$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: MSuaz2q1KX4AQw9w3/VD59MO0VYYYnhXkiBWwRumKx0= Subject key identifier: 5E:11:38:C1:FB:4A:62:47:56:9D:78:BB:66:E9:C4:D6:EC:7D:B4:5E Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019776E64CA4960E3C5D3D269697C235671C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 15B1 Signing time: Mon 16 Jun 2025 04:01:33 +0000 Manifest this update: Mon 16 Jun 2025 04:01:33 +0000 Manifest next update: Tue 17 Jun 2025 04:01:33 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: IzHPxmJiqF3yRc86kn8zn16Ljb02OF77X6ESzwJ/QLA=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:76:e6:4c:a4:96:0e:3c:5d:3d:26:96:97:c2:35:67:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jun 16 04:01:33 2025 GMT Not After : Jun 17 04:01:33 2025 GMT Subject: CN=5e1138c1fb4a6247569d78bb66e9c4d6ec7db45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:b9:fa:b5:a3:cf:9e:f3:b9:c9:90:26:2b: b4:9e:46:2c:3b:a1:dd:3b:aa:a3:fc:77:e9:dc:c4: 46:ea:26:b5:ab:ff:2d:d5:d5:9e:36:44:34:d7:69: f8:17:79:d3:fe:2e:9a:11:31:83:64:13:4d:38:00: 61:32:84:db:0f:8a:92:8b:59:0f:9a:f7:d9:8f:9e: b6:ee:80:61:4f:bf:4c:54:4f:c3:b6:84:0e:9f:99: 51:07:13:da:77:4b:fd:e5:f8:28:08:f2:e2:2a:61: 1b:05:ec:31:43:3b:c7:30:03:82:78:3d:3f:14:82: 86:e6:a1:d2:47:bb:bc:78:80:56:2d:5c:3b:a7:12: 30:90:cb:16:76:7f:94:2b:8c:4f:d1:0c:d5:c7:42: 9a:f2:a4:02:6c:35:37:62:2b:23:43:42:5e:dd:cb: cd:db:81:2b:94:c2:06:05:b7:56:c1:7d:2a:de:1f: 10:20:eb:30:a6:66:d2:0c:19:c4:1a:ad:a4:1f:ff: 36:3d:68:93:5c:e0:7c:d2:f7:7a:60:02:ae:38:6c: e0:9f:d7:d0:d1:e0:eb:7d:cd:37:d1:20:a6:d1:9f: 3b:73:58:ea:f6:cf:2f:82:59:81:80:35:64:f0:5b: cb:64:3f:69:40:6f:91:26:91:04:b4:07:a3:d7:c0: e6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:11:38:C1:FB:4A:62:47:56:9D:78:BB:66:E9:C4:D6:EC:7D:B4:5E X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9c:33:b7:c8:fe:3a:6a:90:35:e2:fe:4e:32:13:0c:45:59: 57:ec:cd:2c:7c:d4:5b:54:a7:a7:f5:36:2f:4f:ea:46:83:49: bd:07:7a:da:27:e6:22:01:21:9c:b8:b7:ac:e3:12:25:86:ec: 72:ef:f6:11:3b:46:66:4b:ff:64:e0:83:fc:0d:55:c0:4d:3b: 70:f9:ba:38:6e:c1:5c:a9:20:bb:43:77:17:9e:e4:6b:08:10: 92:b5:36:85:60:77:da:d0:90:06:7b:8c:d6:81:0b:c9:b7:60: 08:ef:c0:0d:3b:17:d1:e5:03:74:44:9f:30:43:ba:34:49:8a: 20:a7:c2:86:37:22:9a:b3:20:a9:b6:fc:c6:58:57:17:64:24: d7:1d:86:25:4a:de:1d:83:9d:4a:30:c7:30:21:59:47:4b:96: 76:e1:c4:02:85:c2:fb:57:61:1f:7d:12:1e:cd:3a:4f:ef:76: a3:11:71:b5:8f:0d:e1:07:2e:09:c0:34:a5:1f:f4:8c:fa:bb: 44:e0:8d:5b:89:e7:f1:9e:4a:30:40:e8:b5:3f:80:32:9a:3f: 34:a6:ec:11:be:2d:53:6f:50:3f:cb:6a:12:e0:64:dd:3a:0a: 7d:9e:09:a5:fa:66:87:04:9e:28:a9:89:65:3b:ba:3b:96:5b: 6d:f3:b8:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd25kyklg48XT0mlpfCNWccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUwNjE2MDQwMTMzWhcNMjUwNjE3MDQwMTMzWjAzMTEwLwYDVQQD Eyg1ZTExMzhjMWZiNGE2MjQ3NTY5ZDc4YmI2NmU5YzRkNmVjN2RiNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxS5+rWjz57zucmQJiu0nkYsO6Hd O6qj/Hfp3MRG6ia1q/8t1dWeNkQ012n4F3nT/i6aETGDZBNNOABhMoTbD4qSi1kP mvfZj5627oBhT79MVE/DtoQOn5lRBxPad0v95fgoCPLiKmEbBewxQzvHMAOCeD0/ FIKG5qHSR7u8eIBWLVw7pxIwkMsWdn+UK4xP0QzVx0Ka8qQCbDU3YisjQ0Je3cvN 24ErlMIGBbdWwX0q3h8QIOswpmbSDBnEGq2kH/82PWiTXOB80vd6YAKuOGzgn9fQ 0eDrfc030SCm0Z87c1jq9s8vglmBgDVk8FvLZD9pQG+RJpEEtAej18DmpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4ROMH7SmJHVp14u2bpxNbsfbReMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5wzt8j+ OmqQNeL+TjITDEVZV+zNLHzUW1Snp/U2L0/qRoNJvQd62ifmIgEhnLi3rOMSJYbs cu/2ETtGZkv/ZOCD/A1VwE07cPm6OG7BXKkgu0N3F57kawgQkrU2hWB32tCQBnuM 1oELybdgCO/ADTsX0eUDdESfMEO6NEmKIKfChjcimrMgqbb8xlhXF2Qk1x2GJUre HYOdSjDHMCFZR0uWduHEAoXC+1dhH30SHs06T+92oxFxtY8N4QcuCcA0pR/0jPq7 ROCNW4nn8Z5KMEDotT+AMpo/NKbsEb4tU29QP8tqEuBk3ToKfZ4JpfpmhwSeKKmJ ZTu6O5ZbbfO4Cg== -----END CERTIFICATE-----Generated at Mon Jun 16 11:16:57 2025 by rpki-client