$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: PHQE1YETO2/d5KzeSqcFeL0FmEJo9onT8v1CyFUhF7o= Subject key identifier: 49:D2:23:5F:42:1D:25:D3:65:98:6F:F2:5C:EF:1D:C5:06:20:B7:66 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 01987D1C06A292274F91B73A3D5DD51E0CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 164B Signing time: Wed 06 Aug 2025 02:00:45 +0000 Manifest this update: Wed 06 Aug 2025 02:00:45 +0000 Manifest next update: Thu 07 Aug 2025 02:00:45 +0000 Files and hashes: 1: 02l3UdnmFD8L6C2sS1gUjkB5ucw.roa (hash: QsQsXBqvm2htoInMV6VpVWJWic+91/OE8UWDxR68Vpo=) 2: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (hash: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=) 3: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (hash: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=) 4: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (hash: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=) 5: 9UyjFHy6nxzD4SWi9fZqmvG9X1Y.roa (hash: wwkmXrHk0uvcZv9VezayeMbciMCe2ZyulXrkSdIlpeo=) 6: Clh59qbFk87HB1hStYjpCYPWYPk.roa (hash: SZP/GWHvVT/kBate2YzVVZAZXuTp21FWytFNyzKpByg=) 7: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: 7oWjxO6JU4RTX6BtNG26JuXehrrMueFyyXcXiWjI/Dc=) 8: JK2B_82jU03EjqDV2R4KmzzgN90.roa (hash: k6cki81ODi5YE6T3YQgaBDk5xqz1uKuATDasN4IB5GY=) 9: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (hash: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=) 10: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (hash: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=) 11: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (hash: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=) 12: e1ucky2gtRUWqjh2W_9-FUaDeco.roa (hash: IxT0Rnlu2Pa21xBI3whvhU3j8HT/Mxf3h/l6fQzZTt0=) 13: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (hash: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=) 14: m76dCMrVWf_Z3SQkxAPw_dBRkjE.roa (hash: Ci4tpeEHKHcsYzrGJQHs0JHLKLh/EcoRDa2ngztjU6c=) 15: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (hash: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=) 16: vCflLMx_V986blYmQXbzXttPM6Y.roa (hash: 4AWZ2XlYvyQnfq0suLYmaQ4e3hwFckiYu1Kg5cC3b9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:1c:06:a2:92:27:4f:91:b7:3a:3d:5d:d5:1e:0c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Aug 6 02:00:45 2025 GMT Not After : Aug 7 02:00:45 2025 GMT Subject: CN=49d2235f421d25d365986ff25cef1dc50620b766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:96:c9:65:96:b9:c6:4c:8f:c2:ad:bf:14:f7: c2:1b:11:04:97:b6:80:21:0c:74:99:9f:88:0e:ba: 2c:6b:27:ad:a6:ec:5f:49:7d:26:a4:66:b4:96:5f: 06:84:b4:b8:69:5e:cc:5b:e4:47:00:58:d3:24:45: 87:4f:d1:cc:11:be:ca:52:2c:0f:01:91:3f:50:d6: e5:b5:b4:a2:6a:9c:f1:c0:c1:65:eb:dc:5f:7b:83: 8b:49:7a:ec:0a:18:24:89:27:32:ad:27:24:0a:b4: 2f:0c:5d:48:0b:50:97:d0:8d:a3:c3:f6:5c:04:4e: 5d:1f:f3:88:f7:4d:b8:3c:1c:aa:31:39:e4:ed:85: 85:fa:54:b7:07:ff:04:59:d5:c0:f1:2d:c3:64:e2: cc:48:20:c5:f2:38:ad:8c:4a:60:19:51:c4:1d:79: 69:6e:cb:fa:f3:25:64:6b:aa:ed:5e:99:ef:4f:70: 6a:a7:75:37:99:23:3c:8a:3e:68:a8:9c:61:42:30: 6a:c1:0c:ec:78:66:f3:fc:c7:80:59:79:ff:ea:96: 32:86:3a:9a:bc:74:97:da:73:d6:0d:a6:8c:b5:30: a0:e1:30:66:af:dd:c6:35:66:d4:d3:f2:e0:34:99: 79:20:44:89:d3:e5:36:00:2d:df:1f:78:f3:d2:72: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:23:5F:42:1D:25:D3:65:98:6F:F2:5C:EF:1D:C5:06:20:B7:66 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:82:fd:81:ef:bf:bb:25:ce:23:5d:2b:a5:81:f5:16:ad:00: 26:76:8a:d7:28:62:96:61:3f:c1:7b:82:88:bc:66:cf:b9:dd: 92:2e:37:0c:07:7e:ac:24:01:d6:7b:b0:5b:66:4c:c0:b0:fe: 08:23:06:a8:1a:3c:0e:74:da:52:43:a5:b0:a8:d1:b3:09:d3: ba:93:33:34:c4:a1:9c:d2:42:d3:f4:19:67:71:72:81:df:ba: d7:26:00:71:52:f6:9c:f5:d3:84:03:dd:24:1a:75:9b:28:8c: 30:38:39:26:8c:de:f9:1c:c2:36:cb:70:36:3b:a1:02:68:97: 41:06:90:18:49:91:92:0c:67:c0:d9:34:8f:06:ea:57:1c:26: ac:5d:d0:bb:cd:f8:40:27:2a:d8:10:80:d5:fe:71:06:51:fd: 8a:9d:c2:76:ce:25:67:23:11:51:bd:81:41:f5:55:5f:88:b9: 9e:0c:ff:cb:c5:6b:56:9c:14:d3:eb:54:a4:8a:23:54:be:c7: c6:89:d5:56:9b:0b:0d:85:55:19:a4:6f:b3:33:89:e3:9b:d7: 47:ac:9d:99:16:9b:ef:a7:0f:4c:e7:4f:bf:4c:8d:8b:c6:76: e1:a4:26:00:8a:29:b6:14:45:72:b1:fd:2d:68:ce:18:71:79: e7:64:bd:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9HAaikidPkbc6PV3VHgz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjUwODA2MDIwMDQ1WhcNMjUwODA3MDIwMDQ1WjAzMTEwLwYDVQQD Eyg0OWQyMjM1ZjQyMWQyNWQzNjU5ODZmZjI1Y2VmMWRjNTA2MjBiNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pbJZZa5xkyPwq2/FPfCGxEEl7aA IQx0mZ+IDrosayetpuxfSX0mpGa0ll8GhLS4aV7MW+RHAFjTJEWHT9HMEb7KUiwP AZE/UNbltbSiapzxwMFl69xfe4OLSXrsChgkiScyrSckCrQvDF1IC1CX0I2jw/Zc BE5dH/OI9024PByqMTnk7YWF+lS3B/8EWdXA8S3DZOLMSCDF8jitjEpgGVHEHXlp bsv68yVka6rtXpnvT3Bqp3U3mSM8ij5oqJxhQjBqwQzseGbz/MeAWXn/6pYyhjqa vHSX2nPWDaaMtTCg4TBmr93GNWbU0/LgNJl5IESJ0+U2AC3fH3jz0nIQQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnSI19CHSXTZZhv8lzvHcUGILdmMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIL9ge+/ uyXOI10rpYH1Fq0AJnaK1yhilmE/wXuCiLxmz7ndki43DAd+rCQB1nuwW2ZMwLD+ CCMGqBo8DnTaUkOlsKjRswnTupMzNMShnNJC0/QZZ3Fygd+61yYAcVL2nPXThAPd JBp1myiMMDg5Joze+RzCNstwNjuhAmiXQQaQGEmRkgxnwNk0jwbqVxwmrF3Qu834 QCcq2BCA1f5xBlH9ip3Cds4lZyMRUb2BQfVVX4i5ngz/y8VrVpwU0+tUpIojVL7H xonVVpsLDYVVGaRvszOJ45vXR6ydmRab76cPTOdPv0yNi8Z24aQmAIopthRFcrH9 LWjOGHF552S9NA== -----END CERTIFICATE-----Generated at Wed Aug 6 04:03:21 2025 by rpki-client