$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: TmMxNFirsfSDt+lkBRx+9UvN8cCKIppA/Cixpd1tWrM= Subject key identifier: 52:DA:56:B3:22:FF:D6:8D:03:CA:F7:20:AD:B5:F8:4F:E6:BF:35:EB Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019891B56A66014B43EBF44F3EDCB0242BA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 1653 Signing time: Sun 10 Aug 2025 02:00:42 +0000 Manifest this update: Sun 10 Aug 2025 02:00:42 +0000 Manifest next update: Mon 11 Aug 2025 02:00:42 +0000 Files and hashes: 1: 0RyrSS5TsuNkSrgX42mZlqnL_6Y.roa (hash: BRzu0fdIaz6Lovt3QNbsRMaTYaq8KePDTC4YuQ5xp+8=) 2: 13v_SFUUaJanH2ti7gyyAMAe4E8.roa (hash: 9BOoaT9u38i4PO8whYYhUIN3eU3jwn/DC/9uSOlK5Wc=) 3: 1JXcZFx0cVgp_nurSkDz34ejXRw.roa (hash: eT3VUKiYG35yZHjK8chZuS2ARmnYiiATHH1jK3UENw4=) 4: 6z4rHWGcADRparknQzyj2yRTc7Q.roa (hash: n4ymMhjOhAWzzuUuICwnt0DuPDacCxWlW+NEkRCL8OQ=) 5: 7-CIZj9uif--br5voFAmQlLSW6c.roa (hash: uTSjmKpL+cFNc34iNkcWzIdWbLSiGj8LHYTNjwuj3bY=) 6: 8JryklODS-H6RCW3s1L6jAA10aM.roa (hash: N4V6jxdE6ULDTseAhDT5eiy4WHG+mdZx70Ca/CGSOis=) 7: A31_B2nuhoGFF02yDR9tIcsA9vo.roa (hash: xg/RP32VB0XjW0/mDPvjyFUORhRt5edu/HqQYElspR4=) 8: BAByn752h23LDapbWtvPQCf7FGA.roa (hash: aEzN77kDLNn/k0lFsBHzbqjz++GYSZ5QPiWUhv2jUcs=) 9: Ck6zT6x0Zv6U2p-ZSrNCj8cqENA.roa (hash: vn4Mm/Ol0HS3ALJw769qg2+sjsgf0CiNSgVo1qEs5GI=) 10: DgqNbF9iJTN6tJqFHFsmrsPTN-0.roa (hash: LWJhYWGLPkv6XiCgsYq7ikNGs7uAsKZdQqaT/g/DLbI=) 11: EA04VGqvrPQszKxiTiYT5otCGRs.roa (hash: jxzccstOx8k+w6FBDeBmh5NVBQOSYOxvaie7YTOrrr0=) 12: EHXBWUxeWMDtm-263T3CeCfIQg0.roa (hash: upykUfWusTim+qPavoonZ87RcamCDQGsa5cCnxfzAXA=) 13: EJJjIWEkSJVR16lMZ3JAA3Erae4.roa (hash: cEYNtBA9K74UcwqPRIFv+v9Gz/Ga0WnXLgpuQ29y8a4=) 14: F8f4kxW24uJzOzniLERBk3yZc8g.roa (hash: Ve8YWI7OVk2wPQ5uGjmWzFVz86n7rtMNCFhPgNLkgZE=) 15: Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa (hash: 97mQ1AfgdstY7yHk40JSfso1yc9R8LG4mzhYmCvo4E0=) 16: IUoj14L85V7dFoSNxHQERg8IME0.roa (hash: yLZKOBB3BN8zxQwSxMgLL7kO6gXgb1541/UgXA3XP8c=) 17: Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa (hash: v37HfVcSPPGTt9P/qQorvZQf7f7Dq5xgbuMnSpO2rw0=) 18: LZ4tnH9lGxh0iu-rU3u9Fkm-pFk.roa (hash: +JM6B0zdaawDdz8KRtRSCTdjUiYYSokishxaS8i4x7Y=) 19: QO4VVs5SI_NodctTdkKAUO1ebEc.roa (hash: Lg34OgBQ8Ox1b1e+BjsftLuK02aFfjJ/oJTA/t+0XB8=) 20: Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa (hash: CsJlJBJH3+6jV3tl9xVBuGfLlTLLS9kglg9jMQQ1KqQ=) 21: ZIBj51rvzdxNBOQu45s1TsXZfA4.roa (hash: Mlg1sMaq1AzoqpdQv0YafCX4XwaQte0j2dMM5uFDd64=) 22: b_rI4TYzOidB7VM9UUtKiSxW5LU.roa (hash: FSPXI3Dcd4NYJhk5Uaoa5iEsUpA3P4ClToZPryW5vs4=) 23: cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa (hash: +Q93BMqAczWnkXHr2ly5zbZ8kF90gI/c8DRSS/XTs0A=) 24: eH9NeYZ6476-_LV8hEYeX0fc0QI.roa (hash: qpYMUOd5FFvMlQNvSubLKokumQC5dpDSUWn6yu3Z38Q=) 25: fiXZjFVhkN8HnCYHCQ4y4EM5tTw.roa (hash: WGUlo6TBZJCZDArB+udlJuMvOeQwlu964bRVTQeiYz0=) 26: hgUVlBMr-3weLeCDxLmYbzcEvDs.roa (hash: uNZAsOSUtlXYpFt0EPAGWC7rkjy2E7P557kov/78pUY=) 27: hsXTdDwIDQeR8Y4thDk7zd5XS_E.roa (hash: WxjjzedasgKM79/0bmtsmVyW63ILl73WxBDKWi3e8Sw=) 28: iiCSGGgxN2dI_YNYAYnLsWSzIvk.roa (hash: rHuaFNuztgBdjSOmq2nEo94MqWDd+bV87f0qBWPvt94=) 29: kjCBwq1j9xX1EaDBTI424dSK14A.roa (hash: y34Z+vhK1gAu2AvvEzAPgCnHcDqbgumJZa/tYihBKvk=) 30: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: 9VDeQCJILv29XCwjyxgE7ccIHtekkuFaEHIvB21OXKM=) 31: npSbX89ppW1EvXT8SquAkvP6voE.roa (hash: MxmtVOWJZ2CbOzuQXF5iaQtC+5JJ6zax1Xsv1/neKxU=) 32: olZgy9U7ThNnepinAJEKzkRvZJg.roa (hash: 4b9F9m0pUTdzvwoF0mVT1XODHic5uNOOg/5TKG+EAGE=) 33: udpFcarhA2Di-ueqJLzwdxMkwFU.roa (hash: /CtOZMK/oLqOqAo2qZJtD+fd7exGsI2oA16cE8ogLbU=) 34: vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa (hash: EgxlYUmqGL8wGtFTWH2dHB4zW0mfcmREpW1FWRXtq8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 18:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:91:b5:6a:66:01:4b:43:eb:f4:4f:3e:dc:b0:24:2b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Aug 10 02:00:42 2025 GMT Not After : Aug 11 02:00:42 2025 GMT Subject: CN=52da56b322ffd68d03caf720adb5f84fe6bf35eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:4c:14:fe:8e:b8:22:49:fb:d1:e1:ea:3a: a4:0a:e1:57:dc:c4:63:54:47:de:fa:41:6b:14:f4: 68:ff:97:17:44:84:61:56:73:dd:9a:3d:5f:90:c8: 35:43:e6:30:2b:9e:aa:36:bb:ca:31:5a:29:bf:b1: ac:51:8a:df:68:44:17:dd:c6:18:63:12:b1:45:ae: 74:be:cf:39:05:6b:ab:8d:ce:74:2a:1b:84:50:59: 10:73:08:37:81:7f:e5:a4:3d:ab:df:b3:1e:ff:b0: aa:b5:e0:37:c5:79:ec:f4:55:72:6f:4d:ad:b4:24: 8e:fb:45:2e:1c:c7:f3:d3:c3:82:78:36:f9:f4:be: 86:ee:60:66:e2:07:aa:bb:5f:ac:73:5f:44:56:e7: 51:62:ae:ee:31:cd:3b:44:0d:b8:f7:b1:b7:38:22: 56:77:d7:ef:4b:37:4e:bc:9c:5f:10:53:23:47:f7: 14:cd:25:67:0c:22:ad:a5:e1:84:1e:03:eb:87:e1: 47:8e:eb:90:6b:f0:76:c6:99:b1:c6:9a:b7:14:db: b0:73:ff:6d:9b:40:c3:e0:0e:4d:b3:d5:bf:8a:8f: 74:52:2e:48:bc:d6:81:a9:61:12:20:97:9c:24:b0: 7c:0c:f4:01:f6:42:54:dc:54:3d:41:90:b0:56:48: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DA:56:B3:22:FF:D6:8D:03:CA:F7:20:AD:B5:F8:4F:E6:BF:35:EB X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:30:62:13:e7:a3:00:d7:51:aa:49:3b:ba:8e:55:ab:1a:4e: 51:e3:a3:a7:73:ce:8c:ac:90:75:f7:3c:87:83:52:60:d7:00: 54:a3:d2:26:39:7a:72:cc:0b:f1:d4:e1:f1:bf:c4:af:5b:a5: 53:50:86:0c:64:82:5f:8f:94:62:10:f4:78:2c:2a:b1:47:f1: ca:8a:56:56:dc:75:7d:29:a6:cd:3f:4c:3e:de:1f:48:c5:fc: 03:96:6a:08:ad:77:0f:a5:82:c2:8b:91:c3:66:75:3f:9b:f1: 3a:9a:93:09:05:b8:ff:b5:b3:f9:d9:f5:c3:73:0f:08:0d:b4: f4:ea:4e:89:6a:e9:b8:38:7d:3b:ed:cc:9f:a7:d5:83:42:c3: 0d:2b:f3:e8:6b:86:ee:49:ca:cf:88:6f:36:26:23:a2:d1:90: dd:c2:0b:27:93:a7:5d:42:18:2f:c7:bb:1f:eb:5b:66:ce:ae: 20:f2:b0:69:4e:a8:d6:ea:5e:c9:d9:c1:e6:4f:b7:49:64:e3: b3:d3:90:36:b4:78:cc:83:c6:9f:08:3c:cb:aa:e8:98:3a:af: 15:f8:6b:eb:76:42:0f:99:19:ce:60:a7:67:b2:33:62:d4:23: 39:cc:62:ea:2f:f9:b9:11:1b:24:48:1c:c1:4a:46:44:73:8e: cc:28:d3:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiRtWpmAUtD6/RPPtywJCuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjUwODEwMDIwMDQyWhcNMjUwODExMDIwMDQyWjAzMTEwLwYDVQQD Eyg1MmRhNTZiMzIyZmZkNjhkMDNjYWY3MjBhZGI1Zjg0ZmU2YmYzNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMNMFP6OuCJJ+9Hh6jqkCuFX3MRj VEfe+kFrFPRo/5cXRIRhVnPdmj1fkMg1Q+YwK56qNrvKMVopv7GsUYrfaEQX3cYY YxKxRa50vs85BWurjc50KhuEUFkQcwg3gX/lpD2r37Me/7CqteA3xXns9FVyb02t tCSO+0UuHMfz08OCeDb59L6G7mBm4gequ1+sc19EVudRYq7uMc07RA2497G3OCJW d9fvSzdOvJxfEFMjR/cUzSVnDCKtpeGEHgPrh+FHjuuQa/B2xpmxxpq3FNuwc/9t m0DD4A5Ns9W/io90Ui5IvNaBqWESIJecJLB8DPQB9kJU3FQ9QZCwVkhVYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLaVrMi/9aNA8r3IK21+E/mvzXrMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjBiE+ej ANdRqkk7uo5VqxpOUeOjp3POjKyQdfc8h4NSYNcAVKPSJjl6cswL8dTh8b/Er1ul U1CGDGSCX4+UYhD0eCwqsUfxyopWVtx1fSmmzT9MPt4fSMX8A5ZqCK13D6WCwouR w2Z1P5vxOpqTCQW4/7Wz+dn1w3MPCA209OpOiWrpuDh9O+3Mn6fVg0LDDSvz6GuG 7knKz4hvNiYjotGQ3cILJ5OnXUIYL8e7H+tbZs6uIPKwaU6o1upeydnB5k+3SWTj s9OQNrR4zIPGnwg8y6romDqvFfhr63ZCD5kZzmCnZ7IzYtQjOcxi6i/5uREbJEgc wUpGRHOOzCjTGw== -----END CERTIFICATE-----Generated at Sun Aug 10 04:20:28 2025 by rpki-client