$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json) Hash identifier: ffAyqa/6IRiwTvcJ2hcvfObov2q20GwHWW/h0IxE7aU= Subject key identifier: 88:DA:36:7F:B4:D7:87:C5:49:78:64:81:5E:2F:52:8D:67:DC:3C:FC Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 0197B77C852AFDBF38BC3AA8649FA33382D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft Manifest number: 02C2 Signing time: Sat 28 Jun 2025 17:01:20 +0000 Manifest this update: Sat 28 Jun 2025 17:01:20 +0000 Manifest next update: Sun 29 Jun 2025 17:01:20 +0000 Files and hashes: 1: 04KCLm--9za3MwjcZovBV5MAsL4.roa (hash: bwrl0NNRWWWbqvvR9nUL3EtLFx6n2S969Soq1XaC/yI=) 2: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=) 3: 1dd8wQbUGZb37ON1wxQRH72QlpI.roa (hash: bzkgiCpTlvvYKlJfhsVQWdWbUhvq97n+YmedrgTC9ug=) 4: 7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa (hash: JBF3Cz4Y9X2mzfXIi45uJ7vNKUzCzYVEwRnol0zS7Q4=) 5: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=) 6: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: C1o7SB4Z/ti7N/Sxv/8/RDBB3OvFnFA8NIUS9oNQoWA=) 7: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (hash: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=) 8: M4q7I7cOU6_R12j5wjIu9L6o9Aw.roa (hash: Ng4zgd0AVFLrtQHc/CWQtVfEkYy0WR/oiNK1WLff7PA=) 9: NxOAGrTxofYBFKIpjjp74BEE4ck.roa (hash: czQx6WXfZ8CdpvYil+i0WrvTtgukRGCx1yKLUOoXK04=) 10: Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa (hash: Rc7LlFZsQD6UtspfP1hY2HJq001uYyMfvHYShOgLlRs=) 11: fk0Xlg-9w-A2loQv9XksmSbPwOY.roa (hash: bL4uRe18zJHwNvTxqiRSt9A3zafbwK9vMP1pK6Mv+QQ=) 12: pUDcLqhd8k-OHqhDTMHEWLFxtNI.roa (hash: zmsnQNHG6rnZC/5WP217xaq98ZpVSxzIVkPlWZUUiFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:7c:85:2a:fd:bf:38:bc:3a:a8:64:9f:a3:33:82:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jun 28 17:01:20 2025 GMT Not After : Jun 29 17:01:20 2025 GMT Subject: CN=88da367fb4d787c5497864815e2f528d67dc3cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9d:d4:d2:02:a3:cb:b2:10:09:09:19:4b:8e: 92:ab:96:dc:b9:da:79:2a:14:c9:26:2c:b6:18:7a: 38:ae:c1:a6:78:d9:04:8b:de:83:ff:dc:eb:8c:1f: e5:b0:c5:1d:1a:b6:d1:43:93:87:96:d0:72:25:15: 1a:5c:a7:0f:d0:a1:08:4f:84:26:a4:20:e2:12:e4: 34:2c:5b:ce:b7:08:25:cc:f1:9b:e7:35:78:94:f9: a2:01:42:08:4f:e1:d4:23:0c:08:fc:f8:f7:59:f5: 61:58:37:a9:29:c2:7c:94:3c:d2:a3:38:f0:0b:47: 80:d6:93:77:f4:2a:b2:5c:96:2e:43:f8:7e:48:aa: f7:7d:02:14:1d:35:28:ba:96:9d:d4:46:d5:bd:c3: 23:be:20:84:f9:72:8d:60:c5:5d:05:e9:b8:c4:b1: 1e:66:1b:1f:a4:8a:0f:3f:92:49:34:0e:87:2d:d2: 50:be:14:38:3c:08:d3:87:8a:b6:7a:b6:fb:04:5f: 26:be:9a:78:bc:5e:a5:ed:55:92:99:65:0a:93:e0: de:2a:85:80:30:45:27:84:f4:28:a3:b7:f5:d1:52: 1f:62:04:37:19:d6:a1:94:ad:0f:53:a5:34:78:28: 30:b9:45:dd:a3:6d:c9:f4:6a:de:f5:a4:8f:85:34: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DA:36:7F:B4:D7:87:C5:49:78:64:81:5E:2F:52:8D:67:DC:3C:FC X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bb:4c:04:26:14:92:66:f4:90:a2:37:07:9a:55:75:ac:33: 38:4b:5e:e6:8a:47:c3:84:20:a2:75:ef:ba:c8:74:27:9b:d5: ab:41:6b:f9:bc:71:3e:86:c5:97:22:d3:55:f5:33:c7:c9:da: aa:e6:b6:75:4f:c9:f8:cc:73:ad:84:0f:a5:fb:f9:56:9d:d0: 93:e2:82:71:3f:44:86:b5:b4:8b:55:1e:1f:b6:ae:b6:0e:e9: bc:75:55:b3:82:34:8d:78:4c:35:cd:53:1f:5c:da:68:7c:00: 86:73:ef:2c:52:45:dd:d0:84:94:03:45:d1:c1:a2:02:bf:43: fd:5a:00:c8:1c:83:55:8d:80:5b:fd:54:19:b7:d4:62:73:df: b2:47:c2:02:53:17:25:4f:93:f2:a2:f2:59:8a:5b:54:86:b8: 48:33:b2:57:d0:86:71:f2:08:e6:b9:eb:09:c2:0d:df:23:fa: a2:5a:af:e8:6e:e9:1d:e4:5d:b3:02:27:65:92:1b:10:f7:42: 1a:86:b4:5b:6c:ae:bf:9e:df:fc:ed:51:ad:8f:82:3a:2b:18: e5:15:1f:cb:5f:6e:17:fe:4d:8b:74:cb:cf:54:42:66:cc:40: 26:d4:77:99:fe:87:1e:04:15:23:dd:bf:96:97:c3:4f:43:e8: 61:15:ee:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3fIUq/b84vDqoZJ+jM4LXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjUwNjI4MTcwMTIwWhcNMjUwNjI5MTcwMTIwWjAzMTEwLwYDVQQD Eyg4OGRhMzY3ZmI0ZDc4N2M1NDk3ODY0ODE1ZTJmNTI4ZDY3ZGMzY2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip3U0gKjy7IQCQkZS46Sq5bcudp5 KhTJJiy2GHo4rsGmeNkEi96D/9zrjB/lsMUdGrbRQ5OHltByJRUaXKcP0KEIT4Qm pCDiEuQ0LFvOtwglzPGb5zV4lPmiAUIIT+HUIwwI/Pj3WfVhWDepKcJ8lDzSozjw C0eA1pN39CqyXJYuQ/h+SKr3fQIUHTUoupad1EbVvcMjviCE+XKNYMVdBem4xLEe ZhsfpIoPP5JJNA6HLdJQvhQ4PAjTh4q2erb7BF8mvpp4vF6l7VWSmWUKk+DeKoWA MEUnhPQoo7f10VIfYgQ3GdahlK0PU6U0eCgwuUXdo23J9Gre9aSPhTSOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjaNn+014fFSXhkgV4vUo1n3Dz8MB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLtMBCYU kmb0kKI3B5pVdawzOEte5opHw4QgonXvush0J5vVq0Fr+bxxPobFlyLTVfUzx8na qua2dU/J+MxzrYQPpfv5Vp3Qk+KCcT9EhrW0i1UeH7autg7pvHVVs4I0jXhMNc1T H1zaaHwAhnPvLFJF3dCElANF0cGiAr9D/VoAyByDVY2AW/1UGbfUYnPfskfCAlMX JU+T8qLyWYpbVIa4SDOyV9CGcfII5rnrCcIN3yP6olqv6G7pHeRdswInZZIbEPdC Goa0W2yuv57f/O1RrY+COisY5RUfy19uF/5Ni3TLz1RCZsxAJtR3mf6HHgQVI92/ lpfDT0PoYRXuqg== -----END CERTIFICATE-----Generated at Sat Jun 28 20:57:23 2025 by rpki-client