$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: x2V7+RIQf0Dtr0JtKd3xK7fW0Wz4ZFMdCMwHILddG8Q= Subject key identifier: 60:94:05:68:FE:B0:DE:91:01:D8:C8:98:E5:8A:07:A7:ED:9A:40:C9 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 0199FAD837461ACEB5346947CE83C27B93C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0D32 Signing time: Sun 19 Oct 2025 05:01:37 +0000 Manifest this update: Sun 19 Oct 2025 05:01:37 +0000 Manifest next update: Mon 20 Oct 2025 05:01:37 +0000 Files and hashes: 1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=) 2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=) 3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 4: 6f1sSkB9WX-VDyBfu2FjGF8_768.roa (hash: 81FaTuTny3LusxPdZBC/CvEnuJ1t4vAJ75jZ7Dn4nWk=) 5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: HeXQyFC5pakR/MENGAv7+uwYuzj/1Lwhg6uX86vhIK4=) 7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=) 15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=) 17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 18: i-TboqvR4QwoJ4ln5MB6Q0lRrLg.roa (hash: t8GdeR+oskUDLv8QTLlQVLSxK4jgz1+No6165ZL4RhM=) 19: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 20: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=) 21: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=) 22: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 23: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 24: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) 25: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 05:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:d8:37:46:1a:ce:b5:34:69:47:ce:83:c2:7b:93:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Oct 19 05:01:37 2025 GMT Not After : Oct 20 05:01:37 2025 GMT Subject: CN=60940568feb0de9101d8c898e58a07a7ed9a40c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:4d:42:84:88:95:8e:fb:82:b5:82:6e:bd: 05:03:10:4c:ed:56:a8:15:4b:a8:9f:76:32:73:59: 4d:95:4e:56:0a:ef:1e:29:24:8c:e0:3a:45:55:b8: af:1d:74:0a:28:8e:90:c7:2f:d4:eb:01:66:8d:f0: ce:59:9e:0b:ce:37:43:00:86:40:1f:a6:98:06:80: db:13:f3:be:89:9c:74:06:02:5b:8b:c9:53:d2:31: ed:f4:38:56:a3:f9:8e:50:b0:5c:f0:85:b6:7e:2b: fd:59:b4:1d:5a:26:26:1d:06:34:c2:72:ed:49:d5: 7f:8c:56:34:e1:fd:80:05:8f:70:0f:d2:e0:d7:c2: 39:98:12:ef:bf:fb:77:7e:3d:e4:be:53:4e:aa:6f: 17:07:7b:5a:62:1c:8f:ee:83:45:d9:c3:dc:e7:bc: 04:92:4b:4f:1d:11:82:08:bd:98:06:7b:54:96:90: c8:34:58:26:80:ee:ba:8e:0e:3d:56:f9:bd:45:b7: d3:30:fd:37:ca:2c:75:8c:02:85:c8:cc:31:26:8f: fe:96:c7:9c:09:0e:b0:41:10:f7:00:45:79:c8:49: 24:51:83:9e:c3:dd:de:36:b6:21:4f:d1:8b:e8:18: 27:ff:f1:8b:07:47:37:6c:88:e5:e9:89:8d:a3:8a: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:94:05:68:FE:B0:DE:91:01:D8:C8:98:E5:8A:07:A7:ED:9A:40:C9 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:28:12:45:8a:98:b7:18:0f:6a:c3:a8:ff:b5:b0:ca:7b:4d: 95:ae:57:25:7e:d5:f5:79:0b:75:c1:de:c6:2c:95:26:a2:26: f7:17:37:e2:a4:26:a9:9f:c4:09:29:38:b8:1e:1c:e4:69:ba: bb:a3:de:b6:18:62:19:4d:f5:24:a3:81:0d:e8:31:ab:b0:2e: 2b:9a:67:ba:56:dd:22:a6:71:f9:d3:b5:a7:32:93:7a:65:58: 66:60:c6:d2:3c:dc:8a:ee:26:2a:b9:89:33:22:ef:b1:2a:03: 70:79:7c:b3:e2:c9:cc:64:cd:a2:d0:6b:7c:b6:1a:28:27:ec: 90:d6:16:42:b7:dc:85:0f:66:c9:3d:fb:10:be:54:0a:c5:26: 99:28:d7:9e:17:e4:ee:61:23:e6:33:4b:20:0c:b0:0a:7a:c7: 51:f0:80:aa:4a:59:88:d7:20:f3:e0:9f:91:02:e2:27:86:1c: df:21:a8:70:38:be:e9:97:a9:d7:bf:75:0b:88:bd:8c:bd:6e: 94:1a:2b:56:db:4e:88:3e:6e:83:ac:54:79:0d:70:a9:78:cd: 91:40:65:ab:ea:d2:f4:a3:61:53:a2:96:91:c6:d3:c5:91:d1: 77:67:1f:76:7d:50:fe:d3:a6:7a:47:0b:e1:b4:1b:b3:4a:e6: 4e:81:ad:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn62DdGGs61NGlHzoPCe5PFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUxMDE5MDUwMTM3WhcNMjUxMDIwMDUwMTM3WjAzMTEwLwYDVQQD Eyg2MDk0MDU2OGZlYjBkZTkxMDFkOGM4OThlNThhMDdhN2VkOWE0MGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+1NQoSIlY77grWCbr0FAxBM7Vao FUuon3Yyc1lNlU5WCu8eKSSM4DpFVbivHXQKKI6Qxy/U6wFmjfDOWZ4LzjdDAIZA H6aYBoDbE/O+iZx0BgJbi8lT0jHt9DhWo/mOULBc8IW2fiv9WbQdWiYmHQY0wnLt SdV/jFY04f2ABY9wD9Lg18I5mBLvv/t3fj3kvlNOqm8XB3taYhyP7oNF2cPc57wE kktPHRGCCL2YBntUlpDINFgmgO66jg49Vvm9RbfTMP03yix1jAKFyMwxJo/+lsec CQ6wQRD3AEV5yEkkUYOew93eNrYhT9GL6Bgn//GLB0c3bIjl6YmNo4r8PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCUBWj+sN6RAdjImOWKB6ftmkDJMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSgSRYqY txgPasOo/7WwyntNla5XJX7V9XkLdcHexiyVJqIm9xc34qQmqZ/ECSk4uB4c5Gm6 u6PethhiGU31JKOBDegxq7AuK5pnulbdIqZx+dO1pzKTemVYZmDG0jzciu4mKrmJ MyLvsSoDcHl8s+LJzGTNotBrfLYaKCfskNYWQrfchQ9myT37EL5UCsUmmSjXnhfk 7mEj5jNLIAywCnrHUfCAqkpZiNcg8+CfkQLiJ4Yc3yGocDi+6Zep1791C4i9jL1u lBorVttOiD5ug6xUeQ1wqXjNkUBlq+rS9KNhU6KWkcbTxZHRd2cfdn1Q/tOmekcL 4bQbs0rmToGtJw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:07:42 2025 by rpki-client