$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: UTacbF2kPYtzzQUHUwUTPcOWkTTYhy3kuYkZDB5PZh8= Subject key identifier: 35:A2:A4:E0:10:E2:3A:21:62:C6:D8:97:56:BF:9A:56:D6:6E:14:2C Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 01983539ACCD367B371A6A208F6889B4295B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 1047 Signing time: Wed 23 Jul 2025 03:00:28 +0000 Manifest this update: Wed 23 Jul 2025 03:00:28 +0000 Manifest next update: Thu 24 Jul 2025 03:00:28 +0000 Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=) 2: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 3: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 4: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: V46BRUTKhzlnOQjnOMmZ3+20hS4MaTczjLNE6Lh8Vc0=) 6: J-jYbkHcU08sfslJpHJcwTM3ehc.roa (hash: jbuWwS0NdmUW31cs0jkODoZKeIDKRJImFm8tQFXzCko=) 7: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=) 8: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 9: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=) 10: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=) 11: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 12: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 13: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 14: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 15: jSRl8jct3oc9IPAREV9kyCvUEv4.roa (hash: KhKKtOOQncfkvamW5IOeJNFBZWevqaXGFhsyP7C4G9I=) 16: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 17: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:39:ac:cd:36:7b:37:1a:6a:20:8f:68:89:b4:29:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Jul 23 03:00:28 2025 GMT Not After : Jul 24 03:00:28 2025 GMT Subject: CN=35a2a4e010e23a2162c6d89756bf9a56d66e142c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:95:6d:e2:fc:ab:bc:db:58:4d:2a:a0:df:3f: f2:68:d8:ca:51:e8:0a:38:bc:e9:f7:3c:80:cd:44: 5f:d1:aa:b3:99:07:05:cb:bb:92:76:62:75:5a:b3: 0d:26:58:c1:6c:ab:d7:7d:a7:ac:87:4f:8f:a3:b7: 54:59:ca:de:2e:e2:7d:e7:90:44:ff:2d:a1:db:8a: cc:d6:b3:e2:98:fe:72:56:6c:d7:d7:1a:d7:3b:99: f0:e7:fe:e9:13:76:b7:76:32:63:ca:eb:8c:a0:a3: b8:ba:bf:00:6a:0f:b9:10:7f:7f:53:de:f4:cf:fa: e6:74:80:99:70:da:d6:98:a3:e2:c0:4b:83:ec:56: 7a:9a:35:fe:cc:a9:5e:6d:70:50:69:89:cd:bb:86: dc:e7:8d:3d:2a:f6:be:02:dc:2a:38:27:02:c4:d8: 7d:92:e5:14:16:fe:5f:1c:4a:51:4a:d9:16:5a:0d: 37:fe:36:db:9d:17:44:dd:5f:5a:54:bc:ab:8e:ee: ce:08:bc:52:c2:47:55:4d:6a:f2:04:74:72:70:c2: 82:00:62:6f:dc:04:0b:d1:0e:43:6f:ea:e8:95:35: 10:3c:39:ee:e2:91:42:ed:fb:b4:ed:9f:8c:5b:11: bc:68:8e:6a:cb:36:b3:ff:ed:ce:c7:e6:b2:14:82: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A2:A4:E0:10:E2:3A:21:62:C6:D8:97:56:BF:9A:56:D6:6E:14:2C X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:80:61:ed:40:44:c4:a3:c0:6b:26:95:7a:4b:cb:09:ff:22: bf:35:61:4d:7b:f7:c5:8e:31:89:68:14:f8:ab:de:a3:bb:a7: d3:ec:fd:3c:3f:a5:c0:c0:eb:27:25:a8:0a:86:57:56:87:78: 77:e8:45:90:f3:71:a4:be:36:9e:38:c4:f7:3b:a6:b7:7e:21: 57:d1:af:ce:a3:5f:b4:1f:12:b4:d3:50:38:2f:59:2f:1c:b7: a3:51:27:77:cb:c3:50:10:f7:4b:80:9e:c1:98:c4:03:38:81: 20:dd:50:79:15:a6:8c:06:ed:f0:03:31:44:7b:90:d3:e3:b5: 8f:fc:05:8c:f3:6c:5e:ce:6b:d3:41:59:1f:00:b8:c7:6a:ef: 71:fa:59:c9:2e:84:6c:f9:43:c7:e9:dd:3e:a1:28:2e:a9:08: 18:de:61:61:f5:8b:76:6f:14:ca:60:fa:16:ee:f5:96:1c:17: f6:b3:85:7b:45:b0:6c:a5:50:16:0c:6c:40:14:f2:f1:5b:73: 0a:a0:9d:bf:b6:f3:22:26:15:96:95:0b:fd:df:9d:89:a9:16: bd:eb:ef:b4:3a:5f:87:7f:fc:0b:ce:b2:22:fb:f7:5e:d4:0c: a0:4d:a3:8d:9e:df:1b:66:df:e8:e6:9d:1c:12:46:cc:25:ac: 46:7c:c0:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1OazNNns3Gmogj2iJtClbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUwNzIzMDMwMDI4WhcNMjUwNzI0MDMwMDI4WjAzMTEwLwYDVQQD EygzNWEyYTRlMDEwZTIzYTIxNjJjNmQ4OTc1NmJmOWE1NmQ2NmUxNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZVt4vyrvNtYTSqg3z/yaNjKUegK OLzp9zyAzURf0aqzmQcFy7uSdmJ1WrMNJljBbKvXfaesh0+Po7dUWcreLuJ955BE /y2h24rM1rPimP5yVmzX1xrXO5nw5/7pE3a3djJjyuuMoKO4ur8Aag+5EH9/U970 z/rmdICZcNrWmKPiwEuD7FZ6mjX+zKlebXBQaYnNu4bc5409Kva+AtwqOCcCxNh9 kuUUFv5fHEpRStkWWg03/jbbnRdE3V9aVLyrju7OCLxSwkdVTWryBHRycMKCAGJv 3AQL0Q5Db+rolTUQPDnu4pFC7fu07Z+MWxG8aI5qyzaz/+3Ox+ayFIK0IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWipOAQ4johYsbYl1a/mlbWbhQsMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsoBh7UBE xKPAayaVekvLCf8ivzVhTXv3xY4xiWgU+Kveo7un0+z9PD+lwMDrJyWoCoZXVod4 d+hFkPNxpL42njjE9zumt34hV9GvzqNftB8StNNQOC9ZLxy3o1End8vDUBD3S4Ce wZjEAziBIN1QeRWmjAbt8AMxRHuQ0+O1j/wFjPNsXs5r00FZHwC4x2rvcfpZyS6E bPlDx+ndPqEoLqkIGN5hYfWLdm8UymD6Fu71lhwX9rOFe0WwbKVQFgxsQBTy8Vtz CqCdv7bzIiYVlpUL/d+diakWvevvtDpfh3/8C86yIvv3XtQMoE2jjZ7fG2bf6Oad HBJGzCWsRnzAGQ== -----END CERTIFICATE-----Generated at Wed Jul 23 06:34:43 2025 by rpki-client