$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: 9eQ8Y/MSZ2DiWsUmX0V1hkVroHZqb7eqMiqjacBuc4w= Subject key identifier: 73:53:30:B8:85:C5:93:0B:0D:CD:66:1E:5F:51:0F:C1:E9:C6:E6:B2 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019A4F2B3CF1E8B9963FCE7122AC836FEB85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1734 Signing time: Tue 04 Nov 2025 14:00:24 +0000 Manifest this update: Tue 04 Nov 2025 14:00:24 +0000 Manifest next update: Wed 05 Nov 2025 14:00:24 +0000 Files and hashes: 1: 1-6_T1UR8RxQNCrO4uIs7DkXrQDQ.roa (hash: 9REY9ixrC0cn2b75D6q+Nm3sD55qb7ERu5o3EziHF5s=) 2: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=) 3: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=) 4: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=) 5: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=) 6: E_z1rRm2dPIkXYCFMVviLLfSyVg.roa (hash: VusW0dej7Bb9Ooea4R8NVWxaK/HakKSdSQk63k3jQc4=) 7: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: scLSRLmbY9iXdNlbNvPZmJW+0bOkUfvq7E2KS12VGbc=) 8: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=) 9: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=) 10: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=) 11: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=) 12: eloma6ROlb3WGecKiAOHrBMJSNc.roa (hash: xqij8ENzmH6IHFmng7nPcmW1+/+AD15DS99+RfR6qA4=) 13: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=) 14: jhzB3ouu7eGFu6kVywcyzMtWs14.roa (hash: 7ZiZaqq6we6E8f2G4rGHZ2hDk0lAG3K7IdZ3KOrq/pc=) 15: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=) 16: uU-ifMK_qHTd5-jFyVoaIOWGfZ4.roa (hash: XoeemwCq+iCHIHS4i6Vait+Nw3TFTjEj7Y5B4TZ2wwM=) 17: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=) 18: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=) 19: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:3c:f1:e8:b9:96:3f:ce:71:22:ac:83:6f:eb:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Nov 4 14:00:24 2025 GMT Not After : Nov 5 14:00:24 2025 GMT Subject: CN=735330b885c5930b0dcd661e5f510fc1e9c6e6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:02:66:07:b3:9d:86:95:3c:bf:27:fd:a5: dd:69:4d:3e:e5:81:8b:7c:e7:68:24:52:17:d2:05: e9:6a:c7:b9:a7:30:58:cd:b2:ee:e7:18:09:cc:71: e2:48:1e:b5:41:d0:0c:28:43:ae:73:b7:2e:3e:7c: 75:d8:66:da:37:ab:e1:f8:68:89:70:9e:80:86:fc: 3c:1e:0c:83:9e:72:de:5c:d8:e1:3c:83:22:69:b6: 34:f1:9a:00:67:ca:16:cb:3e:6e:a1:d7:d9:14:ff: 9b:fa:9f:b9:13:cb:0d:cf:a5:ab:a3:97:99:39:4e: fa:90:bc:e6:30:2c:ee:59:32:4a:55:b3:7f:70:aa: 93:ac:53:1a:0a:15:3f:5b:70:40:bb:8d:b4:c7:50: 42:ed:aa:1f:39:d7:44:4a:04:9a:39:64:a2:bf:3c: ea:82:26:0d:34:4e:e5:0b:a8:63:7e:18:4b:02:33: 0f:1c:28:87:dc:26:fb:34:03:7b:26:63:dd:b8:49: 64:66:fd:c5:81:a4:73:08:b9:c3:4d:3b:88:0d:b3: 68:d7:e4:c6:7d:13:31:7a:e1:1f:de:fa:c1:47:92: 2e:bc:ea:d4:09:03:99:5a:57:40:32:84:3e:06:99: b3:52:2d:ac:c2:38:a1:9c:8a:f8:00:13:c9:e1:51: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:53:30:B8:85:C5:93:0B:0D:CD:66:1E:5F:51:0F:C1:E9:C6:E6:B2 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:64:9b:dd:70:d9:6b:d5:23:b8:f0:b4:50:81:1c:9b:17:ab: 19:d0:cb:33:c4:81:ad:78:b5:58:c0:bf:a1:6d:d0:30:d4:58: 15:45:ed:d0:eb:97:b9:a1:04:09:33:f1:de:53:41:06:36:80: 42:67:94:d6:14:b8:e0:9e:c8:07:5b:0a:b5:89:86:66:dc:ce: e3:93:e2:0c:23:a5:df:8b:48:0a:e8:40:d4:f3:8a:90:a9:d5: b4:c0:8d:c9:f7:ef:00:5c:54:72:dc:92:39:2b:d0:a1:5b:aa: bb:74:99:04:c2:d5:b1:61:56:33:a6:df:9c:6e:35:ca:f8:71: 74:e8:9d:1b:51:40:7a:76:d6:ac:77:01:f6:30:ae:22:ab:79: 3d:95:d7:12:7d:fd:ea:6a:33:4c:bf:fe:cb:5b:8a:9a:a0:b5: 36:eb:76:ae:c2:ac:a6:f4:04:aa:ca:10:e5:fe:58:88:78:79: b4:ab:85:68:c7:61:f0:5f:3b:f6:a0:63:fb:38:11:14:0e:9e: 20:4c:39:53:ba:cb:a7:c3:d5:ca:bb:04:6a:33:86:d3:a0:31: c4:1b:51:b2:81:0a:02:3b:eb:21:83:09:0c:af:44:e1:81:dd: e5:30:30:69:90:5c:74:0c:ac:1a:49:4b:68:9f:70:5c:6e:98: 1f:20:e6:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPKzzx6LmWP85xIqyDb+uFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjUxMTA0MTQwMDI0WhcNMjUxMTA1MTQwMDI0WjAzMTEwLwYDVQQD Eyg3MzUzMzBiODg1YzU5MzBiMGRjZDY2MWU1ZjUxMGZjMWU5YzZlNmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0MCZgeznYaVPL8n/aXdaU0+5YGL fOdoJFIX0gXpase5pzBYzbLu5xgJzHHiSB61QdAMKEOuc7cuPnx12GbaN6vh+GiJ cJ6Ahvw8HgyDnnLeXNjhPIMiabY08ZoAZ8oWyz5uodfZFP+b+p+5E8sNz6Wro5eZ OU76kLzmMCzuWTJKVbN/cKqTrFMaChU/W3BAu420x1BC7aofOddESgSaOWSivzzq giYNNE7lC6hjfhhLAjMPHCiH3Cb7NAN7JmPduElkZv3FgaRzCLnDTTuIDbNo1+TG fRMxeuEf3vrBR5IuvOrUCQOZWldAMoQ+BpmzUi2swjihnIr4ABPJ4VFl4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNTMLiFxZMLDc1mHl9RD8HpxuayMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGSb3XDZ a9UjuPC0UIEcmxerGdDLM8SBrXi1WMC/oW3QMNRYFUXt0OuXuaEECTPx3lNBBjaA QmeU1hS44J7IB1sKtYmGZtzO45PiDCOl34tICuhA1POKkKnVtMCNyffvAFxUctyS OSvQoVuqu3SZBMLVsWFWM6bfnG41yvhxdOidG1FAenbWrHcB9jCuIqt5PZXXEn39 6mozTL/+y1uKmqC1Nut2rsKspvQEqsoQ5f5YiHh5tKuFaMdh8F879qBj+zgRFA6e IEw5U7rLp8PVyrsEajOG06AxxBtRsoEKAjvrIYMJDK9E4YHd5TAwaZBcdAysGklL aJ9wXG6YHyDmQA== -----END CERTIFICATE-----Generated at Tue Nov 4 17:37:18 2025 by rpki-client