$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: XYh8LltkNiWpzW/ddATFBNdqMpyneFGryr4JCgBEjrA= Subject key identifier: EF:98:79:4E:E5:20:43:C6:61:01:4A:A8:35:42:75:34:3C:12:94:6F Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 01983427424E5F06F55D7125C6BC3A0657E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1613 Signing time: Tue 22 Jul 2025 22:00:44 +0000 Manifest this update: Tue 22 Jul 2025 22:00:44 +0000 Manifest next update: Wed 23 Jul 2025 22:00:44 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: L2xf/1ZiHg4JyTRGc8wi6r3uQB35e1GsNo0eFy7iAZY=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:27:42:4e:5f:06:f5:5d:71:25:c6:bc:3a:06:57:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jul 22 22:00:44 2025 GMT Not After : Jul 23 22:00:44 2025 GMT Subject: CN=ef98794ee52043c661014aa8354275343c12946f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dd:23:b2:f1:10:ca:a8:7f:f1:92:63:2e:37: 09:d8:97:07:8d:93:57:ac:80:6a:5f:ed:36:51:54: 83:b9:66:6c:3b:f0:82:c6:f0:1b:5f:b7:f9:c3:5f: 7d:0f:70:0a:e3:33:d4:e6:a5:31:9c:6e:22:d1:03: 33:4b:a4:c4:74:79:34:90:29:2e:33:61:6c:12:1e: e6:3e:9b:a3:a2:d9:99:2d:a7:4c:50:aa:ef:1e:7e: a1:d2:75:4c:48:83:f4:1d:52:eb:f0:c1:e5:30:2e: 1f:78:73:7e:8f:a1:44:00:d0:65:7f:cd:77:54:23: 62:2c:eb:23:19:e8:51:1f:21:eb:d9:41:1f:51:36: e6:c1:6a:0a:99:89:9f:d7:67:76:db:1b:1b:9c:92: a6:f5:7b:02:d2:7b:d7:17:ae:1b:c5:20:40:7b:f8: ec:c5:e6:dd:ff:b1:8e:2b:5c:a2:19:07:65:88:9e: c0:36:cb:3d:5f:0c:e0:e8:13:2c:75:b2:18:ed:57: 4e:a0:20:9f:a4:2e:86:cd:17:e7:93:7f:e7:c4:8d: 01:30:77:f7:8a:51:c7:37:02:d5:d5:f7:9b:12:83: ad:1b:5a:c2:4c:e3:f5:da:e4:45:48:45:7a:f0:5e: 3a:2b:45:0a:56:f8:fe:dc:f7:84:08:1a:c1:ad:90: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:98:79:4E:E5:20:43:C6:61:01:4A:A8:35:42:75:34:3C:12:94:6F X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e7:14:8b:1a:17:5d:8d:6c:c6:ff:eb:41:d1:f4:a0:a7:a7: b5:bb:b3:23:94:a6:8c:43:47:42:99:2f:29:fa:08:61:f7:9c: 24:12:09:7f:c9:6f:97:dc:3f:66:f4:43:bd:f5:88:b5:b0:0b: 9a:85:83:28:88:20:f0:23:e8:da:ae:f1:3f:cc:0e:0c:84:c2: e3:a5:2e:71:b1:e9:35:57:4d:f5:50:ae:92:a6:d1:11:34:f9: 84:6e:fb:62:3f:c2:9c:74:71:0a:fb:d0:83:31:47:5e:78:91: 2d:56:40:9d:19:08:6a:81:74:4f:c7:69:cd:20:06:8f:d0:ca: 6f:29:1f:dc:6a:d8:6f:3e:de:99:da:75:a6:8a:0e:a6:39:9e: 16:a5:b9:9a:1a:d9:b7:b0:ac:5c:0e:ca:5e:54:bb:93:26:d3: 75:c9:79:a5:55:32:30:fe:3f:fa:a0:5e:f9:40:85:29:7d:cd: 05:7e:86:22:05:aa:d7:6a:80:eb:95:01:bd:52:99:28:6b:36: 6a:d7:74:4a:b7:db:5b:62:a9:60:c2:bf:5c:7d:bb:8b:4a:cc: 14:83:39:af:54:41:1d:2c:1f:b4:37:c7:a6:78:32:95:25:43: 51:d2:a0:b1:b3:2b:e7:63:05:ae:8b:50:e3:c7:9c:1b:66:6b: 3c:52:18:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0J0JOXwb1XXElxrw6BlfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUwNzIyMjIwMDQ0WhcNMjUwNzIzMjIwMDQ0WjAzMTEwLwYDVQQD EyhlZjk4Nzk0ZWU1MjA0M2M2NjEwMTRhYTgzNTQyNzUzNDNjMTI5NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut0jsvEQyqh/8ZJjLjcJ2JcHjZNX rIBqX+02UVSDuWZsO/CCxvAbX7f5w199D3AK4zPU5qUxnG4i0QMzS6TEdHk0kCku M2FsEh7mPpujotmZLadMUKrvHn6h0nVMSIP0HVLr8MHlMC4feHN+j6FEANBlf813 VCNiLOsjGehRHyHr2UEfUTbmwWoKmYmf12d22xsbnJKm9XsC0nvXF64bxSBAe/js xebd/7GOK1yiGQdliJ7ANss9Xwzg6BMsdbIY7VdOoCCfpC6GzRfnk3/nxI0BMHf3 ilHHNwLV1febEoOtG1rCTOP12uRFSEV68F46K0UKVvj+3PeECBrBrZA9NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+YeU7lIEPGYQFKqDVCdTQ8EpRvMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACecUixoX XY1sxv/rQdH0oKentbuzI5SmjENHQpkvKfoIYfecJBIJf8lvl9w/ZvRDvfWItbAL moWDKIgg8CPo2q7xP8wODITC46UucbHpNVdN9VCukqbRETT5hG77Yj/CnHRxCvvQ gzFHXniRLVZAnRkIaoF0T8dpzSAGj9DKbykf3GrYbz7emdp1pooOpjmeFqW5mhrZ t7CsXA7KXlS7kybTdcl5pVUyMP4/+qBe+UCFKX3NBX6GIgWq12qA65UBvVKZKGs2 atd0SrfbW2KpYMK/XH27i0rMFIM5r1RBHSwftDfHpngylSVDUdKgsbMr52MFrotQ 48ecG2ZrPFIYrA== -----END CERTIFICATE-----Generated at Wed Jul 23 05:24:50 2025 by rpki-client