$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json) Hash identifier: JneAZa4xyfraFDXhumpJ2+JsjjazlTLujIoERWa6irU= Subject key identifier: 1B:2B:28:A2:83:70:63:EA:0E:D8:9E:11:B6:D8:EE:23:78:70:72:58 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 0199FBEB53313F243C3CB64AD6A832D0541D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft Manifest number: 03F8 Signing time: Sun 19 Oct 2025 10:02:07 +0000 Manifest this update: Sun 19 Oct 2025 10:02:07 +0000 Manifest next update: Mon 20 Oct 2025 10:02:07 +0000 Files and hashes: 1: 04KCLm--9za3MwjcZovBV5MAsL4.roa (hash: bwrl0NNRWWWbqvvR9nUL3EtLFx6n2S969Soq1XaC/yI=) 2: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=) 3: 4MHLeZKHCc5v2eG_hUTKUO_SQW0.roa (hash: s89mh8mTzjBY6Fii8f0XQdlc/RvoNx8XMwrvpm8npEA=) 4: B5Yy28bxe6Cml3si8QCLfAS3HZQ.roa (hash: TxRm2vEUTkidg4jt/+K4Y9aI40elv3rNZTegLYb/KOE=) 5: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=) 6: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: 0UPZMDfy/WtTSZk+17Eyyh1403BIYpkJwdAiHPyTN/Y=) 7: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (hash: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=) 8: OB_oVuUaUAQ7W4RQ74LopVDeEhg.roa (hash: 3/3eElkgAQmQYyO/cS1ImYS5pgz/1W8Ltmyasrek5j8=) 9: SAX9YphdKY57_csF0MGyWyZQZYY.roa (hash: LHdX4ykBxTn/q4zS1xWdeZa63yLoXL3w/mtQzy69Sqg=) 10: Yk2pXWWJv4sGuxcLppogjSmk248.roa (hash: i4LHXRMr0CAiEgBhwaeFhn7uPBNJPB2vLXzYJP+HFUw=) 11: dukRtbUxZBVioJQ3ztIVswrYNNA.roa (hash: UotKdLzjPrXF5MwtzJADmQZtjx5PiQOZaqVsJCIhnRQ=) 12: fk0Xlg-9w-A2loQv9XksmSbPwOY.roa (hash: bL4uRe18zJHwNvTxqiRSt9A3zafbwK9vMP1pK6Mv+QQ=) 13: m7WrmCx6u03mQuCv5HV8jBx9bFo.roa (hash: Ha14BfkFTZRxDnv1SGkvf/k31l7c4G7JUHS2Zmnc08A=) 14: xFqNQVTFpMj4W5rVLw1d0wYhCxE.roa (hash: mLkdYkxMk/c37ut0f2/D21fKPmTDjz49mB9Qq74dOX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:53:31:3f:24:3c:3c:b6:4a:d6:a8:32:d0:54:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Oct 19 10:02:07 2025 GMT Not After : Oct 20 10:02:07 2025 GMT Subject: CN=1b2b28a2837063ea0ed89e11b6d8ee2378707258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b6:62:4c:62:09:4f:94:5d:f2:12:83:dd:9f: 61:ad:00:68:61:cd:0a:18:17:80:6e:80:34:fb:64: b7:35:46:5b:4b:d6:26:75:d8:61:da:a2:8f:fc:8e: 69:16:e2:0f:9e:10:6a:e6:81:68:d3:af:99:91:10: 52:38:16:16:e4:2c:0d:81:e4:ce:3f:6a:c8:64:73: ed:49:7b:5d:07:ae:e8:fd:ec:aa:3f:e2:e4:5f:04: bf:25:75:1e:b1:73:1b:4f:88:fa:24:bc:a2:35:05: a0:b4:d4:0e:01:04:ec:57:51:dc:65:57:ed:9f:89: ca:d1:88:92:9b:9f:63:8f:93:8b:6a:c1:17:91:ad: 51:60:7a:3c:de:28:88:cf:d6:9d:7c:ac:23:7a:b1: 69:1c:1b:b1:47:40:a6:ba:1b:1c:e0:5a:87:f0:8c: c8:c0:7e:39:7a:bc:9c:bb:db:f0:18:50:a1:7b:4b: f9:da:60:94:f5:b9:16:99:36:2b:30:71:85:5f:02: e1:63:73:2e:2b:33:54:bf:01:41:63:d9:01:f5:b2: a4:7d:1d:5b:08:b0:3e:f7:5c:d7:90:cf:b3:8f:4f: 96:e1:88:82:ad:ae:5a:cf:81:1b:32:ee:98:c3:03: 51:5c:fe:96:9a:67:a0:35:6e:75:c6:63:fe:14:48: e9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2B:28:A2:83:70:63:EA:0E:D8:9E:11:B6:D8:EE:23:78:70:72:58 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ed:af:ab:17:9b:bd:b4:74:c3:c0:57:fe:49:2d:8a:b6:83: 79:47:98:a1:7c:64:2b:8e:be:d0:9b:52:34:22:e6:58:d7:a4: 32:b1:fb:c5:00:12:49:6e:77:ed:63:4e:8f:ee:2b:a0:ca:f7: e2:6e:8e:21:93:74:fe:e1:d2:4a:3e:e3:00:f0:32:89:bd:f3: ee:ad:00:7d:d0:93:63:19:eb:7e:78:d0:d2:f1:17:da:29:89: 09:c7:67:b5:12:fa:cf:ce:83:46:c4:e2:d2:29:6d:04:89:2c: ab:92:e5:3b:57:03:bc:a1:b9:45:2f:08:a0:2d:dc:e1:9c:7d: 07:ce:65:28:06:55:13:12:3e:fa:46:9b:e5:c9:a7:c6:a2:73: af:52:9a:52:19:86:ff:9d:8b:df:79:3c:42:77:a7:88:51:19: 0f:d0:0b:9a:cc:1c:11:61:94:46:1b:d6:9c:83:e6:75:a0:8c: 0b:2c:a7:55:27:fb:76:84:ea:91:e6:fd:3d:3e:dd:86:12:c4: ec:a9:81:7c:66:36:b9:44:e2:51:c4:a6:c9:a8:5a:d6:e5:35: b4:b5:75:e1:23:e2:ed:c5:36:25:8c:7e:f7:d0:05:3e:9d:11: 0b:ea:35:cf:31:1c:ff:3d:82:55:be:b7:43:77:79:b7:6b:90: 0d:45:8b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn761MxPyQ8PLZK1qgy0FQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjUxMDE5MTAwMjA3WhcNMjUxMDIwMTAwMjA3WjAzMTEwLwYDVQQD EygxYjJiMjhhMjgzNzA2M2VhMGVkODllMTFiNmQ4ZWUyMzc4NzA3MjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37ZiTGIJT5Rd8hKD3Z9hrQBoYc0K GBeAboA0+2S3NUZbS9Ymddhh2qKP/I5pFuIPnhBq5oFo06+ZkRBSOBYW5CwNgeTO P2rIZHPtSXtdB67o/eyqP+LkXwS/JXUesXMbT4j6JLyiNQWgtNQOAQTsV1HcZVft n4nK0YiSm59jj5OLasEXka1RYHo83iiIz9adfKwjerFpHBuxR0Cmuhsc4FqH8IzI wH45erycu9vwGFChe0v52mCU9bkWmTYrMHGFXwLhY3MuKzNUvwFBY9kB9bKkfR1b CLA+91zXkM+zj0+W4YiCra5az4EbMu6YwwNRXP6WmmegNW51xmP+FEjpxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsrKKKDcGPqDtieEbbY7iN4cHJYMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKu2vqxeb vbR0w8BX/kktiraDeUeYoXxkK46+0JtSNCLmWNekMrH7xQASSW537WNOj+4roMr3 4m6OIZN0/uHSSj7jAPAyib3z7q0AfdCTYxnrfnjQ0vEX2imJCcdntRL6z86DRsTi 0iltBIksq5LlO1cDvKG5RS8IoC3c4Zx9B85lKAZVExI++kab5cmnxqJzr1KaUhmG /52L33k8QneniFEZD9ALmswcEWGURhvWnIPmdaCMCyynVSf7doTqkeb9PT7dhhLE 7KmBfGY2uUTiUcSmyaha1uU1tLV14SPi7cU2JYx+99AFPp0RC+o1zzEc/z2CVb63 Q3d5t2uQDUWL4A== -----END CERTIFICATE-----Generated at Sun Oct 19 17:39:33 2025 by rpki-client