$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: 2KeMkwDpffACZBON769xN/6T0pmOQ/G9AXJk/ISiu+Q= Subject key identifier: 6E:9A:C5:C2:D5:FC:94:6C:82:5F:69:24:B5:0E:E5:70:57:37:D9:5B Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019875D2283AC852A146BD5CCB7D4163A2EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1635 Signing time: Mon 04 Aug 2025 16:02:43 +0000 Manifest this update: Mon 04 Aug 2025 16:02:43 +0000 Manifest next update: Tue 05 Aug 2025 16:02:43 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: rYCId7x/UjHPGvtlbeS93+lAztJwolKqp2OPVBqH5oA=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:d2:28:3a:c8:52:a1:46:bd:5c:cb:7d:41:63:a2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Aug 4 16:02:43 2025 GMT Not After : Aug 5 16:02:43 2025 GMT Subject: CN=6e9ac5c2d5fc946c825f6924b50ee5705737d95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:17:d6:d4:cc:6f:a3:c3:69:ef:c6:ee:49: 47:08:93:55:b4:f5:a4:8b:f3:6c:0f:8f:fa:fe:5e: d4:bf:cd:a9:d4:87:59:e5:ec:6a:9d:c7:01:2a:20: 32:86:58:5d:12:08:8f:3c:4d:d5:06:34:93:29:ae: cd:64:a1:ec:af:4a:d4:19:1d:d6:9e:a7:08:6c:1c: 06:03:6e:0f:c8:9f:c7:64:39:21:1d:2d:b1:9b:48: fe:c8:ad:c7:39:34:e7:eb:82:47:9e:2d:a2:ee:da: ce:93:f7:c6:4a:58:0a:a0:d0:d0:d1:58:ac:76:0a: 5a:f0:41:2d:b7:23:05:cb:aa:83:b6:4c:64:72:e9: 3f:7d:d0:22:9d:c2:77:0a:3e:fe:30:7f:f8:92:9e: b1:4c:dc:bb:6c:37:6a:61:74:e4:88:ea:10:5f:ee: 95:81:46:61:7a:af:e7:f1:21:b4:de:d3:b3:a3:11: 0b:9d:93:28:af:71:b8:f1:4c:83:3d:9a:33:61:eb: c3:51:d9:d7:49:32:79:5a:32:90:6c:50:83:83:fb: 4c:98:0f:33:6b:fe:2f:5d:b6:14:d9:ae:e0:78:56: 02:e2:d6:3a:6f:f8:29:cc:97:18:e6:01:45:bd:4b: d8:90:5b:ca:78:63:87:74:68:a1:b4:fa:74:32:c4: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9A:C5:C2:D5:FC:94:6C:82:5F:69:24:B5:0E:E5:70:57:37:D9:5B X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8e:e0:79:46:d0:0c:73:14:ab:93:36:48:94:09:ed:32:f1: 8a:f2:72:64:74:7e:1b:bf:fc:36:3f:79:32:c3:79:b1:03:48: e5:79:24:f2:a6:30:9a:4f:1f:0e:80:f3:a4:73:ee:f7:e7:ad: 3b:2c:90:f5:3e:92:11:ab:1b:45:3c:2c:e8:54:87:b4:f2:91: a0:c5:90:d9:da:9f:7a:13:dd:8c:82:12:0c:c3:0b:3d:9b:4a: 4f:14:bd:d7:09:6d:91:c7:6d:7f:b6:f8:c0:dc:ca:56:bd:35: f9:7c:8c:cd:4a:6e:41:82:ed:56:46:05:02:a1:f2:d6:ec:d9: 37:c6:b5:ee:87:ee:f6:8e:27:96:b4:a0:63:b2:5a:4f:24:bd: 50:18:ce:42:e5:8b:42:a7:f8:85:a8:a7:80:03:c0:6c:91:db: e2:0c:24:ab:76:99:93:24:47:88:b8:f6:34:a5:e3:11:49:82: da:46:dd:42:d2:77:e6:85:0b:5b:8a:c8:35:4a:fb:bc:03:d8: 1f:44:79:92:ae:06:96:1e:e8:4e:8a:9b:e2:cd:76:c5:f7:49: 9d:ed:22:b2:40:5e:38:0c:2f:af:58:35:6d:0c:af:e7:bd:03: 5b:19:34:2a:23:e6:a0:f5:63:9f:15:25:f0:64:5a:30:05:50: 9f:d2:5e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh10ig6yFKhRr1cy31BY6LuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUwODA0MTYwMjQzWhcNMjUwODA1MTYwMjQzWjAzMTEwLwYDVQQD Eyg2ZTlhYzVjMmQ1ZmM5NDZjODI1ZjY5MjRiNTBlZTU3MDU3MzdkOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNgX1tTMb6PDae/G7klHCJNVtPWk i/NsD4/6/l7Uv82p1IdZ5exqnccBKiAyhlhdEgiPPE3VBjSTKa7NZKHsr0rUGR3W nqcIbBwGA24PyJ/HZDkhHS2xm0j+yK3HOTTn64JHni2i7trOk/fGSlgKoNDQ0Vis dgpa8EEttyMFy6qDtkxkcuk/fdAincJ3Cj7+MH/4kp6xTNy7bDdqYXTkiOoQX+6V gUZheq/n8SG03tOzoxELnZMor3G48UyDPZozYevDUdnXSTJ5WjKQbFCDg/tMmA8z a/4vXbYU2a7geFYC4tY6b/gpzJcY5gFFvUvYkFvKeGOHdGihtPp0MsTwiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6axcLV/JRsgl9pJLUO5XBXN9lbMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb47geUbQ DHMUq5M2SJQJ7TLxivJyZHR+G7/8Nj95MsN5sQNI5Xkk8qYwmk8fDoDzpHPu9+et OyyQ9T6SEasbRTws6FSHtPKRoMWQ2dqfehPdjIISDMMLPZtKTxS91wltkcdtf7b4 wNzKVr01+XyMzUpuQYLtVkYFAqHy1uzZN8a17ofu9o4nlrSgY7JaTyS9UBjOQuWL Qqf4haingAPAbJHb4gwkq3aZkyRHiLj2NKXjEUmC2kbdQtJ35oULW4rINUr7vAPY H0R5kq4Glh7oToqb4s12xfdJne0iskBeOAwvr1g1bQyv570DWxk0KiPmoPVjnxUl 8GRaMAVQn9JeVQ== -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:10 2025 by rpki-client