$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: umMyRe1RDfaZfsPN561llNt+mI1WFf4luvA7t291hrk= Subject key identifier: B6:34:1E:81:E1:30:D2:DD:B5:A4:DF:8F:13:C8:66:12:09:E5:81:82 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 0199FCC601EBE5382192A80D0F849DFF5F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 1712 Signing time: Sun 19 Oct 2025 14:00:58 +0000 Manifest this update: Sun 19 Oct 2025 14:00:58 +0000 Manifest next update: Mon 20 Oct 2025 14:00:58 +0000 Files and hashes: 1: 02l3UdnmFD8L6C2sS1gUjkB5ucw.roa (hash: QsQsXBqvm2htoInMV6VpVWJWic+91/OE8UWDxR68Vpo=) 2: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (hash: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=) 3: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (hash: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=) 4: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (hash: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=) 5: BYoQ4s4czJjuocvOI1HvR-aMr7M.roa (hash: SsHvMaoCQsPiDzDLVhuMvxC3d30G/g1TK2SaE3ke6Rw=) 6: Clh59qbFk87HB1hStYjpCYPWYPk.roa (hash: SZP/GWHvVT/kBate2YzVVZAZXuTp21FWytFNyzKpByg=) 7: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: oH3N5eTrqozlA6ndhPOACKK0XFmsKQvwQLqMM46PqZw=) 8: JK2B_82jU03EjqDV2R4KmzzgN90.roa (hash: k6cki81ODi5YE6T3YQgaBDk5xqz1uKuATDasN4IB5GY=) 9: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (hash: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=) 10: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (hash: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=) 11: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (hash: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=) 12: VTxgRc9lLnOIERMW9KzHm_cmqj0.roa (hash: hFhWb9lFF6kUCNUVNjvzbxq2eJ1u/87JP6fpDErHuIc=) 13: e1ucky2gtRUWqjh2W_9-FUaDeco.roa (hash: IxT0Rnlu2Pa21xBI3whvhU3j8HT/Mxf3h/l6fQzZTt0=) 14: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (hash: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=) 15: m76dCMrVWf_Z3SQkxAPw_dBRkjE.roa (hash: Ci4tpeEHKHcsYzrGJQHs0JHLKLh/EcoRDa2ngztjU6c=) 16: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (hash: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=) 17: vCflLMx_V986blYmQXbzXttPM6Y.roa (hash: 4AWZ2XlYvyQnfq0suLYmaQ4e3hwFckiYu1Kg5cC3b9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:01:eb:e5:38:21:92:a8:0d:0f:84:9d:ff:5f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Oct 19 14:00:58 2025 GMT Not After : Oct 20 14:00:58 2025 GMT Subject: CN=b6341e81e130d2ddb5a4df8f13c8661209e58182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b4:bf:93:fa:fd:fc:61:60:24:4c:46:73:16: 7a:77:90:35:71:16:ab:0e:da:83:9a:1f:fc:fc:75: 92:3e:ce:1c:a5:7e:0b:cb:96:c4:fe:a7:cb:c7:2c: 7b:f0:e7:7e:2c:40:0e:e5:34:6b:da:ec:18:6a:1d: b1:94:34:ff:f7:86:97:c9:e1:fe:4d:e9:21:4d:63: 11:5e:23:72:cf:28:76:2b:57:aa:e3:77:91:1f:78: 2b:2e:e6:08:39:0e:a9:42:4e:47:9e:51:10:86:74: 36:e1:f7:43:6b:59:4a:05:e7:f1:cf:d7:04:00:3b: ca:95:97:81:44:97:31:10:30:0b:47:22:8e:a1:5b: 6c:57:76:d5:c1:f6:46:a1:3a:bd:75:4c:06:5b:04: eb:b2:73:a3:79:6d:b0:16:b2:66:16:2f:99:76:e5: 67:c9:11:7f:42:21:83:13:da:d9:c6:fb:a6:8e:0e: ce:a3:d8:34:f7:71:0f:49:af:b4:a2:3b:7c:be:99: 7a:2c:e7:58:e0:d4:f8:3d:29:2f:96:ae:8d:04:b5: cc:68:ef:58:b1:1b:cb:30:92:b9:a1:64:f0:07:34: 9f:83:fc:bb:5a:ec:28:10:e3:e9:12:b0:ea:7a:cc: 92:ac:67:1b:52:31:63:fd:3c:9d:97:be:20:d4:02: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:1E:81:E1:30:D2:DD:B5:A4:DF:8F:13:C8:66:12:09:E5:81:82 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6e:fb:0f:95:30:98:49:22:1b:6d:63:dd:ad:05:c7:c7:4a: 83:3f:7a:c8:a7:c5:3e:6b:49:67:03:96:7e:a5:20:50:79:60: b9:ad:e6:cc:d5:6a:1b:d3:25:a1:d4:ef:32:28:00:00:c0:21: 13:af:0b:6e:75:00:af:bc:d3:49:29:df:b1:3f:19:4b:10:b0: b9:5e:8a:7f:6d:20:de:9a:f5:18:71:3e:44:2f:b4:f1:00:a6: ab:9e:22:12:11:31:2f:6a:e4:bd:42:68:ef:8b:e5:90:bb:fb: b7:84:d9:4f:45:10:91:de:e3:5c:96:71:6a:c8:b7:14:da:93: d7:ba:92:ea:ec:b0:1b:52:c7:d2:26:5a:da:1e:e8:2c:04:9b: 2e:86:96:63:cf:e3:bf:97:45:fe:f8:8b:62:64:9a:35:50:7b: 54:c7:91:8a:9a:10:9f:13:c6:55:30:c6:91:12:23:b0:aa:90: bd:a9:80:4f:86:ed:db:31:34:9b:37:ec:99:c9:80:98:c8:4d: 27:70:40:5a:b3:96:e6:46:11:75:de:04:a9:88:f5:de:c5:7a: 08:2b:de:4d:fe:d0:bc:e2:63:8d:42:1b:a6:5b:19:81:c5:38: fa:1f:9a:28:ef:c6:03:86:4d:cd:b7:96:18:ec:a7:3b:a1:c0: 3f:d6:2d:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xgHr5TghkqgND4Sd/1+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjUxMDE5MTQwMDU4WhcNMjUxMDIwMTQwMDU4WjAzMTEwLwYDVQQD EyhiNjM0MWU4MWUxMzBkMmRkYjVhNGRmOGYxM2M4NjYxMjA5ZTU4MTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bS/k/r9/GFgJExGcxZ6d5A1cRar DtqDmh/8/HWSPs4cpX4Ly5bE/qfLxyx78Od+LEAO5TRr2uwYah2xlDT/94aXyeH+ TekhTWMRXiNyzyh2K1eq43eRH3grLuYIOQ6pQk5HnlEQhnQ24fdDa1lKBefxz9cE ADvKlZeBRJcxEDALRyKOoVtsV3bVwfZGoTq9dUwGWwTrsnOjeW2wFrJmFi+ZduVn yRF/QiGDE9rZxvumjg7Oo9g093EPSa+0ojt8vpl6LOdY4NT4PSkvlq6NBLXMaO9Y sRvLMJK5oWTwBzSfg/y7WuwoEOPpErDqesySrGcbUjFj/Tydl74g1AL8owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY0HoHhMNLdtaTfjxPIZhIJ5YGCMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANm77D5Uw mEkiG21j3a0Fx8dKgz96yKfFPmtJZwOWfqUgUHlgua3mzNVqG9MlodTvMigAAMAh E68LbnUAr7zTSSnfsT8ZSxCwuV6Kf20g3pr1GHE+RC+08QCmq54iEhExL2rkvUJo 74vlkLv7t4TZT0UQkd7jXJZxasi3FNqT17qS6uywG1LH0iZa2h7oLASbLoaWY8/j v5dF/viLYmSaNVB7VMeRipoQnxPGVTDGkRIjsKqQvamAT4bt2zE0mzfsmcmAmMhN J3BAWrOW5kYRdd4EqYj13sV6CCveTf7QvOJjjUIbplsZgcU4+h+aKO/GA4ZNzbeW GOynO6HAP9Yt4w== -----END CERTIFICATE-----Generated at Sun Oct 19 20:13:20 2025 by rpki-client