$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: KglKp+QJq8BD2h8AMhMu7ZnO6TqAVyuZ8txTYmCuzLU= Subject key identifier: C7:E1:49:E4:87:5D:DF:51:FC:7C:B0:ED:7A:26:67:68:04:8E:7F:E0 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 0199FB45BA8E62AFA97898F7B496F9B3EE4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 16FA Signing time: Sun 19 Oct 2025 07:01:14 +0000 Manifest this update: Sun 19 Oct 2025 07:01:14 +0000 Manifest next update: Mon 20 Oct 2025 07:01:14 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: 6RUEt6BfBhv9v2cMnSDf8YEOMMGlz4byX1VUexzv3pY=) 7: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 8: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 9: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 10: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 11: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 12: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 13: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 14: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 15: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) 16: thBlz8VmOwFy7VP6rRGU4IAeOPM.roa (hash: j47jyGdIQHFDmGyLmCcj/vCJ4acjKFHJg9XXhEJ2n2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:45:ba:8e:62:af:a9:78:98:f7:b4:96:f9:b3:ee:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Oct 19 07:01:14 2025 GMT Not After : Oct 20 07:01:14 2025 GMT Subject: CN=c7e149e4875ddf51fc7cb0ed7a266768048e7fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:68:45:e2:7e:23:31:33:5b:cc:aa:88:02: cb:b0:e8:c5:42:d9:57:2b:94:d5:3f:3f:d0:20:06: f1:97:b3:d3:de:c0:fd:54:4f:f2:6c:3b:b4:d5:3c: e5:03:19:29:a5:2a:72:98:c9:a2:72:b8:00:9f:43: 9e:0e:09:78:fb:9e:97:cd:b3:f4:a6:9a:bc:9d:c5: d2:6b:d7:5c:4d:6e:65:44:e8:67:99:f5:7c:cf:61: c6:29:b2:21:a3:35:72:37:a4:16:a4:ca:a6:04:80: 94:c5:a6:8b:3f:70:24:d2:0e:31:55:a8:19:48:5d: d5:e8:02:27:b4:08:61:a9:19:bb:ca:9e:8c:2c:7f: a3:4e:b2:3a:25:5b:5c:e6:03:73:c0:16:aa:70:7e: 63:1f:ff:d6:f8:f0:e9:f7:47:8d:a1:04:6a:1d:94: 64:c2:6f:a7:91:d8:93:6e:fc:58:a0:bb:c4:22:c8: 1c:e9:b1:37:bd:4b:db:98:9f:62:b6:27:5b:f6:ad: 5b:11:8e:17:17:a1:36:6a:75:c4:97:3e:35:26:28: 24:1c:1b:00:48:e7:96:34:41:24:1a:fe:78:a3:94: 34:3a:97:73:d0:b2:f8:9f:dd:41:f8:f1:2b:ab:41: fb:a7:a0:25:67:63:1e:ec:1b:0c:97:45:af:e5:ed: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E1:49:E4:87:5D:DF:51:FC:7C:B0:ED:7A:26:67:68:04:8E:7F:E0 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:30:d8:e4:98:b0:77:83:d4:13:2c:6f:ec:37:07:aa:c2:9a: 2d:23:ea:c8:2d:7a:df:ed:d0:f2:92:69:63:08:df:9d:ba:4f: 66:58:78:79:9c:c4:02:b7:eb:f5:0d:58:6e:b5:a1:48:a1:dd: 62:78:81:b8:be:d4:9d:96:45:4c:68:2d:ff:3d:45:bf:00:65: 89:06:42:d5:64:a7:12:06:94:50:55:cc:d8:a6:41:9d:81:c5: ee:e7:1c:9f:31:65:79:b4:9c:d5:91:aa:b2:a5:c1:f9:97:29: a7:4e:61:6a:b6:c2:a2:c2:0d:52:4c:65:ee:a4:13:c5:b6:38: 33:d2:a7:e4:04:76:e3:05:d5:43:3b:9f:6d:3c:fd:df:10:bf: 16:84:8d:51:e8:29:c2:7b:a0:51:58:13:bb:0a:e1:a0:3c:ac: 48:5d:64:a3:de:ea:6a:53:3c:e8:72:59:61:0d:77:e8:85:ce: 64:61:f4:9b:22:14:43:74:53:28:86:62:ab:ae:ab:70:f0:21: ff:6c:08:47:53:db:80:8f:92:7a:cd:1a:fe:3a:d5:87:cc:5e: 44:b9:65:5c:0d:b3:a3:69:e1:2e:af:d9:48:20:fe:0f:52:b0: 9a:60:f8:64:fb:fb:30:a8:9d:ac:fd:a9:96:7d:44:69:b7:03: 82:52:50:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7RbqOYq+peJj3tJb5s+5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUxMDE5MDcwMTE0WhcNMjUxMDIwMDcwMTE0WjAzMTEwLwYDVQQD EyhjN2UxNDllNDg3NWRkZjUxZmM3Y2IwZWQ3YTI2Njc2ODA0OGU3ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljtoReJ+IzEzW8yqiALLsOjFQtlX K5TVPz/QIAbxl7PT3sD9VE/ybDu01TzlAxkppSpymMmicrgAn0OeDgl4+56XzbP0 ppq8ncXSa9dcTW5lROhnmfV8z2HGKbIhozVyN6QWpMqmBICUxaaLP3Ak0g4xVagZ SF3V6AIntAhhqRm7yp6MLH+jTrI6JVtc5gNzwBaqcH5jH//W+PDp90eNoQRqHZRk wm+nkdiTbvxYoLvEIsgc6bE3vUvbmJ9itidb9q1bEY4XF6E2anXElz41JigkHBsA SOeWNEEkGv54o5Q0Opdz0LL4n91B+PErq0H7p6AlZ2Me7BsMl0Wv5e3hTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfhSeSHXd9R/Hyw7XomZ2gEjn/gMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjDY5Jiw d4PUEyxv7DcHqsKaLSPqyC163+3Q8pJpYwjfnbpPZlh4eZzEArfr9Q1YbrWhSKHd YniBuL7UnZZFTGgt/z1FvwBliQZC1WSnEgaUUFXM2KZBnYHF7uccnzFlebSc1ZGq sqXB+Zcpp05harbCosINUkxl7qQTxbY4M9Kn5AR24wXVQzufbTz93xC/FoSNUegp wnugUVgTuwrhoDysSF1ko97qalM86HJZYQ136IXOZGH0myIUQ3RTKIZiq66rcPAh /2wIR1PbgI+Ses0a/jrVh8xeRLllXA2zo2nhLq/ZSCD+D1KwmmD4ZPv7MKidrP2p ln1EabcDglJQjA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:11:44 2025 by rpki-client