$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: o0rFOLopKq4NsJelZeo9LLUzchKGvYjZyH+JEyr8fWM= Subject key identifier: D5:1C:5D:B3:2B:FD:36:00:BC:70:6F:14:1C:CD:D0:A5:92:A9:9A:7A Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019A4EF53B65F8E94C820BCBCFA0608EC807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 1161 Signing time: Tue 04 Nov 2025 13:01:25 +0000 Manifest this update: Tue 04 Nov 2025 13:01:25 +0000 Manifest next update: Wed 05 Nov 2025 13:01:25 +0000 Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=) 2: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 3: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 4: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: NmT7yHG4dbHwZNNfSmkaXsKXEuL7s4ba0GKduQ+VZn8=) 6: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=) 7: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 8: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=) 9: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=) 10: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 11: VQdBddpukAmJt5hMDo3MH_s40gY.roa (hash: Ye0y1BoPENu4y2+F2w73JV34dGGP4dVDpycXyq9GQwY=) 12: XIaayusDHQd-T-OQnZeJmKeMqGM.roa (hash: 4YgriKRQoCnrntt03LwL2mbgR+kxZCmjlyyQb3gT+ZE=) 13: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 14: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 15: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 16: mvKNPFMV6qBSG3SFSM4qWTU0PTM.roa (hash: 0KVXMDqCW8pJ5nUQOv8p5VWslPhCTBVdym4Cj/bx29s=) 17: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 18: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f5:3b:65:f8:e9:4c:82:0b:cb:cf:a0:60:8e:c8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Nov 4 13:01:25 2025 GMT Not After : Nov 5 13:01:25 2025 GMT Subject: CN=d51c5db32bfd3600bc706f141ccdd0a592a99a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:c5:69:00:3c:73:fa:6b:29:80:04:39:ed: 65:3a:bf:f0:2e:9b:ea:4b:98:82:22:75:9d:67:97: 0c:0e:21:69:cb:dd:45:5f:f4:49:d5:d0:85:06:f1: 42:b3:ac:c1:54:1b:04:f5:b1:65:b1:3e:1e:5d:07: 24:e8:16:cf:9e:e7:4f:fa:c4:a0:ff:52:ab:4a:c0: 48:ad:32:3c:92:f2:08:78:59:39:2b:01:78:31:e8: e6:6c:8e:b4:d9:f3:41:c9:26:c9:d7:0b:e2:55:96: d8:32:11:ea:50:49:81:82:9a:0f:fa:ef:24:25:f3: 41:6d:45:10:27:2b:63:4d:9b:48:5a:5b:92:54:47: 57:65:27:a4:3a:72:af:90:e9:ca:d8:8e:81:0e:9c: f7:7a:68:56:97:aa:1d:34:4e:0e:d5:10:dd:a3:ab: 57:db:cb:ec:fb:2e:79:67:38:5e:0f:55:85:55:0b: 88:53:cb:4c:a1:ca:63:dc:1c:c7:cf:7c:5e:1e:9c: 68:e1:14:6f:8e:2b:b2:92:23:fb:be:cb:7e:c2:4a: 92:fc:83:b4:60:55:4b:77:2a:c2:9f:b6:5b:fb:65: 70:ba:09:24:29:0a:40:84:4d:af:23:cc:d7:d7:f4: a3:bd:fa:7a:c3:97:31:cc:e9:2f:cb:53:93:bf:0c: 95:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:5D:B3:2B:FD:36:00:BC:70:6F:14:1C:CD:D0:A5:92:A9:9A:7A X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:92:18:95:d7:7f:a2:2b:e3:06:aa:a1:26:ff:7e:a9:3d:2f: 1b:8b:2a:ac:7b:60:a3:0d:db:bd:3f:78:86:12:b0:fc:ce:ce: e3:d1:c2:12:5e:cf:0f:a0:48:5e:ab:fd:5c:44:59:eb:19:29: b7:1a:88:8a:57:17:67:d0:5d:c3:53:d6:a6:27:1a:34:35:8a: 7a:8d:7f:21:95:a8:6a:ad:7b:46:a7:30:6d:a1:72:05:1e:58: 0f:39:e4:8b:0b:59:fd:fc:ef:33:0d:2a:6a:24:a3:f1:39:ed: 42:6a:32:0c:b7:b7:3a:9f:2e:29:a2:25:cc:c5:fc:d3:a3:51: 65:98:d9:83:e8:11:38:c0:ca:18:9c:f3:0d:d8:08:02:d7:8b: cc:9d:48:47:31:7b:a4:a4:2f:f0:8c:0c:a0:4a:95:f2:e2:2d: bd:58:15:f0:29:99:e9:1e:b3:b0:16:2a:4d:45:ea:da:5d:07: 9e:2c:fa:28:23:0c:6b:ec:22:4a:70:2a:a2:cc:36:4a:09:7e: 34:4b:3b:f8:a3:ab:75:fd:dd:dd:85:21:10:3f:3c:ee:20:f6: d1:6e:a1:12:da:45:61:4d:53:e3:95:ab:bd:eb:cd:73:6a:60: a2:61:21:81:91:b3:29:d5:e1:a4:ea:c9:a4:5a:3d:4b:1e:f4: 4d:a8:54:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9Ttl+OlMggvLz6BgjsgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUxMTA0MTMwMTI1WhcNMjUxMTA1MTMwMTI1WjAzMTEwLwYDVQQD EyhkNTFjNWRiMzJiZmQzNjAwYmM3MDZmMTQxY2NkZDBhNTkyYTk5YTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5LFaQA8c/prKYAEOe1lOr/wLpvq S5iCInWdZ5cMDiFpy91FX/RJ1dCFBvFCs6zBVBsE9bFlsT4eXQck6BbPnudP+sSg /1KrSsBIrTI8kvIIeFk5KwF4MejmbI602fNBySbJ1wviVZbYMhHqUEmBgpoP+u8k JfNBbUUQJytjTZtIWluSVEdXZSekOnKvkOnK2I6BDpz3emhWl6odNE4O1RDdo6tX 28vs+y55ZzheD1WFVQuIU8tMocpj3BzHz3xeHpxo4RRvjiuykiP7vst+wkqS/IO0 YFVLdyrCn7Zb+2VwugkkKQpAhE2vI8zX1/Sjvfp6w5cxzOkvy1OTvwyVZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUcXbMr/TYAvHBvFBzN0KWSqZp6MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJIYldd/ oivjBqqhJv9+qT0vG4sqrHtgow3bvT94hhKw/M7O49HCEl7PD6BIXqv9XERZ6xkp txqIilcXZ9Bdw1PWpicaNDWKeo1/IZWoaq17RqcwbaFyBR5YDznkiwtZ/fzvMw0q aiSj8TntQmoyDLe3Op8uKaIlzMX806NRZZjZg+gROMDKGJzzDdgIAteLzJ1IRzF7 pKQv8IwMoEqV8uItvVgV8CmZ6R6zsBYqTUXq2l0Hniz6KCMMa+wiSnAqosw2Sgl+ NEs7+KOrdf3d3YUhED887iD20W6hEtpFYU1T45WrvevNc2pgomEhgZGzKdXhpOrJ pFo9Sx70TahUsQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:55:10 2025 by rpki-client