$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft File: hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json) Hash identifier: Yfh2OqDsG05IJEDZPVtoUq59hY1yXPFy1sJN3YrXyWw= Subject key identifier: 97:87:56:6F:99:62:76:A5:67:BF:BB:E0:A4:C3:94:2C:CD:90:5F:10 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 0198D583F8F971CB7E3B7009ABDDBA64E17F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft Manifest number: 0EA8 Signing time: Sat 23 Aug 2025 06:00:52 +0000 Manifest this update: Sat 23 Aug 2025 06:00:52 +0000 Manifest next update: Sun 24 Aug 2025 06:00:52 +0000 Files and hashes: 1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=) 2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=) 3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=) 4: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=) 5: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=) 6: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=) 7: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=) 8: AH9IWPeSjn4zPMXrJdOOZZAn9Aw.roa (hash: NZOres5BfCUJDRAZEdwJLZ3pKyCM0qr94CohvGLshJM=) 9: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=) 10: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=) 11: Hld29G1DWYar_V03vvNEEAXl32I.roa (hash: g5H45h/y6fGU8XE9r1rX3k8z88V8C5urUpMK18n0TuA=) 12: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=) 13: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=) 14: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=) 15: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=) 16: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=) 17: SqKkKM173VSrB36qGmxTUJHKCo0.roa (hash: 48hEcJJ8yoYkRJhZ40G+F37LnKZ8jLN3UCGXFfcuN8I=) 18: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=) 19: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=) 20: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=) 21: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=) 22: eRDw7dF55P7wHv9vfdNgciZiits.roa (hash: MdrDuZVh60KAJjt7uD5dLHrckgAME9PGiYJbxXCoOHg=) 23: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: ZuuIKtpC8nlbCmrgZeppgNIEqM18dS70yvgY3OUamRQ=) 24: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=) 25: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=) 26: moTDq53FtqLZAk0AGJnD6LpxpL4.roa (hash: yDXZvfMOXGpBwTjMd4JFoseeDN5zwWwTjLyIqfnezgg=) 27: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=) 28: nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa (hash: N7pYS0DZbvPX9AJ7+c9P/Fy4kdTMZIvg/FrKj/0hE8k=) 29: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=) 30: nZJPQb2Q1PTGlp2DfymYULd1iRo.roa (hash: ocVab7q0TajckslbwweO4x6Z46pdonJrWMEBlZtTcCc=) 31: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=) 32: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=) 33: wIKlIzaPvMqlbHFPKVC7a0A1RBw.roa (hash: 8tz5eic6ZZ8w1FJt/f7UXX9lkmNuw6dZC8Vdyx3/23A=) 34: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=) 35: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=) 36: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=) 37: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:f8:f9:71:cb:7e:3b:70:09:ab:dd:ba:64:e1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Aug 23 06:00:52 2025 GMT Not After : Aug 24 06:00:52 2025 GMT Subject: CN=9787566f996276a567bfbbe0a4c3942ccd905f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:ad:2e:9c:1a:e1:dc:39:4b:e7:09:7a:c1: db:2c:f7:c6:59:69:13:42:25:35:ad:7e:15:1d:4b: d0:f7:84:00:c0:56:2c:57:c3:81:81:b5:0e:6c:fa: 8d:1f:2e:7b:c4:fb:79:20:fe:f4:59:35:f8:9f:bc: 69:e7:65:9d:53:83:a5:91:ff:2b:eb:7d:50:b0:1f: 54:a0:1e:bb:55:0c:30:8d:45:7d:d8:98:cb:a0:67: c9:cb:8f:3e:8e:2d:f7:6c:5f:1b:4c:c3:18:0d:48: 76:71:e7:4e:45:3a:96:d1:f4:ac:7d:d0:d4:8a:07: 82:9f:86:0e:f5:02:6b:31:42:2a:32:65:61:fb:a7: bb:c1:18:bd:4f:fb:dd:44:9d:e3:a6:eb:47:02:c0: a0:ac:9e:ea:60:20:87:e1:7d:db:a5:83:ed:68:b0: 43:97:09:1a:46:60:73:ca:b4:2a:2f:ed:e0:ac:57: 15:03:ed:f9:e0:a1:d4:b8:44:a0:51:a4:04:1e:67: 42:6f:1c:06:7e:19:15:69:e3:95:2b:c3:6a:4d:f6: c2:0a:ee:7f:db:26:32:59:c8:a9:67:34:65:42:93: 32:8e:55:41:52:e3:79:01:80:6a:0f:08:ce:16:19: 32:07:20:21:38:7e:e3:cd:93:8f:91:0b:98:97:7f: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:87:56:6F:99:62:76:A5:67:BF:BB:E0:A4:C3:94:2C:CD:90:5F:10 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e3:bc:2b:c8:f6:1c:7f:41:ad:67:80:b7:a4:e1:3e:c7:3b: 9b:3b:09:f2:d2:fe:7e:96:76:49:4b:8f:4f:f5:75:f4:74:8a: 59:b9:1b:9c:3c:ac:7d:70:44:18:ea:1e:cd:e4:46:fc:60:fe: 2a:5e:92:86:c2:b6:18:bb:78:73:d6:33:7d:4d:9d:d0:f5:69: 09:7f:66:f6:86:f2:42:f2:90:31:e2:9c:13:f8:18:9b:33:50: 06:5d:e2:db:cf:78:e4:5a:4a:c4:a3:dc:02:0c:36:91:1f:da: f1:0a:4f:4d:04:b3:f8:c8:9d:27:87:d0:54:c7:1e:98:d3:ee: d3:07:fc:d6:bb:0f:6b:82:98:38:f0:bd:cd:d1:8a:9e:48:14: f9:21:27:ad:7d:7b:ad:ec:27:4a:de:56:d6:f9:27:a4:7c:2b: a1:74:77:66:62:7c:26:de:e6:bd:1b:0c:34:b5:38:b6:89:0d: 1b:da:49:40:a7:2a:04:6c:b9:11:59:e4:0b:f5:f8:15:60:f5: 32:42:94:0c:8a:80:a8:8d:29:87:9f:c4:88:6c:cd:58:b6:e3: 61:2a:03:8c:8c:88:cb:c3:08:6d:20:82:1e:08:93:f2:9f:c2: a3:03:d2:b1:bd:ae:1c:17:46:b4:92:cb:57:ba:69:8a:b4:9d: aa:15:fd:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg/j5cct+O3AJq926ZOF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUwODIzMDYwMDUyWhcNMjUwODI0MDYwMDUyWjAzMTEwLwYDVQQD Eyg5Nzg3NTY2Zjk5NjI3NmE1NjdiZmJiZTBhNGMzOTQyY2NkOTA1ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4qtLpwa4dw5S+cJesHbLPfGWWkT QiU1rX4VHUvQ94QAwFYsV8OBgbUObPqNHy57xPt5IP70WTX4n7xp52WdU4Olkf8r 631QsB9UoB67VQwwjUV92JjLoGfJy48+ji33bF8bTMMYDUh2cedORTqW0fSsfdDU igeCn4YO9QJrMUIqMmVh+6e7wRi9T/vdRJ3jputHAsCgrJ7qYCCH4X3bpYPtaLBD lwkaRmBzyrQqL+3grFcVA+354KHUuESgUaQEHmdCbxwGfhkVaeOVK8NqTfbCCu5/ 2yYyWcipZzRlQpMyjlVBUuN5AYBqDwjOFhkyByAhOH7jzZOPkQuYl3+7XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeHVm+ZYnalZ7+74KTDlCzNkF8QMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuO8K8j2 HH9BrWeAt6ThPsc7mzsJ8tL+fpZ2SUuPT/V19HSKWbkbnDysfXBEGOoezeRG/GD+ Kl6ShsK2GLt4c9YzfU2d0PVpCX9m9obyQvKQMeKcE/gYmzNQBl3i28945FpKxKPc Agw2kR/a8QpPTQSz+MidJ4fQVMcemNPu0wf81rsPa4KYOPC9zdGKnkgU+SEnrX17 rewnSt5W1vknpHwroXR3ZmJ8Jt7mvRsMNLU4tokNG9pJQKcqBGy5EVnkC/X4FWD1 MkKUDIqAqI0ph5/EiGzNWLbjYSoDjIyIy8MIbSCCHgiT8p/CowPSsb2uHBdGtJLL V7ppirSdqhX99w== -----END CERTIFICATE-----Generated at Sat Aug 23 09:43:21 2025 by rpki-client