$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: cj94WWfK6sE7jcTzXQwR1lAs1kq+NEh3ODAXX1gFqiY= Subject key identifier: 6E:D6:C8:74:1E:DD:4F:D3:CA:1F:66:2E:AE:56:38:C1:03:C8:C9:91 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 01987DF7A13B00911116BDDBBF048B47D7A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 10E9 Signing time: Wed 06 Aug 2025 06:00:37 +0000 Manifest this update: Wed 06 Aug 2025 06:00:37 +0000 Manifest next update: Thu 07 Aug 2025 06:00:37 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: TwJUNRYg7CnkdoyEtHEP09pv3DMAQfdAj+x1uQouQ4k=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:f7:a1:3b:00:91:11:16:bd:db:bf:04:8b:47:d7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Aug 6 06:00:37 2025 GMT Not After : Aug 7 06:00:37 2025 GMT Subject: CN=6ed6c8741edd4fd3ca1f662eae5638c103c8c991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:02:da:80:35:4f:ee:83:ee:12:eb:ee:06: 27:fe:c0:63:67:a5:b7:f6:0b:d2:fa:01:5d:71:09: 05:bf:01:96:75:75:10:5d:ce:62:d6:f2:86:a3:e5: bf:97:e1:f7:4f:fb:69:29:38:d8:d8:b5:13:1e:3f: de:12:61:42:fa:70:fb:0b:71:40:8e:a5:b3:0d:84: 0a:46:d5:31:ea:92:71:f3:bc:c3:ee:76:4b:f4:37: cc:77:cb:d1:b1:09:0c:e3:11:f4:ff:0f:f5:6c:70: 6c:23:a8:88:bd:b7:72:a7:6f:98:ec:be:88:df:1d: 9b:81:b6:3f:d3:e2:e7:80:f8:a9:06:38:f9:4b:8e: b0:8c:58:52:bb:cc:b2:62:cf:30:f7:49:ec:8d:91: 4a:c6:8a:b8:29:39:7e:92:69:51:2b:9f:bf:95:75: 0e:50:ab:82:de:ef:82:09:9b:ed:4f:a6:ff:63:1a: 1e:16:50:b1:fb:4d:eb:a5:48:77:f0:03:14:7b:b9: 13:cd:de:bb:e4:ea:bc:ad:fd:4c:1c:e6:f0:51:b1: 28:f5:5e:47:d1:3d:dc:35:bc:f9:5d:58:2c:9c:42: c4:65:6d:d2:9e:fa:aa:53:6a:55:7d:8a:72:c6:5d: 5a:c2:24:6e:5a:85:ca:10:71:b1:9c:c0:62:93:ef: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D6:C8:74:1E:DD:4F:D3:CA:1F:66:2E:AE:56:38:C1:03:C8:C9:91 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:22:63:41:f2:f5:a6:c9:15:6c:ca:bd:7b:71:40:6e:85:5d: 9a:4f:f7:60:23:8e:c4:80:ba:75:04:86:f8:05:fc:8e:a7:62: 65:a5:20:07:db:97:a1:56:54:59:cc:45:f6:52:c8:01:bf:a4: 16:f2:6e:9d:1e:a7:56:c1:32:32:98:30:b4:02:ea:d9:09:34: 8b:57:ba:ee:45:8e:53:cc:7c:f3:02:e9:66:61:d5:d2:1c:23: 28:94:6a:ee:f3:0f:2d:da:52:82:1a:d3:ba:f0:ab:51:52:3e: 1f:59:a5:c6:d0:e4:ca:3e:fc:2e:8b:da:0f:8e:7d:06:01:cc: 4f:aa:3e:d2:10:2d:31:1b:77:79:9d:6a:1d:a5:a2:9f:7b:e9: 11:eb:a9:4a:e8:46:52:ee:6e:ff:b2:d9:32:8c:47:89:b9:76: e4:06:bc:a8:1b:72:9a:5f:76:62:3d:04:84:0b:70:72:3d:3e: 65:e7:a0:fc:53:c5:84:ce:ab:2c:95:33:b4:91:b0:9c:91:f8: 12:61:79:9c:1f:75:a1:43:37:a6:33:d6:d1:9f:02:0b:0c:19: 3f:42:1f:61:82:7d:12:ab:8d:09:f5:8c:a5:7c:d1:60:b8:f0: fd:fc:9b:25:21:bd:9c:74:c7:bc:75:9b:a7:d3:26:02:ab:40: e4:76:d3:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh996E7AJERFr3bvwSLR9eiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUwODA2MDYwMDM3WhcNMjUwODA3MDYwMDM3WjAzMTEwLwYDVQQD Eyg2ZWQ2Yzg3NDFlZGQ0ZmQzY2ExZjY2MmVhZTU2MzhjMTAzYzhjOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WIC2oA1T+6D7hLr7gYn/sBjZ6W3 9gvS+gFdcQkFvwGWdXUQXc5i1vKGo+W/l+H3T/tpKTjY2LUTHj/eEmFC+nD7C3FA jqWzDYQKRtUx6pJx87zD7nZL9DfMd8vRsQkM4xH0/w/1bHBsI6iIvbdyp2+Y7L6I 3x2bgbY/0+LngPipBjj5S46wjFhSu8yyYs8w90nsjZFKxoq4KTl+kmlRK5+/lXUO UKuC3u+CCZvtT6b/YxoeFlCx+03rpUh38AMUe7kTzd675Oq8rf1MHObwUbEo9V5H 0T3cNbz5XVgsnELEZW3SnvqqU2pVfYpyxl1awiRuWoXKEHGxnMBik+9dTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7WyHQe3U/Tyh9mLq5WOMEDyMmRMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCJjQfL1 pskVbMq9e3FAboVdmk/3YCOOxIC6dQSG+AX8jqdiZaUgB9uXoVZUWcxF9lLIAb+k FvJunR6nVsEyMpgwtALq2Qk0i1e67kWOU8x88wLpZmHV0hwjKJRq7vMPLdpSghrT uvCrUVI+H1mlxtDkyj78LovaD459BgHMT6o+0hAtMRt3eZ1qHaWin3vpEeupSuhG Uu5u/7LZMoxHibl25Aa8qBtyml92Yj0EhAtwcj0+Zeeg/FPFhM6rLJUztJGwnJH4 EmF5nB91oUM3pjPW0Z8CCwwZP0IfYYJ9EquNCfWMpXzRYLjw/fybJSG9nHTHvHWb p9MmAqtA5HbTng== -----END CERTIFICATE-----Generated at Wed Aug 6 13:08:31 2025 by rpki-client