$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: ip32zfU5mO0i922dHBqSZGDUiSSB8dlfKrRWGw+0ReA= Subject key identifier: D0:1B:E0:FD:66:70:D8:42:A5:20:95:99:B5:D7:A1:80:E9:A6:26:52 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01976D06CE1952B8239AE3F8247835505BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 15A7 Signing time: Sat 14 Jun 2025 06:00:51 +0000 Manifest this update: Sat 14 Jun 2025 06:00:51 +0000 Manifest next update: Sun 15 Jun 2025 06:00:51 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: x5ucowIngkj7Uaw8YJdXC8DeJYPuGby64VH6c9wpHKI=) 7: Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa (hash: 0jvW11Eh+nanPzwmW1R+ZUtO2i7ehli0d4txf/mUkQE=) 8: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 9: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 10: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 11: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 12: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 13: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 14: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 15: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 16: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:06:ce:19:52:b8:23:9a:e3:f8:24:78:35:50:5b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jun 14 06:00:51 2025 GMT Not After : Jun 15 06:00:51 2025 GMT Subject: CN=d01be0fd6670d842a5209599b5d7a180e9a62652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:f0:ba:d3:2a:50:53:2c:68:1c:09:82:82: 83:d2:c2:63:b1:7a:ef:e5:0c:75:dc:27:73:a4:92: 5c:14:99:85:a5:d1:75:b3:0d:68:39:3d:3a:ba:18: 66:0c:05:b2:91:76:c7:29:7a:c3:f7:1d:d3:ee:f3: e8:79:02:83:00:56:1e:fa:d3:e1:c7:c6:d6:17:d7: e4:5e:3b:49:1c:8e:e2:ae:88:6e:5f:44:d4:72:7c: c3:b8:c2:d6:64:cc:af:ef:b1:21:ba:33:7a:b6:2b: 37:d2:43:37:9a:a6:02:eb:b0:75:c5:05:0e:bc:a5: 70:65:01:93:e6:75:51:a9:99:09:84:e2:b6:e4:32: 10:f0:de:d1:1b:bb:b8:aa:f7:31:c8:b6:00:a8:63: a3:45:9d:63:a8:6c:92:96:65:12:c2:fe:95:90:bc: c5:82:09:7f:8c:ca:75:b0:74:44:22:43:2e:c5:f9: e8:db:bd:1d:e0:89:71:4c:d2:e5:68:17:e6:ae:50: b5:30:c4:99:fe:c1:86:30:28:35:cf:3b:7e:87:26: dc:29:66:1b:c9:21:4f:06:59:b0:9f:78:97:18:34: aa:ac:ec:45:51:06:2f:ec:04:bb:ae:c9:0f:d8:d1: 91:6a:d8:3c:6f:2b:e8:16:21:34:83:0c:c2:03:63: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1B:E0:FD:66:70:D8:42:A5:20:95:99:B5:D7:A1:80:E9:A6:26:52 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:5c:7e:de:7d:e4:3a:a5:87:6e:99:fe:35:77:28:0a:5d:f5: 26:4d:53:ee:cd:7c:35:12:d4:fb:16:86:8d:19:92:2f:51:0f: 11:e3:d0:8d:94:16:1e:5f:9e:27:d6:38:8c:83:8d:1a:80:98: f9:9f:0a:7a:ae:cb:3e:fe:4d:b5:d7:6f:c5:85:f4:18:4d:08: 65:7c:ae:da:90:95:f9:4c:e2:70:01:04:ab:34:ee:ea:f9:2a: 21:d1:da:34:6e:e4:66:56:75:9e:ca:4d:10:d3:1c:6c:ec:c3: ae:52:a3:ba:82:0a:8c:c0:b5:20:47:01:23:96:48:4e:50:06: 12:52:27:1e:8f:ae:f1:55:c7:70:3f:da:63:36:18:cc:74:c2: 9a:77:56:b8:94:d4:3a:68:4a:a1:b2:eb:10:44:b3:5d:96:65: de:58:65:db:74:a3:9f:cd:fc:6f:ce:a1:29:4b:c3:38:71:d6: be:3f:4c:81:2b:b9:b1:53:67:83:86:ec:76:82:1e:4d:1f:0c: b5:c7:8c:b0:35:f3:b6:b9:df:ce:b3:96:14:db:ef:ab:55:8f: d7:5b:fd:0f:22:67:83:f6:55:60:98:69:8c:0d:c5:50:81:d2: 43:a7:29:74:75:f5:be:27:07:53:6c:45:aa:f1:5c:f1:35:13: 70:3c:01:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtBs4ZUrgjmuP4JHg1UFvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUwNjE0MDYwMDUxWhcNMjUwNjE1MDYwMDUxWjAzMTEwLwYDVQQD EyhkMDFiZTBmZDY2NzBkODQyYTUyMDk1OTliNWQ3YTE4MGU5YTYyNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK7wutMqUFMsaBwJgoKD0sJjsXrv 5Qx13CdzpJJcFJmFpdF1sw1oOT06uhhmDAWykXbHKXrD9x3T7vPoeQKDAFYe+tPh x8bWF9fkXjtJHI7irohuX0TUcnzDuMLWZMyv77EhujN6tis30kM3mqYC67B1xQUO vKVwZQGT5nVRqZkJhOK25DIQ8N7RG7u4qvcxyLYAqGOjRZ1jqGySlmUSwv6VkLzF ggl/jMp1sHREIkMuxfno270d4IlxTNLlaBfmrlC1MMSZ/sGGMCg1zzt+hybcKWYb ySFPBlmwn3iXGDSqrOxFUQYv7AS7rskP2NGRatg8byvoFiE0gwzCA2O52wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAb4P1mcNhCpSCVmbXXoYDppiZSMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslx+3n3k OqWHbpn+NXcoCl31Jk1T7s18NRLU+xaGjRmSL1EPEePQjZQWHl+eJ9Y4jIONGoCY +Z8Keq7LPv5NtddvxYX0GE0IZXyu2pCV+UzicAEEqzTu6vkqIdHaNG7kZlZ1nspN ENMcbOzDrlKjuoIKjMC1IEcBI5ZITlAGElInHo+u8VXHcD/aYzYYzHTCmndWuJTU OmhKobLrEESzXZZl3lhl23Sjn838b86hKUvDOHHWvj9MgSu5sVNng4bsdoIeTR8M tceMsDXztrnfzrOWFNvvq1WP11v9DyJng/ZVYJhpjA3FUIHSQ6cpdHX1vicHU2xF qvFc8TUTcDwBng== -----END CERTIFICATE-----Generated at Sat Jun 14 10:00:42 2025 by rpki-client