$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: FB9i+f5jy2K1397gyPg+eJSh/2vq0/pIYgfccobFhCo= Subject key identifier: 9D:4F:B7:CC:91:41:44:0D:E0:FC:40:B7:35:E0:9B:78:E4:0B:AF:D3 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 0197B632F60EF679E7BBC0F406C03A002D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 0FFF Signing time: Sat 28 Jun 2025 11:01:22 +0000 Manifest this update: Sat 28 Jun 2025 11:01:22 +0000 Manifest next update: Sun 29 Jun 2025 11:01:22 +0000 Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=) 2: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 3: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 4: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: ExRDWV1CCYMlOvjIjSeW/cZikVlUUKQ8Dcdm0bvOBq0=) 6: J-jYbkHcU08sfslJpHJcwTM3ehc.roa (hash: jbuWwS0NdmUW31cs0jkODoZKeIDKRJImFm8tQFXzCko=) 7: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 8: TMTNqH9YEtXYXIfhInIhI6hLsNI.roa (hash: 80xDs/QZygHMiOYAgo0ZAMCzMR0y3N9KVQ76eTovdII=) 9: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 10: Vi5NHh9PeiZKSedITFgsgmiPCmI.roa (hash: p7I/BG2g25UPrgXDvJH/MAw3MvHjYcpWdRge+ekzCdI=) 11: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 12: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 13: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 14: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 15: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:f6:0e:f6:79:e7:bb:c0:f4:06:c0:3a:00:2d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jun 28 11:01:22 2025 GMT Not After : Jun 29 11:01:22 2025 GMT Subject: CN=9d4fb7cc9141440de0fc40b735e09b78e40bafd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:91:2d:3f:1e:e7:27:e5:e9:c2:f2:b4:f5: ce:68:1b:aa:ad:3d:33:7b:a3:84:4c:39:d0:d0:d6: 07:20:00:bd:b3:72:3d:48:93:19:62:25:7d:a1:84: 75:61:6b:21:38:6a:f1:bb:57:17:86:06:99:9f:9e: 20:5a:2a:58:4d:32:fe:08:ac:20:41:4b:78:90:c7: 1d:47:9e:7b:c8:58:a1:d4:81:8d:41:c5:22:78:89: ce:01:58:8f:76:26:2e:7b:a5:dd:b2:a7:f3:c1:98: 7f:1f:fc:2e:b5:2a:c1:ac:62:c3:33:0b:98:b6:ef: 5f:fe:3d:a3:c1:fc:29:27:f3:f0:14:63:95:f8:c5: 53:c3:f2:06:ae:5f:95:a8:f0:29:5f:93:b2:82:97: d8:3a:eb:cc:70:fd:98:5e:14:34:53:c0:1a:5e:4b: 52:aa:d3:df:ef:e1:cd:dd:e3:9a:0c:a5:7c:27:7d: 7b:8e:3e:bf:64:ee:87:09:b2:ba:4e:58:72:aa:aa: e0:ac:99:e6:71:bb:48:1b:8b:0a:a3:1a:47:d6:c0: 23:bc:8d:d0:80:d0:ae:ff:61:ce:18:d4:1e:24:0e: 01:86:3a:94:07:2d:ee:7e:80:09:89:fe:38:d3:25: 60:71:cb:a1:8d:7b:69:c9:35:f1:35:7c:9d:56:d0: 31:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4F:B7:CC:91:41:44:0D:E0:FC:40:B7:35:E0:9B:78:E4:0B:AF:D3 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f6:79:75:18:d1:9d:5e:98:40:ef:f2:4c:1d:8a:5e:09:12: b3:5a:df:1a:76:d6:75:df:c8:58:5b:55:18:da:93:2f:d5:5d: e7:84:c1:b6:92:90:b9:83:b0:9f:b4:f4:bb:8a:86:5f:6e:d9: e8:0e:75:33:fe:93:94:45:f0:70:00:57:d1:23:5e:5a:48:54: 93:86:9d:21:2f:d5:f0:90:f1:84:c2:04:cf:ea:41:eb:a4:e4: 62:9b:03:8c:da:10:95:9a:59:6b:a8:ea:55:c1:52:a4:84:12: 89:1f:7f:bb:71:d5:df:30:12:39:71:3f:d8:c5:13:cd:d7:1c: 14:76:1b:3f:26:8c:6d:32:7c:a8:c4:3d:31:8d:4a:95:72:26: 5d:28:74:e4:6b:5f:2e:7e:56:47:24:a9:57:05:fd:bc:cb:92: 95:d2:bb:af:ab:69:a5:62:4b:7c:88:57:ad:7d:10:79:22:81: 64:98:76:d4:08:10:e6:fe:51:9e:7a:f4:82:78:c9:ae:78:f3: dc:f6:e6:18:de:57:f5:06:aa:15:43:68:d5:25:b4:14:52:22: bb:28:3a:78:19:ba:ac:67:df:1d:71:c9:cf:76:19:fd:e9:f3: 62:62:4d:a1:14:12:78:bf:46:88:ed:47:8f:52:aa:ce:aa:a9: 01:19:ec:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MvYO9nnnu8D0BsA6AC1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUwNjI4MTEwMTIyWhcNMjUwNjI5MTEwMTIyWjAzMTEwLwYDVQQD Eyg5ZDRmYjdjYzkxNDE0NDBkZTBmYzQwYjczNWUwOWI3OGU0MGJhZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7CRLT8e5yfl6cLytPXOaBuqrT0z e6OETDnQ0NYHIAC9s3I9SJMZYiV9oYR1YWshOGrxu1cXhgaZn54gWipYTTL+CKwg QUt4kMcdR557yFih1IGNQcUieInOAViPdiYue6XdsqfzwZh/H/wutSrBrGLDMwuY tu9f/j2jwfwpJ/PwFGOV+MVTw/IGrl+VqPApX5OygpfYOuvMcP2YXhQ0U8AaXktS qtPf7+HN3eOaDKV8J317jj6/ZO6HCbK6TlhyqqrgrJnmcbtIG4sKoxpH1sAjvI3Q gNCu/2HOGNQeJA4BhjqUBy3ufoAJif440yVgccuhjXtpyTXxNXydVtAxjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1Pt8yRQUQN4PxAtzXgm3jkC6/TMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfZ5dRjR nV6YQO/yTB2KXgkSs1rfGnbWdd/IWFtVGNqTL9Vd54TBtpKQuYOwn7T0u4qGX27Z 6A51M/6TlEXwcABX0SNeWkhUk4adIS/V8JDxhMIEz+pB66TkYpsDjNoQlZpZa6jq VcFSpIQSiR9/u3HV3zASOXE/2MUTzdccFHYbPyaMbTJ8qMQ9MY1KlXImXSh05Gtf Ln5WRySpVwX9vMuSldK7r6tppWJLfIhXrX0QeSKBZJh21AgQ5v5Rnnr0gnjJrnjz 3PbmGN5X9QaqFUNo1SW0FFIiuyg6eBm6rGffHXHJz3YZ/enzYmJNoRQSeL9GiO1H j1KqzqqpARnsLg== -----END CERTIFICATE-----Generated at Sat Jun 28 20:01:45 2025 by rpki-client