$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: U6LkaYNMUy2i2rGq3y5jzqOnUCVFzBPQIiHpv8/QJOw= Subject key identifier: 34:D3:A9:CE:D2:5E:2A:FC:35:A8:D1:94:C0:06:08:89:5E:54:E2:7E Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 01987F0A8659145857626F156A2CE58DF92E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 138A Signing time: Wed 06 Aug 2025 11:00:52 +0000 Manifest this update: Wed 06 Aug 2025 11:00:52 +0000 Manifest next update: Thu 07 Aug 2025 11:00:52 +0000 Files and hashes: 1: 2CMmm-IO3y31CC1PnY_uGGrhn9w.roa (hash: 4X4+4X/uOYbuErCckaKak0v4fA7/5gtq1a9L2A4Lw/g=) 2: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=) 3: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=) 4: 8ZC0k7rzA0E1rhNje27CVkEZJ3k.roa (hash: A0opDIEQI4MN92tRbOLHdM7zZc/0nBThej01ve87lSE=) 5: CGtvlVAjeOKgmOegCwgkAU5viUg.roa (hash: tYOH0itDmxfLkiehctgBZN5JIUldgyHwoFbKsMtsM8Q=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: iJJs+xDhpYeFmNHnpvZRXPY6Lt2S7WDgL8cQRQR4UU4=) 7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=) 8: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=) 9: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=) 10: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=) 11: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=) 12: mX1m4UQyXXwpGD0jqQb_y8LC8FI.roa (hash: rM0m6jdxRtvhd5JgDnoJoekO12B/OCdpvQvQXsOMtes=) 13: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=) 14: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=) 15: xs8kgLY-61uyKfGESALykLk9Pj0.roa (hash: uV1wjICOu9X1DokywqYjnW+r/mANbpnz+9BPI0bQ5c8=) 16: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=) 17: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7f:0a:86:59:14:58:57:62:6f:15:6a:2c:e5:8d:f9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Aug 6 11:00:52 2025 GMT Not After : Aug 7 11:00:52 2025 GMT Subject: CN=34d3a9ced25e2afc35a8d194c00608895e54e27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c2:6c:4c:c9:f2:3d:f9:fa:e7:5b:1d:11:db: 3e:8f:5f:81:f5:49:c5:6a:9a:05:39:9e:8c:25:bf: 93:44:64:12:ca:a4:ed:12:1c:cf:db:15:3e:91:e8: 6f:04:51:f5:53:80:64:31:5d:cb:64:d1:19:0a:de: c5:d9:9d:01:80:5e:4f:80:49:82:89:ea:55:30:47: f0:b5:f9:9d:31:2a:0b:3d:43:8c:35:f0:ae:ef:88: 26:e6:2d:03:c3:33:94:41:3d:6c:3e:35:71:35:6a: eb:73:14:8b:14:16:54:fd:5b:e7:38:08:05:53:f0: cd:04:95:a6:f5:89:2b:fd:d6:73:66:bf:5f:d9:2c: 29:c6:2f:10:37:bb:d1:97:2b:18:01:d0:fd:ad:fa: c1:20:64:c7:c8:23:7e:a2:a6:e7:ec:49:73:64:bd: 0d:34:e3:c3:9b:85:49:e8:8f:35:65:1b:3e:68:b2: 11:6e:48:ce:0c:83:de:d7:f9:d5:7a:ef:68:bf:d7: f7:aa:b2:8c:97:c0:70:09:0e:2c:14:69:1d:a1:24: 1a:13:82:46:ef:8a:73:78:08:e6:b4:3e:9e:d2:e3: 55:b4:90:0a:6e:f8:06:15:17:e4:fa:9e:10:43:50: 6c:71:82:66:c7:96:73:9a:ac:4f:73:2f:d7:22:ef: 38:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D3:A9:CE:D2:5E:2A:FC:35:A8:D1:94:C0:06:08:89:5E:54:E2:7E X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e8:28:8a:5d:fd:a2:3d:4a:b4:c0:2e:0f:4b:c2:e1:15:97: 8c:19:5b:cc:44:c4:ca:22:0a:22:48:0b:4a:20:46:ea:a2:a5: 3f:4a:e9:b9:ba:62:71:38:ad:4d:9d:c4:7d:90:90:89:06:7c: 1b:34:5c:6f:e0:3d:55:1b:b0:ae:89:41:38:08:03:ec:0f:d0: 0c:95:9c:dd:8c:bd:1a:91:fe:4a:1f:e8:df:cc:75:bf:11:5b: f6:ae:f7:1c:68:9b:3e:0d:21:2a:29:0d:f3:9f:36:1e:a7:b9: ce:e6:e4:92:d4:d4:53:c1:7b:e3:cf:25:47:33:b8:cd:48:0b: 11:f6:29:19:08:cc:bb:45:ca:d5:e0:05:bb:54:88:26:03:89: 9c:61:26:f8:06:05:8f:d0:e6:c1:34:01:94:47:42:f0:5e:3d: 0d:7d:e2:1b:6e:d6:b0:ea:e5:2d:de:08:cb:01:e1:12:a6:07: d6:f3:41:dc:0e:4e:7d:34:73:2d:93:ee:0d:a8:58:2e:e1:b5: 76:2e:ff:a0:83:43:33:c1:11:c6:3a:7a:b0:74:83:fe:0f:da: e9:b7:d1:6e:4c:bd:a5:37:43:cd:c9:f7:52:80:09:fe:09:c7: 4b:c0:66:09:44:d3:8e:9f:d2:44:5f:ce:bb:08:d9:81:ad:de: b1:22:b6:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh/CoZZFFhXYm8VaizljfkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjUwODA2MTEwMDUyWhcNMjUwODA3MTEwMDUyWjAzMTEwLwYDVQQD EygzNGQzYTljZWQyNWUyYWZjMzVhOGQxOTRjMDA2MDg4OTVlNTRlMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMJsTMnyPfn651sdEds+j1+B9UnF apoFOZ6MJb+TRGQSyqTtEhzP2xU+kehvBFH1U4BkMV3LZNEZCt7F2Z0BgF5PgEmC iepVMEfwtfmdMSoLPUOMNfCu74gm5i0DwzOUQT1sPjVxNWrrcxSLFBZU/VvnOAgF U/DNBJWm9Ykr/dZzZr9f2Swpxi8QN7vRlysYAdD9rfrBIGTHyCN+oqbn7ElzZL0N NOPDm4VJ6I81ZRs+aLIRbkjODIPe1/nVeu9ov9f3qrKMl8BwCQ4sFGkdoSQaE4JG 74pzeAjmtD6e0uNVtJAKbvgGFRfk+p4QQ1BscYJmx5ZzmqxPcy/XIu84PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTTqc7SXir8NajRlMAGCIleVOJ+MB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYugoil39 oj1KtMAuD0vC4RWXjBlbzETEyiIKIkgLSiBG6qKlP0rpubpicTitTZ3EfZCQiQZ8 GzRcb+A9VRuwrolBOAgD7A/QDJWc3Yy9GpH+Sh/o38x1vxFb9q73HGibPg0hKikN 8582Hqe5zubkktTUU8F7488lRzO4zUgLEfYpGQjMu0XK1eAFu1SIJgOJnGEm+AYF j9DmwTQBlEdC8F49DX3iG27WsOrlLd4IywHhEqYH1vNB3A5OfTRzLZPuDahYLuG1 di7/oINDM8ERxjp6sHSD/g/a6bfRbky9pTdDzcn3UoAJ/gnHS8BmCUTTjp/SRF/O uwjZga3esSK2hQ== -----END CERTIFICATE-----Generated at Wed Aug 6 13:18:13 2025 by rpki-client