$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: yfZFu4dlxE+g94cKZIsr2ednnFLoGcLrfvkgjGJJsVQ= Subject key identifier: F2:E7:20:D6:B7:43:29:2E:92:FB:4F:5A:BE:EE:F2:5B:87:86:44:87 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 0198D7A96A3FDAD9C356633F6ABF63A4EEB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 167A Signing time: Sat 23 Aug 2025 16:01:00 +0000 Manifest this update: Sat 23 Aug 2025 16:01:00 +0000 Manifest next update: Sun 24 Aug 2025 16:01:00 +0000 Files and hashes: 1: 02l3UdnmFD8L6C2sS1gUjkB5ucw.roa (hash: QsQsXBqvm2htoInMV6VpVWJWic+91/OE8UWDxR68Vpo=) 2: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (hash: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=) 3: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (hash: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=) 4: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (hash: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=) 5: 9UyjFHy6nxzD4SWi9fZqmvG9X1Y.roa (hash: wwkmXrHk0uvcZv9VezayeMbciMCe2ZyulXrkSdIlpeo=) 6: Clh59qbFk87HB1hStYjpCYPWYPk.roa (hash: SZP/GWHvVT/kBate2YzVVZAZXuTp21FWytFNyzKpByg=) 7: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: ytLsmXLM7uGjBsi0jal/hO4m/lN8GR8ijo04fLI9Ho0=) 8: JK2B_82jU03EjqDV2R4KmzzgN90.roa (hash: k6cki81ODi5YE6T3YQgaBDk5xqz1uKuATDasN4IB5GY=) 9: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (hash: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=) 10: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (hash: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=) 11: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (hash: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=) 12: VTxgRc9lLnOIERMW9KzHm_cmqj0.roa (hash: hFhWb9lFF6kUCNUVNjvzbxq2eJ1u/87JP6fpDErHuIc=) 13: e1ucky2gtRUWqjh2W_9-FUaDeco.roa (hash: IxT0Rnlu2Pa21xBI3whvhU3j8HT/Mxf3h/l6fQzZTt0=) 14: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (hash: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=) 15: m76dCMrVWf_Z3SQkxAPw_dBRkjE.roa (hash: Ci4tpeEHKHcsYzrGJQHs0JHLKLh/EcoRDa2ngztjU6c=) 16: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (hash: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=) 17: vCflLMx_V986blYmQXbzXttPM6Y.roa (hash: 4AWZ2XlYvyQnfq0suLYmaQ4e3hwFckiYu1Kg5cC3b9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:a9:6a:3f:da:d9:c3:56:63:3f:6a:bf:63:a4:ee:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Aug 23 16:01:00 2025 GMT Not After : Aug 24 16:01:00 2025 GMT Subject: CN=f2e720d6b743292e92fb4f5abeeef25b87864487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:24:2c:55:7f:41:65:86:e6:70:63:58:b2:bf: 9f:ad:19:ba:ac:3f:5d:4b:0d:18:50:b2:25:e9:1a: f3:fb:67:2b:39:d7:08:70:c2:9f:93:aa:24:7a:8c: 4d:13:ea:79:ed:17:04:51:f5:ed:8f:50:9b:3b:46: f8:0f:a2:67:d9:2c:26:eb:b5:78:32:5c:30:54:df: a5:a0:5e:b6:8a:6b:e0:00:88:4a:63:20:b0:fd:ee: 6f:51:14:81:1e:41:0e:c1:fd:1d:02:da:9d:15:ec: 6e:1d:d0:99:5e:e5:f9:fc:53:f5:d7:3b:c5:7d:b6: d1:13:37:09:d9:a3:8a:4e:dd:82:a1:20:2a:fc:6b: 95:98:37:b9:88:93:04:07:d7:85:d6:41:9c:c7:a4: 6a:9f:19:d5:85:d5:25:09:90:b7:87:51:64:58:07: 5c:70:fc:49:bf:eb:43:59:99:94:97:83:7d:0c:50: b0:03:1c:87:7d:ee:02:f9:23:dc:a7:ed:15:3b:cd: 85:06:66:2b:f3:9b:60:88:88:0d:4f:32:78:3b:e7: 3f:75:16:4a:c8:53:c6:b3:1b:aa:8d:12:d2:41:dc: 78:48:40:06:90:b5:2b:45:5a:e6:dd:af:89:a5:81: bb:de:a5:b5:47:ab:58:3c:96:80:56:64:94:23:d9: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E7:20:D6:B7:43:29:2E:92:FB:4F:5A:BE:EE:F2:5B:87:86:44:87 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:38:c9:d0:33:2a:75:18:02:87:3c:78:e6:09:a4:52:fd:24: 4e:04:92:b8:d6:d0:64:63:a4:85:0b:c6:b0:89:20:7a:36:d4: f8:83:d8:54:8d:ff:9d:b6:ae:52:e6:af:3b:95:39:60:83:29: 38:f2:63:7d:31:61:c7:d0:36:72:91:2b:96:42:a5:ad:d8:26: 94:d7:5a:8f:cd:69:23:4b:f5:32:51:20:5e:e5:e2:0a:cc:b0: 2e:35:10:2e:36:12:ff:ff:98:34:05:28:cd:a9:23:09:31:8e: 28:9e:4b:f0:12:86:ed:a7:05:55:0c:a7:cf:e1:8e:83:dd:e3: 15:f3:9d:ca:5e:a9:f7:12:44:c9:5b:5d:bb:66:1a:4b:50:2a: 4c:47:7d:ae:58:f2:78:3d:e0:f3:b6:7b:04:26:e6:e6:23:ff: b5:06:ed:a7:ac:cb:55:fc:6a:7f:41:f5:95:53:a5:ef:8d:7f: 99:92:a6:6b:12:b9:36:52:5a:a3:a5:92:be:68:46:92:56:ec: 13:b1:c8:c1:4f:22:d0:c7:ce:97:8e:03:24:1a:c7:c1:c7:c6: bd:02:25:3f:55:ec:13:91:4b:ee:4b:47:a1:e1:97:fb:6d:4d: 34:16:9d:3e:aa:1d:10:13:1c:b6:9e:63:77:a7:b5:b4:56:b5: be:48:2e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXqWo/2tnDVmM/ar9jpO65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjUwODIzMTYwMTAwWhcNMjUwODI0MTYwMTAwWjAzMTEwLwYDVQQD EyhmMmU3MjBkNmI3NDMyOTJlOTJmYjRmNWFiZWVlZjI1Yjg3ODY0NDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CQsVX9BZYbmcGNYsr+frRm6rD9d Sw0YULIl6Rrz+2crOdcIcMKfk6okeoxNE+p57RcEUfXtj1CbO0b4D6Jn2Swm67V4 MlwwVN+loF62imvgAIhKYyCw/e5vURSBHkEOwf0dAtqdFexuHdCZXuX5/FP11zvF fbbREzcJ2aOKTt2CoSAq/GuVmDe5iJMEB9eF1kGcx6RqnxnVhdUlCZC3h1FkWAdc cPxJv+tDWZmUl4N9DFCwAxyHfe4C+SPcp+0VO82FBmYr85tgiIgNTzJ4O+c/dRZK yFPGsxuqjRLSQdx4SEAGkLUrRVrm3a+JpYG73qW1R6tYPJaAVmSUI9m7XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLnINa3QykukvtPWr7u8luHhkSHMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjjJ0DMq dRgChzx45gmkUv0kTgSSuNbQZGOkhQvGsIkgejbU+IPYVI3/nbauUuavO5U5YIMp OPJjfTFhx9A2cpErlkKlrdgmlNdaj81pI0v1MlEgXuXiCsywLjUQLjYS//+YNAUo zakjCTGOKJ5L8BKG7acFVQynz+GOg93jFfOdyl6p9xJEyVtdu2YaS1AqTEd9rljy eD3g87Z7BCbm5iP/tQbtp6zLVfxqf0H1lVOl741/mZKmaxK5NlJao6WSvmhGklbs E7HIwU8i0MfOl44DJBrHwcfGvQIlP1XsE5FL7ktHoeGX+21NNBadPqodEBMctp5j d6e1tFa1vkgu/g== -----END CERTIFICATE-----Generated at Sat Aug 23 21:58:57 2025 by rpki-client