$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: 5irzQE0DtSvADF7dOkKep9G6eNmdTuPYwUZaR8uSLag= Subject key identifier: EC:E6:9F:DA:23:B8:94:A0:1A:10:E4:35:AF:01:00:A4:EE:08:88:44 Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 0197B6D728FFC081785781428B919E365116 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 1636 Signing time: Sat 28 Jun 2025 14:00:43 +0000 Manifest this update: Sat 28 Jun 2025 14:00:43 +0000 Manifest next update: Sun 29 Jun 2025 14:00:43 +0000 Files and hashes: 1: 1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa (hash: M565zMsE8K/YoAfcIK7Sfb56kLhbnQFGZfCJXZeA4+c=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RJwe2BfOH2L8b2xvYWAb7A5I8YI.roa (hash: Ua7R/78tPOt1hUU0nncJ70Fr//DWyVNm+5rSWWhtzSo=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=) 7: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: +Z6Biex21jVVUVfvdgtfNN9238g4MBSgM6FzIdm6ca4=) 9: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 10: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:28:ff:c0:81:78:57:81:42:8b:91:9e:36:51:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Jun 28 14:00:43 2025 GMT Not After : Jun 29 14:00:43 2025 GMT Subject: CN=ece69fda23b894a01a10e435af0100a4ee088844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:6e:8b:3d:65:2c:6e:ef:02:2c:74:94:d6: 0e:9e:c0:b5:c2:44:5e:80:db:fe:12:9a:8e:98:ab: 02:ab:1b:32:f2:00:03:74:dc:57:6c:bb:74:65:9e: a9:9b:24:3a:3b:6a:3f:16:24:79:35:ae:8a:c1:c7: b6:fb:c6:c1:02:9b:2a:6d:a0:44:cf:6f:8b:70:3c: 04:f6:db:6a:7b:92:0a:4b:e3:7f:52:a9:aa:dc:77: e3:5b:2c:c0:7a:46:ad:a7:d9:77:df:cc:ce:8e:85: 14:57:a7:16:90:74:08:41:ba:ec:52:09:29:09:e6: b0:f9:b6:03:9c:91:be:ad:ae:c6:c7:d9:1d:33:92: c7:c7:dc:7d:7c:bd:19:c1:e6:79:cf:e6:87:75:4c: 14:2b:43:7c:dd:e3:58:0c:38:61:87:de:58:11:26: 18:b1:19:06:b0:21:bf:14:e3:ab:e3:39:77:f4:5f: d8:9b:37:e4:34:45:d9:4a:27:52:6a:f3:4f:f9:97: 27:60:cb:45:e7:d3:7e:31:34:8d:62:bd:76:6f:6d: 80:15:a9:72:4d:20:ec:bd:9c:88:5d:1d:97:65:17: f3:48:c2:76:65:c3:13:35:b3:bd:51:9a:b7:cc:97: a8:35:aa:e5:8d:48:2b:e3:68:f0:fd:48:d5:26:94: 82:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E6:9F:DA:23:B8:94:A0:1A:10:E4:35:AF:01:00:A4:EE:08:88:44 X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7d:ed:a6:60:79:cc:5b:05:d2:08:c6:85:4f:f1:e4:b5:0f: 0d:d1:cb:9f:21:53:b3:f1:cc:2b:85:9d:83:2c:dd:51:4c:d6: bd:57:20:1a:3c:16:69:c6:71:43:c2:f3:9e:ed:de:66:86:4a: 79:ec:7b:6e:ed:b7:16:1e:6c:95:3e:74:17:ae:37:d0:c2:13: f6:17:9e:7a:bb:3b:6c:bd:91:e5:93:34:88:9a:bb:9d:aa:fd: 48:6c:c3:4c:57:bf:85:47:48:71:bc:4c:16:91:7a:d5:95:a6: 82:3d:f6:69:ee:37:78:f7:3e:d1:96:c4:0c:14:08:a3:18:41: 8c:14:79:29:c4:3f:c0:47:53:95:13:c8:88:3f:7f:00:18:5e: 5c:ff:8b:77:6c:a4:e2:b0:4a:fc:ff:b1:03:b9:6c:bb:a2:d3: 89:68:6a:8d:59:e7:60:b1:27:35:4a:a9:95:59:90:36:ed:d0: d3:9d:de:1b:f8:ea:0a:a1:24:04:89:8c:39:d1:16:6b:39:73: 0a:1d:fb:8f:46:99:c5:24:a5:82:26:e1:b5:62:e6:6b:3c:70: 24:8d:52:1f:de:8d:75:ec:fb:c8:63:ad:3e:ef:0a:7a:e2:d4: 7f:9f:e3:59:12:f9:19:f5:ed:0b:04:5f:c8:17:ed:02:df:86: c8:b0:e6:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe21yj/wIF4V4FCi5GeNlEWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUwNjI4MTQwMDQzWhcNMjUwNjI5MTQwMDQzWjAzMTEwLwYDVQQD EyhlY2U2OWZkYTIzYjg5NGEwMWExMGU0MzVhZjAxMDBhNGVlMDg4ODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbpuiz1lLG7vAix0lNYOnsC1wkRe gNv+EpqOmKsCqxsy8gADdNxXbLt0ZZ6pmyQ6O2o/FiR5Na6Kwce2+8bBApsqbaBE z2+LcDwE9ttqe5IKS+N/Uqmq3HfjWyzAekatp9l338zOjoUUV6cWkHQIQbrsUgkp Ceaw+bYDnJG+ra7Gx9kdM5LHx9x9fL0ZweZ5z+aHdUwUK0N83eNYDDhhh95YESYY sRkGsCG/FOOr4zl39F/YmzfkNEXZSidSavNP+ZcnYMtF59N+MTSNYr12b22AFaly TSDsvZyIXR2XZRfzSMJ2ZcMTNbO9UZq3zJeoNarljUgr42jw/UjVJpSCSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzmn9ojuJSgGhDkNa8BAKTuCIhEMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH3tpmB5 zFsF0gjGhU/x5LUPDdHLnyFTs/HMK4WdgyzdUUzWvVcgGjwWacZxQ8Lznu3eZoZK eex7bu23Fh5slT50F6430MIT9heeers7bL2R5ZM0iJq7nar9SGzDTFe/hUdIcbxM FpF61ZWmgj32ae43ePc+0ZbEDBQIoxhBjBR5KcQ/wEdTlRPIiD9/ABheXP+Ld2yk 4rBK/P+xA7lsu6LTiWhqjVnnYLEnNUqplVmQNu3Q053eG/jqCqEkBImMOdEWazlz Ch37j0aZxSSlgibhtWLmazxwJI1SH96Ndez7yGOtPu8KeuLUf5/jWRL5GfXtCwRf yBftAt+GyLDmQQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:00:37 2025 by rpki-client