$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: By6O9mgfgPyX3pdvNAWEgeTQ32mtOe5HgPhP8+RbFCk= Subject key identifier: 7E:07:E8:42:7C:38:9C:2B:44:2E:9B:1B:90:3D:DB:E4:59:4F:F2:4E Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 01987418ABF7901FD4E9EC68E18C6D0B8F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 16C4 Signing time: Mon 04 Aug 2025 08:00:30 +0000 Manifest this update: Mon 04 Aug 2025 08:00:30 +0000 Manifest next update: Tue 05 Aug 2025 08:00:30 +0000 Files and hashes: 1: 3HemvcGpa10fkEZgb6Z-o4k7Y3I.roa (hash: a1XCZrNTfqU9TQWTJM+VI0BWa7g1babTnrZlikC2mRA=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RJwe2BfOH2L8b2xvYWAb7A5I8YI.roa (hash: Ua7R/78tPOt1hUU0nncJ70Fr//DWyVNm+5rSWWhtzSo=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=) 7: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: Qq7YlvfR2iaYjSTjHhB18CvrnHfC02fg5YPboo+50iw=) 9: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=) 10: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 11: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:18:ab:f7:90:1f:d4:e9:ec:68:e1:8c:6d:0b:8f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Aug 4 08:00:30 2025 GMT Not After : Aug 5 08:00:30 2025 GMT Subject: CN=7e07e8427c389c2b442e9b1b903ddbe4594ff24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:0c:97:0a:54:1a:94:6a:f0:1a:40:79:ef: 3f:15:7d:b8:13:8b:31:1c:6e:7c:af:99:b3:15:8b: 96:75:eb:fa:c0:16:ec:0a:f0:99:9a:3d:7d:0a:9e: fc:41:9a:26:3a:c5:ec:d8:37:f2:9c:22:02:82:45: 97:d6:ad:5e:1f:15:f7:33:3f:2b:75:69:d5:70:0b: 10:1d:10:7f:fe:2e:9f:a7:7b:bd:09:28:82:ae:8f: 9d:4e:60:18:71:fe:f9:31:59:fb:57:65:7a:7c:7f: f6:09:96:cd:9c:b9:21:11:77:b0:16:87:10:2e:b8: fa:be:fe:b1:60:08:38:c8:30:e9:0e:76:c5:6c:a2: 7f:e9:90:34:33:c6:ca:ac:40:1f:07:bf:bb:02:ff: 0d:95:36:a2:97:a0:0d:c8:a1:95:c3:e8:44:9c:23: a7:37:1e:8b:50:c6:a4:78:a9:4d:ef:29:ba:3f:20: ef:b8:5f:b3:17:1b:b7:93:87:b3:e3:b0:b5:e5:e0: f0:67:57:33:03:0a:4b:a1:a7:41:bb:28:4f:2c:a9: 08:60:08:b4:a6:34:f9:4f:36:18:0a:a9:84:14:d2: 5d:f2:e7:2c:0d:8e:bd:2c:9f:3a:b5:ad:0a:59:79: e2:cf:2a:b1:4d:48:6b:3f:d7:e4:6d:76:68:b8:e3: 27:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:07:E8:42:7C:38:9C:2B:44:2E:9B:1B:90:3D:DB:E4:59:4F:F2:4E X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:be:46:33:25:a0:3f:48:09:37:8d:e1:69:fd:07:b0:55:a4: d0:c7:16:05:55:88:80:9c:20:af:80:19:10:fd:2d:dc:b1:ff: a7:bc:a3:fb:cb:97:08:08:2a:d4:f3:ce:30:de:3a:00:36:02: 5c:9c:36:54:de:8c:58:bf:c6:d7:d9:b7:ac:47:09:e8:84:4c: b1:f4:03:d8:11:87:8c:54:6a:41:c1:05:09:7c:8b:e5:41:3c: 08:18:48:85:1e:2d:e6:ce:58:bd:e6:fc:6c:c5:7c:d6:11:13: 1f:b3:46:90:5f:40:6f:d4:dc:15:f0:3e:e5:af:79:22:43:6e: 68:ed:a2:a9:c3:5a:1d:48:fc:33:89:f4:b2:00:84:1b:58:88: 87:c0:0a:6d:b6:8f:9a:60:35:5e:7f:9f:fc:d5:04:06:e9:f2: f6:97:84:ee:66:47:0f:4b:f6:e2:b7:45:01:37:e5:54:01:1f: c6:da:2b:88:98:7b:02:13:30:96:70:42:48:86:68:0f:40:7a: 6c:ca:72:75:28:a3:ac:15:d3:83:13:80:d1:82:b4:22:1e:84: be:77:45:d2:31:2d:a1:fa:d7:ba:de:60:7a:1a:0f:b0:d9:28: de:6c:33:70:1f:e9:64:e4:05:b8:e4:2e:53:80:ef:29:af:18: 7c:00:b6:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0GKv3kB/U6exo4YxtC49LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUwODA0MDgwMDMwWhcNMjUwODA1MDgwMDMwWjAzMTEwLwYDVQQD Eyg3ZTA3ZTg0MjdjMzg5YzJiNDQyZTliMWI5MDNkZGJlNDU5NGZmMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU0MlwpUGpRq8BpAee8/FX24E4sx HG58r5mzFYuWdev6wBbsCvCZmj19Cp78QZomOsXs2DfynCICgkWX1q1eHxX3Mz8r dWnVcAsQHRB//i6fp3u9CSiCro+dTmAYcf75MVn7V2V6fH/2CZbNnLkhEXewFocQ Lrj6vv6xYAg4yDDpDnbFbKJ/6ZA0M8bKrEAfB7+7Av8NlTail6ANyKGVw+hEnCOn Nx6LUMakeKlN7ym6PyDvuF+zFxu3k4ez47C15eDwZ1czAwpLoadBuyhPLKkIYAi0 pjT5TzYYCqmEFNJd8ucsDY69LJ86ta0KWXnizyqxTUhrP9fkbXZouOMnBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4H6EJ8OJwrRC6bG5A92+RZT/JOMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeL5GMyWg P0gJN43haf0HsFWk0McWBVWIgJwgr4AZEP0t3LH/p7yj+8uXCAgq1PPOMN46ADYC XJw2VN6MWL/G19m3rEcJ6IRMsfQD2BGHjFRqQcEFCXyL5UE8CBhIhR4t5s5Yveb8 bMV81hETH7NGkF9Ab9TcFfA+5a95IkNuaO2iqcNaHUj8M4n0sgCEG1iIh8AKbbaP mmA1Xn+f/NUEBuny9peE7mZHD0v24rdFATflVAEfxtoriJh7AhMwlnBCSIZoD0B6 bMpydSijrBXTgxOA0YK0Ih6EvndF0jEtofrXut5gehoPsNko3mwzcB/pZOQFuOQu U4DvKa8YfAC2kQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:44 2025 by rpki-client