$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: 5auBPQmt5XnQUnQ3mYNxTIO8+4sYOmncZNo9mbI0xqM= Subject key identifier: F8:97:7C:81:62:53:1C:E3:C4:D8:0A:57:99:02:6A:E9:2A:8B:15:35 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 0199FC21B354A2678548420F8D5807F7D2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 170B Signing time: Sun 19 Oct 2025 11:01:30 +0000 Manifest this update: Sun 19 Oct 2025 11:01:30 +0000 Manifest next update: Mon 20 Oct 2025 11:01:30 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: M6Bv70n/2KJR5TJSmpMvk0zmBWT/U37hJn14Jnf0F6s=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:b3:54:a2:67:85:48:42:0f:8d:58:07:f7:d2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Oct 19 11:01:30 2025 GMT Not After : Oct 20 11:01:30 2025 GMT Subject: CN=f8977c8162531ce3c4d80a5799026ae92a8b1535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ef:5f:7f:cc:0c:e0:42:a9:68:b8:0c:88:21: 21:5f:6b:4e:b4:13:89:7b:0a:d2:47:7a:b3:04:36: 40:c7:29:b4:6d:62:d6:60:59:6a:b7:e1:b3:7c:a7: be:e9:03:6d:d8:03:7b:90:d6:f8:4e:b9:17:f2:61: d1:04:13:91:1f:9f:5c:fc:22:f0:45:3d:c0:42:ea: 9b:33:3e:dc:4b:da:d0:5f:f6:6b:4d:62:38:11:7a: 97:52:d6:a9:17:18:43:22:8b:bb:c6:51:77:6b:ed: df:34:b8:50:db:fa:b2:a0:cc:12:99:4d:6a:69:34: 2d:8e:54:c6:f5:17:e8:be:a7:a5:78:a9:85:5d:ef: ae:03:68:a8:5c:ee:e8:46:4b:3d:dd:16:8e:df:85: 99:75:46:7a:8b:b2:5a:44:99:84:c0:7e:af:db:27: fe:f6:4c:11:c2:83:49:f5:ba:f6:a0:d2:44:45:9d: 7a:f7:65:e0:15:8d:ec:bb:23:4a:29:7f:8f:aa:2f: b4:32:c3:0c:cd:45:15:6d:52:3b:8e:79:a6:16:e1: c2:8b:4f:d8:94:7c:17:d4:df:c8:60:d7:3c:2a:56: 62:8f:7b:bf:7b:25:11:8e:06:8c:62:92:8b:8f:74: 5c:4e:4e:08:2e:2f:a4:77:88:f9:6b:37:aa:8b:4c: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:97:7C:81:62:53:1C:E3:C4:D8:0A:57:99:02:6A:E9:2A:8B:15:35 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:17:40:a4:e1:7e:b3:91:16:ab:83:31:7d:e2:1b:d3:e7:9e: 81:45:ee:6b:56:2c:87:a4:0e:b8:7a:c7:26:c6:2f:ff:a1:db: 30:e1:fd:5d:1b:81:ed:f4:82:ae:ea:9e:14:ca:2a:c5:e7:c7: 5c:a5:ac:87:6a:b0:27:b1:3a:ef:0e:e1:e5:88:d3:07:9c:4e: b5:56:f5:d6:18:e5:68:7b:c8:50:3c:9f:62:49:28:89:e4:92: 1a:9c:3a:57:1d:cd:1d:51:35:93:6f:41:09:24:47:12:81:ca: c7:de:29:78:f7:fb:34:0f:57:87:12:cc:68:9c:80:ce:f1:5e: b6:63:e1:a5:40:8c:ec:6f:e6:d3:f4:84:a9:da:87:66:d1:83: 78:68:48:24:9b:c7:a7:32:98:e4:c4:f5:47:dd:f8:14:34:09: e9:d2:e4:f6:67:f9:c6:00:a3:41:3c:ff:14:d2:ef:25:b1:55: 84:22:c8:6c:30:d7:67:f8:e2:ee:8d:bf:6c:fa:2c:3c:cd:4c: 82:1b:54:e4:2f:11:8f:79:3e:4c:13:d5:47:86:b2:88:15:cf: 5a:8b:e7:13:4f:2c:54:02:79:13:fa:3a:2c:d1:e9:14:96:68: 54:b8:b6:ed:52:15:be:50:a2:08:9f:8c:d0:98:68:f5:2e:f2: fb:29:f4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IbNUomeFSEIPjVgH99LZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUxMDE5MTEwMTMwWhcNMjUxMDIwMTEwMTMwWjAzMTEwLwYDVQQD EyhmODk3N2M4MTYyNTMxY2UzYzRkODBhNTc5OTAyNmFlOTJhOGIxNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O9ff8wM4EKpaLgMiCEhX2tOtBOJ ewrSR3qzBDZAxym0bWLWYFlqt+GzfKe+6QNt2AN7kNb4TrkX8mHRBBORH59c/CLw RT3AQuqbMz7cS9rQX/ZrTWI4EXqXUtapFxhDIou7xlF3a+3fNLhQ2/qyoMwSmU1q aTQtjlTG9RfovqeleKmFXe+uA2ioXO7oRks93RaO34WZdUZ6i7JaRJmEwH6v2yf+ 9kwRwoNJ9br2oNJERZ1692XgFY3suyNKKX+Pqi+0MsMMzUUVbVI7jnmmFuHCi0/Y lHwX1N/IYNc8KlZij3u/eyURjgaMYpKLj3RcTk4ILi+kd4j5azeqi0x4JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiXfIFiUxzjxNgKV5kCaukqixU1MB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxdApOF+ s5EWq4MxfeIb0+eegUXua1Ysh6QOuHrHJsYv/6HbMOH9XRuB7fSCruqeFMoqxefH XKWsh2qwJ7E67w7h5YjTB5xOtVb11hjlaHvIUDyfYkkoieSSGpw6Vx3NHVE1k29B CSRHEoHKx94pePf7NA9XhxLMaJyAzvFetmPhpUCM7G/m0/SEqdqHZtGDeGhIJJvH pzKY5MT1R934FDQJ6dLk9mf5xgCjQTz/FNLvJbFVhCLIbDDXZ/ji7o2/bPosPM1M ghtU5C8Rj3k+TBPVR4ayiBXPWovnE08sVAJ5E/o6LNHpFJZoVLi27VIVvlCiCJ+M 0Jho9S7y+yn0Hw== -----END CERTIFICATE-----Generated at Sun Oct 19 18:40:58 2025 by rpki-client