$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: fTYKZkjnKQBq9FyfQM6bQ5EaWXtR6E2K/pIPHkbaMGQ= Subject key identifier: EA:BE:43:C9:60:B5:21:F2:97:FC:67:34:42:67:88:77:07:C0:4A:BA Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 0199FBEA8E48A02444CB62AFE0DE0069E334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 1136 Signing time: Sun 19 Oct 2025 10:01:16 +0000 Manifest this update: Sun 19 Oct 2025 10:01:16 +0000 Manifest next update: Mon 20 Oct 2025 10:01:16 +0000 Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=) 2: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 3: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 4: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: MI27GaNgMLkf/08eiShuDNcY7yGfW+LTYoLgYnDX1gc=) 6: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=) 7: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 8: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=) 9: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=) 10: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 11: VQdBddpukAmJt5hMDo3MH_s40gY.roa (hash: Ye0y1BoPENu4y2+F2w73JV34dGGP4dVDpycXyq9GQwY=) 12: XIaayusDHQd-T-OQnZeJmKeMqGM.roa (hash: 4YgriKRQoCnrntt03LwL2mbgR+kxZCmjlyyQb3gT+ZE=) 13: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 14: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 15: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 16: mvKNPFMV6qBSG3SFSM4qWTU0PTM.roa (hash: 0KVXMDqCW8pJ5nUQOv8p5VWslPhCTBVdym4Cj/bx29s=) 17: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 18: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:ea:8e:48:a0:24:44:cb:62:af:e0:de:00:69:e3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Oct 19 10:01:16 2025 GMT Not After : Oct 20 10:01:16 2025 GMT Subject: CN=eabe43c960b521f297fc67344267887707c04aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:4d:9e:2e:3a:11:a2:3c:61:9b:60:dc:0a: 28:b7:13:d6:83:88:0f:62:40:0b:c0:db:33:b0:71: 3a:fb:f9:62:f9:c4:4d:fe:e8:83:fc:59:df:12:be: d0:9b:71:e7:f7:b7:05:03:a2:40:08:44:9b:6d:b0: 48:7a:f6:88:99:5e:70:8f:30:d8:47:40:05:c7:fe: cc:f2:fa:8c:57:c8:36:96:ce:bc:4a:18:0d:17:45: fa:e1:bd:0e:d1:c9:d8:0e:68:75:23:93:45:3c:87: a5:68:a5:49:03:25:9a:4d:7f:8e:73:f5:12:c6:4f: 17:d4:6d:4c:0b:2c:a1:6f:8a:4f:6d:69:56:d3:26: a1:f5:7e:d3:5b:9a:e0:23:e2:b4:98:80:26:e2:8d: 17:5f:14:67:49:64:b0:37:d2:6d:ef:f3:3c:35:eb: bd:eb:e9:21:a8:17:3e:d8:af:6a:2d:b7:7e:5d:6a: 45:21:e9:ad:ff:de:f9:40:27:5f:5c:89:a0:97:29: 5b:19:98:0b:48:35:0d:b5:e5:01:a2:73:22:54:10: 68:81:35:3c:ad:94:f5:31:2a:35:35:65:1c:ae:f1: ed:64:2e:37:a2:ff:20:3b:d8:aa:09:ce:ff:8d:56: 9c:59:a1:34:11:3f:a6:69:e3:42:97:e0:13:f5:34: f5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BE:43:C9:60:B5:21:F2:97:FC:67:34:42:67:88:77:07:C0:4A:BA X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:c3:cf:9c:09:3a:89:8e:f2:29:98:9d:e9:70:77:30:2c:8e: 61:0b:58:4c:7d:14:d7:2a:1f:9f:33:d5:d2:05:f6:24:51:c9: 33:d0:1e:b3:2f:3f:bf:b7:d9:6a:12:10:60:25:ca:d8:03:55: 88:5c:62:08:f9:e2:42:fc:aa:29:98:20:83:99:8b:17:e4:50: 3d:bf:f2:c3:07:06:70:cf:8d:31:ea:7d:49:56:4f:9f:3a:6e: 45:e7:98:64:5c:a0:38:c1:33:c4:f7:65:0b:90:7d:a9:6d:e8: 01:3d:cf:ee:c9:8f:1c:ae:f9:97:50:fa:8d:12:5e:87:7c:32: 51:51:c4:74:bd:32:a7:87:01:69:89:36:7c:c5:fb:67:3a:58: fa:ac:4b:cc:fd:16:74:e4:37:d0:5c:cf:ee:36:b7:c4:cf:9d: 20:1a:c2:02:a0:b1:ab:d6:5c:4a:b6:2d:cb:67:92:d1:fb:d9: 7d:46:d4:cf:9b:85:27:5b:c8:b5:4f:23:5e:7c:ed:82:0c:77: 67:f9:35:3d:57:ff:69:44:2e:44:c5:a9:a5:b4:c1:06:c1:d4: f8:9d:cf:a2:42:4f:a7:60:40:33:a3:50:f3:88:8a:00:2e:81: 8f:86:73:3f:d2:04:dd:97:b0:35:75:5a:18:15:13:80:dc:ee: a8:74:f4:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76o5IoCREy2Kv4N4AaeM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUxMDE5MTAwMTE2WhcNMjUxMDIwMTAwMTE2WjAzMTEwLwYDVQQD EyhlYWJlNDNjOTYwYjUyMWYyOTdmYzY3MzQ0MjY3ODg3NzA3YzA0YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcxNni46EaI8YZtg3AootxPWg4gP YkALwNszsHE6+/li+cRN/uiD/FnfEr7Qm3Hn97cFA6JACESbbbBIevaImV5wjzDY R0AFx/7M8vqMV8g2ls68ShgNF0X64b0O0cnYDmh1I5NFPIelaKVJAyWaTX+Oc/US xk8X1G1MCyyhb4pPbWlW0yah9X7TW5rgI+K0mIAm4o0XXxRnSWSwN9Jt7/M8Neu9 6+khqBc+2K9qLbd+XWpFIemt/975QCdfXImglylbGZgLSDUNteUBonMiVBBogTU8 rZT1MSo1NWUcrvHtZC43ov8gO9iqCc7/jVacWaE0ET+maeNCl+AT9TT1hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq+Q8lgtSHyl/xnNEJniHcHwEq6MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0cPPnAk6 iY7yKZid6XB3MCyOYQtYTH0U1yofnzPV0gX2JFHJM9Aesy8/v7fZahIQYCXK2ANV iFxiCPniQvyqKZggg5mLF+RQPb/ywwcGcM+NMep9SVZPnzpuReeYZFygOMEzxPdl C5B9qW3oAT3P7smPHK75l1D6jRJeh3wyUVHEdL0yp4cBaYk2fMX7ZzpY+qxLzP0W dOQ30FzP7ja3xM+dIBrCAqCxq9ZcSrYty2eS0fvZfUbUz5uFJ1vItU8jXnztggx3 Z/k1PVf/aUQuRMWppbTBBsHU+J3PokJPp2BAM6NQ84iKAC6Bj4ZzP9IE3ZewNXVa GBUTgNzuqHT0Ng== -----END CERTIFICATE-----Generated at Sun Oct 19 13:13:55 2025 by rpki-client