$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft File: THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json) Hash identifier: 9nSen/P2uuNBGxi+dO5wGxtGvhal6xuiz0hC15/0h2M= Subject key identifier: DA:79:A5:65:18:9F:86:C1:D6:82:F8:4A:21:29:01:DF:62:66:B2:FC Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728 Certificate serial: 01984106FC709D2833627AAB3D7F15D6C9B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft Manifest number: 1606 Signing time: Fri 25 Jul 2025 10:00:33 +0000 Manifest this update: Fri 25 Jul 2025 10:00:33 +0000 Manifest next update: Sat 26 Jul 2025 10:00:33 +0000 Files and hashes: 1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=) 2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=) 3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=) 4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=) 5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=) 6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=) 7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=) 8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=) 9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=) 10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=) 11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=) 12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=) 13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: b8P9l6pKU2Vmrtjo0FSvGQ2a+fR2PyxY0MwKvjkEEu4=) 14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=) 15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=) 16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=) 17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=) 18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=) 19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=) 20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=) 21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=) 22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=) 23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=) 24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=) 25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=) 26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:41:06:fc:70:9d:28:33:62:7a:ab:3d:7f:15:d6:c9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7844abef711c232c84f83c807a420af3804728 Validity Not Before: Jul 25 10:00:33 2025 GMT Not After : Jul 26 10:00:33 2025 GMT Subject: CN=da79a565189f86c1d682f84a212901df6266b2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:9b:63:fb:77:fb:ac:7a:9c:73:d7:60:e9: 79:6a:0b:ce:a7:80:94:af:bd:ce:b2:39:8d:ea:a9: 79:16:3d:5d:2a:41:38:cf:eb:e3:0c:d3:a9:14:fe: 12:c5:df:bf:7d:5d:a9:22:72:15:89:1a:1f:96:0e: 5b:f4:86:3e:95:1b:32:35:08:b2:7e:09:20:ef:d4: 51:4b:9d:44:df:da:d0:ca:a3:ed:69:a8:74:2f:6c: 10:41:d0:f7:bd:9e:8e:28:ea:b7:7b:53:19:d9:64: 12:ec:0d:a4:e0:a6:f0:f5:ae:32:5a:ac:93:f7:68: 42:11:3a:ba:b4:0a:c6:00:e9:10:b3:83:cb:2a:ee: 4f:49:ca:a2:14:83:fd:1a:86:36:dc:2b:20:f5:56: f6:cc:0f:c8:66:fa:d7:d0:a9:c5:91:07:cb:e1:c2: ce:4c:ae:9e:97:bd:6e:aa:36:e2:50:fb:d2:98:9c: 97:97:dd:25:c6:cf:45:30:6c:72:39:b8:49:38:10: 4e:5a:fa:62:00:58:a3:cd:34:1c:de:cb:47:a5:33: 1d:09:65:82:6e:9a:e8:47:19:26:aa:60:d0:88:f7: 52:ee:35:ab:4c:51:41:13:87:6b:4d:a7:37:ee:18: 71:e0:d5:6b:d0:31:81:4d:2b:bf:b6:66:ff:92:23: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:79:A5:65:18:9F:86:C1:D6:82:F8:4A:21:29:01:DF:62:66:B2:FC X509v3 Authority Key Identifier: keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b6:68:9c:12:13:02:cb:b1:08:6b:35:99:ef:a5:90:ce:ba: ad:03:be:ff:b7:8d:ae:d2:71:66:1a:81:cf:42:7d:39:9a:34: 8d:ff:62:ce:ae:62:3f:8f:f5:0f:27:21:34:09:99:92:1f:18: d4:64:f8:ea:ec:03:45:fa:31:2e:5c:eb:c3:51:8c:2f:3f:cd: ce:72:ec:85:a0:bb:00:f1:07:d7:ff:6a:80:b0:9a:b4:b2:5d: 85:44:c5:32:01:d0:12:d2:2f:04:9a:7b:1d:ef:00:02:e9:31: 03:6c:54:81:c0:8f:4b:a0:0e:e7:44:8e:4b:90:09:a3:15:f2: 93:b3:bf:e3:e0:1b:25:a9:ad:e3:ea:e7:7a:80:d1:3e:db:d6: 20:b0:a0:81:3a:ea:39:3f:29:58:f4:64:b2:d0:61:43:31:0a: 9f:ed:e7:db:c2:b8:b7:cd:14:4c:46:08:66:67:6e:2a:a1:a7: 52:2d:2c:d0:6f:a9:05:84:8a:9f:63:ac:ef:01:3e:31:21:4f: e2:ea:b2:f9:f6:13:82:d7:12:fd:d2:25:92:41:66:f8:2a:76: 1b:36:d7:29:f6:2f:d8:1e:9d:0a:43:c2:9a:4e:bc:25:1a:f1: 42:f1:e0:64:a2:a7:6b:c2:0d:1b:63:85:08:f2:80:75:2a:e1: 09:31:27:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhBBvxwnSgzYnqrPX8V1smyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNzg0NGFiZWY3MTFjMjMyYzg0ZjgzYzgwN2E0MjBhZjM4 MDQ3MjgwHhcNMjUwNzI1MTAwMDMzWhcNMjUwNzI2MTAwMDMzWjAzMTEwLwYDVQQD EyhkYTc5YTU2NTE4OWY4NmMxZDY4MmY4NGEyMTI5MDFkZjYyNjZiMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYObY/t3+6x6nHPXYOl5agvOp4CU r73OsjmN6ql5Fj1dKkE4z+vjDNOpFP4Sxd+/fV2pInIViRoflg5b9IY+lRsyNQiy fgkg79RRS51E39rQyqPtaah0L2wQQdD3vZ6OKOq3e1MZ2WQS7A2k4Kbw9a4yWqyT 92hCETq6tArGAOkQs4PLKu5PScqiFIP9GoY23Csg9Vb2zA/IZvrX0KnFkQfL4cLO TK6el71uqjbiUPvSmJyXl90lxs9FMGxyObhJOBBOWvpiAFijzTQc3stHpTMdCWWC bproRxkmqmDQiPdS7jWrTFFBE4drTac37hhx4NVr0DGBTSu/tmb/kiOk/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp5pWUYn4bB1oL4SiEpAd9iZrL8MB8GA1UdIwQY MBaAFEx4RKvvcRwjLIT4PIB6QgrzgEcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgt ZGFiNmI4M2NmN2VjLzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi84ZDU1YzAtOWFhMC00YmU3LTgyYTgtZGFiNmI4M2NmN2Vj LzEvVEhoRXEtOXhIQ01zaFBnOGdIcENDdk9BUnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7ZonBIT AsuxCGs1me+lkM66rQO+/7eNrtJxZhqBz0J9OZo0jf9izq5iP4/1DychNAmZkh8Y 1GT46uwDRfoxLlzrw1GMLz/NznLshaC7APEH1/9qgLCatLJdhUTFMgHQEtIvBJp7 He8AAukxA2xUgcCPS6AO50SOS5AJoxXyk7O/4+AbJamt4+rneoDRPtvWILCggTrq OT8pWPRkstBhQzEKn+3n28K4t80UTEYIZmduKqGnUi0s0G+pBYSKn2Os7wE+MSFP 4uqy+fYTgtcS/dIlkkFm+Cp2GzbXKfYv2B6dCkPCmk68JRrxQvHgZKKna8ING2OF CPKAdSrhCTEnHA== -----END CERTIFICATE-----Generated at Fri Jul 25 13:16:39 2025 by rpki-client