$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: XrMAsnU/gvMtm+dF8cpjjbkSwAeiQzX14AS1hwQk8QM= Subject key identifier: D7:24:E2:33:2E:3F:18:4C:9A:56:1B:6D:19:BC:F3:EB:B4:AB:30:94 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 0198D660507F18500B2B89BF8E6A8204FC4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1667 Signing time: Sat 23 Aug 2025 10:01:32 +0000 Manifest this update: Sat 23 Aug 2025 10:01:32 +0000 Manifest next update: Sun 24 Aug 2025 10:01:32 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: cHrNnopjb3oeWKbQXtC54ExGHZGRLNycHj/N4QVgEOQ=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 10:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:60:50:7f:18:50:0b:2b:89:bf:8e:6a:82:04:fc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Aug 23 10:01:32 2025 GMT Not After : Aug 24 10:01:32 2025 GMT Subject: CN=d724e2332e3f184c9a561b6d19bcf3ebb4ab3094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:67:9c:d9:ae:f2:d1:df:b3:ad:03:25:f5: 3b:40:d4:29:33:bf:1b:a5:8a:25:a5:27:a0:17:b1: 92:de:f6:d3:d0:b8:19:ed:01:d7:f9:f1:60:d2:c7: a2:5f:78:29:7e:2c:47:9f:c2:55:59:55:d7:45:c5: ab:34:4c:d6:74:64:56:d1:33:23:cc:7d:31:00:9a: 33:a6:ad:3b:7e:ea:09:65:96:1a:3b:22:72:2c:b7: 83:3a:88:d5:8e:88:35:dd:c8:b7:72:a3:58:7f:04: 10:76:8e:22:d9:00:59:87:46:72:e2:31:e0:dd:b0: 41:96:3f:38:6f:fe:36:2a:a8:9b:9a:d9:4c:20:23: 39:ec:4a:7b:49:4a:a4:25:60:53:a5:d2:22:37:4b: 49:f5:cd:3b:62:85:fd:0c:e6:af:7f:4c:dd:80:7d: 0e:e2:82:86:8b:83:cd:a9:84:35:e6:a3:89:a7:35: 97:34:38:df:4c:17:95:f7:9d:ec:0e:43:66:41:05: 78:e4:25:ac:01:70:7f:f6:2e:de:5b:7f:a2:5e:7a: 68:6d:32:4d:57:94:b0:67:a1:db:d9:e9:f8:10:5e: a5:e1:0c:58:b9:1c:b2:78:95:64:21:56:ec:f6:b9: 01:c2:69:80:58:d8:05:66:2e:6c:fb:c1:5a:88:37: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:24:E2:33:2E:3F:18:4C:9A:56:1B:6D:19:BC:F3:EB:B4:AB:30:94 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:d8:d4:76:8e:54:11:bb:35:14:92:3d:f4:a7:2c:2e:38:c0: e0:6d:46:83:3f:24:b5:b1:d5:a3:49:0e:dc:c6:2d:e7:d7:74: 87:5b:f8:79:d8:7f:7e:d4:8d:b9:fb:af:10:c1:46:81:dc:8e: d0:42:87:e9:08:84:4f:1a:e3:8e:a3:b2:a3:ad:65:2f:24:2c: be:e4:ea:13:44:3c:57:8b:58:b3:5d:1b:08:01:fd:a2:8d:8a: 6d:b8:30:09:e2:f2:98:2a:30:a2:8d:73:ef:01:df:1d:a4:53: e2:7a:98:e9:0f:41:34:1b:40:e9:bf:97:53:fe:c6:a4:fb:88: ef:5b:6e:5e:ed:12:93:30:7c:7f:cd:74:30:e7:07:7d:75:4c: cf:dc:b9:ba:32:09:b2:02:7e:eb:75:23:b8:14:35:e7:d2:af: 47:f4:69:4f:01:bc:25:f7:2c:65:2e:6a:a4:25:40:a7:20:85: bb:ca:60:7b:2b:c9:10:60:1b:40:c8:10:0f:a8:81:bc:d3:f4: 55:12:63:ec:95:3a:06:fb:6e:77:ea:f4:29:fb:6f:7c:2a:23: 6e:fe:3a:69:f9:a5:7f:fd:10:01:cb:bf:c3:22:fd:2c:81:fa: 45:2e:54:7e:20:96:ef:75:da:19:ea:42:f1:90:83:85:ab:5c: a3:09:87:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWYFB/GFALK4m/jmqCBPxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUwODIzMTAwMTMyWhcNMjUwODI0MTAwMTMyWjAzMTEwLwYDVQQD EyhkNzI0ZTIzMzJlM2YxODRjOWE1NjFiNmQxOWJjZjNlYmI0YWIzMDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3hnnNmu8tHfs60DJfU7QNQpM78b pYolpSegF7GS3vbT0LgZ7QHX+fFg0seiX3gpfixHn8JVWVXXRcWrNEzWdGRW0TMj zH0xAJozpq07fuoJZZYaOyJyLLeDOojVjog13ci3cqNYfwQQdo4i2QBZh0Zy4jHg 3bBBlj84b/42KqibmtlMICM57Ep7SUqkJWBTpdIiN0tJ9c07YoX9DOavf0zdgH0O 4oKGi4PNqYQ15qOJpzWXNDjfTBeV953sDkNmQQV45CWsAXB/9i7eW3+iXnpobTJN V5SwZ6Hb2en4EF6l4QxYuRyyeJVkIVbs9rkBwmmAWNgFZi5s+8FaiDcz0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNck4jMuPxhMmlYbbRm88+u0qzCUMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNjUdo5U Ebs1FJI99KcsLjjA4G1Ggz8ktbHVo0kO3MYt59d0h1v4edh/ftSNufuvEMFGgdyO 0EKH6QiETxrjjqOyo61lLyQsvuTqE0Q8V4tYs10bCAH9oo2KbbgwCeLymCowoo1z 7wHfHaRT4nqY6Q9BNBtA6b+XU/7GpPuI71tuXu0SkzB8f810MOcHfXVMz9y5ujIJ sgJ+63UjuBQ159KvR/RpTwG8JfcsZS5qpCVApyCFu8pgeyvJEGAbQMgQD6iBvNP0 VRJj7JU6Bvtud+r0KftvfCojbv46afmlf/0QAcu/wyL9LIH6RS5UfiCW73XaGepC 8ZCDhatcowmHKw== -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:36 2025 by rpki-client