$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: dCFZz8/1jvhU046WcqRNP93BX9JmYMQWZjfGb5cPf34= Subject key identifier: ED:30:E8:11:B4:C0:A1:03:0D:55:55:68:33:95:2A:F0:C5:09:42:9B Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 01984CD3DE0D56AACE74D6FA1FB24423370C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 1632 Signing time: Sun 27 Jul 2025 17:00:10 +0000 Manifest this update: Sun 27 Jul 2025 17:00:10 +0000 Manifest next update: Mon 28 Jul 2025 17:00:10 +0000 Files and hashes: 1: 02l3UdnmFD8L6C2sS1gUjkB5ucw.roa (hash: QsQsXBqvm2htoInMV6VpVWJWic+91/OE8UWDxR68Vpo=) 2: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (hash: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=) 3: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (hash: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=) 4: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (hash: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=) 5: 9UyjFHy6nxzD4SWi9fZqmvG9X1Y.roa (hash: wwkmXrHk0uvcZv9VezayeMbciMCe2ZyulXrkSdIlpeo=) 6: Clh59qbFk87HB1hStYjpCYPWYPk.roa (hash: SZP/GWHvVT/kBate2YzVVZAZXuTp21FWytFNyzKpByg=) 7: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: tWyymEQ6TzsKr11EWn5K2dn5CcOCU+iK7dtWuwwivBc=) 8: JK2B_82jU03EjqDV2R4KmzzgN90.roa (hash: k6cki81ODi5YE6T3YQgaBDk5xqz1uKuATDasN4IB5GY=) 9: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (hash: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=) 10: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (hash: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=) 11: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (hash: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=) 12: e1ucky2gtRUWqjh2W_9-FUaDeco.roa (hash: IxT0Rnlu2Pa21xBI3whvhU3j8HT/Mxf3h/l6fQzZTt0=) 13: fTApxPH61hLGkJtBcFjZFwHkWlQ.roa (hash: 2GS0b0hG0UIwi13XUymC7ISdQiAg1d0yfTtxpcEKyIU=) 14: m76dCMrVWf_Z3SQkxAPw_dBRkjE.roa (hash: Ci4tpeEHKHcsYzrGJQHs0JHLKLh/EcoRDa2ngztjU6c=) 15: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (hash: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=) 16: vCflLMx_V986blYmQXbzXttPM6Y.roa (hash: 4AWZ2XlYvyQnfq0suLYmaQ4e3hwFckiYu1Kg5cC3b9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4c:d3:de:0d:56:aa:ce:74:d6:fa:1f:b2:44:23:37:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jul 27 17:00:10 2025 GMT Not After : Jul 28 17:00:10 2025 GMT Subject: CN=ed30e811b4c0a1030d55556833952af0c509429b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5e:04:75:d6:4a:0e:5e:36:a3:3c:43:7c:27: 17:08:81:68:ba:39:f1:35:8b:47:3d:56:20:5d:d3: cf:af:d6:d8:17:68:13:50:b1:9f:e8:e8:fa:5a:83: 9c:61:0d:4a:33:5a:a8:58:d1:c8:94:20:d7:db:34: e2:60:4c:1b:11:dc:b1:2e:fe:94:6a:69:0c:5c:8d: 34:8e:0b:b3:43:00:46:18:3f:5b:bb:d1:ea:a4:0e: a6:b0:7f:af:a1:cb:55:16:8c:b1:89:8e:c0:3d:e2: 8f:6c:70:86:6e:c8:03:29:ee:3e:9c:c1:09:16:0c: 0c:e7:86:55:a0:0f:71:05:28:12:88:61:99:40:84: 1e:36:37:da:ff:f8:86:ec:d0:18:a7:fd:cb:d4:88: cf:dc:af:e3:03:b2:d7:8d:56:46:b3:9e:d9:19:b7: 2c:22:b9:c3:43:cf:69:42:76:ff:a3:2b:b0:e7:b2: 15:4e:ee:cc:9b:a7:1d:97:d9:82:b5:fe:e8:d3:44: c8:3b:9e:39:e4:54:1a:84:2d:11:4d:a5:78:4c:2e: 97:0c:4b:da:0e:81:08:9b:36:a8:ed:9e:b8:e8:64: 58:78:8e:c5:d4:42:64:5c:08:47:af:5d:0f:6a:ae: ed:f0:e7:b8:21:50:46:84:13:d9:f5:ac:01:31:f1: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:30:E8:11:B4:C0:A1:03:0D:55:55:68:33:95:2A:F0:C5:09:42:9B X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1b:d0:bb:3e:a9:9f:7b:07:4e:df:92:d5:38:c8:da:9c:20: ce:40:62:fd:11:eb:fb:3f:2a:9f:cb:7e:8b:94:97:14:1a:01: 8a:0c:57:c6:9a:9f:45:ba:2a:1f:91:eb:66:98:72:a5:e0:af: 4b:ba:49:63:0f:32:fa:8b:9a:54:46:b2:4f:59:68:a5:cf:ce: 34:75:97:fa:c1:44:4b:8b:3e:2b:00:f5:95:ba:e3:a8:b5:66: 56:a3:cc:77:4a:87:70:b7:c8:df:59:38:5a:6d:dc:11:83:59: d7:9e:da:41:72:a1:72:cd:c1:68:a9:80:56:b9:d5:26:e3:74: 60:cf:ae:57:bf:8e:91:63:d2:9e:86:c1:db:87:b3:62:e1:fb: a4:ea:5e:70:e8:32:bf:6b:e5:52:02:92:07:c5:e7:29:b8:93: ac:34:19:fe:30:c2:3e:9b:37:53:cc:da:82:1c:56:15:6b:8a: 68:f4:5a:16:59:b0:97:1e:17:02:18:f4:0f:ea:f4:55:0d:df: b7:99:e1:31:78:18:f2:21:38:35:11:ab:9e:bf:ba:af:2e:45: d1:ea:1d:d6:df:60:e9:af:ab:81:c4:d3:c3:d0:94:27:ea:9e: 48:e3:41:94:6e:66:39:70:e1:a4:c2:4c:ac:be:e0:2c:30:b9: c1:20:40:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhM094NVqrOdNb6H7JEIzcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjUwNzI3MTcwMDEwWhcNMjUwNzI4MTcwMDEwWjAzMTEwLwYDVQQD EyhlZDMwZTgxMWI0YzBhMTAzMGQ1NTU1NjgzMzk1MmFmMGM1MDk0MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA214EddZKDl42ozxDfCcXCIFoujnx NYtHPVYgXdPPr9bYF2gTULGf6Oj6WoOcYQ1KM1qoWNHIlCDX2zTiYEwbEdyxLv6U amkMXI00jguzQwBGGD9bu9HqpA6msH+voctVFoyxiY7APeKPbHCGbsgDKe4+nMEJ FgwM54ZVoA9xBSgSiGGZQIQeNjfa//iG7NAYp/3L1IjP3K/jA7LXjVZGs57ZGbcs IrnDQ89pQnb/oyuw57IVTu7Mm6cdl9mCtf7o00TIO5455FQahC0RTaV4TC6XDEva DoEImzao7Z646GRYeI7F1EJkXAhHr10Paq7t8Oe4IVBGhBPZ9awBMfEk9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0w6BG0wKEDDVVVaDOVKvDFCUKbMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxvQuz6p n3sHTt+S1TjI2pwgzkBi/RHr+z8qn8t+i5SXFBoBigxXxpqfRboqH5HrZphypeCv S7pJYw8y+ouaVEayT1lopc/ONHWX+sFES4s+KwD1lbrjqLVmVqPMd0qHcLfI31k4 Wm3cEYNZ157aQXKhcs3BaKmAVrnVJuN0YM+uV7+OkWPSnobB24ezYuH7pOpecOgy v2vlUgKSB8XnKbiTrDQZ/jDCPps3U8zaghxWFWuKaPRaFlmwlx4XAhj0D+r0VQ3f t5nhMXgY8iE4NRGrnr+6ry5F0eod1t9g6a+rgcTTw9CUJ+qeSONBlG5mOXDhpMJM rL7gLDC5wSBACA== -----END CERTIFICATE-----Generated at Sun Jul 27 19:54:10 2025 by rpki-client