$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: ugD7DaqF1rUXpKNWH2btiPOkyflMDd8B0ZmhqigSnbk= Subject key identifier: 38:E5:47:13:9D:3B:63:08:4B:5A:92:66:08:56:88:2D:32:AC:5F:7E Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 0198D6985D4398F26AEE3BBA5A6685F8A053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1673 Signing time: Sat 23 Aug 2025 11:02:46 +0000 Manifest this update: Sat 23 Aug 2025 11:02:46 +0000 Manifest next update: Sun 24 Aug 2025 11:02:46 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: OmYD5PmUkK2SW/TltTeBBzs/efHtjUqRCnvAJP+1s2k=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 11:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:98:5d:43:98:f2:6a:ee:3b:ba:5a:66:85:f8:a0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Aug 23 11:02:46 2025 GMT Not After : Aug 24 11:02:46 2025 GMT Subject: CN=38e547139d3b63084b5a92660856882d32ac5f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0b:8b:22:7a:96:e3:af:b9:84:dd:0a:65:3b: 91:65:23:02:20:14:84:f2:93:4d:07:6b:0b:99:8c: b0:8e:52:a8:cb:a3:77:0c:d7:7d:fc:9c:bc:d1:fb: 4a:6a:16:e0:bd:c9:1b:06:f6:3f:0e:65:28:e8:55: 95:49:f3:e8:b0:be:fd:f4:e9:93:e7:43:de:01:3a: f1:b2:62:b3:49:95:79:e9:75:c9:91:ba:14:c0:62: af:38:a5:c5:93:8d:fd:eb:86:77:5f:60:53:29:bd: 67:34:fe:83:09:da:c0:4c:74:93:76:58:1a:04:5f: 85:fc:79:2f:b5:52:ca:e7:2b:db:84:a8:4a:18:ac: 5e:8f:91:89:94:99:74:d1:4f:7e:c6:2e:03:99:eb: 91:9a:4c:2d:e4:6a:e8:24:4a:22:4c:2f:41:62:ca: 76:7c:27:7b:ee:c7:b5:ca:b5:85:4c:23:4e:87:3c: e1:fc:51:7d:7c:bd:f1:47:be:8d:37:66:d2:91:b8: ac:ea:87:fc:0c:2a:ae:9f:e9:22:00:a7:77:e8:9e: 22:40:fe:70:47:aa:26:f6:7c:44:2f:45:13:7b:1a: 91:21:7c:22:c9:af:90:8e:38:fb:6a:b7:f8:6a:78: 38:82:4f:e3:6f:26:93:56:90:66:28:02:8d:26:f2: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E5:47:13:9D:3B:63:08:4B:5A:92:66:08:56:88:2D:32:AC:5F:7E X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:29:3b:dc:34:ef:8d:d9:1a:ad:8e:98:fa:56:13:61:3e:5f: 59:4e:7f:4c:c7:f6:50:0b:99:da:40:11:24:3f:8c:28:b1:5f: a7:b3:8b:cb:88:9e:2e:d2:13:cd:b5:8b:98:1f:db:60:5f:fe: b3:7d:d8:74:fd:70:12:01:64:92:b3:39:3f:0e:a1:61:e3:cf: 0c:6d:d5:05:05:ba:ec:0f:91:87:62:f8:7f:d4:d4:b8:8e:57: 25:e1:91:af:13:5e:7e:24:04:49:c0:f1:ba:ef:24:b6:f1:e4: b9:9f:b9:2c:81:74:48:ab:da:ef:b3:08:5d:e2:9d:65:3d:42: cd:b2:f8:c5:b2:94:ad:ac:3f:d3:85:b6:e5:e2:b0:3f:af:94: e3:8f:68:0e:24:5c:89:6e:d0:3c:c4:e6:97:05:e6:5e:ec:e1: ba:bc:b5:4f:75:75:f9:b0:dd:76:54:d1:19:91:1d:aa:af:04: 68:93:91:53:ad:2a:5c:fb:e1:3c:ce:d2:57:b0:31:05:c5:85: 36:79:a8:f4:38:2f:41:5f:16:d5:60:cd:7f:f5:7e:0f:4c:08: be:23:75:42:7a:61:fc:db:cb:7c:26:9d:5b:74:1d:27:71:32: 88:7a:57:d8:25:0d:ab:88:4f:92:c5:55:d9:a3:e0:5e:e8:39: 5a:8d:1a:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWmF1DmPJq7ju6WmaF+KBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwODIzMTEwMjQ2WhcNMjUwODI0MTEwMjQ2WjAzMTEwLwYDVQQD EygzOGU1NDcxMzlkM2I2MzA4NGI1YTkyNjYwODU2ODgyZDMyYWM1ZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwuLInqW46+5hN0KZTuRZSMCIBSE 8pNNB2sLmYywjlKoy6N3DNd9/Jy80ftKahbgvckbBvY/DmUo6FWVSfPosL799OmT 50PeATrxsmKzSZV56XXJkboUwGKvOKXFk43964Z3X2BTKb1nNP6DCdrATHSTdlga BF+F/HkvtVLK5yvbhKhKGKxej5GJlJl00U9+xi4DmeuRmkwt5GroJEoiTC9BYsp2 fCd77se1yrWFTCNOhzzh/FF9fL3xR76NN2bSkbis6of8DCqun+kiAKd36J4iQP5w R6om9nxEL0UTexqRIXwiya+Qjjj7arf4ang4gk/jbyaTVpBmKAKNJvItNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjlRxOdO2MIS1qSZghWiC0yrF9+MB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuyk73DTv jdkarY6Y+lYTYT5fWU5/TMf2UAuZ2kARJD+MKLFfp7OLy4ieLtITzbWLmB/bYF/+ s33YdP1wEgFkkrM5Pw6hYePPDG3VBQW67A+Rh2L4f9TUuI5XJeGRrxNefiQEScDx uu8ktvHkuZ+5LIF0SKva77MIXeKdZT1CzbL4xbKUraw/04W25eKwP6+U449oDiRc iW7QPMTmlwXmXuzhury1T3V1+bDddlTRGZEdqq8EaJORU60qXPvhPM7SV7AxBcWF Nnmo9DgvQV8W1WDNf/V+D0wIviN1Qnph/NvLfCadW3QdJ3EyiHpX2CUNq4hPksVV 2aPgXug5Wo0aZQ== -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:23 2025 by rpki-client