$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: ddBxxnxGEyPm/SQQRjDzw9Tj92QkK/qIbxL/W1i+x1E= Subject key identifier: 41:6F:F6:76:2C:FE:BD:45:89:19:FF:6B:70:6B:B6:8B:66:28:52:90 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 0197B745A0D6580F291F312A55EFF382AA6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 15D8 Signing time: Sat 28 Jun 2025 16:01:23 +0000 Manifest this update: Sat 28 Jun 2025 16:01:23 +0000 Manifest next update: Sun 29 Jun 2025 16:01:23 +0000 Files and hashes: 1: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=) 2: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=) 3: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=) 4: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=) 5: 5KpVCQ3CyEztQ9cIEvVYbZRbiYQ.roa (hash: wEh76twlgMaB5r7NetVkn53k9vIu3IdtKnUUcrVB2Dg=) 6: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: 2dMbCNDiNNQwmSAvR4x0VaJpRx/Te9sJeA+QHyyQR4M=) 7: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=) 8: IppBZHr6rtDZFlGkYGSC_b4iLf8.roa (hash: JW9Kh503AbeAiJw1huy2tMda6a91+tj0zAGKx3bgPiI=) 9: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=) 10: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=) 11: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=) 12: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=) 13: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=) 14: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=) 15: vYpftoIYl0802LMSZotEkwGtO1k.roa (hash: AuWrLadvB2ERH3IjebmtnUJ/nP6gZejuogzS6BRYY2s=) 16: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=) 17: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:a0:d6:58:0f:29:1f:31:2a:55:ef:f3:82:aa:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jun 28 16:01:23 2025 GMT Not After : Jun 29 16:01:23 2025 GMT Subject: CN=416ff6762cfebd458919ff6b706bb68b66285290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a1:d2:31:bc:63:50:a8:d2:bf:c2:4a:56:87: 1e:a1:49:f1:6c:a2:fe:a7:e3:09:b9:22:3d:74:23: 7b:cd:bd:26:0e:fc:27:30:a6:29:55:d5:9f:06:24: 75:35:bc:4b:11:08:d9:fb:91:ba:b9:5f:43:8a:e9: 11:55:2f:65:35:4b:71:df:d7:dd:50:56:03:40:1e: 88:ac:03:c2:6f:80:e3:7d:b9:4b:19:bc:94:3d:12: f3:8e:ae:46:d4:c7:61:f1:5c:c5:ea:83:10:50:b4: e4:be:2c:0d:1e:a5:94:fe:91:76:8f:02:e6:25:5b: b8:1d:2a:a0:9f:89:4c:4e:99:a2:ef:5c:07:97:c7: 86:9d:30:c3:98:29:ae:68:72:75:75:0a:e5:2b:79: cb:b0:b7:14:d4:b6:76:6d:be:d1:6d:73:49:ca:cf: 0f:1c:15:1b:e3:5d:ff:38:21:02:fd:7a:e8:a4:7c: d0:ec:4e:a5:c0:60:2d:50:9a:e4:68:d8:d5:2e:a4: 8a:0f:a0:be:f7:de:fb:e2:26:2b:22:61:6e:7e:6b: 7f:a3:9c:56:72:dc:ec:47:41:22:c1:db:b6:b7:42: d8:58:a0:0c:32:7f:ba:89:f0:85:2b:41:30:31:52: 37:de:a7:91:18:1f:1f:dc:58:05:c2:31:9e:52:99: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6F:F6:76:2C:FE:BD:45:89:19:FF:6B:70:6B:B6:8B:66:28:52:90 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:97:50:a9:ec:97:2f:7a:39:ae:d3:d2:97:cc:58:1f:0b:9c: f8:df:02:a7:a4:88:c7:ed:9a:98:43:4f:33:38:3d:98:29:fe: a1:0f:cd:b1:23:83:96:4d:7a:ca:6f:0a:8d:40:d0:2f:38:dd: fd:a6:7c:1d:df:f5:0d:e0:3b:f2:1d:81:8e:49:12:12:6e:28: c0:bf:20:2a:5b:38:5a:ba:46:79:a6:7a:52:58:d0:c4:74:82: 82:5b:3f:ee:a7:54:85:1c:55:11:99:f5:33:53:63:0c:d5:81: 2d:93:1a:0d:d2:6e:c7:72:27:f2:33:1a:15:22:62:ea:9f:b9: a2:29:d4:34:d0:2b:5c:f4:b2:fc:61:93:b5:1f:18:15:b1:ba: e6:4a:5a:8c:e3:f2:d6:0d:bd:53:cc:bd:0a:99:76:ac:e7:b6: f7:4b:c0:65:2b:f0:d2:1f:e5:05:c8:74:0d:a0:61:2f:8c:46: 49:3b:c7:40:8e:82:7d:3e:23:fe:b4:55:82:7d:92:73:7a:7d: 95:39:a2:a0:f5:75:0b:5c:95:5a:25:9a:fa:0e:f6:a8:a4:6f: 3c:52:97:21:24:56:b3:13:10:2f:f8:ab:d3:09:f9:ba:0e:61: 17:78:e8:c4:02:35:04:4c:d7:9f:5c:b7:ff:6b:4e:6a:23:f0: 9f:93:7c:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RaDWWA8pHzEqVe/zgqpuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjUwNjI4MTYwMTIzWhcNMjUwNjI5MTYwMTIzWjAzMTEwLwYDVQQD Eyg0MTZmZjY3NjJjZmViZDQ1ODkxOWZmNmI3MDZiYjY4YjY2Mjg1MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6HSMbxjUKjSv8JKVoceoUnxbKL+ p+MJuSI9dCN7zb0mDvwnMKYpVdWfBiR1NbxLEQjZ+5G6uV9DiukRVS9lNUtx39fd UFYDQB6IrAPCb4DjfblLGbyUPRLzjq5G1Mdh8VzF6oMQULTkviwNHqWU/pF2jwLm JVu4HSqgn4lMTpmi71wHl8eGnTDDmCmuaHJ1dQrlK3nLsLcU1LZ2bb7RbXNJys8P HBUb413/OCEC/XropHzQ7E6lwGAtUJrkaNjVLqSKD6C+99774iYrImFufmt/o5xW ctzsR0Eiwdu2t0LYWKAMMn+6ifCFK0EwMVI33qeRGB8f3FgFwjGeUpkgZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFv9nYs/r1FiRn/a3BrtotmKFKQMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipdQqeyX L3o5rtPSl8xYHwuc+N8Cp6SIx+2amENPMzg9mCn+oQ/NsSODlk16ym8KjUDQLzjd /aZ8Hd/1DeA78h2BjkkSEm4owL8gKls4WrpGeaZ6UljQxHSCgls/7qdUhRxVEZn1 M1NjDNWBLZMaDdJux3In8jMaFSJi6p+5oinUNNArXPSy/GGTtR8YFbG65kpajOPy 1g29U8y9Cpl2rOe290vAZSvw0h/lBch0DaBhL4xGSTvHQI6CfT4j/rRVgn2Sc3p9 lTmioPV1C1yVWiWa+g72qKRvPFKXISRWsxMQL/ir0wn5ug5hF3joxAI1BEzXn1y3 /2tOaiPwn5N8OQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:17:23 2025 by rpki-client