$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: REQCm3xkIaX+yt6Lb9eQCeSw4EMzpjWZpl0gihBt/Fg= Subject key identifier: D5:10:2D:27:CE:BF:7C:28:6F:0D:26:CC:E9:57:83:3A:F4:5F:FE:46 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019874F528DA34901577B37FA434A8B0ED34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0C65 Signing time: Mon 04 Aug 2025 12:01:20 +0000 Manifest this update: Mon 04 Aug 2025 12:01:20 +0000 Manifest next update: Tue 05 Aug 2025 12:01:20 +0000 Files and hashes: 1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=) 2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=) 3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 4: 6f1sSkB9WX-VDyBfu2FjGF8_768.roa (hash: 81FaTuTny3LusxPdZBC/CvEnuJ1t4vAJ75jZ7Dn4nWk=) 5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: VajRzMyXizID2e5wd6+iInnx598p4TNx3AxLbzNv86U=) 7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=) 15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=) 17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 18: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 19: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=) 20: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=) 21: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 22: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 23: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) 24: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:f5:28:da:34:90:15:77:b3:7f:a4:34:a8:b0:ed:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Aug 4 12:01:20 2025 GMT Not After : Aug 5 12:01:20 2025 GMT Subject: CN=d5102d27cebf7c286f0d26cce957833af45ffe46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:28:25:3e:12:fd:e7:85:ad:65:87:ed:84:98: 58:4e:99:fe:84:39:fb:54:0a:da:ce:e6:a4:ba:62: 93:25:6a:dc:1f:ab:ca:49:3c:e5:21:56:bb:f1:ed: ed:a1:ca:61:70:d2:fc:94:72:93:9f:bb:2f:1f:ce: 67:45:67:63:f2:cb:a8:63:e4:af:d9:9b:8a:da:93: c5:62:dc:51:12:7e:41:ed:7a:67:7d:b6:83:46:99: 59:62:22:13:e6:11:e5:ad:41:bf:e5:f0:47:18:af: 23:f9:a3:8f:53:c9:0b:b1:82:e3:f9:cf:de:3b:c6: 2a:98:91:21:ed:4a:88:a8:68:5e:9b:44:35:58:6b: f6:45:0a:f4:94:c5:8e:21:26:7c:0c:79:3f:0d:08: 5a:f2:8b:9e:28:d1:91:1c:47:4b:93:af:13:3a:c5: fa:79:3a:9c:df:35:dd:9b:2a:ff:13:34:34:7a:5e: 85:9f:02:53:9c:40:e1:69:e5:d2:93:70:ae:a3:27: ef:b7:b4:53:1c:50:44:bb:34:23:01:3a:cf:c0:08: 1e:a2:8f:2c:68:40:ca:32:03:3b:74:a7:fe:92:07: ac:62:1e:c9:1d:40:9a:a3:23:bc:72:9c:6b:9d:12: f2:b6:f4:96:61:d9:56:ea:38:66:7e:e8:6c:d5:00: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:10:2D:27:CE:BF:7C:28:6F:0D:26:CC:E9:57:83:3A:F4:5F:FE:46 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:e7:09:c9:8d:7b:09:2d:94:a2:6b:79:2f:3d:74:cc:c3: 61:3e:0b:da:0a:3f:94:33:7d:30:6b:b6:8d:9a:8b:52:48:d9: 63:e4:97:2f:03:37:4a:fc:45:b1:8c:29:21:ae:10:69:4c:97: 03:8f:9b:a2:59:b8:08:62:9e:ff:0f:c8:23:27:97:97:27:c4: 34:98:a2:6a:15:33:91:99:51:e0:ab:48:e3:8b:24:87:f5:2e: ac:be:45:46:44:01:0b:ed:d1:c0:0e:4c:ce:74:f2:57:2c:9e: 20:36:50:83:a4:39:58:6a:ba:af:5d:78:99:e9:f2:bd:19:12: 27:d2:9e:7e:21:55:7e:a9:87:f1:26:7c:09:0b:7a:97:1c:d2: 61:56:ab:4e:f7:9a:48:ea:5b:76:05:89:40:78:b3:69:dd:26: 30:26:bd:93:6a:36:e9:9a:95:0f:95:4c:ef:7d:bd:22:da:d6: d3:37:0a:0a:ef:99:6d:91:a6:ee:92:f8:b7:22:d3:29:36:6c: f9:10:84:d6:93:17:b0:6c:90:83:f2:6f:38:11:76:13:0a:bd: f1:ff:be:9e:a9:8c:3a:c7:08:a9:19:a3:80:2c:0c:b9:bc:7c: 7c:99:a9:b7:63:24:a5:b8:02:8a:1c:55:55:96:06:ea:05:a4: 51:fa:aa:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh09SjaNJAVd7N/pDSosO00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUwODA0MTIwMTIwWhcNMjUwODA1MTIwMTIwWjAzMTEwLwYDVQQD EyhkNTEwMmQyN2NlYmY3YzI4NmYwZDI2Y2NlOTU3ODMzYWY0NWZmZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiglPhL954WtZYfthJhYTpn+hDn7 VArazuakumKTJWrcH6vKSTzlIVa78e3tocphcNL8lHKTn7svH85nRWdj8suoY+Sv 2ZuK2pPFYtxREn5B7XpnfbaDRplZYiIT5hHlrUG/5fBHGK8j+aOPU8kLsYLj+c/e O8YqmJEh7UqIqGhem0Q1WGv2RQr0lMWOISZ8DHk/DQha8oueKNGRHEdLk68TOsX6 eTqc3zXdmyr/EzQ0el6FnwJTnEDhaeXSk3Cuoyfvt7RTHFBEuzQjATrPwAgeoo8s aEDKMgM7dKf+kgesYh7JHUCaoyO8cpxrnRLytvSWYdlW6jhmfuhs1QDuewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUQLSfOv3wobw0mzOlXgzr0X/5GMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjLnCcmN ewktlKJreS89dMzDYT4L2go/lDN9MGu2jZqLUkjZY+SXLwM3SvxFsYwpIa4QaUyX A4+bolm4CGKe/w/IIyeXlyfENJiiahUzkZlR4KtI44skh/UurL5FRkQBC+3RwA5M znTyVyyeIDZQg6Q5WGq6r114menyvRkSJ9KefiFVfqmH8SZ8CQt6lxzSYVarTvea SOpbdgWJQHizad0mMCa9k2o26ZqVD5VM7329ItrW0zcKCu+ZbZGm7pL4tyLTKTZs +RCE1pMXsGyQg/JvOBF2Ewq98f++nqmMOscIqRmjgCwMubx8fJmpt2MkpbgCihxV VZYG6gWkUfqqSw== -----END CERTIFICATE-----Generated at Mon Aug 4 19:12:46 2025 by rpki-client