$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: O2hlp94dgMfsaeA9yE/K7zDE+wygEKrBj4apO+tY16o= Subject key identifier: 13:CF:38:98:3C:E4:BC:1D:21:E8:50:7A:DB:DF:5C:EE:F6:C3:DE:EA Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01987CE50516DFA5E3808E07B3D3FA8C473F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1634 Signing time: Wed 06 Aug 2025 01:00:40 +0000 Manifest this update: Wed 06 Aug 2025 01:00:40 +0000 Manifest next update: Thu 07 Aug 2025 01:00:40 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: pwbhBRKlLRDjduNS4Kf0gJ8UA2LdzJ493LQ21/TCQHs=) 7: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 8: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 9: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 10: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 11: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 12: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 13: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 14: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 15: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) 16: thBlz8VmOwFy7VP6rRGU4IAeOPM.roa (hash: j47jyGdIQHFDmGyLmCcj/vCJ4acjKFHJg9XXhEJ2n2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7c:e5:05:16:df:a5:e3:80:8e:07:b3:d3:fa:8c:47:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Aug 6 01:00:40 2025 GMT Not After : Aug 7 01:00:40 2025 GMT Subject: CN=13cf38983ce4bc1d21e8507adbdf5ceef6c3deea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:86:5b:cd:8c:4a:77:94:ae:15:dc:ec:b4: e9:e4:49:43:ea:1f:c1:5c:8c:1b:a3:a1:1c:01:7e: 4b:3a:51:06:b2:9c:bb:0e:d1:f2:e2:82:29:04:cd: f3:c7:f8:d5:2e:17:e0:95:81:4d:d2:fd:c9:ee:32: 87:e8:08:a0:2f:c7:22:d7:e8:13:73:f1:57:a2:21: 0b:bf:3a:94:9a:02:6d:7b:63:6a:cc:cc:db:65:72: 20:bd:0f:b6:a5:e8:75:82:89:44:b1:8d:89:83:4f: 54:9c:3a:e0:be:d6:a4:7e:ee:7b:65:5d:94:f6:a7: dc:fc:dc:f1:2c:f6:48:1a:aa:af:36:70:6e:60:c0: 17:f1:c5:cb:7d:fb:3c:76:3e:a4:e7:a5:43:bf:be: bd:dc:b2:cf:16:64:99:0c:a5:54:06:4d:aa:ed:45: e2:63:c8:b8:71:6c:dd:a4:16:0a:86:ec:b3:e5:c6: 75:82:db:94:bd:63:ee:7a:cb:68:61:bc:8f:8c:82: 3b:fa:d0:de:ce:23:98:13:20:ad:ca:f4:5c:64:c3: 52:4c:f9:00:d0:c4:f5:bf:ed:b4:93:18:c7:ac:a9: 56:89:96:67:63:e2:a2:61:46:41:b0:8b:ac:6a:cc: 89:b1:e7:12:b9:5c:b1:5a:18:15:7b:63:b1:93:2f: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CF:38:98:3C:E4:BC:1D:21:E8:50:7A:DB:DF:5C:EE:F6:C3:DE:EA X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ea:49:b4:d4:36:f8:b4:b1:fe:5a:a8:36:e5:0e:c9:28:01: 7e:5a:b7:cd:79:ba:62:61:00:3a:73:db:15:a0:1b:14:07:7c: dc:38:30:d1:d6:8b:cf:c6:1c:98:42:59:29:cc:fa:65:02:71: 38:48:b0:85:05:8a:2e:ba:76:7a:b0:d3:35:7a:36:74:88:b8: 7e:00:99:10:b2:d1:d5:14:fb:ae:bc:50:16:25:53:3e:c8:9c: a3:8b:26:76:8c:e9:b2:34:97:83:be:ba:1e:ad:d3:94:e4:47: 73:47:ea:ab:5b:de:10:a3:5c:fb:7d:60:20:f5:e3:ad:4a:27: c7:f2:47:e2:5a:a8:79:ce:f3:a4:62:51:b6:06:30:e1:29:65: 69:66:42:2f:76:21:88:7c:38:27:11:5f:87:3d:88:f7:3e:66: 83:74:fe:af:62:72:9d:b7:95:dd:fa:c5:10:a6:9a:e8:79:b1: 6d:b3:55:c0:86:cf:42:f4:cd:7d:36:71:d9:09:6a:b9:04:70: 56:0a:44:85:0d:db:84:60:17:31:f7:ec:2d:f0:c5:77:4d:1a: 30:f7:7b:85:78:4a:d8:07:f1:3f:28:28:87:88:74:7e:8f:86: ec:63:89:e6:21:d1:9c:52:42:43:c3:00:9f:6f:0c:08:ca:d9: 8b:77:fe:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh85QUW36XjgI4Hs9P6jEc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUwODA2MDEwMDQwWhcNMjUwODA3MDEwMDQwWjAzMTEwLwYDVQQD EygxM2NmMzg5ODNjZTRiYzFkMjFlODUwN2FkYmRmNWNlZWY2YzNkZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uyGW82MSneUrhXc7LTp5ElD6h/B XIwbo6EcAX5LOlEGspy7DtHy4oIpBM3zx/jVLhfglYFN0v3J7jKH6AigL8ci1+gT c/FXoiELvzqUmgJte2NqzMzbZXIgvQ+2peh1golEsY2Jg09UnDrgvtakfu57ZV2U 9qfc/NzxLPZIGqqvNnBuYMAX8cXLffs8dj6k56VDv7693LLPFmSZDKVUBk2q7UXi Y8i4cWzdpBYKhuyz5cZ1gtuUvWPuestoYbyPjII7+tDeziOYEyCtyvRcZMNSTPkA 0MT1v+20kxjHrKlWiZZnY+KiYUZBsIusasyJsecSuVyxWhgVe2Oxky9NcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPPOJg85LwdIehQetvfXO72w97qMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARepJtNQ2 +LSx/lqoNuUOySgBflq3zXm6YmEAOnPbFaAbFAd83Dgw0daLz8YcmEJZKcz6ZQJx OEiwhQWKLrp2erDTNXo2dIi4fgCZELLR1RT7rrxQFiVTPsico4smdozpsjSXg766 Hq3TlORHc0fqq1veEKNc+31gIPXjrUonx/JH4lqoec7zpGJRtgYw4SllaWZCL3Yh iHw4JxFfhz2I9z5mg3T+r2JynbeV3frFEKaa6HmxbbNVwIbPQvTNfTZx2QlquQRw VgpEhQ3bhGAXMffsLfDFd00aMPd7hXhK2AfxPygoh4h0fo+G7GOJ5iHRnFJCQ8MA n28MCMrZi3f+sw== -----END CERTIFICATE-----Generated at Wed Aug 6 05:27:34 2025 by rpki-client