$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: G0y6D5JJFNdxfoiyK1ZABWg+5SVezddJDcSBQi4MKi8= Subject key identifier: CF:CD:74:F0:71:3A:DD:A9:17:A5:15:A2:80:7C:A4:56:E7:31:EB:D5 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019873AAD310667F8641649E024DD9A05228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 1068 Signing time: Mon 04 Aug 2025 06:00:31 +0000 Manifest this update: Mon 04 Aug 2025 06:00:31 +0000 Manifest next update: Tue 05 Aug 2025 06:00:31 +0000 Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=) 2: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 3: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 4: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: HJx3lWCJGzJ8JCxpK2WgsY0n2Kt7+jdv2HDu80DClF8=) 6: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=) 7: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 8: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=) 9: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=) 10: SuxaOOlpqoGKQPSHxQ3dVD5wLBI.roa (hash: 09WrQpdYp3rObq3AK12JfoTomDZONhTyiyajVx2t0Zw=) 11: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 12: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 13: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 14: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 15: jSRl8jct3oc9IPAREV9kyCvUEv4.roa (hash: KhKKtOOQncfkvamW5IOeJNFBZWevqaXGFhsyP7C4G9I=) 16: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 17: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:aa:d3:10:66:7f:86:41:64:9e:02:4d:d9:a0:52:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Aug 4 06:00:31 2025 GMT Not After : Aug 5 06:00:31 2025 GMT Subject: CN=cfcd74f0713adda917a515a2807ca456e731ebd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:48:06:4c:3d:03:f9:b9:06:e5:0f:e2:4e: b4:39:e7:ac:1c:de:87:d2:d6:3c:2d:a3:7f:1e:65: 4d:f5:6f:65:63:3a:eb:26:a1:eb:9b:1b:78:fa:55: 0c:57:3c:45:87:4e:54:f3:12:93:21:fc:24:00:d2: 75:2d:5c:17:8b:5c:91:3d:1b:93:e1:46:c1:ec:18: 07:d9:5a:30:d4:97:74:cc:98:f5:5e:15:b4:a0:d2: d0:06:3c:95:a9:fe:29:7f:fe:45:f0:30:54:22:10: f5:28:d1:b7:4b:67:5a:5d:e0:10:e9:9c:a2:91:b2: 0e:39:01:8e:db:45:15:aa:6c:63:ad:a7:32:5c:60: 96:6a:68:d9:83:61:ed:49:bb:73:67:cf:48:9e:c6: aa:a0:d9:1f:44:1b:7d:16:99:b3:fc:2b:7d:23:84: 8e:d9:12:92:be:4b:82:2f:ab:6d:d1:c0:e9:58:d5: bc:1e:a5:e7:61:38:64:71:f3:32:3b:23:9d:08:c4: 97:f4:4a:08:eb:2e:cf:de:b5:9f:9f:d8:18:20:62: 15:33:7f:8a:cc:f0:f0:d0:6b:02:42:f5:bb:9b:e3: 9e:0c:83:d9:13:cb:69:1d:c1:0e:a2:c6:81:83:e6: b7:0c:f2:d9:45:42:64:ae:77:c8:e8:5c:b2:53:75: 24:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:74:F0:71:3A:DD:A9:17:A5:15:A2:80:7C:A4:56:E7:31:EB:D5 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:06:ab:5c:27:61:30:61:f4:81:38:1a:45:1a:7c:9e:f8:f7: 76:df:89:c9:49:49:4f:ff:d5:f9:7b:07:10:a7:1c:da:cb:e2: f2:24:a4:38:2f:0c:73:28:ee:df:14:b7:67:c4:aa:5c:82:a1: 84:bd:83:58:87:cc:f1:fc:2f:f9:73:d2:e6:1a:b4:3f:e1:5b: 78:1d:5a:d2:d7:3f:92:01:8d:0f:36:46:17:59:d6:17:ce:bc: d9:4a:f8:20:37:42:d3:09:6b:27:bc:c5:0b:c1:ce:ac:5c:c7: 3f:23:36:7d:1c:cd:f2:10:37:48:10:63:4e:13:61:f7:92:99: 9e:bf:4c:88:93:5a:f8:da:b5:28:a5:7a:d0:05:6b:7a:3b:43: 36:c5:a1:c1:de:2e:82:d7:7a:45:90:5a:e6:2b:55:0a:77:e2: e0:03:78:e3:01:59:92:f9:aa:93:6f:b8:13:fe:df:9e:0a:9c: 78:d1:4b:0e:2b:f1:7d:c3:ef:75:40:27:03:6a:a5:ae:6b:40: c8:b9:5f:60:14:24:b9:bb:27:e9:4b:31:b5:18:15:34:41:fc: 7d:ef:b6:0b:cf:02:b5:6d:4c:01:86:0a:36:ba:13:10:59:93: fc:c4:d2:bc:5f:96:e0:7e:fc:20:dc:a2:1c:8a:79:49:12:02: 7a:30:11:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzqtMQZn+GQWSeAk3ZoFIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUwODA0MDYwMDMxWhcNMjUwODA1MDYwMDMxWjAzMTEwLwYDVQQD EyhjZmNkNzRmMDcxM2FkZGE5MTdhNTE1YTI4MDdjYTQ1NmU3MzFlYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmVIBkw9A/m5BuUP4k60OeesHN6H 0tY8LaN/HmVN9W9lYzrrJqHrmxt4+lUMVzxFh05U8xKTIfwkANJ1LVwXi1yRPRuT 4UbB7BgH2Vow1Jd0zJj1XhW0oNLQBjyVqf4pf/5F8DBUIhD1KNG3S2daXeAQ6Zyi kbIOOQGO20UVqmxjracyXGCWamjZg2HtSbtzZ89InsaqoNkfRBt9Fpmz/Ct9I4SO 2RKSvkuCL6tt0cDpWNW8HqXnYThkcfMyOyOdCMSX9EoI6y7P3rWfn9gYIGIVM3+K zPDw0GsCQvW7m+OeDIPZE8tpHcEOosaBg+a3DPLZRUJkrnfI6FyyU3UkkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/NdPBxOt2pF6UVooB8pFbnMevVMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwAarXCdh MGH0gTgaRRp8nvj3dt+JyUlJT//V+XsHEKcc2svi8iSkOC8Mcyju3xS3Z8SqXIKh hL2DWIfM8fwv+XPS5hq0P+FbeB1a0tc/kgGNDzZGF1nWF8682Ur4IDdC0wlrJ7zF C8HOrFzHPyM2fRzN8hA3SBBjThNh95KZnr9MiJNa+Nq1KKV60AVrejtDNsWhwd4u gtd6RZBa5itVCnfi4AN44wFZkvmqk2+4E/7fngqceNFLDivxfcPvdUAnA2qlrmtA yLlfYBQkubsn6UsxtRgVNEH8fe+2C88CtW1MAYYKNroTEFmT/MTSvF+W4H78INyi HIp5SRICejARNw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:18:46 2025 by rpki-client