$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: oaAf5I9kUySkdT0tHohddmfNz2HIRAIyWIKvNLgHb6E= Subject key identifier: E5:85:CC:F7:D3:7B:C2:F0:77:A6:76:DC:D2:18:7C:21:60:E6:AB:DC Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019A0035333271060167B94FDBA5B30EBFA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 11B1 Signing time: Mon 20 Oct 2025 06:01:17 +0000 Manifest this update: Mon 20 Oct 2025 06:01:17 +0000 Manifest next update: Tue 21 Oct 2025 06:01:17 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: 3zriA3IbQYSp/ounjS1IYz7yeneSParOPl0yW0CepFM=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:00:35:33:32:71:06:01:67:b9:4f:db:a5:b3:0e:bf:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Oct 20 06:01:17 2025 GMT Not After : Oct 21 06:01:17 2025 GMT Subject: CN=e585ccf7d37bc2f077a676dcd2187c2160e6abdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:8b:c1:6f:be:50:f5:cc:b8:29:26:4f:9e: d6:b4:e2:c1:a2:72:19:c8:6f:76:b0:7c:91:02:f7: 31:5c:53:2f:12:b7:09:f9:57:c7:28:ff:10:55:f7: 30:e2:d6:19:34:ea:b0:3e:b1:5c:de:f1:27:1b:2c: 96:4e:b9:3c:1f:b0:44:7a:b8:f2:b2:b0:cc:86:9f: 96:33:b2:fd:7c:59:cd:27:87:21:f3:53:a2:fd:da: f2:2a:ba:34:d5:11:d5:0f:f6:e0:e1:16:bc:83:17: aa:91:ca:6c:31:03:7e:f7:84:68:b0:ab:9e:6d:55: c8:00:2c:9e:fd:29:35:ea:1f:83:84:e4:f8:a4:f2: 94:bc:82:8f:2c:40:b9:95:f4:8e:21:57:c3:1a:ee: 1b:ec:17:3f:96:10:fa:fd:45:35:22:3c:aa:31:52: c4:56:34:95:e8:38:c0:55:3a:b1:27:58:a5:47:61: f0:93:86:f8:f7:b7:56:1d:c3:7b:d3:3f:ab:c2:35: f8:97:91:54:8b:b9:55:6c:d3:fe:41:79:23:62:3a: 5a:44:e2:2b:fc:d0:c8:27:39:2a:d3:c3:75:a5:5a: b2:8d:03:54:98:f8:51:cb:d9:c8:14:a0:92:7e:20: 5b:42:d4:3f:d3:61:a4:ca:ca:65:8f:d4:93:74:3e: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:85:CC:F7:D3:7B:C2:F0:77:A6:76:DC:D2:18:7C:21:60:E6:AB:DC X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ab:dc:9d:e1:01:bb:32:79:1d:cd:3c:6c:ed:22:53:d9:a9: 05:1d:3f:6b:1e:0c:42:ea:03:14:f5:4a:a5:88:dd:1f:cb:3e: 22:93:bd:72:97:2c:e1:0a:a7:d0:87:dc:40:12:51:49:0c:57: 19:ca:c5:42:63:47:9d:2f:e4:25:62:a7:68:30:6c:78:1f:6d: 87:0d:84:3e:d0:bb:46:c2:1c:93:a0:ee:75:d0:79:23:76:33: 23:10:24:31:8d:48:9a:9e:e1:d9:55:4d:93:03:8a:44:7f:22: f8:7e:00:a6:2f:55:2a:83:7f:0b:f9:d6:af:2e:1c:e5:66:90: 58:ae:66:9a:9d:5f:4d:f4:3b:a1:74:87:ce:c0:5d:78:3b:f6: 31:70:9f:3a:4a:72:db:8a:6d:b5:d8:89:8d:64:65:47:11:25: c5:77:b9:8c:f3:94:0f:06:7a:ec:94:f0:2c:de:8f:8c:fa:73: a4:22:d4:d5:30:21:96:54:3d:74:b3:33:52:6e:4c:ba:9f:b6: 55:79:2f:48:44:bc:c3:ff:9a:3d:9a:19:bf:b0:df:ca:a4:39: 94:bd:37:52:35:b8:4e:6b:ae:03:b5:1d:a2:17:a4:6c:fd:1a: 01:39:43:a2:5d:e5:ba:2d:52:de:b8:34:83:49:43:c1:dc:ae: 4d:84:82:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoANTMycQYBZ7lP26WzDr+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUxMDIwMDYwMTE3WhcNMjUxMDIxMDYwMTE3WjAzMTEwLwYDVQQD EyhlNTg1Y2NmN2QzN2JjMmYwNzdhNjc2ZGNkMjE4N2MyMTYwZTZhYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuceLwW++UPXMuCkmT57WtOLBonIZ yG92sHyRAvcxXFMvErcJ+VfHKP8QVfcw4tYZNOqwPrFc3vEnGyyWTrk8H7BEerjy srDMhp+WM7L9fFnNJ4ch81Oi/dryKro01RHVD/bg4Ra8gxeqkcpsMQN+94RosKue bVXIACye/Sk16h+DhOT4pPKUvIKPLEC5lfSOIVfDGu4b7Bc/lhD6/UU1IjyqMVLE VjSV6DjAVTqxJ1ilR2Hwk4b497dWHcN70z+rwjX4l5FUi7lVbNP+QXkjYjpaROIr /NDIJzkq08N1pVqyjQNUmPhRy9nIFKCSfiBbQtQ/02Gkysplj9STdD4CzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWFzPfTe8Lwd6Z23NIYfCFg5qvcMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKvcneEB uzJ5Hc08bO0iU9mpBR0/ax4MQuoDFPVKpYjdH8s+IpO9cpcs4Qqn0IfcQBJRSQxX GcrFQmNHnS/kJWKnaDBseB9thw2EPtC7RsIck6DuddB5I3YzIxAkMY1Imp7h2VVN kwOKRH8i+H4Api9VKoN/C/nWry4c5WaQWK5mmp1fTfQ7oXSHzsBdeDv2MXCfOkpy 24pttdiJjWRlRxElxXe5jPOUDwZ67JTwLN6PjPpzpCLU1TAhllQ9dLMzUm5Mup+2 VXkvSES8w/+aPZoZv7DfyqQ5lL03UjW4TmuuA7UdohekbP0aATlDol3lui1S3rg0 g0lDwdyuTYSCFw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:14 2025 by rpki-client