$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: bK7wZMn4E2ulBEXgx5idjDhcEvMoq0Gye4FwTYbPI6Q= Subject key identifier: 4A:BD:B8:01:0E:A3:8B:ED:6C:A8:42:44:C5:9A:6A:BB:4F:90:81:8F Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019827477EB8BE0D9668BF43075ED3699A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1662 Signing time: Sun 20 Jul 2025 10:00:53 +0000 Manifest this update: Sun 20 Jul 2025 10:00:53 +0000 Manifest next update: Mon 21 Jul 2025 10:00:53 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: 3ygxTo/pJIY3aQDAFbA6QQhzk13i2rhQEPye2C3GJIg=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 5: 5RBinPwOy0Ur02K4skRXrZ57oe4.roa (hash: FohLkPaRCdpVe1POii3jQVhmOCscuDyAYaI/LSwOnms=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 11: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 12: H5_UEf6RMp0ZMb_Mv4D8iAcwsyU.roa (hash: uonWTKVU8g+mUAIIxQ5x86Iq7w5qOGhQtxDY89kAJIY=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 21: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: aAlCgMfdB66L_mtq-oOwkAeFurg.roa (hash: dRvFRI+NbjYVMQtrKTxs5054NLT1K04L2S3KDJNIoJE=) 24: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=) 25: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 26: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 27: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 28: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=) 32: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:47:7e:b8:be:0d:96:68:bf:43:07:5e:d3:69:9a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jul 20 10:00:53 2025 GMT Not After : Jul 21 10:00:53 2025 GMT Subject: CN=4abdb8010ea38bed6ca84244c59a6abb4f90818f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:c0:10:af:e7:78:06:eb:8f:aa:1f:e0:3c: 6d:f7:9a:72:c1:65:23:26:93:29:1d:48:dd:62:41: 22:73:8b:02:f9:b4:09:23:1b:07:3c:c1:59:7f:a4: 34:50:99:b4:2c:2a:7f:2c:7c:89:56:4d:5f:14:fb: 27:a4:21:f9:d0:bf:b1:7d:5d:e1:ed:6c:7a:65:87: 45:58:39:6e:13:1a:ad:90:7f:19:00:3d:1b:23:af: 01:a9:30:23:f2:f1:60:fd:0d:8b:6f:e2:85:ae:50: e7:b4:76:d5:58:29:3d:3f:71:db:a7:90:76:12:2f: eb:c8:f4:cf:66:42:a9:ce:06:00:b4:19:be:5e:8b: d9:73:8a:25:5a:a0:cd:2c:35:b2:2b:7a:65:93:c7: 3a:76:1c:7a:48:c4:55:66:83:e3:3a:3c:e5:19:5a: 4b:fc:3b:53:09:3d:3b:d5:6f:35:28:e6:dd:b8:ab: 8a:a4:a4:11:d3:56:ab:6e:b1:a8:cd:49:64:a4:b1: d1:6d:06:54:b5:9b:6a:f8:f7:83:a5:30:03:2f:de: fe:62:9e:02:cf:01:91:56:e9:44:60:9a:94:5b:f0: e9:fc:a3:7f:41:9a:e5:80:d8:f6:b6:b3:4c:33:f5: ac:45:2b:ed:58:91:b2:ae:16:f6:8c:ec:89:63:e8: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BD:B8:01:0E:A3:8B:ED:6C:A8:42:44:C5:9A:6A:BB:4F:90:81:8F X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:1a:c7:54:9d:a8:42:13:08:01:a6:23:39:05:8e:6d:11:1f: 00:c0:a3:df:25:64:05:cc:c7:b5:fe:0a:63:20:2d:a8:9e:5f: ad:e0:ef:84:91:af:4e:07:93:2f:e5:5c:c9:c5:20:00:79:9d: 78:10:e9:e4:28:ba:a6:6d:2f:45:57:f5:13:45:dd:ec:32:9b: 3e:71:2b:4c:fd:bc:9d:36:b8:8f:a4:05:34:57:c2:54:81:93: 1d:f7:40:24:c6:9d:68:21:dc:7f:fe:53:c5:3e:6c:17:ec:d9: d3:b9:4d:b0:76:a8:fa:1e:f7:f7:4d:ab:06:e1:8c:3a:7e:a4: c3:c5:87:d8:4b:b9:89:cf:fe:5d:41:ff:f7:5f:ff:d2:49:67: 84:2c:27:e9:a0:00:13:c4:bf:15:15:e3:c7:ec:b1:c1:7b:6b: 4e:4e:52:c8:21:b0:7a:99:ff:9d:be:26:d0:16:e4:cc:dd:88: 43:3f:24:83:95:2d:3f:e4:ed:a2:75:61:f4:98:df:b5:43:cb: 7f:d1:c9:a0:7b:45:bf:19:1a:a5:f8:e2:db:9e:3f:ee:fd:27: 24:24:f4:dc:42:3c:c7:e3:3e:de:82:ba:8b:12:1d:1d:ab:34: 31:b3:eb:9c:4d:e0:a6:50:a2:59:61:23:f5:37:26:8d:87:da: d6:fc:92:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnR364vg2WaL9DB17TaZqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUwNzIwMTAwMDUzWhcNMjUwNzIxMTAwMDUzWjAzMTEwLwYDVQQD Eyg0YWJkYjgwMTBlYTM4YmVkNmNhODQyNDRjNTlhNmFiYjRmOTA4MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3nAEK/neAbrj6of4Dxt95pywWUj JpMpHUjdYkEic4sC+bQJIxsHPMFZf6Q0UJm0LCp/LHyJVk1fFPsnpCH50L+xfV3h 7Wx6ZYdFWDluExqtkH8ZAD0bI68BqTAj8vFg/Q2Lb+KFrlDntHbVWCk9P3Hbp5B2 Ei/ryPTPZkKpzgYAtBm+XovZc4olWqDNLDWyK3plk8c6dhx6SMRVZoPjOjzlGVpL /DtTCT071W81KObduKuKpKQR01arbrGozUlkpLHRbQZUtZtq+PeDpTADL97+Yp4C zwGRVulEYJqUW/Dp/KN/QZrlgNj2trNMM/WsRSvtWJGyrhb2jOyJY+gpawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq9uAEOo4vtbKhCRMWaartPkIGPMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBrHVJ2o QhMIAaYjOQWObREfAMCj3yVkBczHtf4KYyAtqJ5freDvhJGvTgeTL+VcycUgAHmd eBDp5Ci6pm0vRVf1E0Xd7DKbPnErTP28nTa4j6QFNFfCVIGTHfdAJMadaCHcf/5T xT5sF+zZ07lNsHao+h73902rBuGMOn6kw8WH2Eu5ic/+XUH/91//0klnhCwn6aAA E8S/FRXjx+yxwXtrTk5SyCGwepn/nb4m0BbkzN2IQz8kg5UtP+TtonVh9JjftUPL f9HJoHtFvxkapfji254/7v0nJCT03EI8x+M+3oK6ixIdHas0MbPrnE3gplCiWWEj 9TcmjYfa1vySrA== -----END CERTIFICATE-----Generated at Sun Jul 20 18:02:50 2025 by rpki-client