$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: hGqS0I2a67vu1CfgdJgTGPyb1lwII0fvdAtQlglDwTw= Subject key identifier: E3:BD:F4:C6:EC:38:66:A3:6C:52:23:4A:7D:3C:83:72:BA:F5:6C:88 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 0198D5F12915DC4F9FCF8CA5DB42405C1C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 13B7 Signing time: Sat 23 Aug 2025 08:00:08 +0000 Manifest this update: Sat 23 Aug 2025 08:00:08 +0000 Manifest next update: Sun 24 Aug 2025 08:00:08 +0000 Files and hashes: 1: 2CMmm-IO3y31CC1PnY_uGGrhn9w.roa (hash: 4X4+4X/uOYbuErCckaKak0v4fA7/5gtq1a9L2A4Lw/g=) 2: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=) 3: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=) 4: 8ZC0k7rzA0E1rhNje27CVkEZJ3k.roa (hash: A0opDIEQI4MN92tRbOLHdM7zZc/0nBThej01ve87lSE=) 5: CGtvlVAjeOKgmOegCwgkAU5viUg.roa (hash: tYOH0itDmxfLkiehctgBZN5JIUldgyHwoFbKsMtsM8Q=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: sDYKNKG2dh45f1q3xBL9CbQCgitbs9FgY0tVntMjNww=) 7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=) 8: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=) 9: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=) 10: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=) 11: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=) 12: mX1m4UQyXXwpGD0jqQb_y8LC8FI.roa (hash: rM0m6jdxRtvhd5JgDnoJoekO12B/OCdpvQvQXsOMtes=) 13: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=) 14: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=) 15: xs8kgLY-61uyKfGESALykLk9Pj0.roa (hash: uV1wjICOu9X1DokywqYjnW+r/mANbpnz+9BPI0bQ5c8=) 16: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=) 17: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:29:15:dc:4f:9f:cf:8c:a5:db:42:40:5c:1c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Aug 23 08:00:08 2025 GMT Not After : Aug 24 08:00:08 2025 GMT Subject: CN=e3bdf4c6ec3866a36c52234a7d3c8372baf56c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:38:f0:90:46:5d:26:2c:ce:89:ac:e0:5a: c7:c9:3b:39:f4:29:93:29:80:50:0e:cd:5a:bd:18: 2a:10:8e:f3:8d:38:69:12:2a:e8:81:53:82:81:a7: ec:bb:52:2e:3e:eb:f9:f0:f4:88:2e:bb:57:bc:d1: ab:c2:af:85:cd:c8:eb:41:35:0f:ec:e3:c7:12:3e: c6:68:95:31:33:9f:e9:25:34:a6:ed:71:37:65:81: 89:3c:98:d6:16:d0:de:03:17:13:8c:d7:b5:36:e5: ad:77:be:30:5a:91:8d:92:3b:45:83:3b:17:81:4d: 6c:2d:4b:0e:85:f9:32:1a:22:b2:1c:74:9f:1f:7e: ad:33:73:56:04:72:c4:cd:bc:52:e4:a5:ac:e3:ac: a3:2e:d9:69:a3:80:d3:8a:bc:0e:df:c8:08:c6:9c: b3:6e:d2:af:a6:72:01:8e:91:21:85:90:91:5e:9b: f3:68:5d:cb:ba:f9:81:33:0c:4d:43:04:46:7b:59: c8:0a:09:b6:88:f2:01:4c:66:c2:fd:66:da:82:73: 45:1f:89:7b:41:25:8d:7c:df:9b:5f:d3:7c:94:e5: 88:5b:d0:75:52:ad:53:b0:77:30:74:33:65:16:ae: f9:ff:3c:d3:11:cb:1e:fc:62:59:11:f6:45:17:b9: 35:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:F4:C6:EC:38:66:A3:6C:52:23:4A:7D:3C:83:72:BA:F5:6C:88 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:51:ea:f2:ac:4c:95:9d:6b:e8:dc:6c:e2:8f:e5:0c:f2:e0: 2e:d3:ad:0d:74:86:da:35:34:a6:7b:1e:9b:b5:23:48:36:6c: 9c:f8:c0:d7:3d:16:8b:fc:00:e3:92:6f:75:c1:f6:66:78:bc: 7f:93:63:03:15:64:2d:6e:1f:e9:49:ce:81:88:44:ab:5b:98: 62:b9:2f:c6:7b:49:aa:e4:2e:98:d3:d9:97:97:02:f4:73:b4: 09:65:49:75:18:05:94:bc:6e:f4:76:2e:b2:8c:6e:ee:25:13: 96:8c:ec:e8:54:80:ab:97:56:0b:73:4e:d8:41:4f:bf:1f:11: b6:e2:57:9e:ad:25:db:7a:d4:fd:3f:bc:85:72:57:2d:2f:6b: 03:aa:b2:68:46:e3:c4:6c:93:2c:95:43:0a:02:33:90:93:d5: 9e:2b:dc:cd:db:89:51:c5:4f:29:35:af:04:b6:3d:c2:80:6b: 0c:09:f6:7e:ca:cb:5d:af:fc:eb:ee:d7:49:e4:96:7f:74:6c: c7:c2:af:76:52:ac:40:26:a5:57:26:bf:9f:72:3d:2f:4e:0c: fc:14:eb:46:3b:b6:3e:58:48:63:08:fa:ba:06:39:a8:c6:e4: 78:78:05:d0:95:c9:62:51:88:07:b8:de:3f:55:8a:d6:fa:2d: 58:76:51:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8SkV3E+fz4yl20JAXBwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjUwODIzMDgwMDA4WhcNMjUwODI0MDgwMDA4WjAzMTEwLwYDVQQD EyhlM2JkZjRjNmVjMzg2NmEzNmM1MjIzNGE3ZDNjODM3MmJhZjU2Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIg48JBGXSYszoms4FrHyTs59CmT KYBQDs1avRgqEI7zjThpEirogVOCgafsu1IuPuv58PSILrtXvNGrwq+FzcjrQTUP 7OPHEj7GaJUxM5/pJTSm7XE3ZYGJPJjWFtDeAxcTjNe1NuWtd74wWpGNkjtFgzsX gU1sLUsOhfkyGiKyHHSfH36tM3NWBHLEzbxS5KWs46yjLtlpo4DTirwO38gIxpyz btKvpnIBjpEhhZCRXpvzaF3LuvmBMwxNQwRGe1nICgm2iPIBTGbC/WbagnNFH4l7 QSWNfN+bX9N8lOWIW9B1Uq1TsHcwdDNlFq75/zzTEcse/GJZEfZFF7k1aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO99MbsOGajbFIjSn08g3K69WyIMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVHq8qxM lZ1r6Nxs4o/lDPLgLtOtDXSG2jU0pnsem7UjSDZsnPjA1z0Wi/wA45JvdcH2Zni8 f5NjAxVkLW4f6UnOgYhEq1uYYrkvxntJquQumNPZl5cC9HO0CWVJdRgFlLxu9HYu soxu7iUTlozs6FSAq5dWC3NO2EFPvx8RtuJXnq0l23rU/T+8hXJXLS9rA6qyaEbj xGyTLJVDCgIzkJPVnivczduJUcVPKTWvBLY9woBrDAn2fsrLXa/86+7XSeSWf3Rs x8KvdlKsQCalVya/n3I9L04M/BTrRju2PlhIYwj6ugY5qMbkeHgF0JXJYlGIB7je P1WK1votWHZRQA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:57 2025 by rpki-client