$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: e2suiJjUFRfIvwpHdRd9A+aW3qeGowonoZPuAQCtAkw= Subject key identifier: 71:50:E1:CE:1C:A7:35:73:55:B9:D4:41:AF:9B:2F:B6:0F:76:12:1F Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 01976929CDA5570C522A1F3CF11671B38F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 0FD7 Signing time: Fri 13 Jun 2025 12:00:36 +0000 Manifest this update: Fri 13 Jun 2025 12:00:36 +0000 Manifest next update: Sat 14 Jun 2025 12:00:36 +0000 Files and hashes: 1: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 2: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 3: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 4: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: ajwFiM7m3IpOxYbvgIzAkehAuGezTL3UX1o3nsLFGWI=) 5: J-jYbkHcU08sfslJpHJcwTM3ehc.roa (hash: jbuWwS0NdmUW31cs0jkODoZKeIDKRJImFm8tQFXzCko=) 6: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 7: TMTNqH9YEtXYXIfhInIhI6hLsNI.roa (hash: 80xDs/QZygHMiOYAgo0ZAMCzMR0y3N9KVQ76eTovdII=) 8: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 9: Vi5NHh9PeiZKSedITFgsgmiPCmI.roa (hash: p7I/BG2g25UPrgXDvJH/MAw3MvHjYcpWdRge+ekzCdI=) 10: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 11: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 12: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 13: iwhh8GSlF2JcI8LIv2St2ufYmZ8.roa (hash: acSdiw8UPrSts52xoexQSZiCm3ONDAs/Am57KnXckbs=) 14: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 15: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:29:cd:a5:57:0c:52:2a:1f:3c:f1:16:71:b3:8f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jun 13 12:00:36 2025 GMT Not After : Jun 14 12:00:36 2025 GMT Subject: CN=7150e1ce1ca7357355b9d441af9b2fb60f76121f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:3f:50:c2:80:2d:3f:95:7c:18:7b:18:d1: 01:52:63:2d:0f:89:2c:19:a8:c8:14:d0:14:d5:ec: 4f:ff:7d:27:92:3a:08:b6:cd:40:0d:f5:60:08:05: 4f:e8:aa:d3:aa:8f:19:31:66:72:2d:98:95:f8:4c: 50:e4:9b:7b:d6:2b:54:92:7a:47:1f:78:68:21:db: 92:f8:ee:70:f9:f3:6c:35:fc:41:54:58:e9:9e:5a: e7:ee:7d:d3:00:31:41:86:7a:2c:11:9f:a1:9e:9c: a8:9e:a7:a8:09:db:56:b0:b5:94:ec:8b:45:85:b2: 0b:7b:2a:72:c8:7a:d8:d4:2f:b3:e7:7c:79:56:aa: aa:b1:de:e8:d8:fd:40:97:f1:b5:68:8e:af:ad:c8: 4a:15:9f:6a:da:8e:b7:08:ec:d5:4b:c1:e2:81:bc: 73:f1:fa:df:59:aa:9f:88:43:cd:ae:a4:53:17:b6: 37:3d:a1:aa:8d:00:cb:d4:ec:23:f4:a9:2d:f4:67: ba:55:ea:99:5e:83:e3:c8:ce:1e:cb:74:f4:16:03: ad:36:17:59:92:19:75:81:c9:d9:4f:c7:7a:67:be: 63:a6:6d:d0:ca:47:f1:a4:31:b7:1c:36:de:3d:3c: 8c:0a:f7:aa:6d:5c:05:81:d3:f5:f8:e1:5f:90:33: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:50:E1:CE:1C:A7:35:73:55:B9:D4:41:AF:9B:2F:B6:0F:76:12:1F X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a2:be:ab:43:65:d0:53:78:57:2b:bc:91:70:d2:10:88:05: 2b:8d:84:ea:9d:a4:71:a4:05:9e:c7:da:1d:0c:b3:1a:33:a1: 6e:c3:4b:e2:04:24:1e:5b:16:6e:7e:33:cc:ed:bf:1e:de:cd: c8:6a:b6:c7:53:ca:28:60:d5:bb:b7:d5:a5:bc:6b:31:d7:1f: cb:32:a7:74:af:a6:c6:ac:82:e6:c0:99:31:07:8f:f5:49:f0: be:50:f6:0d:23:24:b5:ce:2a:01:ef:2b:4b:d8:56:2e:d8:c5: 13:63:16:ec:e1:78:b4:12:2f:a9:85:e4:1a:17:00:7c:e1:73: 20:23:26:b0:81:90:00:48:7f:a7:84:a5:c7:03:65:e4:ee:a7: 96:a9:15:84:c2:20:08:96:42:d2:82:24:6e:b4:3d:4a:f7:be: 00:06:89:b5:2d:cb:4e:0d:bd:05:a7:c2:60:b7:06:27:5f:f9: 75:2c:3f:d3:d3:0f:4d:4d:96:86:e6:e7:27:a0:da:b7:6b:5f: 2a:f0:92:f6:fc:d2:8c:99:b2:5c:7f:7e:a1:11:72:d8:4d:67: 00:7d:e9:ad:24:e1:64:33:da:9d:ae:48:11:05:16:6a:7e:e3: f7:a9:21:9c:58:29:c0:90:f3:c7:fd:d2:13:b4:d5:5a:cc:27: 04:a4:6b:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpKc2lVwxSKh888RZxs48vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUwNjEzMTIwMDM2WhcNMjUwNjE0MTIwMDM2WjAzMTEwLwYDVQQD Eyg3MTUwZTFjZTFjYTczNTczNTViOWQ0NDFhZjliMmZiNjBmNzYxMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhs/UMKALT+VfBh7GNEBUmMtD4ks GajIFNAU1exP/30nkjoIts1ADfVgCAVP6KrTqo8ZMWZyLZiV+ExQ5Jt71itUknpH H3hoIduS+O5w+fNsNfxBVFjpnlrn7n3TADFBhnosEZ+hnpyonqeoCdtWsLWU7ItF hbILeypyyHrY1C+z53x5Vqqqsd7o2P1Al/G1aI6vrchKFZ9q2o63COzVS8Higbxz 8frfWaqfiEPNrqRTF7Y3PaGqjQDL1Owj9Kkt9Ge6VeqZXoPjyM4ey3T0FgOtNhdZ khl1gcnZT8d6Z75jpm3QykfxpDG3HDbePTyMCveqbVwFgdP1+OFfkDPIyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFQ4c4cpzVzVbnUQa+bL7YPdhIfMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6K+q0Nl 0FN4Vyu8kXDSEIgFK42E6p2kcaQFnsfaHQyzGjOhbsNL4gQkHlsWbn4zzO2/Ht7N yGq2x1PKKGDVu7fVpbxrMdcfyzKndK+mxqyC5sCZMQeP9UnwvlD2DSMktc4qAe8r S9hWLtjFE2MW7OF4tBIvqYXkGhcAfOFzICMmsIGQAEh/p4SlxwNl5O6nlqkVhMIg CJZC0oIkbrQ9Sve+AAaJtS3LTg29BafCYLcGJ1/5dSw/09MPTU2WhubnJ6Dat2tf KvCS9vzSjJmyXH9+oRFy2E1nAH3prSThZDPana5IEQUWan7j96khnFgpwJDzx/3S E7TVWswnBKRrOw== -----END CERTIFICATE-----Generated at Fri Jun 13 19:17:17 2025 by rpki-client