$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: wc0PjcDYDcRFA1rMWtFKWybZymxhlJjkV1C4ASMyL7E= Subject key identifier: 0F:3A:0F:5D:C5:9A:29:5C:1F:E9:D7:92:E8:99:AF:66:BF:EA:7D:C5 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 0197B7B353FF158ACDC5BF2B5AB7A14E8EE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 15E4 Signing time: Sat 28 Jun 2025 18:01:12 +0000 Manifest this update: Sat 28 Jun 2025 18:01:12 +0000 Manifest next update: Sun 29 Jun 2025 18:01:12 +0000 Files and hashes: 1: 02l3UdnmFD8L6C2sS1gUjkB5ucw.roa (hash: QsQsXBqvm2htoInMV6VpVWJWic+91/OE8UWDxR68Vpo=) 2: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (hash: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=) 3: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (hash: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=) 4: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (hash: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=) 5: Clh59qbFk87HB1hStYjpCYPWYPk.roa (hash: SZP/GWHvVT/kBate2YzVVZAZXuTp21FWytFNyzKpByg=) 6: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: T1wKi2mDKSGtyq3VOx/CZzhHz2Z7cwRprVfdhpi+LTY=) 7: JK2B_82jU03EjqDV2R4KmzzgN90.roa (hash: k6cki81ODi5YE6T3YQgaBDk5xqz1uKuATDasN4IB5GY=) 8: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (hash: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=) 9: LxkbdDT5B3V41nboGdYKwlRHFhE.roa (hash: AuvDpwL2tENcmyyhzl1N2g1cvgTxe8O4rOVnyWvYkGI=) 10: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (hash: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=) 11: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (hash: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=) 12: bSWONJ-E_8V9EUOTjVg8BkBBtqM.roa (hash: jmPCp6yXzxLJDYKrtXi4j0Nqwi74mWH6TllKsaF2WqU=) 13: e1ucky2gtRUWqjh2W_9-FUaDeco.roa (hash: IxT0Rnlu2Pa21xBI3whvhU3j8HT/Mxf3h/l6fQzZTt0=) 14: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (hash: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=) 15: m76dCMrVWf_Z3SQkxAPw_dBRkjE.roa (hash: Ci4tpeEHKHcsYzrGJQHs0JHLKLh/EcoRDa2ngztjU6c=) 16: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (hash: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=) 17: vCflLMx_V986blYmQXbzXttPM6Y.roa (hash: 4AWZ2XlYvyQnfq0suLYmaQ4e3hwFckiYu1Kg5cC3b9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:53:ff:15:8a:cd:c5:bf:2b:5a:b7:a1:4e:8e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jun 28 18:01:12 2025 GMT Not After : Jun 29 18:01:12 2025 GMT Subject: CN=0f3a0f5dc59a295c1fe9d792e899af66bfea7dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:41:73:06:d3:57:8a:db:21:3b:95:92:89:6b: c7:ed:91:18:63:51:b2:bb:89:3c:cb:aa:e5:26:a8: b2:5f:09:76:6a:01:8f:a7:72:a3:3b:1a:1d:b1:aa: 03:3a:34:65:ff:08:75:d9:7c:be:b9:dd:a5:7c:8a: ad:ec:26:c2:a7:92:49:81:be:9e:ad:13:ff:db:c3: ae:75:ec:14:83:6d:c0:a7:63:49:6e:1c:6e:53:13: 46:77:2c:c6:2d:91:9b:c1:7e:6b:70:78:d7:0a:ec: 4e:2a:82:b9:60:70:dd:99:5d:24:71:8f:2f:97:e9: e8:4b:d8:7d:38:e8:e3:c0:f6:14:29:f8:03:0c:5e: 3c:46:bf:03:f9:1f:fa:20:25:78:4a:35:e7:35:c4: 07:bd:63:b8:da:55:c1:86:09:a8:49:3a:f5:c8:68: 5a:08:d2:c9:57:dc:93:6f:5a:59:0b:62:62:f8:a1: 9a:37:47:a4:5c:c4:e8:ea:f7:4a:4c:8c:23:d5:52: 9b:38:22:8f:61:37:b1:ba:36:52:72:ae:58:56:57: e9:2e:1b:6a:1e:78:95:ee:8f:b1:de:e7:e0:79:60: 4a:3d:3c:a8:79:37:ac:1c:ff:ef:ea:d3:de:d1:dc: 7a:34:10:e7:03:b0:df:1e:81:95:74:02:93:f9:d3: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3A:0F:5D:C5:9A:29:5C:1F:E9:D7:92:E8:99:AF:66:BF:EA:7D:C5 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:16:ed:f5:00:f9:ef:dd:35:08:a4:6d:66:05:cf:4f:4b:92: 41:f7:97:23:0d:ea:f6:d9:fb:06:b7:f0:5e:eb:a5:45:4a:7c: 83:dd:7a:8c:e2:b5:d0:7b:24:4a:95:9d:e9:c8:79:68:5b:b4: 70:cb:8c:a3:40:8d:31:05:3b:03:f0:aa:25:33:22:3b:92:b7: d4:e1:a6:38:41:63:7a:94:ca:75:65:1b:9f:0e:66:c7:c6:66: 2e:65:13:2f:d8:4e:f2:77:64:5c:f8:db:18:35:e8:b5:4f:42: 59:c9:6a:9f:67:c5:e9:3b:84:68:84:a5:7a:c0:bb:99:0a:b2: 36:ac:1f:f9:70:e8:a2:6a:f9:8a:28:25:3f:15:08:02:27:7e: 86:a6:bf:66:a6:71:78:6e:13:a0:89:6e:61:70:ad:db:de:7b: 9f:32:3d:6c:07:3a:e7:70:56:b8:f6:51:06:93:09:2e:be:57: c5:0e:e7:bd:10:8c:a9:4b:19:18:7e:2f:9e:4c:9f:41:92:26: 72:12:65:e2:a1:17:a5:2d:b9:1e:20:61:d0:63:fe:d0:f9:c3: e4:d2:19:ba:7c:39:03:75:93:eb:8e:eb:97:68:87:2d:0a:e6: a7:23:08:3a:f6:df:ce:af:f5:76:70:a0:a8:e7:53:46:cd:bd: 23:54:91:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s1P/FYrNxb8rWrehTo7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjUwNjI4MTgwMTEyWhcNMjUwNjI5MTgwMTEyWjAzMTEwLwYDVQQD EygwZjNhMGY1ZGM1OWEyOTVjMWZlOWQ3OTJlODk5YWY2NmJmZWE3ZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0FzBtNXitshO5WSiWvH7ZEYY1Gy u4k8y6rlJqiyXwl2agGPp3KjOxodsaoDOjRl/wh12Xy+ud2lfIqt7CbCp5JJgb6e rRP/28OudewUg23Ap2NJbhxuUxNGdyzGLZGbwX5rcHjXCuxOKoK5YHDdmV0kcY8v l+noS9h9OOjjwPYUKfgDDF48Rr8D+R/6ICV4SjXnNcQHvWO42lXBhgmoSTr1yGha CNLJV9yTb1pZC2Ji+KGaN0ekXMTo6vdKTIwj1VKbOCKPYTexujZScq5YVlfpLhtq HniV7o+x3ufgeWBKPTyoeTesHP/v6tPe0dx6NBDnA7DfHoGVdAKT+dMR9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA86D13FmilcH+nXkuiZr2a/6n3FMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxbt9QD5 7901CKRtZgXPT0uSQfeXIw3q9tn7BrfwXuulRUp8g916jOK10HskSpWd6ch5aFu0 cMuMo0CNMQU7A/CqJTMiO5K31OGmOEFjepTKdWUbnw5mx8ZmLmUTL9hO8ndkXPjb GDXotU9CWclqn2fF6TuEaISlesC7mQqyNqwf+XDoomr5iiglPxUIAid+hqa/ZqZx eG4ToIluYXCt2957nzI9bAc653BWuPZRBpMJLr5XxQ7nvRCMqUsZGH4vnkyfQZIm chJl4qEXpS25HiBh0GP+0PnD5NIZunw5A3WT647rl2iHLQrmpyMIOvbfzq/1dnCg qOdTRs29I1SR6Q== -----END CERTIFICATE-----Generated at Sat Jun 28 22:39:38 2025 by rpki-client