$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json) Hash identifier: MqxLKUTJlkBu7c1HbTOuvPeq+gi8VVXatv0njea5kMI= Subject key identifier: C6:E4:56:5B:CA:1D:19:5E:83:43:26:B2:9C:46:90:01:4F:AF:35:DC Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 01987A51D3C1424B253A27641B72C17DF518 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft Manifest number: 0C2A Signing time: Tue 05 Aug 2025 13:00:39 +0000 Manifest this update: Tue 05 Aug 2025 13:00:39 +0000 Manifest next update: Wed 06 Aug 2025 13:00:39 +0000 Files and hashes: 1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=) 2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=) 3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=) 4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=) 5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=) 6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=) 7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=) 8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=) 9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=) 10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=) 11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=) 12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=) 13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=) 14: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=) 15: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=) 16: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=) 17: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=) 18: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=) 19: WGlvtk8IWZ6ds_c_g4mOAVqrlN4.roa (hash: S/+B1U6aTb4hiIDRGdBxuiRRAF8hyixivQGp2pknvUs=) 20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=) 21: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=) 22: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=) 23: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=) 24: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: I6s8mJvuPZDHrXiveE/D+02FkLH/lvweeWk0A4uAs+c=) 25: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=) 26: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=) 27: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=) 28: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=) 29: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=) 30: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=) 31: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=) 32: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=) 33: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=) 34: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=) 35: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=) 36: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=) 37: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:51:d3:c1:42:4b:25:3a:27:64:1b:72:c1:7d:f5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Aug 5 13:00:39 2025 GMT Not After : Aug 6 13:00:39 2025 GMT Subject: CN=c6e4565bca1d195e834326b29c4690014faf35dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:50:e4:43:10:37:da:57:e1:b3:50:92:3f: 2f:1e:1f:cd:d4:16:18:79:b5:81:36:6d:4e:28:ee: 5f:49:a3:e8:95:0a:e1:5d:b0:a1:48:56:7d:b3:67: fc:a9:96:ef:e1:e4:35:27:41:9e:af:8c:3d:50:1b: 61:c7:23:70:f7:7a:f2:1f:97:10:12:a4:b7:b6:44: 92:8d:ed:f5:43:4b:c0:34:db:ff:17:f4:0b:aa:ad: 1c:88:a2:7b:30:ea:b1:a4:3c:d0:7a:2e:c1:86:e6: 3e:b9:29:57:91:44:ce:c9:3c:28:8b:54:98:84:c6: 06:cf:92:9e:1e:b4:33:08:d0:b1:93:84:81:97:7f: a4:b1:f5:df:b5:82:d8:bd:fd:6c:ed:7a:89:85:05: 60:d6:82:c6:cf:b9:b6:2c:3b:bc:9d:ba:50:ce:97: b6:85:da:86:be:47:5f:29:e7:a5:4f:ea:d7:69:59: 62:a1:67:00:0b:64:99:83:cc:b7:7d:5a:99:fd:84: 41:9f:ac:3d:d8:17:4f:0b:40:90:eb:ab:4e:2a:11: 9f:94:c0:dd:8f:3e:42:f8:f9:5d:9f:9b:f4:b1:59: e0:a6:35:98:1f:1e:b7:a9:4f:a0:3a:8c:83:ff:76: fd:44:90:1b:f5:ff:cf:e2:cd:13:2b:9e:82:99:9e: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E4:56:5B:CA:1D:19:5E:83:43:26:B2:9C:46:90:01:4F:AF:35:DC X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:45:4a:23:65:23:fc:08:95:94:2b:78:8a:04:77:fc:5d:e5: 43:c9:55:d3:0a:7d:12:e3:4b:d4:32:33:65:a5:45:d4:0b:73: 01:fa:f5:82:03:74:c9:a8:58:51:d0:8d:d0:80:25:9a:43:15: 79:ed:0e:6e:4d:d1:40:b3:6b:20:b5:b8:0c:56:2a:68:98:03: 14:51:e9:37:13:ed:2b:98:09:ea:04:26:73:c2:15:63:e3:9e: 1d:27:a3:f8:38:a8:66:ac:46:3c:41:60:33:00:f9:99:44:0b: 06:b7:52:78:7c:a2:2d:18:2f:80:f8:26:5f:25:1e:20:6f:9f: d9:ef:ed:b4:4f:c9:17:ac:86:47:3d:d3:a9:64:fb:f9:99:a2: 52:fa:8a:3e:b0:c5:d1:4c:a2:3b:57:cc:e5:d7:92:82:75:dd: 36:65:55:9d:30:54:c3:5d:d0:f5:37:25:c5:e6:67:be:05:4b: 4f:58:5e:fd:e9:a4:11:b9:d4:23:3d:c8:4f:c4:87:5a:85:a9: d3:ac:e4:0f:19:d9:05:c1:8c:ce:18:fe:11:72:cc:3f:4d:e0: 07:ca:a6:80:1f:d0:a8:4e:19:13:b0:bf:22:43:6c:3b:45:45: 1b:30:26:9c:0b:de:2b:e2:37:33:3d:65:a4:ea:1c:0a:fc:5f: 3a:f2:c1:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6UdPBQkslOidkG3LBffUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjUwODA1MTMwMDM5WhcNMjUwODA2MTMwMDM5WjAzMTEwLwYDVQQD EyhjNmU0NTY1YmNhMWQxOTVlODM0MzI2YjI5YzQ2OTAwMTRmYWYzNWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7ZQ5EMQN9pX4bNQkj8vHh/N1BYY ebWBNm1OKO5fSaPolQrhXbChSFZ9s2f8qZbv4eQ1J0Ger4w9UBthxyNw93ryH5cQ EqS3tkSSje31Q0vANNv/F/QLqq0ciKJ7MOqxpDzQei7BhuY+uSlXkUTOyTwoi1SY hMYGz5KeHrQzCNCxk4SBl3+ksfXftYLYvf1s7XqJhQVg1oLGz7m2LDu8nbpQzpe2 hdqGvkdfKeelT+rXaVlioWcAC2SZg8y3fVqZ/YRBn6w92BdPC0CQ66tOKhGflMDd jz5C+Pldn5v0sVngpjWYHx63qU+gOoyD/3b9RJAb9f/P4s0TK56CmZ4G0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbkVlvKHRleg0MmspxGkAFPrzXcMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0VKI2Uj /AiVlCt4igR3/F3lQ8lV0wp9EuNL1DIzZaVF1AtzAfr1ggN0yahYUdCN0IAlmkMV ee0Obk3RQLNrILW4DFYqaJgDFFHpNxPtK5gJ6gQmc8IVY+OeHSej+DioZqxGPEFg MwD5mUQLBrdSeHyiLRgvgPgmXyUeIG+f2e/ttE/JF6yGRz3TqWT7+ZmiUvqKPrDF 0UyiO1fM5deSgnXdNmVVnTBUw13Q9TclxeZnvgVLT1he/emkEbnUIz3IT8SHWoWp 06zkDxnZBcGMzhj+EXLMP03gB8qmgB/QqE4ZE7C/IkNsO0VFGzAmnAveK+I3Mz1l pOocCvxfOvLBlQ== -----END CERTIFICATE-----Generated at Tue Aug 5 16:51:19 2025 by rpki-client