$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: CJgn1b0LKnDOANUpBpdbR1fDVL7ggOGXf/noIrE3tSk= Subject key identifier: 2E:31:94:13:17:B9:00:A1:9E:BF:75:92:96:25:27:5E:CD:FC:CA:90 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 0197B6A197D0E8790F6A92EDBBBB0F386E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 15CD Signing time: Sat 28 Jun 2025 13:02:12 +0000 Manifest this update: Sat 28 Jun 2025 13:02:12 +0000 Manifest next update: Sun 29 Jun 2025 13:02:12 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: 1851dbAnU65ly98fvmnWh5RF1ygrne7TkQbqhJcZDdo=) 7: Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa (hash: 0jvW11Eh+nanPzwmW1R+ZUtO2i7ehli0d4txf/mUkQE=) 8: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 9: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 10: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 11: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 12: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 13: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 14: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 15: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 16: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:97:d0:e8:79:0f:6a:92:ed:bb:bb:0f:38:6e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jun 28 13:02:12 2025 GMT Not After : Jun 29 13:02:12 2025 GMT Subject: CN=2e31941317b900a19ebf75929625275ecdfcca90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3e:48:0d:70:03:7f:d2:df:77:c6:c0:c2:12: 96:e5:20:03:d5:3e:84:82:82:32:d6:44:3b:5c:cb: 16:10:6c:f6:5b:d6:7a:12:8d:8b:07:d1:f3:c7:1e: 19:07:e0:eb:fc:77:ed:d1:77:2d:fa:e5:ee:08:b1: f7:ea:98:77:7f:0d:32:65:34:49:19:6b:02:88:35: 86:86:ae:54:4b:b0:fe:76:02:7e:c1:b1:a8:78:8a: 30:bf:8b:44:f9:23:fb:08:90:07:5c:4d:72:e4:b3: 41:3b:13:18:a4:5f:c0:3b:44:05:0c:2e:e0:ee:5a: 80:96:68:0a:ed:07:72:3e:34:75:bb:fc:08:19:3a: 4e:19:e7:c6:a2:25:e5:50:9b:26:e7:96:60:f9:52: 6a:9b:7a:47:70:e1:b6:3b:3d:b5:ad:3e:cc:36:4d: 90:49:87:d2:a7:4d:4d:40:5f:53:5f:59:ad:ed:92: be:b0:35:a4:14:7e:ab:71:6b:2d:a8:3f:17:d4:d1: 94:6d:0f:9c:66:95:2f:53:c3:60:88:00:2b:66:8c: 7d:54:53:19:1f:58:11:a6:b0:be:b3:1b:20:02:3b: da:ac:2a:30:1c:21:9d:f3:a6:1c:94:0a:59:d1:9f: 71:39:a3:c1:93:37:3d:fb:cc:66:9f:c5:23:10:83: 12:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:31:94:13:17:B9:00:A1:9E:BF:75:92:96:25:27:5E:CD:FC:CA:90 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:07:ab:0f:15:42:c1:d1:04:e2:0b:15:5b:55:39:96:86:7e: 41:ed:2e:9f:99:40:46:84:e0:a2:80:a9:14:7c:f0:c3:06:d0: 4f:93:92:6d:37:1e:4c:1d:10:87:e4:1b:d9:6b:18:e1:b5:6b: a8:05:cf:fb:34:7b:fb:5c:88:8b:79:21:50:fc:93:e0:1d:5b: 6c:b6:37:d4:d5:6d:01:6b:b4:1c:85:ac:8b:ee:e2:38:d6:b3: b3:2e:97:72:72:1d:02:a7:bc:99:df:ba:5f:50:0b:54:4e:8f: e1:0a:ab:0d:20:1a:27:7c:86:bc:55:93:2d:44:ab:c0:e9:c3: 41:3e:80:ce:bb:e6:53:b1:cb:6b:09:73:d0:05:50:98:6f:cd: c9:ab:63:de:bb:24:61:af:12:05:03:29:97:57:04:f8:85:9e: e6:32:10:83:4a:48:60:c7:19:37:71:9c:5e:2a:98:7b:71:73: 93:5f:12:37:d0:dd:75:e4:3c:bf:5f:d5:a3:5f:f2:0e:66:2c: bd:6d:4b:68:6c:22:8c:f9:09:bc:d9:99:92:fa:84:dc:81:b6: cd:20:0d:7d:bd:91:e7:e3:8f:ab:81:56:f4:f7:f5:2d:76:4c: 3f:e1:57:e4:76:08:dd:31:9a:cd:6b:20:bf:b0:7a:39:8a:e3: ef:68:46:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oZfQ6HkPapLtu7sPOG5FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUwNjI4MTMwMjEyWhcNMjUwNjI5MTMwMjEyWjAzMTEwLwYDVQQD EygyZTMxOTQxMzE3YjkwMGExOWViZjc1OTI5NjI1Mjc1ZWNkZmNjYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7z5IDXADf9Lfd8bAwhKW5SAD1T6E goIy1kQ7XMsWEGz2W9Z6Eo2LB9Hzxx4ZB+Dr/Hft0Xct+uXuCLH36ph3fw0yZTRJ GWsCiDWGhq5US7D+dgJ+wbGoeIowv4tE+SP7CJAHXE1y5LNBOxMYpF/AO0QFDC7g 7lqAlmgK7QdyPjR1u/wIGTpOGefGoiXlUJsm55Zg+VJqm3pHcOG2Oz21rT7MNk2Q SYfSp01NQF9TX1mt7ZK+sDWkFH6rcWstqD8X1NGUbQ+cZpUvU8NgiAArZox9VFMZ H1gRprC+sxsgAjvarCowHCGd86YclApZ0Z9xOaPBkzc9+8xmn8UjEIMSTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4xlBMXuQChnr91kpYlJ17N/MqQMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegerDxVC wdEE4gsVW1U5loZ+Qe0un5lARoTgooCpFHzwwwbQT5OSbTceTB0Qh+Qb2WsY4bVr qAXP+zR7+1yIi3khUPyT4B1bbLY31NVtAWu0HIWsi+7iONazsy6XcnIdAqe8md+6 X1ALVE6P4QqrDSAaJ3yGvFWTLUSrwOnDQT6AzrvmU7HLawlz0AVQmG/Nyatj3rsk Ya8SBQMpl1cE+IWe5jIQg0pIYMcZN3GcXiqYe3Fzk18SN9DddeQ8v1/Vo1/yDmYs vW1LaGwijPkJvNmZkvqE3IG2zSANfb2R5+OPq4FW9Pf1LXZMP+FX5HYI3TGazWsg v7B6OYrj72hGJA== -----END CERTIFICATE-----Generated at Sat Jun 28 20:30:18 2025 by rpki-client