$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: +ghuUW7yPQwGMgDo1TP3ceD9y8ol1mLeSPC5TddZtbU= Subject key identifier: 22:25:85:16:AF:63:E6:E7:62:C9:60:EC:70:7D:C8:B9:FD:5A:FD:33 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019A4DAAC60494C0FB45121B6CCE3B145F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 0D1D Signing time: Tue 04 Nov 2025 07:00:28 +0000 Manifest this update: Tue 04 Nov 2025 07:00:28 +0000 Manifest next update: Wed 05 Nov 2025 07:00:28 +0000 Files and hashes: 1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=) 2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=) 3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=) 4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=) 5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=) 6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=) 7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=) 8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=) 9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=) 10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=) 11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=) 12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=) 13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=) 14: MKk2eIZdBEHoejBBXOnExSwoMxY.roa (hash: a46f0IAxws6EBAs2zTmMvZ2jH6RBYNwGRDtcrPOSWm4=) 15: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=) 16: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=) 17: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=) 18: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=) 19: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=) 20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=) 21: _LaL2NGVikd-BXS-ihRrP5NY6ik.roa (hash: 8tMeMGtCDzB7YrSEIzydRyBsTv0sIFfm9Cd8vLZYHTU=) 22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=) 23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=) 24: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=) 25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: ABZdstSzZJtyRWIuWRXeQDI7hmvCmTdvxtyCS32v2YE=) 26: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=) 27: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=) 28: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=) 29: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=) 30: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=) 31: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=) 32: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=) 33: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=) 34: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=) 35: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=) 36: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=) 37: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=) 38: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:aa:c6:04:94:c0:fb:45:12:1b:6c:ce:3b:14:5f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Nov 4 07:00:28 2025 GMT Not After : Nov 5 07:00:28 2025 GMT Subject: CN=22258516af63e6e762c960ec707dc8b9fd5afd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:53:d2:76:82:d5:e5:36:9a:e0:7d:1d:a3:d3: 7a:6d:09:68:c9:2d:70:4f:00:c2:a1:af:74:53:1e: 77:02:e6:6c:bc:71:8d:48:89:c7:fd:ff:1f:57:78: 6f:5c:43:8d:3d:b8:15:20:d2:ea:48:56:8e:40:b5: b5:75:c3:b0:c3:16:ee:12:b3:f8:61:8c:bc:f5:9b: 7a:05:a2:e6:6d:39:bc:85:12:f2:35:d5:c7:cb:d4: c6:4a:4f:08:19:20:8c:5a:1d:c5:58:53:c8:c6:ad: 78:81:01:40:50:b5:a7:28:92:d9:3c:ac:fe:f9:00: 7b:c1:f2:60:ee:0a:9f:7a:68:94:e7:83:84:0c:46: de:f6:3e:7d:8a:02:3c:2a:c4:93:93:07:f7:bb:28: a8:46:c7:f2:79:5c:66:a8:50:46:1b:f2:3a:3e:ff: 77:5f:d7:4d:ff:52:39:48:38:d5:f3:32:14:7d:11: 92:82:52:28:32:52:d2:d7:74:9a:fb:d5:6e:0b:b0: e8:57:2b:ac:98:f1:31:9e:00:b1:ea:be:be:8e:1c: 57:d5:1a:83:b7:e3:ea:12:04:d9:99:83:a8:5c:58: 4c:2d:b8:58:8f:27:7c:56:a3:5c:fe:12:63:c4:0d: ae:61:13:85:20:a1:0b:66:24:1e:a4:04:a6:ba:00: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:25:85:16:AF:63:E6:E7:62:C9:60:EC:70:7D:C8:B9:FD:5A:FD:33 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e4:df:ba:a0:9f:7c:74:2c:af:3e:b2:d4:e6:dc:50:34:e7: 84:ef:aa:f5:e5:5a:4a:78:1e:13:8c:98:8b:5b:1a:2a:66:d6: 9a:a6:0c:41:d6:97:c3:3b:fa:98:fb:78:be:ff:7f:e3:b2:e5: 48:2d:6a:63:48:40:7b:94:b3:76:53:f5:ea:36:49:9f:f7:60: 7d:8b:1a:52:0c:ee:28:4b:7f:0f:db:e7:e0:69:18:27:a7:45: 35:99:82:48:b6:07:5c:a9:2e:42:b4:14:1d:b2:e5:dc:4a:f3: 68:77:ce:3e:cb:e3:15:06:da:c7:53:03:21:21:91:46:a5:67: f8:83:f6:0c:77:08:36:d4:2c:81:d1:01:90:09:1e:06:5c:25: c5:70:75:93:db:b6:36:ad:78:82:40:ab:3d:46:b1:32:9f:56: 32:38:49:5a:2d:4a:aa:5d:f5:ae:11:f7:3e:d7:d8:72:3b:ad: c3:22:9b:bc:df:f7:e5:b4:1d:1d:a6:b5:87:7b:cf:38:42:ea: 9d:ab:56:ec:ea:eb:e2:3d:d0:7c:7d:7a:6f:71:23:57:51:c5: 56:dc:8e:eb:d4:9f:00:af:8c:0d:bf:04:08:fa:a7:ea:62:cf: f2:2a:ca:89:7f:25:b9:96:3e:a9:3c:1d:8b:df:0b:a2:13:a5: 9f:e7:0a:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNqsYElMD7RRIbbM47FF8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjUxMTA0MDcwMDI4WhcNMjUxMTA1MDcwMDI4WjAzMTEwLwYDVQQD EygyMjI1ODUxNmFmNjNlNmU3NjJjOTYwZWM3MDdkYzhiOWZkNWFmZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1PSdoLV5Taa4H0do9N6bQloyS1w TwDCoa90Ux53AuZsvHGNSInH/f8fV3hvXEONPbgVINLqSFaOQLW1dcOwwxbuErP4 YYy89Zt6BaLmbTm8hRLyNdXHy9TGSk8IGSCMWh3FWFPIxq14gQFAULWnKJLZPKz+ +QB7wfJg7gqfemiU54OEDEbe9j59igI8KsSTkwf3uyioRsfyeVxmqFBGG/I6Pv93 X9dN/1I5SDjV8zIUfRGSglIoMlLS13Sa+9VuC7DoVyusmPExngCx6r6+jhxX1RqD t+PqEgTZmYOoXFhMLbhYjyd8VqNc/hJjxA2uYROFIKELZiQepASmugChFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIlhRavY+bnYslg7HB9yLn9Wv0zMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeTfuqCf fHQsrz6y1ObcUDTnhO+q9eVaSngeE4yYi1saKmbWmqYMQdaXwzv6mPt4vv9/47Ll SC1qY0hAe5SzdlP16jZJn/dgfYsaUgzuKEt/D9vn4GkYJ6dFNZmCSLYHXKkuQrQU HbLl3ErzaHfOPsvjFQbax1MDISGRRqVn+IP2DHcINtQsgdEBkAkeBlwlxXB1k9u2 Nq14gkCrPUaxMp9WMjhJWi1Kql31rhH3PtfYcjutwyKbvN/35bQdHaa1h3vPOELq natW7Orr4j3QfH16b3EjV1HFVtyO69SfAK+MDb8ECPqn6mLP8irKiX8luZY+qTwd i98LohOln+cKEA== -----END CERTIFICATE-----Generated at Tue Nov 4 14:52:54 2025 by rpki-client