$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: 8caJTp6DyHDS4F2INBfeMkYFvRALKZ9zp1codFG1nXk= Subject key identifier: BB:59:D2:47:EC:94:37:7C:56:4C:03:46:E2:83:B5:35:52:9E:44:67 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019A4D73D28384BAEE99FA896BE9C3597642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 172A Signing time: Tue 04 Nov 2025 06:00:27 +0000 Manifest this update: Tue 04 Nov 2025 06:00:27 +0000 Manifest next update: Wed 05 Nov 2025 06:00:27 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9-BujRyAiG67GPBXPyZf0-ILLF4.roa (hash: KkFtXt5WRV9VBYy3IBvnda5CkZe910L5RSJzKX/5FFY=) 6: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 7: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: oZlW8xK7pEpLeRhdd9tR9P0UcH1HOicKsDbXzp0OR1w=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:73:d2:83:84:ba:ee:99:fa:89:6b:e9:c3:59:76:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Nov 4 06:00:27 2025 GMT Not After : Nov 5 06:00:27 2025 GMT Subject: CN=bb59d247ec94377c564c0346e283b535529e4467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:00:43:f0:36:c1:00:8c:bd:30:90:64:4d: 47:fc:85:32:d6:97:31:da:0b:ae:65:2c:41:8d:1d: 8d:72:ba:0a:32:0f:47:1b:d8:d1:c4:ee:6c:2c:6f: 0a:41:81:5d:d6:d5:d4:0c:3b:9d:67:81:2b:9a:cf: 0f:0f:9f:63:1f:8c:dd:e6:30:c0:08:f7:a3:2a:67: a0:23:39:0b:08:51:af:0d:78:e7:71:90:2b:83:9a: 30:9b:26:4e:ed:d4:46:82:1e:b5:f3:71:6b:64:5b: d1:6a:72:5d:54:4c:91:5d:3d:9f:cc:ca:a3:24:84: 21:6c:03:73:ed:06:ff:50:d1:53:db:82:0b:1f:1a: cc:2d:c6:67:c4:e0:a1:61:cd:30:1f:5d:e4:89:06: f4:28:b2:81:2b:5a:3d:84:a1:86:dd:0c:71:cf:f4: da:c6:f9:cf:a5:89:b0:10:56:c2:01:28:be:2c:49: 31:2a:2f:bd:17:b3:06:6f:c8:c6:44:7e:b6:66:0e: eb:4c:c5:97:b4:60:65:f1:cd:4b:07:cc:a3:e6:74: e1:ba:13:73:24:5d:73:84:90:0c:0f:91:a9:3c:e8: 61:9a:14:dc:67:6c:1c:95:da:be:c7:e9:de:05:7b: 47:ae:ec:6c:ca:70:a2:15:18:93:35:1d:00:8d:28: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:59:D2:47:EC:94:37:7C:56:4C:03:46:E2:83:B5:35:52:9E:44:67 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:50:cf:ca:26:6d:7e:47:ba:6c:69:ad:ac:ac:5f:82:0e:e1: b0:67:42:99:ce:2b:bc:cf:84:1e:70:84:ba:ee:27:a1:a8:01: 51:41:a4:f9:15:f4:27:4b:0f:07:57:4f:93:31:b3:78:11:6a: 84:22:d1:73:06:ad:21:0d:1c:fe:25:6d:c5:3a:64:b2:03:cb: 7e:86:c5:7e:de:98:e6:45:28:76:bf:1e:d0:19:6c:fa:74:9d: 0e:56:c0:c9:7d:a8:43:57:22:29:28:d9:37:46:33:7c:3f:5e: b3:59:07:81:fb:ae:40:04:4b:11:f2:e1:61:40:41:f5:9e:81: 7d:20:a9:5a:58:b8:d4:37:07:b9:e5:7a:9a:55:cc:7f:a7:cc: b5:ab:67:85:3a:de:b4:24:4b:05:be:4f:1e:d5:8f:3a:43:67: 65:63:cb:ac:2b:56:23:8f:db:34:31:a0:14:ae:30:eb:b2:27: 28:04:91:db:46:a1:6a:ae:c9:b1:c7:7e:5b:29:2a:ff:2b:89: f2:b2:96:96:37:44:5c:62:ca:3f:a1:ae:93:ec:66:70:24:c9: 4a:8a:89:98:e4:bd:d3:32:af:98:49:d8:b3:17:2a:32:a5:32: 61:d9:e1:c1:ba:ee:0d:29:73:f5:c7:29:81:2c:f6:e8:15:7b: 5c:cc:a3:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNc9KDhLrumfqJa+nDWXZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUxMTA0MDYwMDI3WhcNMjUxMTA1MDYwMDI3WjAzMTEwLwYDVQQD EyhiYjU5ZDI0N2VjOTQzNzdjNTY0YzAzNDZlMjgzYjUzNTUyOWU0NDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hYAQ/A2wQCMvTCQZE1H/IUy1pcx 2guuZSxBjR2NcroKMg9HG9jRxO5sLG8KQYFd1tXUDDudZ4Erms8PD59jH4zd5jDA CPejKmegIzkLCFGvDXjncZArg5owmyZO7dRGgh6183FrZFvRanJdVEyRXT2fzMqj JIQhbANz7Qb/UNFT24ILHxrMLcZnxOChYc0wH13kiQb0KLKBK1o9hKGG3Qxxz/Ta xvnPpYmwEFbCASi+LEkxKi+9F7MGb8jGRH62Zg7rTMWXtGBl8c1LB8yj5nThuhNz JF1zhJAMD5GpPOhhmhTcZ2wcldq+x+neBXtHruxsynCiFRiTNR0AjSjY4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtZ0kfslDd8VkwDRuKDtTVSnkRnMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGVDPyiZt fke6bGmtrKxfgg7hsGdCmc4rvM+EHnCEuu4noagBUUGk+RX0J0sPB1dPkzGzeBFq hCLRcwatIQ0c/iVtxTpksgPLfobFft6Y5kUodr8e0Bls+nSdDlbAyX2oQ1ciKSjZ N0YzfD9es1kHgfuuQARLEfLhYUBB9Z6BfSCpWli41DcHueV6mlXMf6fMtatnhTre tCRLBb5PHtWPOkNnZWPLrCtWI4/bNDGgFK4w67InKASR20ahaq7Jscd+Wykq/yuJ 8rKWljdEXGLKP6Guk+xmcCTJSoqJmOS90zKvmEnYsxcqMqUyYdnhwbruDSlz9ccp gSz26BV7XMyjbg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:26:18 2025 by rpki-client