$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: 7DHCphvk7T7Wb4zXTrmg2MraXFR40Np4gPQruY0bnmg= Subject key identifier: D3:42:F8:11:6F:04:A7:D7:27:55:CF:40:9F:CB:A5:55:85:A2:8A:81 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 0198D6CD639D26E88E3CE89102857082015A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 1117 Signing time: Sat 23 Aug 2025 12:00:41 +0000 Manifest this update: Sat 23 Aug 2025 12:00:41 +0000 Manifest next update: Sun 24 Aug 2025 12:00:41 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: P3cedBWM7AfbId3h/t8AEH4Fc26V1MboCxxhYHkKsEY=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:cd:63:9d:26:e8:8e:3c:e8:91:02:85:70:82:01:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Aug 23 12:00:41 2025 GMT Not After : Aug 24 12:00:41 2025 GMT Subject: CN=d342f8116f04a7d72755cf409fcba55585a28a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:67:41:c2:b9:a4:2f:12:96:ac:a9:21:92: 1e:8f:7d:72:fd:67:d6:5a:c9:90:a7:06:7c:fd:24: c8:e9:c3:c0:f5:1a:fa:70:f6:e0:28:44:38:b2:c4: 59:f1:12:e2:47:e6:d6:fb:ba:d9:da:96:fd:9f:92: 3f:78:53:42:67:28:8f:3f:38:80:5d:c1:62:26:ed: 26:ec:96:ba:e9:d2:30:f5:40:69:29:25:e5:16:a1: 7e:70:73:69:1d:77:64:13:b7:6c:54:0f:41:28:b0: 2f:cf:cd:e7:56:57:64:87:9d:80:b9:1d:83:92:3e: 11:9c:45:31:1b:50:2d:02:2b:88:ca:fd:fe:cd:6c: a0:0c:4a:33:ff:e0:6c:ae:2e:10:09:e1:f2:1e:aa: 28:06:e8:84:7e:27:2c:79:31:30:42:29:44:e4:ae: c9:bb:ea:18:66:85:27:33:57:ac:fd:72:a2:b9:97: b6:e4:64:a7:1a:13:bd:ca:c3:7f:7f:35:2e:a5:21: 42:4b:f9:2e:e7:80:a6:71:ff:c1:0b:d0:13:32:0a: c6:46:4c:bd:dd:f1:10:ea:ff:73:70:6d:c5:8f:3d: 68:78:55:6f:be:72:d1:4f:85:42:c1:df:33:f5:a9: c2:3f:67:4d:ef:50:48:e9:2e:6f:1f:b5:f8:31:6b: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:42:F8:11:6F:04:A7:D7:27:55:CF:40:9F:CB:A5:55:85:A2:8A:81 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:57:e1:2c:c1:ea:9b:bc:84:7f:43:90:ba:1a:0b:3c:8b:7e: f9:03:1f:1e:a5:51:3c:a0:9d:a3:15:ea:5c:91:1a:5e:cd:10: ce:08:94:3a:2d:ab:37:dc:6b:80:7d:b5:dd:5e:66:8d:25:ab: 7f:ad:76:7c:89:b6:2d:43:a6:01:b4:e2:6d:06:83:f8:44:e8: 6a:4d:7c:39:9c:2c:e9:22:d2:99:c0:1b:ed:d3:78:45:b8:4e: ac:20:73:58:ae:af:63:02:2c:6e:9a:f9:0a:cc:79:df:ad:4d: 0c:4b:2d:6f:2f:95:89:36:49:75:12:82:83:23:8b:6d:00:3c: a5:9b:c8:bf:48:5f:7e:bc:0f:a7:83:9b:6e:b8:00:47:05:f3: fc:16:e8:35:dd:4b:56:dc:ac:89:0d:2c:25:da:0a:c6:55:9c: a4:2c:a5:23:87:30:ea:92:dd:b6:19:f2:ea:d8:90:c3:7a:75: d0:d4:9a:64:e8:f5:b2:ae:f8:d3:58:ca:09:fb:a6:06:e7:2a: 92:b0:a3:a4:a7:27:d9:1a:2a:83:85:a9:3f:a9:0b:a2:6e:92: b7:fe:1e:9b:aa:0a:1b:60:dd:c4:03:0b:ad:52:67:3b:7d:54: 11:41:0c:dc:6a:82:b1:ff:65:73:4f:64:78:fc:2a:a7:45:ab: d7:8d:23:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWzWOdJuiOPOiRAoVwggFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUwODIzMTIwMDQxWhcNMjUwODI0MTIwMDQxWjAzMTEwLwYDVQQD EyhkMzQyZjgxMTZmMDRhN2Q3Mjc1NWNmNDA5ZmNiYTU1NTg1YTI4YTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldJnQcK5pC8SlqypIZIej31y/WfW WsmQpwZ8/STI6cPA9Rr6cPbgKEQ4ssRZ8RLiR+bW+7rZ2pb9n5I/eFNCZyiPPziA XcFiJu0m7Ja66dIw9UBpKSXlFqF+cHNpHXdkE7dsVA9BKLAvz83nVldkh52AuR2D kj4RnEUxG1AtAiuIyv3+zWygDEoz/+Bsri4QCeHyHqooBuiEficseTEwQilE5K7J u+oYZoUnM1es/XKiuZe25GSnGhO9ysN/fzUupSFCS/ku54Cmcf/BC9ATMgrGRky9 3fEQ6v9zcG3Fjz1oeFVvvnLRT4VCwd8z9anCP2dN71BI6S5vH7X4MWuDFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNC+BFvBKfXJ1XPQJ/LpVWFooqBMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlfhLMHq m7yEf0OQuhoLPIt++QMfHqVRPKCdoxXqXJEaXs0QzgiUOi2rN9xrgH213V5mjSWr f612fIm2LUOmAbTibQaD+EToak18OZws6SLSmcAb7dN4RbhOrCBzWK6vYwIsbpr5 Csx5361NDEstby+ViTZJdRKCgyOLbQA8pZvIv0hffrwPp4ObbrgARwXz/BboNd1L VtysiQ0sJdoKxlWcpCylI4cw6pLdthny6tiQw3p10NSaZOj1sq7401jKCfumBucq krCjpKcn2Roqg4WpP6kLom6St/4em6oKG2DdxAMLrVJnO31UEUEM3GqCsf9lc09k ePwqp0Wr140jag== -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:57 2025 by rpki-client