$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft File: hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json) Hash identifier: fj8Edt/xzhfEg2EZWlCCLkogPxZwekEv8vuzMFFB+xo= Subject key identifier: E9:A5:FB:2F:ED:6F:D1:7E:F7:CD:97:80:A3:E9:D7:DB:40:6F:7C:3F Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 01976997862AA63CFBE53421178FFAC161FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft Manifest number: 0DE4 Signing time: Fri 13 Jun 2025 14:00:27 +0000 Manifest this update: Fri 13 Jun 2025 14:00:27 +0000 Manifest next update: Sat 14 Jun 2025 14:00:27 +0000 Files and hashes: 1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=) 2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=) 3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=) 4: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=) 5: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=) 6: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=) 7: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=) 8: ERVdycpY4bKVWQxSzavqyLO77UA.roa (hash: KjnUBMfnbY2dTYCqn8dXExC2kP5qWbontZX2wFEns5A=) 9: FMoS-o9DiVgUmecx3SfvDXEo6xw.roa (hash: 1UzCsZkjWYFE709BjoGlEdeWX/dMS9WtM2S2yyY1T4U=) 10: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=) 11: Gb0UHBAB0Dc0hCzGDJbXXC0YxPA.roa (hash: 7raBqAGSGU7xoGR3vt8m25hhNoG1Gw7C5q3QDR2lkQw=) 12: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=) 13: Hld29G1DWYar_V03vvNEEAXl32I.roa (hash: g5H45h/y6fGU8XE9r1rX3k8z88V8C5urUpMK18n0TuA=) 14: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=) 15: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=) 16: LyVym4UPK98Ng-1a9OLHRZHLRmw.roa (hash: /EWVi2VWVGQ7yEZI1vDOB6bTXscAFP3frjxwug5o7DE=) 17: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=) 18: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=) 19: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=) 20: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=) 21: WcNfc2ebH1nabssdIAaljgMAMvI.roa (hash: gIeR1+oo2boP6Zw5hratvRw93AbF/Ul3dA94pgz+zkM=) 22: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=) 23: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=) 24: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=) 25: d0u-ehuUqLrY5tyibnzgkeCwZXc.roa (hash: 0qBz5naJyINGxrtms8qZ9KJTRQQ0DHsskm0N3y0uv2g=) 26: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: TDuTD4Uy8LjUdLAyds3RM1mulwW7LqA1v08kwzx2KLc=) 27: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=) 28: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=) 29: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=) 30: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=) 31: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=) 32: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=) 33: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=) 34: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=) 35: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=) 36: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 13:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:69:97:86:2a:a6:3c:fb:e5:34:21:17:8f:fa:c1:61:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jun 13 14:00:27 2025 GMT Not After : Jun 14 14:00:27 2025 GMT Subject: CN=e9a5fb2fed6fd17ef7cd9780a3e9d7db406f7c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3b:30:47:ab:45:67:2e:54:54:d7:d9:35:18: 48:c9:47:51:88:84:b9:ec:37:b4:bc:75:7c:07:7b: fd:b3:31:d9:7f:18:23:a4:10:b3:26:74:07:55:21: b8:d0:b2:5e:a6:2f:14:20:f1:b7:8b:05:2e:af:5e: bb:b6:ea:e3:8c:c6:1d:00:d6:95:e4:94:ec:8c:ab: 6f:e5:ce:a9:b9:09:fa:48:30:84:27:e5:91:26:fd: 04:2f:11:cf:db:20:89:0f:ce:f9:e3:a7:d5:17:34: 8c:c1:d6:fa:54:21:ad:6d:90:fa:69:b4:9b:b7:83: e9:61:76:83:7e:fd:54:22:6e:ce:29:4b:1a:4b:1d: c2:fb:c1:5c:f2:50:48:31:c2:a4:59:c1:2f:aa:95: 3b:73:61:d8:c1:d8:c5:f7:b2:fb:dd:51:d8:ab:8a: fb:ef:94:a7:72:79:25:bb:58:22:3f:0a:5d:d3:ac: 68:3f:69:94:ce:8f:5f:00:87:ac:c9:4e:1b:49:8b: d9:d6:bc:c5:bc:6b:b3:6a:79:dc:98:f6:45:86:3f: 79:71:63:d5:31:64:7f:af:60:4a:d6:2b:52:4c:76: 52:e2:9b:20:e1:be:21:4b:17:a7:09:0e:dc:70:04: 1f:bf:91:a0:5c:68:5a:11:2e:9c:de:d9:67:1a:a3: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A5:FB:2F:ED:6F:D1:7E:F7:CD:97:80:A3:E9:D7:DB:40:6F:7C:3F X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a6:d2:f9:25:ed:dd:4e:cf:6e:4b:92:a0:f3:75:07:c7:53: f0:5f:e2:09:08:14:da:22:b9:c3:5e:0e:32:67:d7:15:ce:4b: 28:44:51:5b:94:a8:cd:88:85:5d:05:d5:6a:71:1e:c4:ba:d9: d2:b4:50:98:72:71:27:14:6a:d9:da:0b:d8:08:98:41:bd:76: eb:c1:7f:c8:e3:e0:fb:3f:e0:22:80:2c:66:fd:3d:1c:1c:89: 9c:89:f9:e8:f3:00:65:f0:5d:3b:e8:dd:a6:63:7a:0a:2b:02: 11:77:9b:4e:4c:e4:f1:a8:79:1c:d6:30:3c:7c:e7:77:09:6c: 9d:30:37:63:6f:96:92:8e:46:90:cc:bc:fe:53:b0:76:0e:39: 3d:da:7f:67:77:c0:80:24:fa:3e:b2:de:7f:88:ce:02:86:97: 59:3a:19:82:d9:b8:40:f4:31:23:98:16:57:64:33:e1:df:79: 94:05:9c:d4:76:1f:e0:43:4f:0f:24:1c:f2:17:90:b2:d7:5c: 82:38:93:fd:43:83:6b:18:a3:d6:ff:0a:08:a0:09:88:56:e8: 65:3a:06:35:2e:1b:2b:00:92:96:1e:7f:b9:be:c5:3f:78:c9: b9:4f:d9:9d:66:34:4b:57:6f:ba:91:1b:99:fe:02:1b:1b:c6: dd:ed:6c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdpl4Yqpjz75TQhF4/6wWH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUwNjEzMTQwMDI3WhcNMjUwNjE0MTQwMDI3WjAzMTEwLwYDVQQD EyhlOWE1ZmIyZmVkNmZkMTdlZjdjZDk3ODBhM2U5ZDdkYjQwNmY3YzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DswR6tFZy5UVNfZNRhIyUdRiIS5 7De0vHV8B3v9szHZfxgjpBCzJnQHVSG40LJepi8UIPG3iwUur167turjjMYdANaV 5JTsjKtv5c6puQn6SDCEJ+WRJv0ELxHP2yCJD87546fVFzSMwdb6VCGtbZD6abSb t4PpYXaDfv1UIm7OKUsaSx3C+8Fc8lBIMcKkWcEvqpU7c2HYwdjF97L73VHYq4r7 75Sncnklu1giPwpd06xoP2mUzo9fAIesyU4bSYvZ1rzFvGuzanncmPZFhj95cWPV MWR/r2BK1itSTHZS4psg4b4hSxenCQ7ccAQfv5GgXGhaES6c3tlnGqM1CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOml+y/tb9F+982XgKPp19tAb3w/MB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEabS+SXt 3U7PbkuSoPN1B8dT8F/iCQgU2iK5w14OMmfXFc5LKERRW5SozYiFXQXVanEexLrZ 0rRQmHJxJxRq2doL2AiYQb1268F/yOPg+z/gIoAsZv09HByJnIn56PMAZfBdO+jd pmN6CisCEXebTkzk8ah5HNYwPHzndwlsnTA3Y2+Wko5GkMy8/lOwdg45Pdp/Z3fA gCT6PrLef4jOAoaXWToZgtm4QPQxI5gWV2Qz4d95lAWc1HYf4ENPDyQc8heQstdc gjiT/UODaxij1v8KCKAJiFboZToGNS4bKwCSlh5/ub7FP3jJuU/ZnWY0S1dvupEb mf4CGxvG3e1snQ== -----END CERTIFICATE-----Generated at Fri Jun 13 20:05:03 2025 by rpki-client