$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: rtC5y7Vp05k8EUzzcJq6ALvS3ylcHqTBKSI9bDRpkSc= Subject key identifier: FB:E1:F1:6F:10:06:F0:32:2A:FC:15:B9:41:59:BE:E2:F6:AF:C7:C7 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019778D44C50185EBA2EC9D5B91D5C3CD833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 12A7 Signing time: Mon 16 Jun 2025 13:01:08 +0000 Manifest this update: Mon 16 Jun 2025 13:01:08 +0000 Manifest next update: Tue 17 Jun 2025 13:01:08 +0000 Files and hashes: 1: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (hash: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=) 2: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=) 3: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=) 4: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: 3CIsrvbsO9wd6GsuEuoeNsmxvRKj1LLCnKWxrhlQ2qw=) 5: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=) 6: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=) 7: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=) 8: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=) 9: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=) 10: nbOZXhIINfQc77gHfbI_Sb1Z3kc.roa (hash: NsyrOZGKSOyRSS6aHvrokQeFXOY4xYNam6BnK7E5duI=) 11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:78:d4:4c:50:18:5e:ba:2e:c9:d5:b9:1d:5c:3c:d8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Jun 16 13:01:08 2025 GMT Not After : Jun 17 13:01:08 2025 GMT Subject: CN=fbe1f16f1006f0322afc15b94159bee2f6afc7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:69:10:4f:07:19:c5:98:bf:1d:45:2d:79: 80:9e:5a:fe:f0:47:a8:8d:72:94:ab:08:e6:6a:6c: 11:6f:a7:73:ed:c5:5d:4f:e2:9f:f8:8d:a7:a7:d7: cc:58:c7:60:02:9a:6f:58:cb:f3:a7:25:35:88:bf: ae:c8:51:c2:6e:33:e0:a7:86:91:f8:41:03:e1:45: 43:75:53:d0:1d:cc:04:fa:3a:b0:22:74:06:9f:d3: 9d:32:99:63:da:74:61:27:44:b6:e3:19:81:f1:f5: f9:5f:56:44:cf:05:72:98:17:9c:fd:54:b7:7f:26: 8a:3b:66:a4:e5:66:4b:08:4b:88:30:f0:0d:bc:4e: 2f:12:fa:9f:11:cb:f1:6e:86:2f:77:ef:b8:5f:1c: 87:32:88:8e:36:c0:e3:0e:d2:b2:85:d0:4a:da:42: 2b:63:f0:0a:67:72:c9:d7:54:cb:d5:e9:ea:d4:3d: 57:fc:0e:d9:b3:31:68:1d:c2:5a:d4:54:a3:12:04: 92:0b:5f:2d:5c:bd:71:e9:fd:9b:7f:f4:08:fa:8d: 00:60:74:3c:13:bd:87:f4:52:38:55:ca:fc:57:ab: 9c:a6:c9:56:b9:95:38:11:70:58:8b:9c:92:0a:78: ff:3d:d8:74:ca:fc:b5:4a:f5:43:95:b8:b3:44:71: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E1:F1:6F:10:06:F0:32:2A:FC:15:B9:41:59:BE:E2:F6:AF:C7:C7 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ca:52:4d:2c:20:d4:0f:84:a7:de:a9:49:82:63:67:a6:20: fd:fb:92:a1:20:30:f5:74:0e:df:12:4a:00:93:fa:8d:ba:4a: e0:09:04:38:b7:97:1f:7e:a7:4b:53:b5:7a:58:58:7c:f4:ad: 35:1c:42:40:0c:c6:f8:ec:9f:c8:7a:8c:e9:06:fd:cb:08:6b: a8:08:c3:67:c4:fb:52:85:c2:8c:72:2b:1e:d9:f9:92:14:9f: 04:76:3f:27:e9:1c:aa:5f:cc:da:0e:f8:1d:5a:f9:60:26:0d: 27:98:ff:fa:d2:40:a6:1f:33:91:d8:fa:8d:f6:52:7b:3a:b0: a2:37:84:be:fd:5b:c8:9b:ad:24:8c:68:3c:14:e2:2c:40:2c: dc:0b:d6:06:03:49:ed:04:18:ba:a0:5a:f9:87:44:76:f9:a8: 01:9e:44:c2:bf:ff:da:a2:36:4b:08:a6:f0:3f:84:35:f8:8e: fa:db:4f:17:ee:bb:68:98:c5:70:b3:f1:f8:8d:51:96:0b:09: 24:73:9d:78:d8:72:ff:02:ee:00:4f:c4:f5:d0:3f:d2:e7:2f: d1:af:c6:27:a5:80:11:03:90:b1:1a:33:b5:3d:dc:43:f8:a3: 1e:c1:de:b4:2f:8a:20:2d:c5:2c:a1:66:9e:94:eb:30:1c:73: db:b9:5e:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd41ExQGF66LsnVuR1cPNgzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjUwNjE2MTMwMTA4WhcNMjUwNjE3MTMwMTA4WjAzMTEwLwYDVQQD EyhmYmUxZjE2ZjEwMDZmMDMyMmFmYzE1Yjk0MTU5YmVlMmY2YWZjN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUxpEE8HGcWYvx1FLXmAnlr+8Eeo jXKUqwjmamwRb6dz7cVdT+Kf+I2np9fMWMdgAppvWMvzpyU1iL+uyFHCbjPgp4aR +EED4UVDdVPQHcwE+jqwInQGn9OdMplj2nRhJ0S24xmB8fX5X1ZEzwVymBec/VS3 fyaKO2ak5WZLCEuIMPANvE4vEvqfEcvxboYvd++4XxyHMoiONsDjDtKyhdBK2kIr Y/AKZ3LJ11TL1enq1D1X/A7ZszFoHcJa1FSjEgSSC18tXL1x6f2bf/QI+o0AYHQ8 E72H9FI4Vcr8V6ucpslWuZU4EXBYi5ySCnj/Pdh0yvy1SvVDlbizRHHjswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvh8W8QBvAyKvwVuUFZvuL2r8fHMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZspSTSwg 1A+Ep96pSYJjZ6Yg/fuSoSAw9XQO3xJKAJP6jbpK4AkEOLeXH36nS1O1elhYfPSt NRxCQAzG+OyfyHqM6Qb9ywhrqAjDZ8T7UoXCjHIrHtn5khSfBHY/J+kcql/M2g74 HVr5YCYNJ5j/+tJAph8zkdj6jfZSezqwojeEvv1byJutJIxoPBTiLEAs3AvWBgNJ 7QQYuqBa+YdEdvmoAZ5Ewr//2qI2Swim8D+ENfiO+ttPF+67aJjFcLPx+I1RlgsJ JHOdeNhy/wLuAE/E9dA/0ucv0a/GJ6WAEQOQsRoztT3cQ/ijHsHetC+KIC3FLKFm npTrMBxz27le6A== -----END CERTIFICATE-----Generated at Mon Jun 16 15:54:43 2025 by rpki-client