$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: Ru6tlIP6z85I2Zhdt6QVIaNYlrhVMV42J8V79B9HPfI= Subject key identifier: 00:5C:F4:66:17:0E:2B:F7:44:E2:28:E2:88:02:32:B1:D1:4A:E5:E1 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 0198D439B195900DD98B3BD6ED7CD84EA985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 109A Signing time: Sat 23 Aug 2025 00:00:07 +0000 Manifest this update: Sat 23 Aug 2025 00:00:07 +0000 Manifest next update: Sun 24 Aug 2025 00:00:07 +0000 Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=) 2: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 3: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 4: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: t4/dxqffZryMXn9GAf4YAkfKPx930eknqoQFzjJ15Kg=) 6: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=) 7: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 8: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=) 9: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=) 10: SuxaOOlpqoGKQPSHxQ3dVD5wLBI.roa (hash: 09WrQpdYp3rObq3AK12JfoTomDZONhTyiyajVx2t0Zw=) 11: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 12: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 13: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 14: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 15: jSRl8jct3oc9IPAREV9kyCvUEv4.roa (hash: KhKKtOOQncfkvamW5IOeJNFBZWevqaXGFhsyP7C4G9I=) 16: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 17: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:39:b1:95:90:0d:d9:8b:3b:d6:ed:7c:d8:4e:a9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Aug 23 00:00:07 2025 GMT Not After : Aug 24 00:00:07 2025 GMT Subject: CN=005cf466170e2bf744e228e2880232b1d14ae5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:95:d2:65:ba:45:1f:aa:12:15:64:2c:24: cc:62:ff:39:72:7c:0d:ca:1b:7a:95:68:48:5f:d4: 32:d8:b8:3f:a2:7d:a7:db:8e:33:0c:63:4d:96:5b: 76:de:53:b8:dd:2d:4d:65:12:d0:92:85:22:36:19: 29:7c:76:fd:fc:90:40:0c:ee:90:c0:72:26:04:64: ec:63:b2:56:d6:e5:97:60:23:9a:36:94:29:01:08: 24:c0:e1:b0:76:09:4c:73:50:6f:0d:71:f1:56:1d: 67:d6:11:0a:20:c8:58:d6:0e:03:4c:7b:b6:c5:1a: da:3d:29:3b:6b:88:aa:52:52:68:78:b3:b8:b4:23: 2b:6f:8e:b5:6a:40:5b:24:89:df:c3:cc:9c:da:dd: 50:d7:8c:56:55:6f:8a:33:3d:81:65:2f:e5:19:db: da:2e:85:a3:12:c4:f8:97:0c:77:f9:63:c0:ea:e8: 97:c8:80:83:ff:31:e5:b6:48:3e:e9:d7:7f:44:9c: 98:a5:ab:2c:4e:44:25:07:2c:ac:c3:e6:07:9b:15: 99:ad:b2:2d:45:03:b2:dd:55:f1:d0:56:2f:bd:f0: 74:9d:8a:3d:d1:97:60:40:4b:8d:8a:c4:91:2a:c8: 81:7a:f6:64:8b:be:16:81:35:7b:03:2c:8f:c9:0b: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5C:F4:66:17:0E:2B:F7:44:E2:28:E2:88:02:32:B1:D1:4A:E5:E1 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1f:77:f5:89:03:80:f6:a6:6f:65:8c:61:26:39:a6:70:f8: ae:f5:d8:82:95:f7:ed:5c:51:ec:84:58:21:97:ce:f0:a6:7c: b6:b3:d2:59:70:be:7d:59:2a:0a:c9:9e:0a:c8:ff:26:53:f1: 52:03:90:f9:d8:8a:b6:ee:2d:94:da:b6:58:35:0e:62:90:da: b9:90:74:81:08:38:28:8d:b2:be:78:6c:3f:8f:51:8c:6a:61: 5d:23:27:f2:55:76:a6:03:23:56:74:cc:65:65:f6:a4:b0:99: 80:4a:d6:4b:4c:0d:99:09:cd:88:c9:9b:74:96:41:28:b1:4b: ea:e8:55:b2:89:63:32:00:b1:07:68:84:01:87:60:b3:77:83: 37:75:32:4c:95:92:d6:d0:77:32:cf:6f:30:42:65:6c:25:1d: 28:d5:21:68:45:29:b0:d5:46:ff:f2:6e:4a:a6:3f:33:12:ad: 14:5c:b7:39:6a:ef:ee:bd:14:32:e4:80:81:88:77:6b:e0:8b: 1b:08:c7:39:79:f9:46:9d:0b:36:c7:9e:1c:95:f8:53:17:38: 3a:19:9b:09:d2:4c:2e:c3:c9:7d:05:af:d6:63:61:c5:27:15: d7:c3:b4:69:64:0f:48:a7:fc:a2:4f:6d:a2:78:5b:29:18:e3: 34:e3:b3:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUObGVkA3ZizvW7XzYTqmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUwODIzMDAwMDA3WhcNMjUwODI0MDAwMDA3WjAzMTEwLwYDVQQD EygwMDVjZjQ2NjE3MGUyYmY3NDRlMjI4ZTI4ODAyMzJiMWQxNGFlNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0WV0mW6RR+qEhVkLCTMYv85cnwN yht6lWhIX9Qy2Lg/on2n244zDGNNllt23lO43S1NZRLQkoUiNhkpfHb9/JBADO6Q wHImBGTsY7JW1uWXYCOaNpQpAQgkwOGwdglMc1BvDXHxVh1n1hEKIMhY1g4DTHu2 xRraPSk7a4iqUlJoeLO4tCMrb461akBbJInfw8yc2t1Q14xWVW+KMz2BZS/lGdva LoWjEsT4lwx3+WPA6uiXyICD/zHltkg+6dd/RJyYpassTkQlByysw+YHmxWZrbIt RQOy3VXx0FYvvfB0nYo90ZdgQEuNisSRKsiBevZki74WgTV7AyyPyQvieQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABc9GYXDiv3ROIo4ogCMrHRSuXhMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx939YkD gPamb2WMYSY5pnD4rvXYgpX37VxR7IRYIZfO8KZ8trPSWXC+fVkqCsmeCsj/JlPx UgOQ+diKtu4tlNq2WDUOYpDauZB0gQg4KI2yvnhsP49RjGphXSMn8lV2pgMjVnTM ZWX2pLCZgErWS0wNmQnNiMmbdJZBKLFL6uhVsoljMgCxB2iEAYdgs3eDN3UyTJWS 1tB3Ms9vMEJlbCUdKNUhaEUpsNVG//JuSqY/MxKtFFy3OWrv7r0UMuSAgYh3a+CL GwjHOXn5Rp0LNseeHJX4Uxc4OhmbCdJMLsPJfQWv1mNhxScV18O0aWQPSKf8ok9t onhbKRjjNOOztA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:40:37 2025 by rpki-client