$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: TZIcCX3bmkLM3CmOIQdiwvOyzzbJtfPdJ8Oa8NJ5q0Y= Subject key identifier: 49:24:D8:3C:49:D6:B0:BD:C7:22:47:57:4A:22:34:09:8F:22:38:05 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 0198D54E956760E4F4225CBB7285862A8FEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0C9A Signing time: Sat 23 Aug 2025 05:02:33 +0000 Manifest this update: Sat 23 Aug 2025 05:02:33 +0000 Manifest next update: Sun 24 Aug 2025 05:02:33 +0000 Files and hashes: 1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=) 2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=) 3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 4: 6f1sSkB9WX-VDyBfu2FjGF8_768.roa (hash: 81FaTuTny3LusxPdZBC/CvEnuJ1t4vAJ75jZ7Dn4nWk=) 5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: xYmleiKRMS4KjrKp1hWM9aYkx0sGDmOJqDgW50Ni2e4=) 7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=) 15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=) 17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 18: i-TboqvR4QwoJ4ln5MB6Q0lRrLg.roa (hash: t8GdeR+oskUDLv8QTLlQVLSxK4jgz1+No6165ZL4RhM=) 19: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 20: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=) 21: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=) 22: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 23: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 24: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) 25: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:95:67:60:e4:f4:22:5c:bb:72:85:86:2a:8f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Aug 23 05:02:33 2025 GMT Not After : Aug 24 05:02:33 2025 GMT Subject: CN=4924d83c49d6b0bdc72247574a2234098f223805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:05:d4:d2:bb:2d:f8:52:65:4f:13:6c:53:76: 9b:c8:c4:89:f2:08:64:a9:84:e8:1d:3b:74:3a:ac: fd:81:71:29:00:f5:a7:00:68:d6:52:67:e0:2a:33: 10:3f:c5:64:0e:fe:01:16:12:c6:01:16:e5:34:9b: 92:d8:46:ae:ce:60:2a:6c:a0:7d:de:a5:7c:14:67: 15:c8:4d:5a:04:8f:88:09:9a:0b:03:8e:62:ea:ee: 39:e7:3a:9c:cd:07:5c:48:a3:01:11:b1:b7:47:c1: 57:a9:3c:2e:b6:94:25:ba:c1:3c:22:30:1b:6f:26: fe:0e:7f:66:7e:ce:47:6e:d9:5f:c0:37:6e:5c:0c: 2d:06:b2:46:ed:e2:de:29:a6:ec:30:61:51:03:79: 03:d9:d0:2f:0c:b5:20:af:94:97:46:da:21:ab:4d: b2:8f:75:fa:72:9c:76:c3:bb:77:24:a9:52:c7:89: 1d:3e:64:3a:8f:3e:c4:21:0a:3c:12:9b:b6:6d:b7: cb:df:95:53:2f:6d:e7:29:79:89:a9:7d:e7:77:66: 4b:d9:5a:b6:85:eb:ce:03:5f:d3:5d:c5:48:2a:41: 3f:a7:04:da:7d:d7:48:60:70:70:38:20:32:d0:86: d4:71:9d:5d:3f:df:f0:6a:a8:ba:ff:53:0d:7a:f1: e3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:24:D8:3C:49:D6:B0:BD:C7:22:47:57:4A:22:34:09:8F:22:38:05 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ad:ed:ba:75:d2:57:b9:9b:f4:04:a4:34:e8:d0:75:7a:56: f9:03:ce:b3:dc:20:72:08:a7:49:33:62:ce:57:bd:15:2b:49: df:3b:03:06:da:1f:55:0e:5e:20:1a:1c:1e:17:f2:80:19:45: 72:43:19:9d:cb:8c:48:8b:c2:59:22:13:8e:c8:63:15:fc:03: b1:1e:2d:b4:11:5e:1d:9b:95:b9:1d:a8:39:25:28:38:d3:5d: 6d:50:5d:6b:2c:02:c1:56:26:19:1e:cd:55:e5:c8:48:49:72: 77:dd:97:ee:56:2b:58:ea:28:11:59:fb:49:f2:73:d7:4d:05: ad:83:48:7f:80:b2:a7:78:b1:36:78:d9:0d:2c:9a:bc:fd:b8: 5b:4e:c1:07:28:7f:21:b1:cb:94:83:14:7d:ca:0f:6d:de:cf: 9b:02:c4:1e:31:6a:dd:de:2b:c8:84:de:23:c6:1b:df:02:b8: 1f:18:65:95:59:f0:8e:ac:3e:bd:97:12:ba:d6:ea:9f:13:fb: 15:6c:65:ee:7b:8c:0f:9d:32:29:49:c1:48:77:cc:bf:c4:15: 91:f8:d3:f8:dd:c7:ba:de:ce:32:cf:7a:a2:93:02:fc:e2:b5: 78:62:39:39:a6:ea:a0:fa:8b:d0:32:a7:f8:43:f1:8b:8d:44: c0:b5:c3:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTpVnYOT0Ily7coWGKo/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUwODIzMDUwMjMzWhcNMjUwODI0MDUwMjMzWjAzMTEwLwYDVQQD Eyg0OTI0ZDgzYzQ5ZDZiMGJkYzcyMjQ3NTc0YTIyMzQwOThmMjIzODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gXU0rst+FJlTxNsU3abyMSJ8ghk qYToHTt0Oqz9gXEpAPWnAGjWUmfgKjMQP8VkDv4BFhLGARblNJuS2EauzmAqbKB9 3qV8FGcVyE1aBI+ICZoLA45i6u455zqczQdcSKMBEbG3R8FXqTwutpQlusE8IjAb byb+Dn9mfs5HbtlfwDduXAwtBrJG7eLeKabsMGFRA3kD2dAvDLUgr5SXRtohq02y j3X6cpx2w7t3JKlSx4kdPmQ6jz7EIQo8Epu2bbfL35VTL23nKXmJqX3nd2ZL2Vq2 hevOA1/TXcVIKkE/pwTafddIYHBwOCAy0IbUcZ1dP9/waqi6/1MNevHjnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkk2DxJ1rC9xyJHV0oiNAmPIjgFMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq3tunXS V7mb9ASkNOjQdXpW+QPOs9wgcginSTNizle9FStJ3zsDBtofVQ5eIBocHhfygBlF ckMZncuMSIvCWSITjshjFfwDsR4ttBFeHZuVuR2oOSUoONNdbVBdaywCwVYmGR7N VeXISElyd92X7lYrWOooEVn7SfJz100FrYNIf4Cyp3ixNnjZDSyavP24W07BByh/ IbHLlIMUfcoPbd7PmwLEHjFq3d4ryITeI8Yb3wK4HxhllVnwjqw+vZcSutbqnxP7 FWxl7nuMD50yKUnBSHfMv8QVkfjT+N3Hut7OMs96opMC/OK1eGI5OabqoPqL0DKn +EPxi41EwLXD4w== -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:50 2025 by rpki-client