$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json) Hash identifier: PYxQ/CiWzaJNLTxyG1XEKoGeiiJCkvD9zCmn0WmY0NU= Subject key identifier: 6E:E8:29:89:8D:EF:05:91:92:D3:13:6D:18:18:83:EB:97:42:CE:E5 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 0198334BA595A120A7866555926B94C2CE2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft Manifest number: 0304 Signing time: Tue 22 Jul 2025 18:00:52 +0000 Manifest this update: Tue 22 Jul 2025 18:00:52 +0000 Manifest next update: Wed 23 Jul 2025 18:00:52 +0000 Files and hashes: 1: 04KCLm--9za3MwjcZovBV5MAsL4.roa (hash: bwrl0NNRWWWbqvvR9nUL3EtLFx6n2S969Soq1XaC/yI=) 2: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=) 3: 1dd8wQbUGZb37ON1wxQRH72QlpI.roa (hash: bzkgiCpTlvvYKlJfhsVQWdWbUhvq97n+YmedrgTC9ug=) 4: 7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa (hash: JBF3Cz4Y9X2mzfXIi45uJ7vNKUzCzYVEwRnol0zS7Q4=) 5: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=) 6: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: hraYuwN+l/NNU41rJck9Pw8tf05IqKbhTB1BdpzHTno=) 7: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (hash: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=) 8: NxOAGrTxofYBFKIpjjp74BEE4ck.roa (hash: czQx6WXfZ8CdpvYil+i0WrvTtgukRGCx1yKLUOoXK04=) 9: dukRtbUxZBVioJQ3ztIVswrYNNA.roa (hash: UotKdLzjPrXF5MwtzJADmQZtjx5PiQOZaqVsJCIhnRQ=) 10: fk0Xlg-9w-A2loQv9XksmSbPwOY.roa (hash: bL4uRe18zJHwNvTxqiRSt9A3zafbwK9vMP1pK6Mv+QQ=) 11: m7WrmCx6u03mQuCv5HV8jBx9bFo.roa (hash: Ha14BfkFTZRxDnv1SGkvf/k31l7c4G7JUHS2Zmnc08A=) 12: pUDcLqhd8k-OHqhDTMHEWLFxtNI.roa (hash: zmsnQNHG6rnZC/5WP217xaq98ZpVSxzIVkPlWZUUiFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 18:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:33:4b:a5:95:a1:20:a7:86:65:55:92:6b:94:c2:ce:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jul 22 18:00:52 2025 GMT Not After : Jul 23 18:00:52 2025 GMT Subject: CN=6ee829898def059192d3136d181883eb9742cee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:8c:24:77:17:e1:dd:27:07:3f:d8:7f:e4: f1:01:9d:f4:f1:74:bd:24:2a:1b:e4:e6:4e:88:df: 6b:27:12:5c:36:a1:78:3f:2f:8f:07:b6:56:56:d7: 22:1b:00:71:5d:02:75:3a:a1:02:e6:8c:f4:47:3c: 29:ae:90:c5:4f:ac:9d:1e:d9:d4:73:29:94:a6:21: a7:1e:d2:bc:8d:dc:dd:30:1d:c3:a7:0a:21:66:a3: 87:fe:1f:63:31:2f:c6:42:e6:ab:26:30:b4:64:14: e5:77:42:67:ec:6d:92:c7:cf:21:b1:fc:d5:d4:71: 88:32:db:2f:ff:b1:fc:aa:8d:25:6a:de:10:ca:7b: a4:af:f4:b3:f5:6f:c4:65:23:22:43:8d:76:54:fb: a0:ca:76:4c:d6:3e:d7:1e:5e:3c:65:0a:55:28:5b: 8e:9d:77:04:2b:e5:fd:7c:17:13:d4:e0:95:65:99: c0:df:57:00:ae:85:24:05:77:2f:e7:1e:85:58:ac: d3:af:62:26:57:f7:c6:5b:2d:26:fc:46:4f:f1:d1: f1:04:1c:c4:a6:90:8d:aa:cc:d4:56:0d:7a:5d:aa: 05:9c:eb:5d:a2:b7:f2:9e:6d:bf:29:9d:64:d4:2e: 49:ba:67:33:7d:da:07:71:3a:e0:d9:ab:14:e6:54: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E8:29:89:8D:EF:05:91:92:D3:13:6D:18:18:83:EB:97:42:CE:E5 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fe:13:9a:8b:86:9f:a6:aa:3f:b4:10:b0:dd:24:94:b3:d0: 6c:47:52:14:65:61:90:80:ca:4d:4e:b0:4b:92:7e:cc:ce:d3: ce:2e:8d:a8:01:3c:6b:8f:e9:1e:a2:04:d4:79:ba:22:59:0b: b6:f0:d7:b2:29:c1:5d:93:3d:a2:e6:1f:6f:dc:c8:27:4c:0c: 64:ec:b3:97:d3:08:79:02:0e:d1:e6:31:b6:fe:94:cc:8a:bd: 4d:45:2f:45:78:cf:37:91:72:d2:c0:ae:77:75:ca:b4:dd:b0: 75:bd:8b:c7:0d:9c:fc:c9:7c:2e:65:96:23:14:ca:3c:9d:1e: 14:9f:f9:28:e2:3b:81:b8:ce:96:07:da:c4:cf:67:c8:5f:7e: 38:fc:39:70:49:46:3d:13:91:37:fb:bb:e5:f9:b4:8a:02:aa: e4:e6:8d:bb:c4:b5:5a:60:97:a6:99:ee:00:ea:d8:17:b9:9d: 04:2a:fb:08:35:1c:81:f9:c7:29:5a:34:91:32:24:e4:f4:73: 30:2a:48:56:84:a4:f5:30:06:f5:57:bc:64:2e:b6:fb:d8:a8: 95:51:2f:a5:e8:39:07:40:37:38:da:fd:98:e0:32:79:8d:8f: 80:c4:5e:13:01:37:70:01:49:9f:2d:ba:b7:68:55:d1:3f:fc: a2:7b:27:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgzS6WVoSCnhmVVkmuUws4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjUwNzIyMTgwMDUyWhcNMjUwNzIzMTgwMDUyWjAzMTEwLwYDVQQD Eyg2ZWU4Mjk4OThkZWYwNTkxOTJkMzEzNmQxODE4ODNlYjk3NDJjZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f2MJHcX4d0nBz/Yf+TxAZ308XS9 JCob5OZOiN9rJxJcNqF4Py+PB7ZWVtciGwBxXQJ1OqEC5oz0RzwprpDFT6ydHtnU cymUpiGnHtK8jdzdMB3DpwohZqOH/h9jMS/GQuarJjC0ZBTld0Jn7G2Sx88hsfzV 1HGIMtsv/7H8qo0lat4Qynukr/Sz9W/EZSMiQ412VPugynZM1j7XHl48ZQpVKFuO nXcEK+X9fBcT1OCVZZnA31cAroUkBXcv5x6FWKzTr2ImV/fGWy0m/EZP8dHxBBzE ppCNqszUVg16XaoFnOtdorfynm2/KZ1k1C5JumczfdoHcTrg2asU5lQ32QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7oKYmN7wWRktMTbRgYg+uXQs7lMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv4TmouG n6aqP7QQsN0klLPQbEdSFGVhkIDKTU6wS5J+zM7Tzi6NqAE8a4/pHqIE1Hm6IlkL tvDXsinBXZM9ouYfb9zIJ0wMZOyzl9MIeQIO0eYxtv6UzIq9TUUvRXjPN5Fy0sCu d3XKtN2wdb2Lxw2c/Ml8LmWWIxTKPJ0eFJ/5KOI7gbjOlgfaxM9nyF9+OPw5cElG PRORN/u75fm0igKq5OaNu8S1WmCXppnuAOrYF7mdBCr7CDUcgfnHKVo0kTIk5PRz MCpIVoSk9TAG9Ve8ZC62+9iolVEvpeg5B0A3ONr9mOAyeY2PgMReEwE3cAFJny26 t2hV0T/8onsnvg== -----END CERTIFICATE-----Generated at Wed Jul 23 02:10:07 2025 by rpki-client