$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: tdYVVuTR/y48b3IBAtz4ubi5X2Z1RbG7xmGsoKgVXYg= Subject key identifier: 6C:69:73:18:87:91:BE:F9:95:ED:AF:67:4C:55:ED:DE:73:61:34:4B Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 0197B6A06ACA531F7E41A5A799C90A77A35C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 15D2 Signing time: Sat 28 Jun 2025 13:00:55 +0000 Manifest this update: Sat 28 Jun 2025 13:00:55 +0000 Manifest next update: Sun 29 Jun 2025 13:00:55 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: /BtQ3FZlP0hw+z/0E5IwuONUYQg/27FQzIepTiAGQT0=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:6a:ca:53:1f:7e:41:a5:a7:99:c9:0a:77:a3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jun 28 13:00:55 2025 GMT Not After : Jun 29 13:00:55 2025 GMT Subject: CN=6c6973188791bef995edaf674c55edde7361344b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c6:64:7a:50:b4:ca:d2:e6:b6:03:34:64:fe: 4f:7f:50:fe:a4:c9:62:e5:1a:aa:c8:58:7e:1f:38: 92:2b:60:c3:36:d1:aa:1a:b0:1f:f4:a7:b2:e7:f9: 70:db:e4:a3:ef:80:55:78:c2:82:18:34:6b:57:2e: 57:b5:61:b4:96:38:d2:fc:f4:f3:6c:02:56:a0:57: 43:3c:1b:e3:30:3c:f4:1d:43:91:3f:a7:0e:83:4c: 7e:0c:fd:d2:d1:9a:2a:81:92:88:b9:e5:b6:e3:fb: 33:07:5e:d5:de:d3:31:1f:eb:64:77:90:6a:19:1a: bb:64:e3:77:b8:77:11:49:6b:2d:86:1f:35:cc:49: 51:0c:fc:4d:31:a6:41:22:8e:cc:2e:f3:15:a1:d1: 98:b2:af:1e:9c:6b:91:1b:ef:b3:de:1b:e3:68:47: c4:47:68:6a:5b:f3:a7:7b:80:60:54:1d:8b:e0:59: 37:8c:b7:b7:68:3a:77:91:c5:1c:8e:8e:4d:07:b0: 19:fa:ed:e2:f5:58:a8:5c:7e:95:e2:46:92:89:c9: 69:ac:9d:db:aa:44:53:24:cf:1c:1c:81:8b:4b:d2: 01:5c:b3:77:37:7c:57:35:b8:40:33:19:07:6a:d3: b7:0f:de:26:75:b1:2c:d7:d9:40:21:1b:eb:f6:58: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:69:73:18:87:91:BE:F9:95:ED:AF:67:4C:55:ED:DE:73:61:34:4B X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:b7:89:6c:18:20:33:34:de:2d:97:7a:62:24:e5:75:38: ea:fb:cd:89:af:1a:00:42:50:30:15:3a:e3:73:47:fe:e1:75: 87:dc:a0:b2:13:86:bc:ba:5a:89:57:92:18:4e:9b:cc:22:bf: 01:51:cd:30:d7:de:d8:90:38:0e:3d:a9:2b:3a:65:41:be:48: 1a:a0:b8:70:46:06:f7:6b:e8:81:46:69:67:16:59:18:34:3f: 52:15:87:5c:c7:ba:b1:17:e8:9b:70:a0:d5:11:43:a1:db:38: f1:b8:5c:ff:af:94:1c:87:03:1c:e9:9c:15:9c:40:2a:56:d0: 7c:a3:45:7f:7e:fb:7e:9c:6e:f9:43:78:7e:59:41:41:48:cb: 85:ad:3d:60:c1:00:ee:65:59:48:2c:59:68:75:9b:ae:c3:34: 01:b7:da:f0:e1:a1:ab:6a:66:1f:1a:f7:af:bb:9f:cc:e1:7c: 38:9c:87:c8:e9:52:11:ca:b5:56:ac:87:cd:3e:18:54:13:82: bb:a1:f5:1a:8b:f2:80:93:72:1f:e8:ef:3d:35:fd:1b:48:64: 1e:8f:6d:b3:a3:df:66:91:44:5d:a4:47:b3:5e:30:23:3c:9f: d2:6b:6f:a9:6e:96:76:7d:8a:17:c1:19:1d:b4:7a:7e:fc:cd: 99:ae:2c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oGrKUx9+QaWnmckKd6NcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUwNjI4MTMwMDU1WhcNMjUwNjI5MTMwMDU1WjAzMTEwLwYDVQQD Eyg2YzY5NzMxODg3OTFiZWY5OTVlZGFmNjc0YzU1ZWRkZTczNjEzNDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sZkelC0ytLmtgM0ZP5Pf1D+pMli 5RqqyFh+HziSK2DDNtGqGrAf9Key5/lw2+Sj74BVeMKCGDRrVy5XtWG0ljjS/PTz bAJWoFdDPBvjMDz0HUORP6cOg0x+DP3S0ZoqgZKIueW24/szB17V3tMxH+tkd5Bq GRq7ZON3uHcRSWsthh81zElRDPxNMaZBIo7MLvMVodGYsq8enGuRG++z3hvjaEfE R2hqW/One4BgVB2L4Fk3jLe3aDp3kcUcjo5NB7AZ+u3i9VioXH6V4kaSiclprJ3b qkRTJM8cHIGLS9IBXLN3N3xXNbhAMxkHatO3D94mdbEs19lAIRvr9lihBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxpcxiHkb75le2vZ0xV7d5zYTRLMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX63iWwY IDM03i2XemIk5XU46vvNia8aAEJQMBU643NH/uF1h9ygshOGvLpaiVeSGE6bzCK/ AVHNMNfe2JA4Dj2pKzplQb5IGqC4cEYG92vogUZpZxZZGDQ/UhWHXMe6sRfom3Cg 1RFDods48bhc/6+UHIcDHOmcFZxAKlbQfKNFf377fpxu+UN4fllBQUjLha09YMEA 7mVZSCxZaHWbrsM0Abfa8OGhq2pmHxr3r7ufzOF8OJyHyOlSEcq1VqyHzT4YVBOC u6H1GovygJNyH+jvPTX9G0hkHo9ts6PfZpFEXaRHs14wIzyf0mtvqW6Wdn2KF8EZ HbR6fvzNma4skw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:32:41 2025 by rpki-client