$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: 322V/XC1RAogtTpopuBFYpHJh73tDJNTGrWfgqgOuh0= Subject key identifier: 25:8F:B9:FF:29:95:72:81:78:49:C1:E4:0D:B2:87:D8:AB:6C:66:15 Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 01987AF6C69AD2281CC0C821D2FC02FCB94A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1624 Signing time: Tue 05 Aug 2025 16:00:49 +0000 Manifest this update: Tue 05 Aug 2025 16:00:49 +0000 Manifest next update: Wed 06 Aug 2025 16:00:49 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: 5czIVBNuDG8hYT3BpR7yhQlGT5I0AJMl7tvv950uvcA=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:f6:c6:9a:d2:28:1c:c0:c8:21:d2:fc:02:fc:b9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Aug 5 16:00:49 2025 GMT Not After : Aug 6 16:00:49 2025 GMT Subject: CN=258fb9ff299572817849c1e40db287d8ab6c6615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:74:cc:00:3b:ee:36:86:a4:6d:a0:62:4e: d8:a5:ac:99:a5:bf:71:0a:6d:6d:7a:9c:46:06:6d: ce:fe:4e:5c:b7:1a:6b:ec:66:c5:41:10:1d:98:cc: 6d:a8:7e:0c:37:77:89:2d:10:9f:c3:b8:fd:47:8d: 54:45:04:c3:77:d2:da:b2:d7:8b:62:5d:85:f8:79: b4:9e:60:2f:20:17:6b:96:02:e6:60:1f:89:fb:53: 09:0b:eb:39:f6:eb:11:e3:1f:7c:3f:88:fc:13:5f: 13:db:92:30:b1:21:a7:3e:d3:7b:7a:9d:ef:f8:47: bf:fb:2d:71:c3:f5:9b:a9:d1:94:2c:07:e1:67:db: d5:b7:02:6f:40:42:66:e6:50:03:82:b7:f8:98:ad: 45:26:34:62:61:d8:9c:b4:26:27:1c:9e:04:79:a8: 71:5f:9d:bb:97:64:d6:ee:38:a2:ed:3c:a4:3b:c6: fa:22:78:03:b8:93:be:e8:1d:93:95:48:dd:9e:9b: 8c:aa:d2:08:da:92:ae:8b:81:4f:51:a2:7d:a4:74: e4:79:b6:b1:e9:b0:7b:01:ad:e0:b0:89:6a:44:8d: 5a:14:0e:e7:d9:a7:eb:2e:19:cc:99:7b:eb:b1:d7: 4f:8b:68:06:be:07:02:45:c6:03:2f:dc:0a:4a:3e: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8F:B9:FF:29:95:72:81:78:49:C1:E4:0D:B2:87:D8:AB:6C:66:15 X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:13:38:33:0e:46:de:72:a9:22:53:01:0a:1c:8c:9f:35:c6: 3f:c1:5e:ad:ed:7e:f9:03:1a:99:55:65:70:7b:23:c0:cf:41: 32:dc:df:99:e6:45:42:0a:af:7a:9c:77:b9:ba:e8:9c:65:bb: db:0c:6f:c0:ba:e7:22:40:0c:0e:fe:24:9b:78:d8:f3:09:26: c7:bd:47:6c:aa:87:53:99:ba:3d:73:ff:1a:6c:ea:17:fb:6a: c6:06:d8:e1:3f:50:52:7f:33:12:92:fc:81:7f:e6:d8:f9:4c: a8:bf:e0:c2:bb:ac:ea:e3:08:85:d6:09:32:4a:f5:37:76:b7: 46:fe:26:94:ea:b1:01:6c:d2:ea:b9:30:3c:ba:3f:54:35:ec: 9e:1c:7b:ee:36:0f:21:b9:91:72:b9:ab:70:94:98:43:9a:84: a8:e2:93:00:b8:c2:69:70:b6:1c:8c:43:34:d9:04:09:7c:66: 64:e5:cc:bf:98:1c:be:2a:0f:fe:75:c3:52:eb:c0:d9:ff:43: de:ef:a6:cb:2d:83:a8:13:8f:c9:17:8b:3b:64:bc:f7:9c:66: a2:f6:0f:c0:a0:9d:b3:ac:98:23:22:03:90:43:f1:5a:9b:1a: c0:b8:ec:8a:23:89:8f:2d:20:ed:11:12:b2:9c:85:62:e0:97: e9:e6:69:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh69saa0igcwMgh0vwC/LlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwODA1MTYwMDQ5WhcNMjUwODA2MTYwMDQ5WjAzMTEwLwYDVQQD EygyNThmYjlmZjI5OTU3MjgxNzg0OWMxZTQwZGIyODdkOGFiNmM2NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEF0zAA77jaGpG2gYk7YpayZpb9x Cm1tepxGBm3O/k5ctxpr7GbFQRAdmMxtqH4MN3eJLRCfw7j9R41URQTDd9LasteL Yl2F+Hm0nmAvIBdrlgLmYB+J+1MJC+s59usR4x98P4j8E18T25IwsSGnPtN7ep3v +Ee/+y1xw/WbqdGULAfhZ9vVtwJvQEJm5lADgrf4mK1FJjRiYdictCYnHJ4Eeahx X527l2TW7jii7TykO8b6IngDuJO+6B2TlUjdnpuMqtII2pKui4FPUaJ9pHTkebax 6bB7Aa3gsIlqRI1aFA7n2afrLhnMmXvrsddPi2gGvgcCRcYDL9wKSj6McwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWPuf8plXKBeEnB5A2yh9irbGYVMB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBM4Mw5G 3nKpIlMBChyMnzXGP8Fere1++QMamVVlcHsjwM9BMtzfmeZFQgqvepx3ubronGW7 2wxvwLrnIkAMDv4km3jY8wkmx71HbKqHU5m6PXP/GmzqF/tqxgbY4T9QUn8zEpL8 gX/m2PlMqL/gwrus6uMIhdYJMkr1N3a3Rv4mlOqxAWzS6rkwPLo/VDXsnhx77jYP IbmRcrmrcJSYQ5qEqOKTALjCaXC2HIxDNNkECXxmZOXMv5gcvioP/nXDUuvA2f9D 3u+myy2DqBOPyReLO2S895xmovYPwKCds6yYIyIDkEPxWpsawLjsiiOJjy0g7RES spyFYuCX6eZp5Q== -----END CERTIFICATE-----Generated at Tue Aug 5 20:21:18 2025 by rpki-client