$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json) Hash identifier: o0w3WekLsMyAzL4rQ5mAL7XOo+Z5cLOlzsPJ9AvHnI4= Subject key identifier: 98:FF:48:35:8E:49:71:11:78:81:94:97:F1:AA:5E:59:EC:71:F3:FB Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 01988AD767B0D0157385832FCE8DAA2E0A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft Manifest number: 0332 Signing time: Fri 08 Aug 2025 18:00:29 +0000 Manifest this update: Fri 08 Aug 2025 18:00:29 +0000 Manifest next update: Sat 09 Aug 2025 18:00:29 +0000 Files and hashes: 1: 04KCLm--9za3MwjcZovBV5MAsL4.roa (hash: bwrl0NNRWWWbqvvR9nUL3EtLFx6n2S969Soq1XaC/yI=) 2: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=) 3: 1dd8wQbUGZb37ON1wxQRH72QlpI.roa (hash: bzkgiCpTlvvYKlJfhsVQWdWbUhvq97n+YmedrgTC9ug=) 4: 7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa (hash: JBF3Cz4Y9X2mzfXIi45uJ7vNKUzCzYVEwRnol0zS7Q4=) 5: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=) 6: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: OOIltqL8NrJJK3g+jrrrI0HKW9KLESMCtqy+cg5G584=) 7: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (hash: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=) 8: NxOAGrTxofYBFKIpjjp74BEE4ck.roa (hash: czQx6WXfZ8CdpvYil+i0WrvTtgukRGCx1yKLUOoXK04=) 9: Yk2pXWWJv4sGuxcLppogjSmk248.roa (hash: i4LHXRMr0CAiEgBhwaeFhn7uPBNJPB2vLXzYJP+HFUw=) 10: dukRtbUxZBVioJQ3ztIVswrYNNA.roa (hash: UotKdLzjPrXF5MwtzJADmQZtjx5PiQOZaqVsJCIhnRQ=) 11: fk0Xlg-9w-A2loQv9XksmSbPwOY.roa (hash: bL4uRe18zJHwNvTxqiRSt9A3zafbwK9vMP1pK6Mv+QQ=) 12: m7WrmCx6u03mQuCv5HV8jBx9bFo.roa (hash: Ha14BfkFTZRxDnv1SGkvf/k31l7c4G7JUHS2Zmnc08A=) 13: pUDcLqhd8k-OHqhDTMHEWLFxtNI.roa (hash: zmsnQNHG6rnZC/5WP217xaq98ZpVSxzIVkPlWZUUiFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8a:d7:67:b0:d0:15:73:85:83:2f:ce:8d:aa:2e:0a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Aug 8 18:00:29 2025 GMT Not After : Aug 9 18:00:29 2025 GMT Subject: CN=98ff48358e49711178819497f1aa5e59ec71f3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:e8:27:cf:56:6e:8d:97:c7:6b:f3:cf:03: 53:d3:44:ac:02:05:dd:f9:2e:52:89:09:c7:0f:18: ee:ef:d2:38:bc:71:bf:b8:7e:a5:71:7d:82:a6:a8: 26:dd:5e:87:89:9a:f4:36:e6:c9:53:ae:55:28:32: ba:3b:a5:c4:32:7c:cc:bb:e6:87:99:83:9d:74:29: e3:64:dd:c3:99:f6:1e:0f:62:71:99:e1:15:56:02: ad:36:ac:30:92:17:0e:a8:aa:9e:15:e9:d9:50:89: 5e:a3:e5:33:a1:54:10:d5:0f:94:a0:04:a1:48:9b: ab:0e:d5:c2:c0:3f:84:ef:b7:03:c8:e1:70:61:09: 12:7d:50:ab:67:72:ac:5a:15:42:fa:3d:b0:66:7c: b9:82:17:d1:38:0c:f7:e4:4f:48:b4:df:8f:f4:54: cd:6e:21:1f:b1:23:e7:bf:20:74:c5:3b:19:07:df: d0:6b:b9:80:b3:58:00:e9:9b:e3:64:d5:e6:ff:04: c7:78:17:ca:5c:1f:59:a2:f0:1c:4d:c0:26:09:1c: 59:e0:d1:c4:af:9e:74:57:34:4f:4c:d2:96:51:a9: 85:1e:d8:43:d7:fc:dd:59:5c:34:39:5c:10:c5:41: 77:56:01:d6:3c:09:14:e8:f4:b7:b5:6c:03:6f:fb: 73:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FF:48:35:8E:49:71:11:78:81:94:97:F1:AA:5E:59:EC:71:F3:FB X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:10:c9:33:cc:3a:8b:a5:16:4d:34:65:db:aa:b1:32:ec:5c: 4a:d0:83:fe:5e:ce:89:00:e2:23:09:5a:71:ca:f2:c2:3b:ff: 3c:fb:f7:25:a5:63:82:67:27:cc:2b:44:9c:2e:8c:48:88:f4: fd:f4:a4:e9:10:fa:79:0e:2e:95:18:98:d9:0c:f6:7e:e5:9e: 39:4f:3c:17:fa:52:ab:c8:70:da:22:8d:74:b4:49:06:e6:42: a9:65:b2:9c:8d:f2:13:5a:98:b5:b0:2a:8c:81:65:39:5e:32: ea:12:a4:20:17:77:ca:8e:6e:61:e4:9a:79:a7:94:ec:c6:3a: 13:04:0d:01:0b:cd:2f:3e:30:34:c9:03:d9:52:43:d6:e7:a5: b6:f4:af:fa:f1:66:e6:6d:15:60:2a:8b:a8:0f:e3:f4:10:89: 96:7f:17:18:80:06:13:21:e2:de:6c:f0:7f:b4:ef:06:97:8c: 88:71:c9:49:a5:7a:31:7a:3d:f8:95:e5:81:f1:6a:b8:df:53: 50:0f:01:71:d9:95:14:90:0d:2c:41:49:e9:58:49:db:6f:e7: df:54:b1:c0:c9:f2:b8:59:9c:43:3b:ea:c0:93:89:97:cf:63: fd:d8:61:66:81:cd:d8:1c:98:49:fe:0c:40:1f:87:01:77:8a: 6c:57:5c:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiK12ew0BVzhYMvzo2qLgoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjUwODA4MTgwMDI5WhcNMjUwODA5MTgwMDI5WjAzMTEwLwYDVQQD Eyg5OGZmNDgzNThlNDk3MTExNzg4MTk0OTdmMWFhNWU1OWVjNzFmM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDHoJ89Wbo2Xx2vzzwNT00SsAgXd +S5SiQnHDxju79I4vHG/uH6lcX2Cpqgm3V6HiZr0NubJU65VKDK6O6XEMnzMu+aH mYOddCnjZN3DmfYeD2JxmeEVVgKtNqwwkhcOqKqeFenZUIleo+UzoVQQ1Q+UoASh SJurDtXCwD+E77cDyOFwYQkSfVCrZ3KsWhVC+j2wZny5ghfROAz35E9ItN+P9FTN biEfsSPnvyB0xTsZB9/Qa7mAs1gA6ZvjZNXm/wTHeBfKXB9ZovAcTcAmCRxZ4NHE r550VzRPTNKWUamFHthD1/zdWVw0OVwQxUF3VgHWPAkU6PS3tWwDb/tzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJj/SDWOSXEReIGUl/GqXlnscfP7MB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBDJM8w6 i6UWTTRl26qxMuxcStCD/l7OiQDiIwlaccrywjv/PPv3JaVjgmcnzCtEnC6MSIj0 /fSk6RD6eQ4ulRiY2Qz2fuWeOU88F/pSq8hw2iKNdLRJBuZCqWWynI3yE1qYtbAq jIFlOV4y6hKkIBd3yo5uYeSaeaeU7MY6EwQNAQvNLz4wNMkD2VJD1ueltvSv+vFm 5m0VYCqLqA/j9BCJln8XGIAGEyHi3mzwf7TvBpeMiHHJSaV6MXo9+JXlgfFquN9T UA8BcdmVFJANLEFJ6VhJ22/n31SxwMnyuFmcQzvqwJOJl89j/dhhZoHN2ByYSf4M QB+HAXeKbFdcpQ== -----END CERTIFICATE-----Generated at Fri Aug 8 20:41:08 2025 by rpki-client