$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: leq52ksHCvYj9yHTJwdRlb+W4CmcWZVw7jidyfWMINE= Subject key identifier: DC:A3:4B:4B:97:40:B6:D9:A3:83:81:D6:EE:EF:F4:3D:AC:08:D3:07 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019A5150DC2654FA8212AD5B01C3C5139600 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 11DB Signing time: Wed 05 Nov 2025 00:00:44 +0000 Manifest this update: Wed 05 Nov 2025 00:00:44 +0000 Manifest next update: Thu 06 Nov 2025 00:00:44 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: Tk2RNuuXlSpCoGBdLCrXQHZxngXqinXNO7WKLRBii1w=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:50:dc:26:54:fa:82:12:ad:5b:01:c3:c5:13:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Nov 5 00:00:44 2025 GMT Not After : Nov 6 00:00:44 2025 GMT Subject: CN=dca34b4b9740b6d9a38381d6eeeff43dac08d307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:fd:8a:af:79:b2:1d:45:5a:81:37:66:5d: ff:6c:10:a5:b7:88:81:0a:84:0c:a2:a0:36:98:3e: b8:3b:80:59:ec:f6:47:b6:1a:9e:7c:2f:5c:b8:84: fa:13:34:32:6e:cb:36:d3:a8:55:92:24:da:84:47: a1:04:a3:2a:da:c3:0d:92:ab:bb:6e:c2:37:ef:dd: e8:c1:01:29:c3:d5:32:a2:bb:fe:9f:4f:26:8c:a7: f4:bb:40:df:9f:f0:86:2e:b5:f0:ad:44:b4:8c:19: bc:4c:8d:c0:f0:6d:75:3e:08:cd:0f:ca:4b:6b:a7: 83:6c:f2:6d:de:43:c2:e0:c7:58:e5:e3:84:dd:16: a8:b2:3d:3b:6d:57:bd:eb:3e:17:17:ee:31:3d:0d: a7:f9:f0:c9:7b:75:91:92:c1:e6:7d:ac:78:8d:bc: cb:a6:6e:35:e0:a2:27:8a:70:64:b9:5c:b9:2e:94: f5:5a:e5:aa:45:7c:a3:07:06:fc:de:6a:c4:b9:31: 07:11:30:39:40:7b:f7:5f:45:eb:c5:da:40:e4:ba: b9:8f:3e:37:c6:16:b1:28:90:3e:84:c6:ac:01:cf: 48:52:94:19:66:1a:2f:19:55:4d:21:b3:c0:2f:21: 55:da:67:e5:b4:61:1f:b3:39:c3:92:bd:fe:92:d3: ec:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A3:4B:4B:97:40:B6:D9:A3:83:81:D6:EE:EF:F4:3D:AC:08:D3:07 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:47:f3:7a:f6:6a:bb:8e:9a:86:e2:8f:09:2a:8f:a4:fe:37: 67:ac:cd:f0:5a:f7:49:f4:8a:0a:fd:77:1d:93:80:81:24:7c: 28:04:3e:8e:df:99:19:28:10:9b:25:c3:fd:c1:bb:0c:8b:f7: 2c:80:87:93:0d:25:ae:1c:9d:56:b0:13:6d:06:61:e4:17:cd: 43:c5:9a:18:86:a5:16:b8:e4:4c:2c:ca:5e:57:16:1a:33:1e: 05:3d:3c:78:d4:b4:df:e0:cc:2e:ce:9d:be:62:31:78:4e:c3: 65:68:83:81:1c:df:0a:54:cb:d8:17:3e:da:2e:9a:25:7f:b0: de:e8:06:26:e8:c9:0c:02:01:d0:ea:46:68:fd:82:51:39:65: 11:e1:17:0a:c9:20:c3:e1:0e:0b:a3:92:d7:3d:05:88:04:22: 1c:22:1d:0f:eb:44:60:30:b3:8b:33:f2:e7:a0:39:ec:58:6e: 0f:8b:6a:7e:88:da:a0:8f:70:1f:76:05:8d:92:63:84:1e:e0: 7c:c9:b2:7c:8f:5d:88:4b:90:fa:f0:35:d0:66:66:54:9d:83: 45:96:5e:f7:a6:12:de:61:e5:4d:db:71:5b:2f:3e:10:b8:dc: 74:a8:93:08:17:e2:4f:56:92:b3:63:cc:68:c5:fe:30:07:87: 0b:f3:1f:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRUNwmVPqCEq1bAcPFE5YAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUxMTA1MDAwMDQ0WhcNMjUxMTA2MDAwMDQ0WjAzMTEwLwYDVQQD EyhkY2EzNGI0Yjk3NDBiNmQ5YTM4MzgxZDZlZWVmZjQzZGFjMDhkMzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7n9iq95sh1FWoE3Zl3/bBClt4iB CoQMoqA2mD64O4BZ7PZHthqefC9cuIT6EzQybss206hVkiTahEehBKMq2sMNkqu7 bsI3793owQEpw9Uyorv+n08mjKf0u0Dfn/CGLrXwrUS0jBm8TI3A8G11PgjND8pL a6eDbPJt3kPC4MdY5eOE3Raosj07bVe96z4XF+4xPQ2n+fDJe3WRksHmfax4jbzL pm414KIninBkuVy5LpT1WuWqRXyjBwb83mrEuTEHETA5QHv3X0XrxdpA5Lq5jz43 xhaxKJA+hMasAc9IUpQZZhovGVVNIbPALyFV2mfltGEfsznDkr3+ktPsoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyjS0uXQLbZo4OB1u7v9D2sCNMHMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0fzevZq u46ahuKPCSqPpP43Z6zN8Fr3SfSKCv13HZOAgSR8KAQ+jt+ZGSgQmyXD/cG7DIv3 LICHkw0lrhydVrATbQZh5BfNQ8WaGIalFrjkTCzKXlcWGjMeBT08eNS03+DMLs6d vmIxeE7DZWiDgRzfClTL2Bc+2i6aJX+w3ugGJujJDAIB0OpGaP2CUTllEeEXCskg w+EOC6OS1z0FiAQiHCIdD+tEYDCzizPy56A57FhuD4tqfojaoI9wH3YFjZJjhB7g fMmyfI9diEuQ+vA10GZmVJ2DRZZe96YS3mHlTdtxWy8+ELjcdKiTCBfiT1aSs2PM aMX+MAeHC/MfDA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:12 2025 by rpki-client