$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: LAGJEGEK7dZ2UxmfsnsYD1NpgLcWTdHoIPl2T/ZlIBg= Subject key identifier: 5A:AD:9F:00:68:73:94:6C:04:F0:87:3D:AD:55:54:80:1F:A4:E5:72 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 0199FC58B6036AE6345BBF03C63C1EB6EBC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1700 Signing time: Sun 19 Oct 2025 12:01:36 +0000 Manifest this update: Sun 19 Oct 2025 12:01:36 +0000 Manifest next update: Mon 20 Oct 2025 12:01:36 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9-BujRyAiG67GPBXPyZf0-ILLF4.roa (hash: KkFtXt5WRV9VBYy3IBvnda5CkZe910L5RSJzKX/5FFY=) 6: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 7: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: f/jn7yFV+xObDNzf5GZzgvWuJv8CLYIF6VKNruFWxU0=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:b6:03:6a:e6:34:5b:bf:03:c6:3c:1e:b6:eb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Oct 19 12:01:36 2025 GMT Not After : Oct 20 12:01:36 2025 GMT Subject: CN=5aad9f006873946c04f0873dad5554801fa4e572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:48:97:51:99:0c:08:f7:2a:10:3f:de:22: 6f:97:8a:60:53:fe:07:9f:a3:c1:cf:8c:a1:c7:43: 7c:ff:83:fa:03:56:a6:13:a7:ce:48:28:d9:71:47: e3:9d:3c:08:36:5f:75:9d:91:81:dd:46:06:e8:50: 83:37:13:f9:99:54:d2:8d:2c:be:70:6f:94:79:8f: 02:43:51:a3:b1:07:dc:1d:a5:f3:06:a3:5b:8f:2d: fb:17:cf:0e:91:70:2b:54:aa:de:b9:4f:a6:bc:8b: e4:12:18:39:e8:12:78:3c:13:fd:9c:94:e2:62:db: 75:67:e8:6c:ea:b3:0b:76:f3:53:d7:66:5d:b6:60: 22:80:21:97:3d:63:5e:c8:ef:7b:f0:10:a9:26:bf: 8f:4c:cb:48:07:2d:01:63:1d:9d:b8:09:87:b2:26: f9:95:d5:6d:3a:b6:19:29:fb:c1:16:ec:ea:c0:8c: 75:25:8a:af:b1:9e:94:2e:70:a5:35:e8:60:29:38: 9d:33:3d:c6:0b:13:ef:df:f6:0d:da:71:22:53:c9: 4a:13:b2:e3:44:80:ca:ec:dd:ec:47:6b:08:25:d9: 03:6a:3c:84:16:1b:8a:24:7a:d6:61:67:57:65:28: 75:47:73:55:1b:7b:c8:33:08:0f:6b:ca:07:58:bf: c1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AD:9F:00:68:73:94:6C:04:F0:87:3D:AD:55:54:80:1F:A4:E5:72 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:36:6b:e9:22:01:f6:10:9a:ee:df:ed:95:d0:21:53:81:33: f6:ca:82:26:3b:dd:26:4b:e3:7b:ad:2c:eb:00:bb:29:be:3a: db:20:4d:4d:fe:7a:b0:3f:b4:6d:f7:20:ee:12:e8:99:d2:bf: 04:d7:9e:ec:b3:9a:ab:1c:b1:10:7f:3d:d3:b9:45:63:a3:59: 63:4f:98:11:e9:6d:2e:db:aa:f1:96:0a:c5:03:d4:a3:fc:f0: 5a:ce:5e:59:36:d0:3f:0b:ae:fb:b1:09:03:ee:30:23:9b:58: 29:c5:f5:82:fd:a7:08:f2:59:73:4d:bd:32:34:83:62:9d:df: 36:4b:ef:0a:5e:85:f0:47:6f:ac:4b:d1:f7:e4:20:40:93:cd: ac:35:71:5e:96:2f:b6:18:42:73:b1:20:5d:07:c0:68:57:68: 1c:c1:05:8c:ab:57:0c:e0:96:5d:44:d8:82:58:bc:76:69:6e: 19:a6:31:45:44:d0:0c:36:27:3e:13:bb:f3:a4:37:0d:eb:ef: 89:be:0d:51:78:1b:7d:57:37:0f:cb:f7:f7:eb:18:f4:39:fc: ba:ec:32:d3:ea:f9:a1:0e:5a:41:cb:7f:eb:1f:0e:fc:77:3c: 2a:f2:7f:90:56:bc:e4:b1:da:f5:42:af:56:c9:c0:cb:47:78: 1a:ee:e8:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WLYDauY0W78DxjwetuvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUxMDE5MTIwMTM2WhcNMjUxMDIwMTIwMTM2WjAzMTEwLwYDVQQD Eyg1YWFkOWYwMDY4NzM5NDZjMDRmMDg3M2RhZDU1NTQ4MDFmYTRlNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jhIl1GZDAj3KhA/3iJvl4pgU/4H n6PBz4yhx0N8/4P6A1amE6fOSCjZcUfjnTwINl91nZGB3UYG6FCDNxP5mVTSjSy+ cG+UeY8CQ1GjsQfcHaXzBqNbjy37F88OkXArVKreuU+mvIvkEhg56BJ4PBP9nJTi Ytt1Z+hs6rMLdvNT12ZdtmAigCGXPWNeyO978BCpJr+PTMtIBy0BYx2duAmHsib5 ldVtOrYZKfvBFuzqwIx1JYqvsZ6ULnClNehgKTidMz3GCxPv3/YN2nEiU8lKE7Lj RIDK7N3sR2sIJdkDajyEFhuKJHrWYWdXZSh1R3NVG3vIMwgPa8oHWL/B6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqtnwBoc5RsBPCHPa1VVIAfpOVyMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDZr6SIB 9hCa7t/tldAhU4Ez9sqCJjvdJkvje60s6wC7Kb462yBNTf56sD+0bfcg7hLomdK/ BNee7LOaqxyxEH8907lFY6NZY0+YEeltLtuq8ZYKxQPUo/zwWs5eWTbQPwuu+7EJ A+4wI5tYKcX1gv2nCPJZc029MjSDYp3fNkvvCl6F8EdvrEvR9+QgQJPNrDVxXpYv thhCc7EgXQfAaFdoHMEFjKtXDOCWXUTYgli8dmluGaYxRUTQDDYnPhO786Q3Devv ib4NUXgbfVc3D8v39+sY9Dn8uuwy0+r5oQ5aQct/6x8O/Hc8KvJ/kFa85LHa9UKv VsnAy0d4Gu7oxw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:26:53 2025 by rpki-client