$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: q7mf8oyEt6W3XgZ5azU2u1RLKO80hC3/GUUE+lpDcfE= Subject key identifier: 57:EA:34:38:A2:14:F0:11:DA:9E:5E:4C:9F:20:9D:8F:41:46:A4:C4 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019789223D4EFFA85CFDB7209C4A5264992A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 15CA Signing time: Thu 19 Jun 2025 17:00:11 +0000 Manifest this update: Thu 19 Jun 2025 17:00:11 +0000 Manifest next update: Fri 20 Jun 2025 17:00:11 +0000 Files and hashes: 1: 0RyrSS5TsuNkSrgX42mZlqnL_6Y.roa (hash: BRzu0fdIaz6Lovt3QNbsRMaTYaq8KePDTC4YuQ5xp+8=) 2: 13v_SFUUaJanH2ti7gyyAMAe4E8.roa (hash: 9BOoaT9u38i4PO8whYYhUIN3eU3jwn/DC/9uSOlK5Wc=) 3: 1JXcZFx0cVgp_nurSkDz34ejXRw.roa (hash: eT3VUKiYG35yZHjK8chZuS2ARmnYiiATHH1jK3UENw4=) 4: 6z4rHWGcADRparknQzyj2yRTc7Q.roa (hash: n4ymMhjOhAWzzuUuICwnt0DuPDacCxWlW+NEkRCL8OQ=) 5: 7-CIZj9uif--br5voFAmQlLSW6c.roa (hash: uTSjmKpL+cFNc34iNkcWzIdWbLSiGj8LHYTNjwuj3bY=) 6: 8JryklODS-H6RCW3s1L6jAA10aM.roa (hash: N4V6jxdE6ULDTseAhDT5eiy4WHG+mdZx70Ca/CGSOis=) 7: A31_B2nuhoGFF02yDR9tIcsA9vo.roa (hash: xg/RP32VB0XjW0/mDPvjyFUORhRt5edu/HqQYElspR4=) 8: BAByn752h23LDapbWtvPQCf7FGA.roa (hash: aEzN77kDLNn/k0lFsBHzbqjz++GYSZ5QPiWUhv2jUcs=) 9: Ck6zT6x0Zv6U2p-ZSrNCj8cqENA.roa (hash: vn4Mm/Ol0HS3ALJw769qg2+sjsgf0CiNSgVo1qEs5GI=) 10: DgqNbF9iJTN6tJqFHFsmrsPTN-0.roa (hash: LWJhYWGLPkv6XiCgsYq7ikNGs7uAsKZdQqaT/g/DLbI=) 11: EA04VGqvrPQszKxiTiYT5otCGRs.roa (hash: jxzccstOx8k+w6FBDeBmh5NVBQOSYOxvaie7YTOrrr0=) 12: EHXBWUxeWMDtm-263T3CeCfIQg0.roa (hash: upykUfWusTim+qPavoonZ87RcamCDQGsa5cCnxfzAXA=) 13: EJJjIWEkSJVR16lMZ3JAA3Erae4.roa (hash: cEYNtBA9K74UcwqPRIFv+v9Gz/Ga0WnXLgpuQ29y8a4=) 14: F8f4kxW24uJzOzniLERBk3yZc8g.roa (hash: Ve8YWI7OVk2wPQ5uGjmWzFVz86n7rtMNCFhPgNLkgZE=) 15: Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa (hash: 97mQ1AfgdstY7yHk40JSfso1yc9R8LG4mzhYmCvo4E0=) 16: IUoj14L85V7dFoSNxHQERg8IME0.roa (hash: yLZKOBB3BN8zxQwSxMgLL7kO6gXgb1541/UgXA3XP8c=) 17: Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa (hash: v37HfVcSPPGTt9P/qQorvZQf7f7Dq5xgbuMnSpO2rw0=) 18: LZ4tnH9lGxh0iu-rU3u9Fkm-pFk.roa (hash: +JM6B0zdaawDdz8KRtRSCTdjUiYYSokishxaS8i4x7Y=) 19: QO4VVs5SI_NodctTdkKAUO1ebEc.roa (hash: Lg34OgBQ8Ox1b1e+BjsftLuK02aFfjJ/oJTA/t+0XB8=) 20: Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa (hash: CsJlJBJH3+6jV3tl9xVBuGfLlTLLS9kglg9jMQQ1KqQ=) 21: ZIBj51rvzdxNBOQu45s1TsXZfA4.roa (hash: Mlg1sMaq1AzoqpdQv0YafCX4XwaQte0j2dMM5uFDd64=) 22: b_rI4TYzOidB7VM9UUtKiSxW5LU.roa (hash: FSPXI3Dcd4NYJhk5Uaoa5iEsUpA3P4ClToZPryW5vs4=) 23: cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa (hash: +Q93BMqAczWnkXHr2ly5zbZ8kF90gI/c8DRSS/XTs0A=) 24: eH9NeYZ6476-_LV8hEYeX0fc0QI.roa (hash: qpYMUOd5FFvMlQNvSubLKokumQC5dpDSUWn6yu3Z38Q=) 25: fiXZjFVhkN8HnCYHCQ4y4EM5tTw.roa (hash: WGUlo6TBZJCZDArB+udlJuMvOeQwlu964bRVTQeiYz0=) 26: hgUVlBMr-3weLeCDxLmYbzcEvDs.roa (hash: uNZAsOSUtlXYpFt0EPAGWC7rkjy2E7P557kov/78pUY=) 27: hsXTdDwIDQeR8Y4thDk7zd5XS_E.roa (hash: WxjjzedasgKM79/0bmtsmVyW63ILl73WxBDKWi3e8Sw=) 28: iiCSGGgxN2dI_YNYAYnLsWSzIvk.roa (hash: rHuaFNuztgBdjSOmq2nEo94MqWDd+bV87f0qBWPvt94=) 29: kjCBwq1j9xX1EaDBTI424dSK14A.roa (hash: y34Z+vhK1gAu2AvvEzAPgCnHcDqbgumJZa/tYihBKvk=) 30: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: thEW5JoSznguUfbBsrA9kdjjKEm+ZvEV36NE4ic7G5Y=) 31: npSbX89ppW1EvXT8SquAkvP6voE.roa (hash: MxmtVOWJZ2CbOzuQXF5iaQtC+5JJ6zax1Xsv1/neKxU=) 32: olZgy9U7ThNnepinAJEKzkRvZJg.roa (hash: 4b9F9m0pUTdzvwoF0mVT1XODHic5uNOOg/5TKG+EAGE=) 33: udpFcarhA2Di-ueqJLzwdxMkwFU.roa (hash: /CtOZMK/oLqOqAo2qZJtD+fd7exGsI2oA16cE8ogLbU=) 34: vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa (hash: EgxlYUmqGL8wGtFTWH2dHB4zW0mfcmREpW1FWRXtq8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 10:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:89:22:3d:4e:ff:a8:5c:fd:b7:20:9c:4a:52:64:99:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jun 19 17:00:11 2025 GMT Not After : Jun 20 17:00:11 2025 GMT Subject: CN=57ea3438a214f011da9e5e4c9f209d8f4146a4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:14:b4:71:24:5f:45:e0:1b:6d:d3:9b:d4: 38:0e:e4:d8:bc:90:35:46:43:e4:5e:e7:59:ef:e1: ac:2f:d9:eb:fc:96:cb:9f:bd:00:f5:fd:71:71:8a: 84:77:fa:32:f6:1f:e9:0e:a4:25:fb:1f:86:2b:08: b8:8d:25:87:f6:88:83:e4:59:0a:66:5a:a2:53:1c: a5:54:9b:ac:47:2e:4b:08:ba:93:3f:0a:cd:07:3c: 32:e9:24:e0:f8:ea:19:f0:12:2e:8d:48:49:0b:02: 45:6a:11:f5:b3:23:cf:13:fc:7c:0f:50:e3:62:ac: 9a:d2:43:45:c6:2c:33:84:c2:f8:47:e1:50:06:3a: 95:0c:bf:89:17:d0:6c:16:16:eb:df:34:ef:ab:e8: f4:ad:1e:3a:ca:e1:ba:9a:09:e4:dd:a1:21:07:15: 50:93:d6:13:28:61:38:2e:03:a0:20:0f:1b:3b:2a: 15:28:f4:8e:13:33:5d:6f:cb:6c:23:31:eb:f9:58: 2b:09:6c:36:c5:6a:45:1d:7e:63:2d:dd:9e:64:9c: 98:17:bc:75:86:52:08:ca:12:ad:3b:65:e7:ce:be: 31:17:c1:0f:7d:7c:5f:e7:b0:8c:d1:90:59:15:b0: ef:a5:51:f4:f2:0c:32:9a:97:eb:c8:a9:07:b2:33: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EA:34:38:A2:14:F0:11:DA:9E:5E:4C:9F:20:9D:8F:41:46:A4:C4 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:98:74:9d:8d:3c:dd:8b:80:12:7e:04:0a:38:b6:67:00:f4: 1a:6c:d3:04:c2:41:19:0b:81:95:64:a6:50:5a:6b:00:7a:5f: cf:40:88:dd:c4:dd:4e:45:c7:23:37:82:c6:3c:b0:5c:c8:47: 4e:7a:cb:d2:ea:2b:b0:c9:b5:85:bb:92:9b:df:4b:6a:d6:44: 8f:56:96:6c:f5:26:e0:b8:3f:f4:b1:2d:db:21:97:dd:0e:ac: 2c:09:18:37:c5:44:ef:6b:69:5a:ae:10:0e:e6:f4:83:9c:d5: d6:aa:67:3b:44:3f:72:4b:81:5a:3f:f7:14:d4:4b:12:29:b3: 2b:bd:ff:df:08:d1:3a:db:ef:36:c7:8d:b4:6c:f8:a5:08:ba: 32:39:0f:3a:22:6e:06:5b:c4:b4:77:d1:b9:7e:13:7d:2b:a2: f6:70:6e:ef:e7:8f:d9:7a:61:8f:e0:35:5f:58:73:1d:f9:fe: 54:c9:49:0d:c8:e8:f1:a8:00:e5:76:47:46:1f:73:90:44:27: 91:df:d9:73:10:00:18:95:5a:1e:95:52:4f:93:81:f4:64:6b: fe:d7:2a:e2:49:68:92:2b:e6:e4:3b:b2:e1:c5:94:f4:59:73: 0c:6c:43:25:cb:cd:8c:99:d8:5d:be:f5:9b:49:d1:e8:9b:52: 2e:51:18:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeJIj1O/6hc/bcgnEpSZJkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjUwNjE5MTcwMDExWhcNMjUwNjIwMTcwMDExWjAzMTEwLwYDVQQD Eyg1N2VhMzQzOGEyMTRmMDExZGE5ZTVlNGM5ZjIwOWQ4ZjQxNDZhNGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmsUtHEkX0XgG23Tm9Q4DuTYvJA1 RkPkXudZ7+GsL9nr/JbLn70A9f1xcYqEd/oy9h/pDqQl+x+GKwi4jSWH9oiD5FkK ZlqiUxylVJusRy5LCLqTPwrNBzwy6STg+OoZ8BIujUhJCwJFahH1syPPE/x8D1Dj Yqya0kNFxiwzhML4R+FQBjqVDL+JF9BsFhbr3zTvq+j0rR46yuG6mgnk3aEhBxVQ k9YTKGE4LgOgIA8bOyoVKPSOEzNdb8tsIzHr+VgrCWw2xWpFHX5jLd2eZJyYF7x1 hlIIyhKtO2Xnzr4xF8EPfXxf57CM0ZBZFbDvpVH08gwympfryKkHsjPYTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfqNDiiFPAR2p5eTJ8gnY9BRqTEMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmph0nY08 3YuAEn4ECji2ZwD0GmzTBMJBGQuBlWSmUFprAHpfz0CI3cTdTkXHIzeCxjywXMhH TnrL0uorsMm1hbuSm99LatZEj1aWbPUm4Lg/9LEt2yGX3Q6sLAkYN8VE72tpWq4Q Dub0g5zV1qpnO0Q/ckuBWj/3FNRLEimzK73/3wjROtvvNseNtGz4pQi6MjkPOiJu BlvEtHfRuX4TfSui9nBu7+eP2Xphj+A1X1hzHfn+VMlJDcjo8agA5XZHRh9zkEQn kd/ZcxAAGJVaHpVST5OB9GRr/tcq4klokivm5Duy4cWU9FlzDGxDJcvNjJnYXb71 m0nR6JtSLlEYaw== -----END CERTIFICATE-----Generated at Thu Jun 19 20:14:03 2025 by rpki-client