$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: Cxj2jSiS13P1CCFdwk3YoZnlBqC/QmgeF0dIo4SWE+k= Subject key identifier: 1C:7B:C0:BF:57:92:31:20:B0:F7:97:92:81:36:17:35:97:7F:03:C7 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019A4E868D4DBB2F064CEF44CAE6DDEB59C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0D5E Signing time: Tue 04 Nov 2025 11:00:32 +0000 Manifest this update: Tue 04 Nov 2025 11:00:32 +0000 Manifest next update: Wed 05 Nov 2025 11:00:32 +0000 Files and hashes: 1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=) 2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=) 3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 4: 6f1sSkB9WX-VDyBfu2FjGF8_768.roa (hash: 81FaTuTny3LusxPdZBC/CvEnuJ1t4vAJ75jZ7Dn4nWk=) 5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: XyPTHMiAgaO7r4m7bASRVBrOQvEpPhrOAkQAuKnqsCg=) 7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=) 15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=) 17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 18: i-TboqvR4QwoJ4ln5MB6Q0lRrLg.roa (hash: t8GdeR+oskUDLv8QTLlQVLSxK4jgz1+No6165ZL4RhM=) 19: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 20: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=) 21: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=) 22: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 23: so0qnaePVf-1j6Sm9a19tpcCNaQ.roa (hash: ESTQ2RxrQEjdpeqqeqULztxXVQTtL+3+1LYMpfup6IQ=) 24: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 25: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:8d:4d:bb:2f:06:4c:ef:44:ca:e6:dd:eb:59:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Nov 4 11:00:32 2025 GMT Not After : Nov 5 11:00:32 2025 GMT Subject: CN=1c7bc0bf57923120b0f7979281361735977f03c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:f4:8e:a9:3a:4c:46:ea:65:d9:d3:f0:d6: 33:a0:7c:b1:50:9d:62:e3:a8:17:78:3b:79:eb:59: 86:1c:de:b9:db:49:6c:18:7d:3d:18:90:e6:ed:4d: f1:1e:e4:00:0e:fc:0c:3f:b5:e4:d3:86:56:ba:ec: e0:0a:bb:7c:1a:38:c8:63:c4:f4:4c:11:17:ab:43: 9e:1f:0c:d4:cd:6b:a8:66:69:a7:70:bc:93:48:04: e9:71:52:b4:0d:0a:55:42:74:3e:61:b0:cb:2c:37: 79:06:4d:e1:e5:9b:ce:75:b7:ef:cf:4a:cb:9c:9f: 5e:67:c9:da:f3:0b:66:46:a7:dc:1d:92:e5:4a:00: bd:26:5d:27:c9:d7:2b:88:cd:3c:d3:ee:68:e4:36: 0c:5c:bb:a9:7e:c9:bb:3f:f4:dc:95:0a:dd:43:ec: 34:b0:ec:a3:5d:62:62:24:83:b3:7d:db:5f:47:b1: 4c:ea:8a:e5:c6:7f:38:ee:39:2a:31:01:7f:3e:36: 38:a6:3f:3d:c8:98:92:84:4b:3d:4c:8d:af:f6:68: f8:4b:8d:33:be:c2:5a:3e:a5:ee:59:6a:36:3d:c2: b2:d5:5a:7b:86:82:e2:85:d8:ef:2b:e7:6a:53:74: 09:7f:53:2d:94:a2:78:9a:90:a5:45:7c:18:89:36: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7B:C0:BF:57:92:31:20:B0:F7:97:92:81:36:17:35:97:7F:03:C7 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:dd:0b:18:b1:34:9a:4d:7b:14:3c:5a:9f:be:fd:cd:1f:ad: a1:f0:94:e6:d1:d6:f4:d1:52:96:52:05:4c:54:26:f0:ae:40: 25:3a:3e:93:e4:d4:e9:e9:a3:a8:8b:88:65:a5:dc:39:90:ce: 1f:71:03:d0:26:d8:4a:92:2b:dd:0b:77:13:32:4a:16:b7:86: ef:98:5c:16:22:d7:3a:1c:68:22:b7:0c:5b:17:c6:1b:19:fd: 18:16:e2:3f:5b:09:8b:30:ba:da:21:b3:01:8d:ab:8c:ef:88: 50:18:88:dc:8e:bd:53:2c:7e:ed:02:3d:a2:af:c9:b8:ca:75: b7:ca:ca:eb:83:1c:f4:5d:ff:3a:44:7f:d0:4f:3f:fa:2f:95: 63:de:77:4f:76:41:03:96:90:d8:e2:0c:f2:f2:fc:b9:04:cf: 7c:6c:b6:94:22:a9:85:23:80:8c:a6:9a:b1:04:10:f7:7a:c0: 00:13:99:0b:ce:dc:1b:1f:b2:76:ad:64:0b:7c:01:1f:e5:2b: f1:8b:4a:16:3b:50:93:3e:c1:15:75:7a:f9:46:5e:a4:95:a7: 76:84:7a:36:a5:55:17:8b:82:47:7f:07:00:da:19:0b:e5:33: 17:5c:7e:91:f7:35:f4:65:2d:50:f5:1b:56:65:5a:74:ec:1d: 44:ec:fb:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOho1Nuy8GTO9Eyubd61nGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUxMTA0MTEwMDMyWhcNMjUxMTA1MTEwMDMyWjAzMTEwLwYDVQQD EygxYzdiYzBiZjU3OTIzMTIwYjBmNzk3OTI4MTM2MTczNTk3N2YwM2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd/0jqk6TEbqZdnT8NYzoHyxUJ1i 46gXeDt561mGHN6520lsGH09GJDm7U3xHuQADvwMP7Xk04ZWuuzgCrt8GjjIY8T0 TBEXq0OeHwzUzWuoZmmncLyTSATpcVK0DQpVQnQ+YbDLLDd5Bk3h5ZvOdbfvz0rL nJ9eZ8na8wtmRqfcHZLlSgC9Jl0nydcriM080+5o5DYMXLupfsm7P/TclQrdQ+w0 sOyjXWJiJIOzfdtfR7FM6orlxn847jkqMQF/PjY4pj89yJiShEs9TI2v9mj4S40z vsJaPqXuWWo2PcKy1Vp7hoLihdjvK+dqU3QJf1MtlKJ4mpClRXwYiTawzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx7wL9XkjEgsPeXkoE2FzWXfwPHMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxt0LGLE0 mk17FDxan779zR+tofCU5tHW9NFSllIFTFQm8K5AJTo+k+TU6emjqIuIZaXcOZDO H3ED0CbYSpIr3Qt3EzJKFreG75hcFiLXOhxoIrcMWxfGGxn9GBbiP1sJizC62iGz AY2rjO+IUBiI3I69Uyx+7QI9oq/JuMp1t8rK64Mc9F3/OkR/0E8/+i+VY953T3ZB A5aQ2OIM8vL8uQTPfGy2lCKphSOAjKaasQQQ93rAABOZC87cGx+ydq1kC3wBH+Ur 8YtKFjtQkz7BFXV6+UZepJWndoR6NqVVF4uCR38HANoZC+UzF1x+kfc19GUtUPUb VmVadOwdROz7aQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:43:24 2025 by rpki-client