$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: gJ7GMtZQy29E8/eCRvwjmGexZGy5L/t96orNY9yelAU= Subject key identifier: 7D:D6:A9:22:C2:DB:49:5D:85:B3:B2:A2:86:9F:F0:53:7C:93:66:F9 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 0198857A54639515024196FAD6D4C485D1C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1649 Signing time: Thu 07 Aug 2025 17:00:43 +0000 Manifest this update: Thu 07 Aug 2025 17:00:43 +0000 Manifest next update: Fri 08 Aug 2025 17:00:43 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: x6Z8FRNWM0lb6LR2rbC5XoJfKcvsGfRF19D0LZa3xbk=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 08 Aug 2025 17:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:85:7a:54:63:95:15:02:41:96:fa:d6:d4:c4:85:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Aug 7 17:00:43 2025 GMT Not After : Aug 8 17:00:43 2025 GMT Subject: CN=7dd6a922c2db495d85b3b2a2869ff0537c9366f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:59:ae:61:eb:81:bd:d3:c0:df:5d:c9:e3: fd:9c:35:eb:7c:d5:5c:86:25:63:e8:5b:d3:6a:d7: c1:8d:a9:1d:4b:53:d6:a5:d5:08:f6:cb:8c:2c:a3: 67:98:75:af:c2:eb:d2:1a:b7:78:a8:9c:a2:b5:15: c6:2a:4a:67:26:88:d1:e6:61:cd:76:57:e7:78:48: 71:b9:99:b2:9a:d4:82:c8:de:f7:47:3e:ca:5e:00: be:ce:4c:55:f0:fb:32:e5:a5:b2:c1:33:31:d7:86: 18:d0:6e:86:3d:10:30:44:06:c7:34:80:31:04:d4: bd:47:ab:7b:d5:aa:c4:9a:1a:48:ea:b1:e2:00:0c: 14:e7:59:98:d2:fc:10:f9:8f:75:7e:02:46:c8:4c: e8:8d:eb:67:fc:ac:25:11:0a:f8:af:31:18:4b:47: 1a:19:db:f1:71:55:b3:7e:5f:57:50:79:d9:3c:11: 5f:74:a4:34:e0:09:d0:07:0c:ee:01:27:2d:fd:d4: cb:e2:7d:62:ea:ff:7d:38:77:0a:92:c5:4e:c9:19: d4:39:54:a5:7a:d5:fc:2f:3e:27:22:67:87:93:db: 8a:97:47:a4:13:f5:d0:73:03:c0:82:9b:1c:ba:34: 68:30:9a:47:aa:d9:6f:3b:6f:86:2f:44:05:e6:c7: 86:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D6:A9:22:C2:DB:49:5D:85:B3:B2:A2:86:9F:F0:53:7C:93:66:F9 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e6:bb:4e:db:f7:4f:53:1e:ca:b2:6d:a6:78:83:f7:a1:fd: a7:3e:6a:66:f5:f9:8a:e4:dd:9a:de:35:49:9e:24:ae:f7:bf: d7:2b:59:48:02:1e:d6:fa:77:c9:e1:98:d7:ef:3e:29:d4:79: ea:48:c4:8d:c8:18:bf:55:08:ee:37:b2:b4:b2:cd:80:51:8b: de:9c:b2:a8:f4:e1:23:60:37:f2:b9:df:2c:8c:14:4c:ce:11: 5d:6a:99:b7:8c:c2:43:ac:07:1f:63:f5:3e:7f:72:0f:0e:62: b6:2a:05:7c:de:de:d6:72:98:68:f7:c4:74:a4:00:91:83:3c: 98:b3:6f:fc:ce:6d:25:b5:11:3c:5e:05:9d:b1:f1:a8:6e:d8: fc:88:87:3a:17:1f:9f:b0:7d:62:31:2d:7c:01:df:ba:e5:3f: 36:9d:3f:c3:4a:3e:e9:ec:ad:a4:df:36:a3:a7:48:33:3b:a4: c2:55:75:ed:af:97:31:86:45:7c:4e:6f:0a:71:15:d2:c4:34: 1a:09:2d:42:df:46:8e:8e:b2:b9:86:32:c9:8f:02:ec:26:3b: fb:96:47:19:5d:5e:61:96:29:9f:f2:2c:16:f6:75:6e:51:da: e3:74:92:18:4e:f8:1e:f6:87:78:2a:f2:4a:cf:06:59:0e:07: 63:5a:90:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiFelRjlRUCQZb61tTEhdHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwODA3MTcwMDQzWhcNMjUwODA4MTcwMDQzWjAzMTEwLwYDVQQD Eyg3ZGQ2YTkyMmMyZGI0OTVkODViM2IyYTI4NjlmZjA1MzdjOTM2NmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhBZrmHrgb3TwN9dyeP9nDXrfNVc hiVj6FvTatfBjakdS1PWpdUI9suMLKNnmHWvwuvSGrd4qJyitRXGKkpnJojR5mHN dlfneEhxuZmymtSCyN73Rz7KXgC+zkxV8Psy5aWywTMx14YY0G6GPRAwRAbHNIAx BNS9R6t71arEmhpI6rHiAAwU51mY0vwQ+Y91fgJGyEzojetn/KwlEQr4rzEYS0ca GdvxcVWzfl9XUHnZPBFfdKQ04AnQBwzuASct/dTL4n1i6v99OHcKksVOyRnUOVSl etX8Lz4nImeHk9uKl0ekE/XQcwPAgpscujRoMJpHqtlvO2+GL0QF5seGtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3WqSLC20ldhbOyooaf8FN8k2b5MB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMua7Ttv3 T1MeyrJtpniD96H9pz5qZvX5iuTdmt41SZ4krve/1ytZSAIe1vp3yeGY1+8+KdR5 6kjEjcgYv1UI7jeytLLNgFGL3pyyqPThI2A38rnfLIwUTM4RXWqZt4zCQ6wHH2P1 Pn9yDw5itioFfN7e1nKYaPfEdKQAkYM8mLNv/M5tJbURPF4FnbHxqG7Y/IiHOhcf n7B9YjEtfAHfuuU/Np0/w0o+6eytpN82o6dIMzukwlV17a+XMYZFfE5vCnEV0sQ0 GgktQt9Gjo6yuYYyyY8C7CY7+5ZHGV1eYZYpn/IsFvZ1blHa43SSGE74HvaHeCry Ss8GWQ4HY1qQUg== -----END CERTIFICATE-----Generated at Fri Aug 8 00:43:23 2025 by rpki-client