt7QoW9KGcR2JYoMcYsvm3eFP5AK18J ORW9TWmhHMP++NXpwmSXZ6pUdVnQHvetpoCi6XhmboVSrV1hOG+SOdchtS1ZT5Kn kIZ0MNTPnt/Rik1t9thxaVaoj7t2PY+swxed+pdFZ97P3Vg+NBPe3SzNXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfcyBLMvIeXgC5rpU5IIrqpdenaMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCfhfqJf OW9BFgFG6fMbEOBRskTJR976qxkK27iHMi+KdrK50yOR7PlxmIAbBCpiqNV2d0HW QaFaq/gA688riTNB8XGgwnCTkMNeM4+wqlAT+ZrkbPDSWiQBJPX/DGZlEKYkufTv 6nJKzjfhlbed5EfseuvTJMrz24kSQlk41a79aTVWZ7bziVOOCaWGwfEWPoVujAFl uxseBXTsZWkNMQNl8Ojkc6v1Pivpr93hzBGQ44rR/Ip6tWyg85SfbelGqmWX7cM2 xzpB657TkSQxF8toFJKJRRMMgZNYNCjUJ0HE5KSMP361F/7dSSChza3rdvqpOG+L +Ea/lOlA8HHT8A== -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:51 2025 by rpki-client