$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: JvIHnU6n0EzENvwBM1nabuBuCOKXD3SCoVFNL0SCwcI= Subject key identifier: E6:C4:11:03:24:2F:D9:01:7E:52:F2:8F:58:BB:D3:F9:5E:79:0A:14 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019A4F2B5B31909B12CA867414C701700D65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1736 Signing time: Tue 04 Nov 2025 14:00:32 +0000 Manifest this update: Tue 04 Nov 2025 14:00:32 +0000 Manifest next update: Wed 05 Nov 2025 14:00:32 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: LxtpJvVK6vqgQUmt9UMRZMXBCpbO19zKk9IUXsKj0Jw=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:5b:31:90:9b:12:ca:86:74:14:c7:01:70:0d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Nov 4 14:00:32 2025 GMT Not After : Nov 5 14:00:32 2025 GMT Subject: CN=e6c41103242fd9017e52f28f58bbd3f95e790a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:41:af:d3:6d:3d:5e:fd:10:02:66:67:16:60: 4c:da:b6:fa:7c:7f:37:6a:99:b1:c8:c9:49:c4:2a: 8e:19:ff:58:a8:e6:88:24:2c:59:54:ef:a7:f4:ae: 55:ee:17:bf:0b:93:6c:22:52:ea:85:c0:21:9c:c6: ca:5f:ab:59:31:8d:68:10:76:5b:93:1a:ae:a9:ab: d3:a0:85:14:17:cb:93:6b:75:ef:66:8b:53:8d:ab: c7:e7:01:37:fe:4b:e2:a7:bd:13:23:8b:33:b3:6b: d2:9f:7e:d4:ab:c7:7f:ca:68:13:d3:59:59:ea:47: 0f:0b:a9:9f:dd:1a:13:07:b6:f0:74:ac:70:e0:ad: 78:20:38:89:80:81:7c:25:e5:db:f4:bd:6a:cf:30: 4c:11:3b:3a:03:b8:9d:40:1b:5f:df:62:79:5b:df: 81:7a:d8:17:9f:0b:3e:25:84:ac:d3:65:54:8e:6b: 19:51:da:f6:93:e9:06:99:7e:8f:99:7a:6d:df:91: 6f:d6:59:45:13:93:bd:47:0c:6a:09:86:07:b9:00: cb:13:ec:23:87:04:86:73:2b:aa:ab:31:cc:ab:24: 05:5f:6d:92:e7:2d:2b:bf:a1:49:7b:a2:9a:31:5b: 5b:57:7d:f6:45:7d:ba:a2:cc:63:69:cc:bf:d7:45: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C4:11:03:24:2F:D9:01:7E:52:F2:8F:58:BB:D3:F9:5E:79:0A:14 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ac:f9:7c:5c:97:10:7c:43:49:c9:47:9c:fe:75:5e:fa:b0: 4b:80:e7:14:aa:be:72:72:d6:0e:2e:ee:d7:59:2e:c9:13:e2: f9:c1:45:2e:b8:55:02:7a:f1:a5:80:f0:5f:2b:f1:43:21:5b: e3:ab:12:cd:d3:3c:c2:8f:31:95:05:9d:85:ba:ca:6b:97:ab: 8c:c4:3f:e7:a5:9b:15:4d:f5:78:16:ee:76:4b:6e:4f:59:57: 3d:f9:53:f7:61:54:9e:ef:f9:8d:57:bc:19:5e:36:c4:20:11: ba:97:74:85:3c:9f:74:8a:4f:cd:6e:62:64:18:8f:8b:a9:4e: 7b:73:ec:03:8b:c7:88:1f:62:d6:aa:e3:64:98:1c:e6:b4:92: 8b:60:b3:e0:61:02:c4:61:09:dd:6f:06:a6:52:f0:32:91:b6: 31:02:88:8e:f3:e1:05:30:1d:74:49:61:d8:87:3a:f9:a6:f0: f6:53:a6:80:72:bd:ae:00:1f:6b:f3:20:d6:16:cb:2d:a3:9c: 10:59:9d:09:6a:b5:be:31:38:60:75:2c:93:82:c3:a6:d8:7e: 35:40:cb:c5:cc:89:67:23:2e:41:66:a5:aa:94:72:ed:ed:9f: a3:da:96:81:d5:c6:bd:ee:e7:69:33:9f:97:98:72:03:95:53: 3c:6a:5f:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK1sxkJsSyoZ0FMcBcA1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUxMTA0MTQwMDMyWhcNMjUxMTA1MTQwMDMyWjAzMTEwLwYDVQQD EyhlNmM0MTEwMzI0MmZkOTAxN2U1MmYyOGY1OGJiZDNmOTVlNzkwYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Gv0209Xv0QAmZnFmBM2rb6fH83 apmxyMlJxCqOGf9YqOaIJCxZVO+n9K5V7he/C5NsIlLqhcAhnMbKX6tZMY1oEHZb kxquqavToIUUF8uTa3XvZotTjavH5wE3/kvip70TI4szs2vSn37Uq8d/ymgT01lZ 6kcPC6mf3RoTB7bwdKxw4K14IDiJgIF8JeXb9L1qzzBMETs6A7idQBtf32J5W9+B etgXnws+JYSs02VUjmsZUdr2k+kGmX6PmXpt35Fv1llFE5O9RwxqCYYHuQDLE+wj hwSGcyuqqzHMqyQFX22S5y0rv6FJe6KaMVtbV332RX26osxjacy/10XbTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObEEQMkL9kBflLyj1i70/leeQoUMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaz5fFyX EHxDSclHnP51XvqwS4DnFKq+cnLWDi7u11kuyRPi+cFFLrhVAnrxpYDwXyvxQyFb 46sSzdM8wo8xlQWdhbrKa5erjMQ/56WbFU31eBbudktuT1lXPflT92FUnu/5jVe8 GV42xCARupd0hTyfdIpPzW5iZBiPi6lOe3PsA4vHiB9i1qrjZJgc5rSSi2Cz4GEC xGEJ3W8GplLwMpG2MQKIjvPhBTAddElh2Ic6+abw9lOmgHK9rgAfa/Mg1hbLLaOc EFmdCWq1vjE4YHUsk4LDpth+NUDLxcyJZyMuQWalqpRy7e2fo9qWgdXGve7naTOf l5hyA5VTPGpfqw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:54:33 2025 by rpki-client