$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: VnPX3SulC52YWNrqSp5vl1SgsALPFNTqjdTIKqt2vmY= Subject key identifier: 47:7A:EF:14:91:2E:04:19:E6:64:98:71:B4:7C:A8:FC:1A:3A:74:5A Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 01977D1E741640EFA58C183CCA32FB7B483C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 1064 Signing time: Tue 17 Jun 2025 09:00:37 +0000 Manifest this update: Tue 17 Jun 2025 09:00:37 +0000 Manifest next update: Wed 18 Jun 2025 09:00:37 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: lcxZ7QLzPPXJpZIwrnSKS3mv8kb33SdsD3Y4sy5MFpQ=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 18 Jun 2025 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:7d:1e:74:16:40:ef:a5:8c:18:3c:ca:32:fb:7b:48:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Jun 17 09:00:37 2025 GMT Not After : Jun 18 09:00:37 2025 GMT Subject: CN=477aef14912e0419e6649871b47ca8fc1a3a745a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:79:cf:7a:aa:7e:c0:ae:ca:be:e8:a0:c7:f1: 83:57:c5:9f:75:1e:d8:40:70:55:e5:e0:36:1b:35: e8:23:07:29:20:2f:a4:e3:b7:52:af:8a:41:d5:96: 7d:f8:aa:3e:41:7a:f5:45:95:28:ff:c6:8f:25:8a: 23:d8:4a:b2:ce:e3:40:b3:6f:95:04:6a:07:d4:0e: 26:69:7f:0a:1c:83:db:a3:14:5a:de:0d:00:c7:15: 29:96:a7:c5:4d:54:15:24:60:e4:1e:36:c5:b5:96: 33:21:ff:6f:69:73:73:a3:e1:85:9c:8a:de:49:94: fc:ba:0b:ec:e5:fd:aa:a4:26:db:50:ab:05:9e:99: 9d:aa:37:2f:d8:17:9c:3c:f0:5e:5b:08:c2:13:f9: eb:4e:09:8c:43:2e:6c:c1:15:d2:fb:f7:b0:e2:c3: 8d:d8:39:23:c5:ad:f7:be:df:07:d3:74:3f:b6:29: 60:c2:33:40:8f:b9:7a:22:8c:2c:f5:05:68:fb:42: f0:43:b6:b8:fb:db:ac:fd:5c:2c:b6:c2:aa:fa:51: 18:0d:5e:55:1f:6f:bb:5c:5d:4a:72:b2:c0:8c:d2: fb:64:0c:ab:94:9d:23:a1:34:03:a5:e3:b3:33:57: ff:98:5d:12:40:41:f8:8e:ac:06:0a:76:22:33:23: 29:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7A:EF:14:91:2E:04:19:E6:64:98:71:B4:7C:A8:FC:1A:3A:74:5A X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:86:18:d7:c5:35:fd:90:25:c3:6e:71:7c:59:a3:f4:de:4c: cf:f7:c9:fc:f8:e9:0b:26:be:fe:7c:5a:d1:4a:1d:80:6d:15: 09:3f:39:18:83:a1:5a:b5:45:b5:27:39:10:27:9a:e3:ab:4a: 51:bb:61:71:66:c7:db:17:ed:7f:b8:0b:ac:2c:6d:6e:05:25: 30:a2:37:27:17:6c:dc:34:04:3a:0e:f6:e6:c4:16:b8:b1:27: aa:f8:9b:9a:5a:dd:c3:18:02:99:2e:83:72:0f:d2:17:e2:ef: 1b:f5:64:fc:98:6f:ae:dd:8a:6a:ef:7a:8f:21:66:12:1c:7f: 99:42:c4:86:c2:81:5e:0d:4d:6c:cb:11:42:10:b8:4d:95:b6: 09:6f:ca:36:75:41:48:2f:98:80:3d:e4:fd:47:a3:45:5e:b3: 4b:26:93:1c:94:5e:04:44:ba:38:f5:6c:aa:47:7b:4b:50:9b: 22:c5:ae:aa:da:3f:4a:e7:47:74:2f:e4:f6:95:64:f3:9f:b5: 80:e5:58:35:a6:a6:6f:96:5b:4e:83:16:d5:8d:a7:d8:4b:ff: a9:01:ef:69:2d:e0:eb:28:55:63:ce:b1:d5:ec:7f:5f:91:39: cb:00:12:17:47:34:27:53:55:ec:1a:e0:96:de:cb:d0:8e:b9: 1e:9f:0f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd9HnQWQO+ljBg8yjL7e0g8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUwNjE3MDkwMDM3WhcNMjUwNjE4MDkwMDM3WjAzMTEwLwYDVQQD Eyg0NzdhZWYxNDkxMmUwNDE5ZTY2NDk4NzFiNDdjYThmYzFhM2E3NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHnPeqp+wK7Kvuigx/GDV8WfdR7Y QHBV5eA2GzXoIwcpIC+k47dSr4pB1ZZ9+Ko+QXr1RZUo/8aPJYoj2EqyzuNAs2+V BGoH1A4maX8KHIPboxRa3g0AxxUplqfFTVQVJGDkHjbFtZYzIf9vaXNzo+GFnIre SZT8ugvs5f2qpCbbUKsFnpmdqjcv2BecPPBeWwjCE/nrTgmMQy5swRXS+/ew4sON 2Dkjxa33vt8H03Q/tilgwjNAj7l6Iows9QVo+0LwQ7a4+9us/VwstsKq+lEYDV5V H2+7XF1KcrLAjNL7ZAyrlJ0joTQDpeOzM1f/mF0SQEH4jqwGCnYiMyMpvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEd67xSRLgQZ5mSYcbR8qPwaOnRaMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoYY18U1 /ZAlw25xfFmj9N5Mz/fJ/PjpCya+/nxa0UodgG0VCT85GIOhWrVFtSc5ECea46tK UbthcWbH2xftf7gLrCxtbgUlMKI3Jxds3DQEOg725sQWuLEnqvibmlrdwxgCmS6D cg/SF+LvG/Vk/Jhvrt2Kau96jyFmEhx/mULEhsKBXg1NbMsRQhC4TZW2CW/KNnVB SC+YgD3k/UejRV6zSyaTHJReBES6OPVsqkd7S1CbIsWuqto/SudHdC/k9pVk85+1 gOVYNaamb5ZbToMW1Y2n2Ev/qQHvaS3g6yhVY86x1ex/X5E5ywASF0c0J1NV7Brg lt7L0I65Hp8P6g== -----END CERTIFICATE-----Generated at Tue Jun 17 14:21:23 2025 by rpki-client