$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 7+WO3FdmbVixd8lfklDmxt6261CcLP5f4lpN8HYsRtM= Subject key identifier: 4D:5E:6B:D9:89:83:6C:B4:76:DA:52:3A:26:45:0F:C6:26:00:69:91 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01987CE56236E05AC1CFC17C3D86120D2B63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1690 Signing time: Wed 06 Aug 2025 01:01:04 +0000 Manifest this update: Wed 06 Aug 2025 01:01:04 +0000 Manifest next update: Thu 07 Aug 2025 01:01:04 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: fXjs+yvsN/lwA5B1/sTE9ti5S+bsmTEb7mTMx2nFYDg=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: 5RBinPwOy0Ur02K4skRXrZ57oe4.roa (hash: FohLkPaRCdpVe1POii3jQVhmOCscuDyAYaI/LSwOnms=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 11: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 12: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (hash: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: LbbuvYNCQUioVv8zQH-Fc5UlHII.roa (hash: YzZ+diVYTspWHIE3LvR+g+W1S6ZTUYeSZQdRtZ8vrSI=) 16: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 17: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 18: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 19: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 20: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 21: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 22: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 23: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 24: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 25: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 26: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 27: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 28: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:e5:62:36:e0:5a:c1:cf:c1:7c:3d:86:12:0d:2b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Aug 6 01:01:04 2025 GMT Not After : Aug 7 01:01:04 2025 GMT Subject: CN=4d5e6bd989836cb476da523a26450fc626006991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c1:c4:87:9c:e7:36:8b:b3:74:a3:0c:6b:58: 96:39:00:04:69:d8:c3:ae:5c:1e:d9:b2:6e:d4:46: 44:d1:9c:3d:c4:81:3f:49:3e:8e:88:38:7d:d3:9c: bd:33:10:2e:16:cd:7c:5b:c9:00:ce:74:02:22:ff: 43:1b:e1:c1:f2:bc:ce:80:dc:8a:ad:b1:99:17:78: 80:26:13:c4:66:ce:17:4a:97:05:5e:03:c0:e5:9d: cb:e5:61:b4:aa:d8:ca:b0:fc:d4:03:1d:55:3b:92: f2:10:6b:be:9f:17:c7:9a:ad:76:0c:22:93:55:5c: 19:8e:4a:06:cf:cc:80:a4:5b:55:3b:ae:87:d7:7a: 93:2b:9c:76:6c:e8:1b:93:76:95:45:24:60:36:0f: 98:1d:14:5b:4f:7c:4f:42:fc:9b:9c:3f:cd:bc:25: c9:95:1c:34:e3:dd:fe:67:bb:4b:78:fa:b2:bb:2c: 54:13:f6:cb:7a:0b:10:bf:2e:f1:4b:fa:32:ff:45: c0:88:bb:f7:67:96:4f:5b:4d:ca:09:69:72:29:4b: 19:28:6b:9e:86:ff:8a:55:d4:44:30:ca:8b:0b:cd: 1d:fa:96:8f:65:ed:d3:05:9e:fa:4c:cf:ea:af:83: 9a:9d:e1:ea:5c:4c:e2:73:61:ae:b0:54:24:4c:c9: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5E:6B:D9:89:83:6C:B4:76:DA:52:3A:26:45:0F:C6:26:00:69:91 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:15:26:59:aa:c4:7b:9f:53:b2:99:4b:01:18:0a:22:16:fb: 4f:a0:04:8b:e6:8b:2f:c7:8b:0d:4b:ae:9c:e9:2f:29:2a:63: 47:81:70:2b:a0:ca:c9:74:3b:ba:bf:93:b4:53:3e:2a:36:e8: 17:af:1d:b7:3b:d3:64:78:f6:5a:89:d9:a2:ca:51:e6:8c:b8: 66:66:05:35:b7:a4:6f:db:85:f5:f6:fc:96:58:c5:59:9a:1d: 5d:03:4a:80:58:e0:55:52:06:01:83:5d:8f:a3:eb:16:95:20: 11:2c:be:4d:8b:5e:be:8e:75:e5:30:7d:64:14:5e:28:14:48: 62:93:11:8b:4f:77:6b:cc:15:c6:da:e5:0e:17:7a:81:08:5e: e4:ad:9e:4c:22:59:35:43:f0:cb:03:03:29:d5:83:a6:f0:ba: 6c:f7:ce:4d:0d:a2:bc:f1:cb:27:56:18:72:ee:22:1a:ec:90: cc:ad:1b:f6:5f:96:78:84:56:e1:96:43:1e:62:97:f5:c6:7c: 32:94:7e:11:48:fd:f5:59:48:a1:3f:76:f5:29:01:15:87:e6: 97:7c:d7:1e:ea:3d:af:82:72:58:a0:76:7c:c2:55:b0:d9:41: 09:6a:03:6e:b2:a8:4f:fd:5f:9c:5a:7e:c4:50:4c:d1:01:c8: c5:81:41:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh85WI24FrBz8F8PYYSDStjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwODA2MDEwMTA0WhcNMjUwODA3MDEwMTA0WjAzMTEwLwYDVQQD Eyg0ZDVlNmJkOTg5ODM2Y2I0NzZkYTUyM2EyNjQ1MGZjNjI2MDA2OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8HEh5znNouzdKMMa1iWOQAEadjD rlwe2bJu1EZE0Zw9xIE/ST6OiDh905y9MxAuFs18W8kAznQCIv9DG+HB8rzOgNyK rbGZF3iAJhPEZs4XSpcFXgPA5Z3L5WG0qtjKsPzUAx1VO5LyEGu+nxfHmq12DCKT VVwZjkoGz8yApFtVO66H13qTK5x2bOgbk3aVRSRgNg+YHRRbT3xPQvybnD/NvCXJ lRw0493+Z7tLePqyuyxUE/bLegsQvy7xS/oy/0XAiLv3Z5ZPW03KCWlyKUsZKGue hv+KVdREMMqLC80d+paPZe3TBZ76TM/qr4OaneHqXEzic2GusFQkTMlAEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1ea9mJg2y0dtpSOiZFD8YmAGmRMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBUmWarE e59TsplLARgKIhb7T6AEi+aLL8eLDUuunOkvKSpjR4FwK6DKyXQ7ur+TtFM+Kjbo F68dtzvTZHj2WonZospR5oy4ZmYFNbekb9uF9fb8lljFWZodXQNKgFjgVVIGAYNd j6PrFpUgESy+TYtevo515TB9ZBReKBRIYpMRi093a8wVxtrlDhd6gQhe5K2eTCJZ NUPwywMDKdWDpvC6bPfOTQ2ivPHLJ1YYcu4iGuyQzK0b9l+WeIRW4ZZDHmKX9cZ8 MpR+EUj99VlIoT929SkBFYfml3zXHuo9r4JyWKB2fMJVsNlBCWoDbrKoT/1fnFp+ xFBM0QHIxYFB4w== -----END CERTIFICATE-----Generated at Wed Aug 6 04:07:03 2025 by rpki-client