$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: Co9bBQH4xFrFJXWDtLFkIbBlZ0NlEvUjqvBoakgPf8U= Subject key identifier: 48:B1:12:FE:86:50:68:61:64:7E:52:E2:95:4D:55:A5:BC:36:1A:DF Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019849D300F1EBA24661E9C1BC077A141777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 10CE Signing time: Sun 27 Jul 2025 03:00:21 +0000 Manifest this update: Sun 27 Jul 2025 03:00:21 +0000 Manifest next update: Mon 28 Jul 2025 03:00:21 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: BorwhTKfT52/JwWv7f1wuxV5O8hQsaJzPtXnCl/P4E4=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:49:d3:00:f1:eb:a2:46:61:e9:c1:bc:07:7a:14:17:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Jul 27 03:00:21 2025 GMT Not After : Jul 28 03:00:21 2025 GMT Subject: CN=48b112fe86506861647e52e2954d55a5bc361adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:c2:b9:7d:5c:13:78:fa:7c:88:0c:a7:a6: f7:c8:5b:2e:4f:55:34:9d:2a:80:4c:73:e9:4c:c1: cc:25:35:3b:94:7e:49:e1:a0:38:74:04:df:2a:2a: 3f:b5:7b:1a:f8:c0:ad:c2:ea:96:21:a9:0d:2a:46: 9b:5c:cd:69:fb:6e:37:c7:e5:58:14:2e:0e:4b:70: 76:15:04:59:a8:eb:02:04:bb:11:05:56:92:7f:be: 31:d9:d6:b1:c6:e6:5f:c3:33:7e:17:b1:78:26:91: 6d:99:a0:35:d7:88:53:c9:25:9f:f2:27:53:53:6f: 19:f3:86:a5:f4:d0:b3:c1:66:53:62:98:6d:f1:e9: 05:66:b3:2a:96:bd:57:05:b5:11:3c:4e:17:e4:8e: 9a:c8:59:a5:15:b6:f2:ea:4e:2a:a2:4c:7e:a6:f7: 63:53:1f:33:ce:4b:67:29:2e:a0:b2:2e:1d:0b:8e: e2:f6:bf:7b:17:46:90:77:64:cd:7f:61:ee:16:37: 1b:37:63:bc:d5:dc:e6:04:39:be:6e:a2:ae:62:a4: 45:df:f0:91:56:ad:73:1e:2b:5c:01:bf:b8:26:73: 05:a0:54:03:f8:a4:72:55:e7:77:4f:24:e8:78:f7: d3:b5:1b:99:ad:6f:41:f5:24:dc:37:d3:ef:32:8a: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:12:FE:86:50:68:61:64:7E:52:E2:95:4D:55:A5:BC:36:1A:DF X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:0a:d5:54:91:0b:91:cc:f8:d2:37:71:7e:c4:a2:98:29:5d: 56:49:c4:fa:8d:31:31:32:d2:78:95:4e:5e:8c:0b:5a:ec:9d: 52:e4:c1:0a:ec:a0:9e:b3:e3:cb:36:cd:16:a4:f4:25:31:b6: 24:42:5b:8b:d9:12:b5:ea:52:7d:fb:42:71:2c:ee:1c:0b:5d: 20:cf:ac:78:b7:16:40:7a:c2:78:74:63:30:f6:27:a4:66:2b: a9:da:e4:72:40:37:59:ba:da:54:8d:b6:f3:ae:3d:1f:b5:81: 92:f4:4c:15:2d:9a:23:cc:bd:12:10:b3:bf:29:7d:4f:bd:3f: 04:0e:4c:ca:96:88:c4:7e:64:ee:c4:ad:49:f9:4a:ab:04:c9: 08:9c:d7:e6:64:a7:b4:e1:a8:de:d8:2a:d6:98:3a:a4:ea:e7: fe:cb:de:a8:88:ad:f0:e2:03:0d:b4:ec:10:25:53:35:5f:e7: 2e:16:1b:9f:bd:19:ca:df:eb:46:96:78:30:12:a6:aa:1e:94: d2:92:e4:ab:50:41:c4:d9:2d:bb:37:cb:30:de:09:d7:38:0b: d7:ec:35:42:a2:e3:25:3b:61:e8:25:55:b8:e0:ca:9c:78:c7: 32:55:b2:e4:55:da:0e:c4:a6:6b:c4:68:92:98:43:90:54:a4: 97:c3:3b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhJ0wDx66JGYenBvAd6FBd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUwNzI3MDMwMDIxWhcNMjUwNzI4MDMwMDIxWjAzMTEwLwYDVQQD Eyg0OGIxMTJmZTg2NTA2ODYxNjQ3ZTUyZTI5NTRkNTVhNWJjMzYxYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbzCuX1cE3j6fIgMp6b3yFsuT1U0 nSqATHPpTMHMJTU7lH5J4aA4dATfKio/tXsa+MCtwuqWIakNKkabXM1p+243x+VY FC4OS3B2FQRZqOsCBLsRBVaSf74x2daxxuZfwzN+F7F4JpFtmaA114hTySWf8idT U28Z84al9NCzwWZTYpht8ekFZrMqlr1XBbURPE4X5I6ayFmlFbby6k4qokx+pvdj Ux8zzktnKS6gsi4dC47i9r97F0aQd2TNf2HuFjcbN2O81dzmBDm+bqKuYqRF3/CR Vq1zHitcAb+4JnMFoFQD+KRyVed3TyToePfTtRuZrW9B9STcN9PvMoqk9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEixEv6GUGhhZH5S4pVNVaW8NhrfMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQrVVJEL kcz40jdxfsSimCldVknE+o0xMTLSeJVOXowLWuydUuTBCuygnrPjyzbNFqT0JTG2 JEJbi9kStepSfftCcSzuHAtdIM+seLcWQHrCeHRjMPYnpGYrqdrkckA3WbraVI22 8649H7WBkvRMFS2aI8y9EhCzvyl9T70/BA5MypaIxH5k7sStSflKqwTJCJzX5mSn tOGo3tgq1pg6pOrn/sveqIit8OIDDbTsECVTNV/nLhYbn70Zyt/rRpZ4MBKmqh6U 0pLkq1BBxNktuzfLMN4J1zgL1+w1QqLjJTth6CVVuODKnHjHMlWy5FXaDsSma8Ro kphDkFSkl8M7tg== -----END CERTIFICATE-----Generated at Sun Jul 27 09:45:29 2025 by rpki-client