$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: 2w6oDYJGgdcby/P3E9amn/PSPvte2oSi/9N0BJQTrBk= Subject key identifier: B9:1B:A0:FA:EF:8B:1D:57:FB:B7:D5:27:89:F3:26:70:6E:7D:40:E7 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 0197789CF00937536A0B754FAA40B3645835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 0BA4 Signing time: Mon 16 Jun 2025 12:00:40 +0000 Manifest this update: Mon 16 Jun 2025 12:00:40 +0000 Manifest next update: Tue 17 Jun 2025 12:00:40 +0000 Files and hashes: 1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=) 2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=) 3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=) 4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=) 5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=) 6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=) 7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=) 8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=) 9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=) 10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=) 11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=) 12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=) 13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=) 14: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=) 15: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=) 16: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=) 17: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=) 18: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=) 19: WGlvtk8IWZ6ds_c_g4mOAVqrlN4.roa (hash: S/+B1U6aTb4hiIDRGdBxuiRRAF8hyixivQGp2pknvUs=) 20: Y9DTwbuKj1l3cwWXiwNXZoyOdh4.roa (hash: ubi9qYAB5WdX147XJ/LaFlHI6aLRjQtoaUmfqiUrpJ0=) 21: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=) 22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=) 23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=) 24: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: ovpbbb/msq9+iqoPYJSbmOLIwJfYQCD7HvwTVzu6tGw=) 25: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=) 26: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=) 27: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=) 28: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=) 29: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=) 30: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=) 31: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=) 32: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=) 33: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=) 34: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=) 35: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=) 36: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=) 37: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Jun 2025 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:78:9c:f0:09:37:53:6a:0b:75:4f:aa:40:b3:64:58:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jun 16 12:00:40 2025 GMT Not After : Jun 17 12:00:40 2025 GMT Subject: CN=b91ba0faef8b1d57fbb7d52789f326706e7d40e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:4b:5f:f9:e8:6d:38:6b:5a:3c:9e:0c:17: 60:73:2d:c9:a5:72:5e:7f:74:ef:23:55:74:85:18: 0a:95:3c:e8:c6:cb:c9:6a:2b:2c:a2:20:61:f1:26: 0d:cf:25:c9:66:86:0a:22:88:51:c5:b2:0f:6b:bb: b6:01:10:2f:d6:86:fe:ad:bc:3f:1b:08:f2:82:81: 32:4d:4f:1b:94:ef:4b:3c:cf:b7:50:7b:05:b1:41: 06:5f:82:b4:46:20:1c:56:42:97:c6:6f:a9:70:b3: 42:6e:85:f2:86:53:bc:a8:81:e6:89:44:fb:43:12: e0:88:43:e3:89:de:d7:32:09:e2:9a:56:35:b1:aa: 66:3e:9f:a0:0e:1e:57:96:f7:ab:f4:e2:d2:60:c7: 4d:10:ba:25:cd:c1:b5:d7:7e:a5:00:c2:cb:51:37: 4e:8c:0c:13:59:7b:41:5c:92:07:d2:97:69:fa:6e: 19:33:a9:bf:9b:2b:1e:56:ef:3f:11:af:85:0d:33: 0d:b9:e4:61:65:9d:b1:49:f7:f4:c0:d1:01:cb:de: 4c:39:5b:38:9b:69:19:ef:2d:74:d0:fb:ed:5b:03: 05:3c:13:2b:33:b7:80:d4:e9:54:dc:d7:99:3a:fc: 0e:df:f0:c3:8c:85:67:df:62:47:ee:84:ce:7c:17: 8f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1B:A0:FA:EF:8B:1D:57:FB:B7:D5:27:89:F3:26:70:6E:7D:40:E7 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:81:38:30:e1:e9:d6:4b:72:5f:d4:9f:43:9d:01:7b:20:5c: 3d:33:6f:11:4b:37:f3:84:16:4e:ba:25:09:6f:e3:2a:ce:39: f2:3e:69:25:60:ea:5c:f1:81:cf:35:b0:f9:c9:18:cc:6e:24: b8:79:aa:a9:09:cd:b3:61:a8:56:fd:5b:5c:74:cc:a7:04:16: 2b:0e:05:b5:77:7b:c9:1c:35:f4:4c:99:c1:bd:01:74:86:63: 0d:89:2c:f8:8f:47:ac:1f:41:dc:aa:30:86:db:48:90:4c:6c: dc:2f:84:b6:03:85:54:31:0a:9b:69:d8:c5:30:11:60:30:02: cd:e9:8b:9c:ce:ef:c8:c3:00:ee:2d:c2:68:c2:b6:30:76:ba: 48:cf:5e:8f:87:9a:9d:95:39:22:4a:25:5a:dd:a2:44:5d:1a: 89:9e:c1:22:44:70:2d:7b:6b:3f:f4:db:5a:09:bf:70:8e:91: e2:f9:f9:6a:c8:fd:03:cd:62:e7:e0:72:a4:86:c4:5c:81:eb: f8:65:06:07:fc:38:6d:07:8c:12:c1:0c:c9:18:a1:51:15:d8: 7b:c2:e5:5f:2b:18:14:4e:da:38:e2:a5:49:c5:d1:e5:12:86: 7b:d2:ef:3b:55:b1:e9:76:76:ee:0e:6f:69:8b:fb:a4:4a:14: 01:7b:8f:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd4nPAJN1NqC3VPqkCzZFg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjUwNjE2MTIwMDQwWhcNMjUwNjE3MTIwMDQwWjAzMTEwLwYDVQQD EyhiOTFiYTBmYWVmOGIxZDU3ZmJiN2Q1Mjc4OWYzMjY3MDZlN2Q0MGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUVLX/nobThrWjyeDBdgcy3JpXJe f3TvI1V0hRgKlTzoxsvJaissoiBh8SYNzyXJZoYKIohRxbIPa7u2ARAv1ob+rbw/ GwjygoEyTU8blO9LPM+3UHsFsUEGX4K0RiAcVkKXxm+pcLNCboXyhlO8qIHmiUT7 QxLgiEPjid7XMgnimlY1sapmPp+gDh5Xlver9OLSYMdNELolzcG1136lAMLLUTdO jAwTWXtBXJIH0pdp+m4ZM6m/myseVu8/Ea+FDTMNueRhZZ2xSff0wNEBy95MOVs4 m2kZ7y100PvtWwMFPBMrM7eA1OlU3NeZOvwO3/DDjIVn32JH7oTOfBePzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkboPrvix1X+7fVJ4nzJnBufUDnMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4E4MOHp 1ktyX9SfQ50BeyBcPTNvEUs384QWTrolCW/jKs458j5pJWDqXPGBzzWw+ckYzG4k uHmqqQnNs2GoVv1bXHTMpwQWKw4FtXd7yRw19EyZwb0BdIZjDYks+I9HrB9B3Kow httIkExs3C+EtgOFVDEKm2nYxTARYDACzemLnM7vyMMA7i3CaMK2MHa6SM9ej4ea nZU5IkolWt2iRF0aiZ7BIkRwLXtrP/TbWgm/cI6R4vn5asj9A81i5+BypIbEXIHr +GUGB/w4bQeMEsEMyRihURXYe8LlXysYFE7aOOKlScXR5RKGe9LvO1Wx6XZ27g5v aYv7pEoUAXuPeQ== -----END CERTIFICATE-----Generated at Mon Jun 16 15:24:30 2025 by rpki-client