$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: eEH+sinQTy/67aaHMLY/SHEZWWIQ0lO9tZNb0NN9keM= Subject key identifier: 49:75:60:87:5E:DC:B5:27:E7:23:64:EE:37:52:FA:06:9B:28:BF:2F Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 0198D697F04B470E22482BC1D37F6739BA4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 16F7 Signing time: Sat 23 Aug 2025 11:02:18 +0000 Manifest this update: Sat 23 Aug 2025 11:02:18 +0000 Manifest next update: Sun 24 Aug 2025 11:02:18 +0000 Files and hashes: 1: 3HemvcGpa10fkEZgb6Z-o4k7Y3I.roa (hash: a1XCZrNTfqU9TQWTJM+VI0BWa7g1babTnrZlikC2mRA=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RJwe2BfOH2L8b2xvYWAb7A5I8YI.roa (hash: Ua7R/78tPOt1hUU0nncJ70Fr//DWyVNm+5rSWWhtzSo=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=) 7: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: vC6XSd6JX4CISTQudz2U3VuPLsRsH+vFn2HCedxxEZ0=) 9: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=) 10: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 11: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:97:f0:4b:47:0e:22:48:2b:c1:d3:7f:67:39:ba:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Aug 23 11:02:18 2025 GMT Not After : Aug 24 11:02:18 2025 GMT Subject: CN=497560875edcb527e72364ee3752fa069b28bf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:28:40:f8:e4:80:66:bd:93:1c:ac:88:15: 8c:72:da:e4:15:5f:a4:62:45:be:76:3b:90:b5:65: e5:cd:28:01:2e:e7:6f:8a:91:ee:79:b1:73:53:cd: 12:18:ac:1a:9e:2c:8b:11:da:35:7f:78:d3:4d:10: 0b:d5:1f:93:90:91:be:11:e1:88:75:97:5c:d6:98: 59:af:bc:20:a9:a9:60:f3:df:d6:7b:95:ad:ce:d8: ca:4d:db:40:a2:b6:40:b1:a2:42:0b:a6:27:e1:21: d7:77:04:88:ba:fd:3c:c0:1d:6a:a6:85:29:5c:e4: 03:f4:57:53:82:61:52:d4:47:bc:d7:7c:33:1c:ac: 01:c1:78:34:c1:7a:18:54:a1:40:08:58:06:3d:21: 69:0f:51:23:9c:22:e9:2b:6d:5e:bc:b4:f1:cc:73: bf:97:51:bd:b6:5f:32:7b:07:5f:12:11:dc:2f:67: 65:d0:57:8c:2d:8c:5e:a9:78:dc:62:b0:fb:e1:50: a0:17:51:07:1b:09:44:fe:88:cc:7f:0f:65:59:41: 43:37:39:29:86:0a:7d:3f:58:60:09:c9:80:9a:a2: ab:42:96:ad:0f:d7:0d:b4:4c:29:a2:c7:e4:14:9c: d0:90:27:89:3e:85:e9:fb:1f:73:ad:db:7a:05:57: 56:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:75:60:87:5E:DC:B5:27:E7:23:64:EE:37:52:FA:06:9B:28:BF:2F X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0a:3a:87:05:dd:3e:c6:ce:f8:f7:ec:4f:03:05:1a:cf:26: 40:01:e3:4e:9b:3f:06:4e:4f:d0:28:35:c9:b6:3e:30:0f:98: cd:5a:32:e2:c4:1a:7b:0a:8c:22:d4:34:f3:d0:62:5e:b9:b6: a5:d5:3a:65:42:e0:d0:ef:29:53:99:d3:a8:db:d7:3d:16:8e: 1d:ba:38:23:19:cc:15:ca:79:dd:78:1e:eb:d9:0d:b1:21:60: bd:31:26:07:7b:7c:a2:71:69:ef:13:d3:b1:2b:36:bf:37:ec: 07:2b:af:18:4a:de:e6:4c:a3:fe:f4:c6:fc:24:4e:73:af:ea: 60:6d:a5:62:fe:b2:50:29:5b:80:9a:73:c2:99:5c:2d:24:53: f7:7b:61:2d:69:b9:4b:d0:54:66:9d:5f:e3:b8:c3:2a:14:cd: de:d2:c4:e5:fb:65:c1:17:26:88:78:3c:6e:ae:57:24:48:e8: 46:b2:f6:58:90:51:e2:01:53:cc:41:d8:d0:a1:66:ec:a1:9c: c0:5b:9f:a9:66:c2:02:b9:d0:8e:2d:1a:7a:ff:a4:cb:7e:6d: 13:36:3d:5b:18:8f:ad:25:ee:60:63:be:af:69:4f:8d:79:31: 88:de:2e:a8:b7:5b:12:6f:0e:c2:68:30:2c:d9:31:77:6c:e2: f3:42:2f:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWl/BLRw4iSCvB039nObpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUwODIzMTEwMjE4WhcNMjUwODI0MTEwMjE4WjAzMTEwLwYDVQQD Eyg0OTc1NjA4NzVlZGNiNTI3ZTcyMzY0ZWUzNzUyZmEwNjliMjhiZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF0oQPjkgGa9kxysiBWMctrkFV+k YkW+djuQtWXlzSgBLudvipHuebFzU80SGKwaniyLEdo1f3jTTRAL1R+TkJG+EeGI dZdc1phZr7wgqalg89/We5WtztjKTdtAorZAsaJCC6Yn4SHXdwSIuv08wB1qpoUp XOQD9FdTgmFS1Ee813wzHKwBwXg0wXoYVKFACFgGPSFpD1EjnCLpK21evLTxzHO/ l1G9tl8yewdfEhHcL2dl0FeMLYxeqXjcYrD74VCgF1EHGwlE/ojMfw9lWUFDNzkp hgp9P1hgCcmAmqKrQpatD9cNtEwposfkFJzQkCeJPoXp+x9zrdt6BVdWcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl1YIde3LUn5yNk7jdS+gabKL8vMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwo6hwXd PsbO+PfsTwMFGs8mQAHjTps/Bk5P0Cg1ybY+MA+YzVoy4sQaewqMItQ089BiXrm2 pdU6ZULg0O8pU5nTqNvXPRaOHbo4IxnMFcp53Xge69kNsSFgvTEmB3t8onFp7xPT sSs2vzfsByuvGEre5kyj/vTG/CROc6/qYG2lYv6yUClbgJpzwplcLSRT93thLWm5 S9BUZp1f47jDKhTN3tLE5ftlwRcmiHg8bq5XJEjoRrL2WJBR4gFTzEHY0KFm7KGc wFufqWbCArnQji0aev+ky35tEzY9WxiPrSXuYGO+r2lPjXkxiN4uqLdbEm8Owmgw LNkxd2zi80Iv8A== -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:51 2025 by rpki-client