$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: g/q2JSDzZQ75eV4UTnNEoCcA6L+QlW6RP4x2kppzADI= Subject key identifier: 65:B8:E1:92:40:45:27:5F:70:8B:6A:63:58:51:3C:C0:F7:B4:7B:80 Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019826D96C93A54DFF4EEF3ADFCCD928403D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 169B Signing time: Sun 20 Jul 2025 08:00:39 +0000 Manifest this update: Sun 20 Jul 2025 08:00:39 +0000 Manifest next update: Mon 21 Jul 2025 08:00:39 +0000 Files and hashes: 1: 3HemvcGpa10fkEZgb6Z-o4k7Y3I.roa (hash: a1XCZrNTfqU9TQWTJM+VI0BWa7g1babTnrZlikC2mRA=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RJwe2BfOH2L8b2xvYWAb7A5I8YI.roa (hash: Ua7R/78tPOt1hUU0nncJ70Fr//DWyVNm+5rSWWhtzSo=) 5: SIHOuJI_1h5XzPbZI_OAJwWcJqI.roa (hash: l8Vdpb/QHmpxfSB/xEAdJNnGg+1sXYMKTDYdPISp78Q=) 6: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 7: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=) 8: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 9: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: F98dWK0zpD4mC/9+7WZkzBxifAb9easbxDZXB3MstD0=) 10: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 11: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 04:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:d9:6c:93:a5:4d:ff:4e:ef:3a:df:cc:d9:28:40:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Jul 20 08:00:39 2025 GMT Not After : Jul 21 08:00:39 2025 GMT Subject: CN=65b8e1924045275f708b6a6358513cc0f7b47b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:1a:a2:16:18:34:fb:db:48:a6:c9:95:2e: d9:db:ee:42:5f:a2:0f:54:59:c9:25:4c:75:11:e5: 26:2b:71:b0:91:bf:b9:43:0d:49:7a:83:55:45:4e: 35:92:fe:06:a0:58:21:6e:66:68:91:9e:48:84:56: c6:f5:96:c8:90:61:81:a3:3b:e8:01:b8:8b:2c:81: 68:ed:09:aa:c2:c2:75:e0:85:0b:4e:65:b7:bf:77: eb:40:b8:b0:e1:32:76:24:61:6a:61:1c:71:cf:16: cc:88:5e:23:e3:a8:64:00:f5:4a:11:09:bc:79:b1: be:d0:8f:31:67:e1:14:5a:48:56:c7:65:39:6f:8f: fa:f8:46:42:a7:f9:26:83:f2:19:67:11:16:ab:07: fe:62:32:e6:88:dd:1c:9b:3f:c8:b9:4f:7b:e6:e1: 4e:f3:b5:18:ac:73:be:ce:a3:b9:f7:1e:5a:67:2c: ff:bc:d9:9b:15:b5:d7:84:6f:5f:f3:cc:92:b7:77: 82:30:7d:35:3b:3b:e3:39:82:72:c9:02:b0:05:85: 86:81:53:53:e7:b4:c3:f8:fc:86:62:fb:cc:b7:32: 17:fe:0b:82:33:dd:8d:a6:e2:ae:bb:88:b9:f1:86: 3d:b2:d1:7f:0f:c5:6c:c5:1d:a8:63:f3:11:1b:fa: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B8:E1:92:40:45:27:5F:70:8B:6A:63:58:51:3C:C0:F7:B4:7B:80 X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0b:1e:76:c8:e0:49:8a:01:30:f5:52:81:1f:b1:65:26:a2: 08:15:ce:34:d8:0c:05:df:b2:fa:b5:5c:3b:8f:ec:18:4d:ea: bd:5d:9d:e9:75:3c:41:76:44:13:d1:c6:81:0f:ca:39:35:ba: 9f:fb:fb:a1:a4:ed:2c:08:59:ec:5a:09:ce:cc:e6:e2:82:dd: 73:53:2f:38:96:13:af:41:49:d1:a1:ac:a2:38:64:3b:2a:c9: ca:17:b3:58:d4:06:f3:6a:2b:52:b5:86:6c:30:5e:2b:bf:72: 5a:f0:51:9b:20:99:47:77:8c:e8:8e:7a:ad:29:cd:0e:2c:bb: ff:c4:38:66:cc:13:73:d2:83:29:ee:1b:fa:c6:ab:82:e1:00: ab:e4:1a:0b:28:04:84:ef:06:bb:a9:d5:9e:e6:d9:6a:10:11: 94:ce:ba:dd:1b:74:2b:1f:75:32:f0:2d:df:44:b6:9e:43:5e: 89:1f:19:84:f0:4a:f3:64:a2:a6:da:af:92:cc:8d:92:c4:a1: 8e:03:5c:7b:22:86:f0:30:d6:1a:94:d9:d4:16:74:c9:31:f7: 6a:2d:8b:54:95:bd:73:90:24:f2:4d:63:49:45:32:af:be:02: 8c:e2:23:cc:8e:d4:69:af:7b:fa:22:18:0b:29:fd:b0:41:9f: 59:95:d4:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgm2WyTpU3/Tu8638zZKEA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUwNzIwMDgwMDM5WhcNMjUwNzIxMDgwMDM5WjAzMTEwLwYDVQQD Eyg2NWI4ZTE5MjQwNDUyNzVmNzA4YjZhNjM1ODUxM2NjMGY3YjQ3YjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN0aohYYNPvbSKbJlS7Z2+5CX6IP VFnJJUx1EeUmK3Gwkb+5Qw1JeoNVRU41kv4GoFghbmZokZ5IhFbG9ZbIkGGBozvo AbiLLIFo7QmqwsJ14IULTmW3v3frQLiw4TJ2JGFqYRxxzxbMiF4j46hkAPVKEQm8 ebG+0I8xZ+EUWkhWx2U5b4/6+EZCp/kmg/IZZxEWqwf+YjLmiN0cmz/IuU975uFO 87UYrHO+zqO59x5aZyz/vNmbFbXXhG9f88ySt3eCMH01OzvjOYJyyQKwBYWGgVNT 57TD+PyGYvvMtzIX/guCM92NpuKuu4i58YY9stF/D8VsxR2oY/MRG/ovmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGW44ZJARSdfcItqY1hRPMD3tHuAMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQsedsjg SYoBMPVSgR+xZSaiCBXONNgMBd+y+rVcO4/sGE3qvV2d6XU8QXZEE9HGgQ/KOTW6 n/v7oaTtLAhZ7FoJzszm4oLdc1MvOJYTr0FJ0aGsojhkOyrJyhezWNQG82orUrWG bDBeK79yWvBRmyCZR3eM6I56rSnNDiy7/8Q4ZswTc9KDKe4b+sarguEAq+QaCygE hO8Gu6nVnubZahARlM663Rt0Kx91MvAt30S2nkNeiR8ZhPBK82SiptqvksyNksSh jgNceyKG8DDWGpTZ1BZ0yTH3ai2LVJW9c5Ak8k1jSUUyr74CjOIjzI7Uaa97+iIY Cyn9sEGfWZXUKQ== -----END CERTIFICATE-----Generated at Sun Jul 20 14:08:52 2025 by rpki-client