$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: qJKC/qkF5YaxvkeXlVjs3NUP53oimo8cFPXMp35o1CU= Subject key identifier: 6A:03:12:0D:0B:51:88:D4:97:A8:AD:69:F5:80:B4:11:52:AF:88:84 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 0198D7A8EBF890D394013A9DB66CDE113A51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1663 Signing time: Sat 23 Aug 2025 16:00:28 +0000 Manifest this update: Sat 23 Aug 2025 16:00:28 +0000 Manifest next update: Sun 24 Aug 2025 16:00:28 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: QUZCX+Ca8e7s1av7jnfq1D3wBnE0SWsJSU/HXdmNSno=) 7: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 8: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 9: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 10: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 11: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 12: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 13: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 14: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 15: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) 16: thBlz8VmOwFy7VP6rRGU4IAeOPM.roa (hash: j47jyGdIQHFDmGyLmCcj/vCJ4acjKFHJg9XXhEJ2n2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:a8:eb:f8:90:d3:94:01:3a:9d:b6:6c:de:11:3a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Aug 23 16:00:28 2025 GMT Not After : Aug 24 16:00:28 2025 GMT Subject: CN=6a03120d0b5188d497a8ad69f580b41152af8884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:e1:27:95:97:d7:6a:59:df:44:df:c7:73: c9:55:bf:43:02:0f:fc:99:44:a6:c4:1b:55:3e:1c: ff:dd:72:a1:df:c7:a2:6a:9b:59:92:a5:79:c1:80: f3:77:a1:e7:84:eb:ae:84:12:48:2c:d0:00:18:e0: ac:b5:4f:e3:4c:43:08:48:cc:3e:4e:53:0e:69:84: 52:d0:d8:2e:92:d3:38:97:7b:e7:78:d8:02:ee:69: d3:ee:bc:1a:8e:4d:f7:ec:b3:6c:2f:eb:d9:75:8b: eb:94:c7:3f:c1:96:3f:d9:fb:bb:86:90:85:f8:de: 82:fc:6b:d2:f2:97:ca:3a:dc:e4:70:29:1c:57:86: 38:d2:77:36:70:c4:dd:e1:75:be:18:1f:20:72:3a: 54:10:4b:ca:0b:f2:4d:e1:b9:85:da:24:0f:cd:e2: cb:64:b6:af:4c:37:e6:44:7c:25:ab:de:e9:69:0e: 7a:ef:31:ed:b3:f1:54:12:57:7d:63:83:69:07:46: 61:be:63:a8:6f:78:9f:28:f3:94:21:c5:5d:d2:58: 3a:0a:ae:56:20:ca:f3:59:50:96:b7:0b:54:f1:44: 3f:d9:64:46:9f:00:f8:c8:10:10:84:93:5f:75:06: aa:31:85:60:d0:ae:16:0c:63:af:ce:2d:f2:f6:1f: 4e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:03:12:0D:0B:51:88:D4:97:A8:AD:69:F5:80:B4:11:52:AF:88:84 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:12:c8:6b:4c:24:a0:55:02:e9:1c:58:c5:71:6e:10:20:bf: 5b:59:48:c4:4c:a7:52:78:06:ff:21:a2:24:b5:26:19:5c:f2: 22:db:78:b0:ae:ad:53:8e:e0:bd:78:42:14:8d:e3:77:e0:72: ab:fd:3f:64:02:86:e4:cd:f5:26:fe:24:97:a4:d0:5c:cc:75: 1d:48:71:13:4b:dd:73:93:08:29:f8:6f:79:a7:b4:93:b6:9c: 76:80:4f:89:98:5b:8d:e2:68:44:4e:21:a6:45:88:51:94:94: a6:fe:fe:02:8a:fa:3f:3b:71:4a:d8:a4:00:fc:6f:67:7e:11: f0:5d:c0:a1:95:27:00:3f:02:44:ae:6f:b8:82:f0:6a:fe:6f: ff:b5:1f:d2:33:fa:db:68:7b:6d:92:ce:a9:17:b7:89:68:56: 38:68:ec:f1:58:20:f9:51:0c:03:eb:49:b1:f3:f0:24:8a:6e: d4:7b:d0:9c:83:d3:02:40:a3:bf:75:d9:50:2b:ed:5d:87:e0: c5:75:30:d7:d8:f6:a1:79:0d:8e:50:71:77:c1:ca:26:ae:a5: a4:0a:3e:d4:0e:ee:a1:0c:15:79:0e:05:9f:c0:7b:c9:cd:2d: a9:1e:83:3f:11:54:76:21:dd:37:79:09:59:f5:54:12:2d:ac: f9:be:d4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXqOv4kNOUATqdtmzeETpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUwODIzMTYwMDI4WhcNMjUwODI0MTYwMDI4WjAzMTEwLwYDVQQD Eyg2YTAzMTIwZDBiNTE4OGQ0OTdhOGFkNjlmNTgwYjQxMTUyYWY4ODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6XhJ5WX12pZ30Tfx3PJVb9DAg/8 mUSmxBtVPhz/3XKh38eiaptZkqV5wYDzd6HnhOuuhBJILNAAGOCstU/jTEMISMw+ TlMOaYRS0NguktM4l3vneNgC7mnT7rwajk337LNsL+vZdYvrlMc/wZY/2fu7hpCF +N6C/GvS8pfKOtzkcCkcV4Y40nc2cMTd4XW+GB8gcjpUEEvKC/JN4bmF2iQPzeLL ZLavTDfmRHwlq97paQ567zHts/FUEld9Y4NpB0ZhvmOob3ifKPOUIcVd0lg6Cq5W IMrzWVCWtwtU8UQ/2WRGnwD4yBAQhJNfdQaqMYVg0K4WDGOvzi3y9h9O1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoDEg0LUYjUl6itafWAtBFSr4iEMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxLIa0wk oFUC6RxYxXFuECC/W1lIxEynUngG/yGiJLUmGVzyItt4sK6tU47gvXhCFI3jd+By q/0/ZAKG5M31Jv4kl6TQXMx1HUhxE0vdc5MIKfhveae0k7acdoBPiZhbjeJoRE4h pkWIUZSUpv7+Aor6PztxStikAPxvZ34R8F3AoZUnAD8CRK5vuILwav5v/7Uf0jP6 22h7bZLOqRe3iWhWOGjs8Vgg+VEMA+tJsfPwJIpu1HvQnIPTAkCjv3XZUCvtXYfg xXUw19j2oXkNjlBxd8HKJq6lpAo+1A7uoQwVeQ4Fn8B7yc0tqR6DPxFUdiHdN3kJ WfVUEi2s+b7UHw== -----END CERTIFICATE-----Generated at Sat Aug 23 18:02:46 2025 by rpki-client