$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: eAtjB3YCmZDyQXiy5gSsZT0Lw70XZfAhw6FVK7pQpuA= Subject key identifier: 2A:0F:F6:1A:43:F0:6A:8F:07:F4:6E:8B:B5:9E:8E:79:D6:D0:AF:06 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019845BF8B188E93E36D4F726AA633C4C308 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1628 Signing time: Sat 26 Jul 2025 08:00:37 +0000 Manifest this update: Sat 26 Jul 2025 08:00:37 +0000 Manifest next update: Sun 27 Jul 2025 08:00:37 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: /1hCwuSTT4DyO3sqtggmZz4+N1ygzxMWPeZ9XhPdnZo=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:bf:8b:18:8e:93:e3:6d:4f:72:6a:a6:33:c4:c3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jul 26 08:00:37 2025 GMT Not After : Jul 27 08:00:37 2025 GMT Subject: CN=2a0ff61a43f06a8f07f46e8bb59e8e79d6d0af06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fc:63:3a:79:e5:a2:85:18:27:78:eb:51:2c: 89:23:9c:a3:26:07:49:de:03:ee:ba:18:d5:e8:c9: 00:98:3b:81:a2:eb:dc:70:29:77:19:ac:5e:f9:7f: 87:6f:d7:fc:8d:31:eb:7b:b7:1a:87:4d:69:4d:c5: 1e:2d:9a:e9:59:b4:3d:9e:0c:65:e2:02:bb:00:76: c9:a0:00:3c:d6:6b:69:84:de:f7:51:e7:45:18:5d: c3:69:9b:e0:fe:e8:2b:b5:fa:c2:24:fe:d5:f0:2a: 03:99:1f:0c:f1:3f:03:3b:ab:ae:19:62:ba:ac:8c: 21:f9:85:dc:76:77:49:a3:dd:4f:5e:89:9f:74:2a: f4:a3:72:9a:86:17:27:0a:c9:a1:0a:e4:ef:b9:a3: fd:f9:cd:a1:9b:38:c1:73:e8:8b:47:c6:bb:a9:9c: 33:d8:d5:e2:9b:74:9b:d0:7e:74:78:c5:e2:33:d0: 00:c4:f9:70:a9:49:9b:a7:76:9a:84:82:4a:10:78: 0e:b8:5a:fd:5c:b9:da:83:9f:66:41:99:c4:7e:a9: 12:5b:94:95:46:0e:17:5d:78:08:5f:f6:65:d5:27: d3:d7:b2:dd:bd:c4:b7:a0:85:60:6f:42:64:9d:7a: 59:23:74:c7:49:a2:aa:0e:48:5c:16:1e:3c:76:d6: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0F:F6:1A:43:F0:6A:8F:07:F4:6E:8B:B5:9E:8E:79:D6:D0:AF:06 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:25:a5:e3:6a:7e:d1:91:db:8e:58:99:d5:78:d8:11:20:cc: 3a:19:0f:d3:4f:04:72:6c:dc:33:fd:7e:51:3c:a3:ed:58:db: b1:37:b8:0e:31:5f:df:4e:a7:ef:5a:a7:71:57:a8:12:4a:8a: 9c:d0:e2:bc:64:04:ef:b5:62:c5:a9:bb:a1:d0:80:47:38:a2: 23:4b:27:a2:3e:8b:5d:00:5b:c6:ef:a9:26:2a:f8:52:48:26: 0a:aa:09:32:10:58:03:24:15:bb:2a:83:03:0a:df:49:88:f9: 9f:b4:64:7a:3f:62:2a:25:ac:ec:44:f6:43:af:ab:9c:03:9f: 9c:79:b9:35:c8:f7:1f:a0:14:73:87:c4:cc:0b:e0:0d:ee:2f: 52:0e:01:bd:41:e8:26:cd:1b:6f:6e:35:c5:de:bf:49:f2:66: 1f:2f:f5:4f:d7:7f:b7:22:3a:90:0b:92:4c:34:a9:49:e4:d1: f3:0f:44:45:c6:52:fc:19:ff:b5:01:fb:14:89:d6:2b:e8:5a: a6:16:71:61:5d:f5:25:f4:d9:e0:ef:33:e5:ec:c7:7c:ea:93: a7:48:8d:89:10:31:c8:8d:ee:96:d1:93:47:fc:89:09:8a:8f: 67:1b:0a:69:5d:ef:4b:83:c7:0b:8f:38:29:8d:cb:69:1e:20: e4:2e:c6:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhFv4sYjpPjbU9yaqYzxMMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwNzI2MDgwMDM3WhcNMjUwNzI3MDgwMDM3WjAzMTEwLwYDVQQD EygyYTBmZjYxYTQzZjA2YThmMDdmNDZlOGJiNTllOGU3OWQ2ZDBhZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfxjOnnlooUYJ3jrUSyJI5yjJgdJ 3gPuuhjV6MkAmDuBouvccCl3Gaxe+X+Hb9f8jTHre7cah01pTcUeLZrpWbQ9ngxl 4gK7AHbJoAA81mtphN73UedFGF3DaZvg/ugrtfrCJP7V8CoDmR8M8T8DO6uuGWK6 rIwh+YXcdndJo91PXomfdCr0o3KahhcnCsmhCuTvuaP9+c2hmzjBc+iLR8a7qZwz 2NXim3Sb0H50eMXiM9AAxPlwqUmbp3aahIJKEHgOuFr9XLnag59mQZnEfqkSW5SV Rg4XXXgIX/Zl1SfT17LdvcS3oIVgb0JknXpZI3THSaKqDkhcFh48dtY3vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoP9hpD8GqPB/Rui7WejnnW0K8GMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCWl42p+ 0ZHbjliZ1XjYESDMOhkP008EcmzcM/1+UTyj7VjbsTe4DjFf306n71qncVeoEkqK nNDivGQE77Vixam7odCARziiI0snoj6LXQBbxu+pJir4UkgmCqoJMhBYAyQVuyqD AwrfSYj5n7Rkej9iKiWs7ET2Q6+rnAOfnHm5Ncj3H6AUc4fEzAvgDe4vUg4BvUHo Js0bb241xd6/SfJmHy/1T9d/tyI6kAuSTDSpSeTR8w9ERcZS/Bn/tQH7FInWK+ha phZxYV31JfTZ4O8z5ezHfOqTp0iNiRAxyI3ultGTR/yJCYqPZxsKaV3vS4PHC484 KY3LaR4g5C7GuQ== -----END CERTIFICATE-----Generated at Sat Jul 26 10:38:10 2025 by rpki-client