$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: 7E0L8fLpi0UtGtEVVR5gzCfByou6ci025CderbTIBhk= Subject key identifier: 30:39:AD:85:87:97:94:6C:9A:CF:90:18:43:22:BA:B1:BD:3D:81:F0 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019827107638F433943829C5DDBACF08A8F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 13B4 Signing time: Sun 20 Jul 2025 09:00:46 +0000 Manifest this update: Sun 20 Jul 2025 09:00:46 +0000 Manifest next update: Mon 21 Jul 2025 09:00:46 +0000 Files and hashes: 1: 0dOOZcxouEyBwDParynks7StwHE.roa (hash: JJ6ZudJMCas3SwJxwt6lm5WwMowMP1vWjiYzBqRT97Y=) 2: 0j_F7ObjeWM_-MDv2vnltyDHFUk.roa (hash: OsaLtzwPIW8gqCsltJsusg8e34JBn85Om/z5CrRK5Uo=) 3: 2sVCpnUAKblWh9v7qVEsEKRUfWA.roa (hash: 1CKYprr2EavvDbIEOzey7tbCXji3ClAfurVr7rHadc8=) 4: 7-L8h3vxgPMOucvJUyn6jvtlWq4.roa (hash: JqzKMiGM9qG/KoIssHAuY0XkXfUrBvh/Eg7mCU+N938=) 5: 9oLYcSPHMvCe-Pv2M_rza63XTow.roa (hash: wcB89ybRT1IhIFGZVbatLp94YXi4OhrbT8jvmNnsE+Y=) 6: FlI6inWj2TmnnIGOS7ZVGBf_bD0.roa (hash: 5X+YWS6gSiJ/Tn7alo0GG3dyffx54L0u6yH14DDRlbA=) 7: GaWyzUO0HJeBjasyRqC97NsCSD4.roa (hash: UvlgjWI3E2c5HU/6Dd5CAeuvj7bfQfjld2BSF5GNKKQ=) 8: IVO47FxImh-y3rWgAak5j9Lhqu0.roa (hash: UCZgxxNbeCBV4XvQFqq64x8nscbBvfYrvynDklgIEQw=) 9: JA31DZScZvYIwJfErV7LU6Pm8FI.roa (hash: j2dwdPSin1EaN8bZ47DvZWD73l5sMHPdzBMxjZwMols=) 10: OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa (hash: CYtkRKt0tKCgVnuKUn9N15L60FkF9ZK/0wKUSmI7zGM=) 11: P3PfwPwkcE040d3Qr-D90iwF4_k.roa (hash: T1rptYAIYRS6lWsTlrVwQbPRhxvEwgxKU1Xm6hHDr7M=) 12: SYg89xuEXUG6bMD7Pl2CsVBcmVo.roa (hash: FafX8OoXWchxsyj8C7cAZtH+8tr3bEqU6ajEo9eZfcQ=) 13: V05XtxLuNAQpoO5H9P1IS4dSoX4.roa (hash: LXCIEksdGEPZzBTCWjbFwGM6+GL06zblhdET9a+UUAU=) 14: h6WkXFQCalKSUE8qQsL0s6At9NA.roa (hash: xC7sZws2p6+JMX2/NZkkNUsOt0/rPDjC11vfXSnqVOc=) 15: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: 2RDvS76dhazgiltHDUMX5hVqXL75+iOyAzeuyGv1X5o=) 16: ijQaYqsX36Iual-crRkacGaVc58.roa (hash: ccJw28PP5f/TupBMNwlADhguaBvKtjfCXWHuFYXPLzA=) 17: tta7Y8CGam3Bk5ymO6HtDo5JmhU.roa (hash: XDbIU4BmGkvASLJz4BGT9b/lR8c31GenOVU33j6ph6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:10:76:38:f4:33:94:38:29:c5:dd:ba:cf:08:a8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jul 20 09:00:46 2025 GMT Not After : Jul 21 09:00:46 2025 GMT Subject: CN=3039ad858797946c9acf90184322bab1bd3d81f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:97:cd:ba:b5:c4:71:0c:d4:a6:40:f2:6c: ae:d3:7c:52:8e:13:7a:f7:21:0c:fa:c7:b5:ee:ac: d4:c8:c5:83:0a:16:31:d1:0b:36:29:aa:c7:bc:0b: f9:6a:59:48:fe:33:bf:97:f3:6b:2a:0a:77:52:02: 21:79:63:c4:fe:87:6a:c4:b1:b4:c7:b8:6a:f5:01: 42:40:fa:e4:a2:95:ec:48:bd:97:16:69:b9:4a:b7: 8a:0f:f6:9a:72:a1:69:4a:12:47:1f:db:57:d1:54: 7d:6d:2f:f1:40:39:9f:64:0a:de:54:12:4a:34:4e: 01:3e:51:29:8c:10:54:f2:ef:cc:9f:e8:ee:72:b4: 6b:d6:22:7f:82:e4:62:bf:dd:01:ff:ca:fe:f3:65: f3:28:f7:fd:b4:b9:58:00:2a:0a:b4:24:ad:02:18: 73:7a:ad:d6:98:02:3e:20:00:de:df:48:68:ec:e4: 9a:55:f1:d2:e2:a5:a7:99:3b:3d:af:9c:0a:0e:58: 48:e2:01:d0:11:7f:24:27:19:24:e4:5e:27:68:e2: 74:11:e3:12:d3:8c:24:db:31:e5:87:b0:12:bd:aa: 13:17:80:21:ed:c2:34:6a:e0:30:96:7a:60:9a:da: 64:a1:49:02:bb:6f:e7:41:d3:0d:66:f6:fe:8e:9b: d7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:39:AD:85:87:97:94:6C:9A:CF:90:18:43:22:BA:B1:BD:3D:81:F0 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:0c:d7:dc:cc:eb:d2:eb:24:24:12:9f:9d:21:5a:0a:cb:b7: 62:f8:7d:91:f9:0a:a1:14:c9:11:5e:1b:58:31:a1:5d:c8:2b: 85:75:84:79:90:3c:87:27:78:70:3a:06:85:1f:83:05:57:42: 17:27:68:01:b1:e8:a0:6f:7d:33:7d:6a:09:18:77:e5:f5:57: eb:8d:e8:57:cd:1f:9a:81:85:4c:02:ed:7f:ed:cf:30:b3:a9: b6:24:0b:c4:c2:a1:8a:d4:b0:3c:9d:34:40:71:2e:fb:8b:b7: 28:2c:f9:b8:a4:d4:b8:26:d0:46:cc:a1:29:07:26:cf:05:50: e5:8e:a0:d1:94:a3:aa:60:65:85:d7:83:03:25:20:cc:60:b8: 43:ce:0e:d3:61:a2:20:c4:7a:9b:a9:4a:c9:8a:9c:f9:7d:a6: 57:d3:ba:ea:8b:c1:8d:1e:8f:c3:a0:eb:b3:4d:f3:e7:82:61: 86:5f:22:25:1e:2d:1e:f2:bf:d3:21:b9:8b:3d:db:cc:65:61: fb:e2:f2:a0:cf:1d:e9:9d:99:51:87:d3:39:82:a6:d1:ab:77: 67:54:2e:ca:84:33:81:7a:57:ac:5c:c0:86:c3:5f:cd:80:d7: 2a:6f:bf:e0:06:cd:4b:05:c4:a0:f8:96:6a:f8:7d:f3:6d:ef: 6d:1b:8a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnEHY49DOUOCnF3brPCKj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjUwNzIwMDkwMDQ2WhcNMjUwNzIxMDkwMDQ2WjAzMTEwLwYDVQQD EygzMDM5YWQ4NTg3OTc5NDZjOWFjZjkwMTg0MzIyYmFiMWJkM2Q4MWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9OXzbq1xHEM1KZA8myu03xSjhN6 9yEM+se17qzUyMWDChYx0Qs2KarHvAv5allI/jO/l/NrKgp3UgIheWPE/odqxLG0 x7hq9QFCQPrkopXsSL2XFmm5SreKD/aacqFpShJHH9tX0VR9bS/xQDmfZAreVBJK NE4BPlEpjBBU8u/Mn+jucrRr1iJ/guRiv90B/8r+82XzKPf9tLlYACoKtCStAhhz eq3WmAI+IADe30ho7OSaVfHS4qWnmTs9r5wKDlhI4gHQEX8kJxkk5F4naOJ0EeMS 04wk2zHlh7ASvaoTF4Ah7cI0auAwlnpgmtpkoUkCu2/nQdMNZvb+jpvXfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDA5rYWHl5Rsms+QGEMiurG9PYHwMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAzX3Mzr 0uskJBKfnSFaCsu3Yvh9kfkKoRTJEV4bWDGhXcgrhXWEeZA8hyd4cDoGhR+DBVdC FydoAbHooG99M31qCRh35fVX643oV80fmoGFTALtf+3PMLOptiQLxMKhitSwPJ00 QHEu+4u3KCz5uKTUuCbQRsyhKQcmzwVQ5Y6g0ZSjqmBlhdeDAyUgzGC4Q84O02Gi IMR6m6lKyYqc+X2mV9O66ovBjR6Pw6Drs03z54Jhhl8iJR4tHvK/0yG5iz3bzGVh ++LyoM8d6Z2ZUYfTOYKm0at3Z1QuyoQzgXpXrFzAhsNfzYDXKm+/4AbNSwXEoPiW avh9823vbRuKZA== -----END CERTIFICATE-----Generated at Sun Jul 20 14:12:59 2025 by rpki-client