$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json) Hash identifier: NNNB4xOFslGnzI1RTAd31mqdPcNn+5qkd/61YCnvEBE= Subject key identifier: 34:21:61:91:B5:9B:58:0F:F6:A5:DD:FE:13:B0:43:5C:F5:DD:D4:FB Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 0198D62989C69676235F0D2808E12814CA27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft Manifest number: 035A Signing time: Sat 23 Aug 2025 09:01:43 +0000 Manifest this update: Sat 23 Aug 2025 09:01:43 +0000 Manifest next update: Sun 24 Aug 2025 09:01:43 +0000 Files and hashes: 1: 04KCLm--9za3MwjcZovBV5MAsL4.roa (hash: bwrl0NNRWWWbqvvR9nUL3EtLFx6n2S969Soq1XaC/yI=) 2: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=) 3: 1dd8wQbUGZb37ON1wxQRH72QlpI.roa (hash: bzkgiCpTlvvYKlJfhsVQWdWbUhvq97n+YmedrgTC9ug=) 4: 7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa (hash: JBF3Cz4Y9X2mzfXIi45uJ7vNKUzCzYVEwRnol0zS7Q4=) 5: B5Yy28bxe6Cml3si8QCLfAS3HZQ.roa (hash: TxRm2vEUTkidg4jt/+K4Y9aI40elv3rNZTegLYb/KOE=) 6: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=) 7: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: yaoRfz6dQ6ikHFXHZ2uGf7ddQQAksSFuSAlHiJ6uPTI=) 8: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (hash: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=) 9: NxOAGrTxofYBFKIpjjp74BEE4ck.roa (hash: czQx6WXfZ8CdpvYil+i0WrvTtgukRGCx1yKLUOoXK04=) 10: Yk2pXWWJv4sGuxcLppogjSmk248.roa (hash: i4LHXRMr0CAiEgBhwaeFhn7uPBNJPB2vLXzYJP+HFUw=) 11: dukRtbUxZBVioJQ3ztIVswrYNNA.roa (hash: UotKdLzjPrXF5MwtzJADmQZtjx5PiQOZaqVsJCIhnRQ=) 12: fk0Xlg-9w-A2loQv9XksmSbPwOY.roa (hash: bL4uRe18zJHwNvTxqiRSt9A3zafbwK9vMP1pK6Mv+QQ=) 13: m7WrmCx6u03mQuCv5HV8jBx9bFo.roa (hash: Ha14BfkFTZRxDnv1SGkvf/k31l7c4G7JUHS2Zmnc08A=) 14: pUDcLqhd8k-OHqhDTMHEWLFxtNI.roa (hash: zmsnQNHG6rnZC/5WP217xaq98ZpVSxzIVkPlWZUUiFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:29:89:c6:96:76:23:5f:0d:28:08:e1:28:14:ca:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Aug 23 09:01:43 2025 GMT Not After : Aug 24 09:01:43 2025 GMT Subject: CN=34216191b59b580ff6a5ddfe13b0435cf5ddd4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:29:a9:a8:69:4c:57:8c:e9:72:39:7c:74: 6c:17:c0:8d:60:da:18:a8:7c:e1:b4:98:0a:00:7f: 83:c9:52:02:e3:0d:88:e5:4c:62:3c:79:fb:b8:c2: 61:f3:b5:c1:12:8d:c8:6f:57:d3:72:65:c0:bb:04: 3a:ac:66:72:ff:68:f9:af:5c:bb:0b:ed:bf:48:dd: 1f:eb:bc:83:a0:ef:22:1d:eb:f3:bb:73:46:c7:8c: ab:5e:0a:8c:93:23:69:7f:6e:b7:3b:bb:ad:1d:1f: f3:0e:49:ef:db:59:70:df:73:06:33:05:45:b4:76: 42:37:36:ca:9e:e9:de:43:dc:4f:22:e7:9b:1a:4a: 90:37:3f:00:fb:e6:fa:7d:df:94:f4:c3:8a:0a:4d: 51:c1:03:d0:89:c5:30:e3:da:15:ac:ca:c7:e3:e0: 87:93:75:a6:9d:84:4f:d0:37:90:23:51:b4:8f:9d: dc:cd:6b:a9:d1:4c:fd:b5:21:62:25:29:47:0e:0f: 96:3c:2c:55:59:48:34:c3:d2:e4:7e:e8:58:1b:98: 10:93:88:bf:33:31:54:5f:ce:e4:af:75:8b:16:59: 9a:15:75:47:35:90:70:d7:02:35:05:7d:f2:26:0f: 42:bb:f8:72:fb:60:4d:86:a7:72:a7:6f:73:96:a3: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:61:91:B5:9B:58:0F:F6:A5:DD:FE:13:B0:43:5C:F5:DD:D4:FB X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5f:dd:26:68:75:16:43:9d:5b:74:c2:74:87:2b:2f:85:71: b4:3a:34:4e:2d:13:40:d8:c3:06:8d:6b:a1:b6:82:d8:39:b4: a5:3c:04:39:c4:88:bf:b5:36:4c:ae:a9:ea:a5:78:78:bf:fd: e1:52:8e:0d:59:65:c9:1f:50:98:13:6d:b2:54:0c:b1:ce:53: 20:fb:5b:1a:ef:6f:67:23:d3:ac:54:86:6b:3c:c3:10:83:86: 0a:b2:c3:6c:8a:8e:f5:a6:83:e4:73:bd:a0:6f:35:f7:1d:56: b9:07:2a:b9:ad:6c:c0:46:cd:20:6c:ff:29:3e:ef:d8:d5:cf: b7:e0:78:ab:84:7b:97:d8:57:3c:03:64:1b:fd:51:c9:64:5b: 5c:4b:d3:28:1d:f9:dc:55:89:a7:6b:b7:67:09:51:65:36:b2: 89:c2:dd:d4:61:ee:a6:23:49:a7:18:e2:a2:a7:f4:55:31:b8: a0:f1:e4:2d:35:80:ae:90:ad:8f:f7:fd:a7:01:4f:f9:58:62: e1:55:5c:80:2f:f2:23:9b:b9:db:f3:56:3f:22:b4:0c:80:ad: a1:fb:7f:bd:a1:85:eb:61:de:b9:a1:e4:0e:a3:63:9c:8f:44: b1:4a:e2:03:c7:3d:31:4b:5c:ca:b4:c1:8f:3b:56:0b:5a:09: ab:16:b3:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWKYnGlnYjXw0oCOEoFMonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjUwODIzMDkwMTQzWhcNMjUwODI0MDkwMTQzWjAzMTEwLwYDVQQD EygzNDIxNjE5MWI1OWI1ODBmZjZhNWRkZmUxM2IwNDM1Y2Y1ZGRkNGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNApqahpTFeM6XI5fHRsF8CNYNoY qHzhtJgKAH+DyVIC4w2I5UxiPHn7uMJh87XBEo3Ib1fTcmXAuwQ6rGZy/2j5r1y7 C+2/SN0f67yDoO8iHevzu3NGx4yrXgqMkyNpf263O7utHR/zDknv21lw33MGMwVF tHZCNzbKnuneQ9xPIuebGkqQNz8A++b6fd+U9MOKCk1RwQPQicUw49oVrMrH4+CH k3WmnYRP0DeQI1G0j53czWup0Uz9tSFiJSlHDg+WPCxVWUg0w9LkfuhYG5gQk4i/ MzFUX87kr3WLFlmaFXVHNZBw1wI1BX3yJg9Cu/hy+2BNhqdyp29zlqNJpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQhYZG1m1gP9qXd/hOwQ1z13dT7MB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADl/dJmh1 FkOdW3TCdIcrL4VxtDo0Ti0TQNjDBo1robaC2Dm0pTwEOcSIv7U2TK6p6qV4eL/9 4VKODVllyR9QmBNtslQMsc5TIPtbGu9vZyPTrFSGazzDEIOGCrLDbIqO9aaD5HO9 oG819x1WuQcqua1swEbNIGz/KT7v2NXPt+B4q4R7l9hXPANkG/1RyWRbXEvTKB35 3FWJp2u3ZwlRZTayicLd1GHupiNJpxjioqf0VTG4oPHkLTWArpCtj/f9pwFP+Vhi 4VVcgC/yI5u52/NWPyK0DICtoft/vaGF62HeuaHkDqNjnI9EsUriA8c9MUtcyrTB jztWC1oJqxazGQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:34:30 2025 by rpki-client