$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: RMmjHBTZVKmUbVQS6BshH79nLNNRgBwPc17i00hM79o= Subject key identifier: 2F:76:4C:CF:43:6F:9E:46:FB:17:A9:EF:CE:03:DE:E7:16:8B:9D:67 Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019A011132965FE076D7B7011E635D279BE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 1794 Signing time: Mon 20 Oct 2025 10:01:35 +0000 Manifest this update: Mon 20 Oct 2025 10:01:35 +0000 Manifest next update: Tue 21 Oct 2025 10:01:35 +0000 Files and hashes: 1: 3HemvcGpa10fkEZgb6Z-o4k7Y3I.roa (hash: a1XCZrNTfqU9TQWTJM+VI0BWa7g1babTnrZlikC2mRA=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: FTrYYx4CBKkDflQVg1_J0y11QdQ.roa (hash: TOnemNVhdJLNIGqBvgUS4W9Hdvqcz6Ct0ExYEDZZ3M4=) 4: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 7: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: OBlruzx5BAPHYpOLc8912N5df8tdy4au0vqp7ltK+Mc=) 8: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=) 9: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 10: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:01:11:32:96:5f:e0:76:d7:b7:01:1e:63:5d:27:9b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Oct 20 10:01:35 2025 GMT Not After : Oct 21 10:01:35 2025 GMT Subject: CN=2f764ccf436f9e46fb17a9efce03dee7168b9d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fd:1d:f7:0d:6c:98:e8:36:e9:4d:8d:22:fc: 6d:78:9d:fd:09:8a:2a:31:8c:18:c4:92:77:2c:dd: 7b:0f:a3:66:9a:48:af:ee:08:a6:3a:dc:07:f6:14: 09:55:8a:72:a4:b3:01:d6:eb:d2:aa:a7:a3:db:b2: 2f:3a:23:0a:8e:8d:d0:0e:b5:c1:aa:c0:ef:d4:42: a4:e3:28:4b:c8:06:c9:df:c8:58:ca:05:48:b3:6a: cc:7d:b4:08:ae:01:05:50:f0:70:19:dc:14:87:7d: e3:a5:3c:39:1f:29:ec:96:0e:86:0e:75:b5:14:ba: 50:4c:8f:c9:4c:26:81:7c:e7:11:14:fc:3b:53:e1: 36:11:a4:2c:e5:20:3c:cc:c5:aa:5c:ed:a9:98:6a: d5:24:cf:85:fc:47:0f:59:43:96:3b:98:50:bb:67: 30:c4:a3:18:28:b2:70:7f:6a:e6:ea:c8:fd:99:64: b4:6b:79:8f:aa:03:98:aa:97:a2:6a:65:a0:78:18: fa:31:ae:c0:d8:2d:6f:27:08:c3:c1:9a:e5:8f:94: a8:87:16:4b:c5:10:5d:d4:95:3d:20:0d:af:f7:6f: 66:49:52:e6:a3:d1:fd:9d:00:e5:9a:0b:17:0b:ef: b1:91:2c:53:42:78:d4:50:55:fd:43:4a:17:a2:40: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:76:4C:CF:43:6F:9E:46:FB:17:A9:EF:CE:03:DE:E7:16:8B:9D:67 X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:97:bc:ee:22:f2:83:65:07:4f:21:93:bf:72:77:cc:0c:81: a7:c4:ba:70:48:19:45:f9:c8:0a:9a:16:d1:99:1e:1d:48:72: 96:0f:c3:01:67:d7:b5:23:50:5d:3d:2c:00:23:7f:99:30:02: 64:d0:e1:3d:1e:0b:ce:34:45:ed:ce:97:28:29:40:a7:48:1e: a3:ac:09:64:08:08:7d:b9:66:f6:66:58:9e:c0:2f:8b:84:c2: e3:11:8b:db:96:e1:af:fd:86:b8:19:0b:9f:33:af:28:04:c6: aa:6e:6d:9f:5b:52:ae:cf:60:92:dc:27:5a:99:e1:0f:70:10: c6:3b:b8:5a:ea:15:78:ae:ea:00:3b:d0:07:64:4a:5e:d3:6f: b3:5f:4d:c9:b1:33:16:56:2f:13:e4:f0:70:59:fc:2b:bd:dd: b8:4a:04:61:5c:e1:05:02:33:71:27:ec:8b:d7:8d:04:2f:af: 41:d5:dd:42:4b:d3:90:81:73:ca:3d:0c:ce:1c:a6:4d:78:b7: bc:a4:f5:f4:c6:c7:4a:7c:ee:da:8a:ee:d8:34:ba:0f:71:50: 03:20:31:7d:55:aa:24:5b:4e:21:f0:df:7e:4f:8e:21:e5:ec: 6d:2f:dd:bd:14:48:38:d2:08:55:63:4b:f1:03:35:d6:cb:c5: 29:3c:59:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoBETKWX+B217cBHmNdJ5vhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUxMDIwMTAwMTM1WhcNMjUxMDIxMTAwMTM1WjAzMTEwLwYDVQQD EygyZjc2NGNjZjQzNmY5ZTQ2ZmIxN2E5ZWZjZTAzZGVlNzE2OGI5ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f0d9w1smOg26U2NIvxteJ39CYoq MYwYxJJ3LN17D6Nmmkiv7gimOtwH9hQJVYpypLMB1uvSqqej27IvOiMKjo3QDrXB qsDv1EKk4yhLyAbJ38hYygVIs2rMfbQIrgEFUPBwGdwUh33jpTw5Hynslg6GDnW1 FLpQTI/JTCaBfOcRFPw7U+E2EaQs5SA8zMWqXO2pmGrVJM+F/EcPWUOWO5hQu2cw xKMYKLJwf2rm6sj9mWS0a3mPqgOYqpeiamWgeBj6Ma7A2C1vJwjDwZrlj5SohxZL xRBd1JU9IA2v929mSVLmo9H9nQDlmgsXC++xkSxTQnjUUFX9Q0oXokCIaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC92TM9Db55G+xep784D3ucWi51nMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpe87iLy g2UHTyGTv3J3zAyBp8S6cEgZRfnICpoW0ZkeHUhylg/DAWfXtSNQXT0sACN/mTAC ZNDhPR4LzjRF7c6XKClAp0geo6wJZAgIfblm9mZYnsAvi4TC4xGL25bhr/2GuBkL nzOvKATGqm5tn1tSrs9gktwnWpnhD3AQxju4WuoVeK7qADvQB2RKXtNvs19NybEz FlYvE+TwcFn8K73duEoEYVzhBQIzcSfsi9eNBC+vQdXdQkvTkIFzyj0MzhymTXi3 vKT19MbHSnzu2oru2DS6D3FQAyAxfVWqJFtOIfDffk+OIeXsbS/dvRRIONIIVWNL 8QM11svFKTxZ8g== -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:36 2025 by rpki-client