$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: 1JGqACZAMrGhRkUhFIf3cGCRhUmhtiVPq/6CJhN21Fo= Subject key identifier: 54:14:9E:E4:E2:C3:89:43:56:50:42:5C:73:8B:25:AB:22:86:95:85 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 01983570AD8465BCE3CD751D4FDF04769077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 161B Signing time: Wed 23 Jul 2025 04:00:33 +0000 Manifest this update: Wed 23 Jul 2025 04:00:33 +0000 Manifest next update: Thu 24 Jul 2025 04:00:33 +0000 Files and hashes: 1: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=) 2: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=) 3: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=) 4: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=) 5: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: 3hZeTt7aTv5MPe280GHbsP34XXngfSLA3Nvbtpw06WE=) 6: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=) 7: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=) 8: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=) 9: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=) 10: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=) 11: pfebnJD69NHh8V13L87BcdREodY.roa (hash: xuwqL4qXWTlQ+P1WrUD4/DPyxGZjntCa7ekvIFhiF6o=) 12: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=) 13: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=) 14: vYpftoIYl0802LMSZotEkwGtO1k.roa (hash: AuWrLadvB2ERH3IjebmtnUJ/nP6gZejuogzS6BRYY2s=) 15: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=) 16: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:70:ad:84:65:bc:e3:cd:75:1d:4f:df:04:76:90:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jul 23 04:00:33 2025 GMT Not After : Jul 24 04:00:33 2025 GMT Subject: CN=54149ee4e2c389435650425c738b25ab22869585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:d3:dd:b6:ee:65:81:32:3f:e2:5f:5f:6c: 2a:71:d6:df:51:18:08:ed:d3:b8:28:cb:11:61:1e: c5:04:1c:b8:7a:c7:1f:09:41:3a:38:35:25:6f:1a: 4e:0f:9e:d0:b4:ca:97:e9:91:c3:36:49:16:98:2a: 71:9b:2c:5e:40:c4:8d:d3:97:5e:29:b8:f2:9e:1e: 4b:ec:28:a9:28:68:9d:67:87:14:cc:8c:be:e2:83: f9:24:e7:6a:b3:eb:2b:08:69:06:72:ce:38:9a:8f: ce:45:a8:92:e0:0b:1a:f4:3e:64:82:b4:90:18:d6: 56:00:8d:c9:ba:42:4a:68:da:9d:dd:ee:37:94:60: 7d:12:4b:0b:7d:16:e9:dd:7a:86:33:a4:56:a9:6e: 3b:27:2e:69:5a:c6:59:41:9c:b9:10:3e:00:79:e8: c1:98:93:b6:c8:8c:76:89:ac:b1:c6:a8:04:ab:db: f0:99:47:37:b1:9d:40:03:43:99:f2:69:7b:2b:ea: eb:cf:07:30:3d:e2:61:25:82:83:38:dd:f6:34:a2: 68:42:31:13:de:55:39:9f:dc:f0:0c:90:d6:13:81: 62:46:5c:d3:4e:3b:8e:c4:3d:63:c0:e6:35:f8:50: 1b:f2:ea:59:52:55:36:f7:60:c0:70:61:76:e2:43: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:14:9E:E4:E2:C3:89:43:56:50:42:5C:73:8B:25:AB:22:86:95:85 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e9:06:d3:bb:04:3f:7a:f2:72:fd:5b:7a:70:91:55:71:d2: 00:6f:54:db:89:9a:62:a5:f7:4c:dd:48:d6:26:f6:73:0a:2a: 21:41:c5:a2:48:ee:00:35:ca:de:f7:59:0f:05:e3:0c:b0:06: ff:2a:a0:94:08:bd:35:09:0f:4b:65:78:a8:03:25:86:c2:7c: 63:1f:cc:4d:ca:14:b9:c6:a9:a3:3b:08:e1:7c:c0:8b:41:36: 89:94:2e:a8:af:cf:86:8e:63:96:83:1c:7c:94:09:ed:97:94: 94:ab:bb:bd:95:54:4e:10:dd:df:d9:1e:8d:3c:59:56:81:44: ec:b5:08:d4:dd:25:20:d5:c7:3f:34:54:c4:78:33:41:61:ad: e0:1d:0e:14:ea:2f:e8:1a:d0:ef:39:89:d1:2b:db:2d:d8:9d: 9d:05:9f:15:a8:48:f0:56:cb:13:21:3b:0e:09:36:21:95:f2: 06:e2:e9:82:0f:62:7f:02:7d:20:9d:04:32:f0:57:ab:f8:f1: cc:0a:6c:c5:7b:ad:dc:e3:ae:be:22:5b:62:37:07:6c:03:fb: 04:86:8b:6b:19:6e:92:81:f5:82:52:98:62:ec:6f:0c:7c:d7: e1:12:6d:6e:90:2e:53:ea:be:a4:12:e1:a9:2f:18:bd:4f:9b: bf:4d:20:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1cK2EZbzjzXUdT98EdpB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjUwNzIzMDQwMDMzWhcNMjUwNzI0MDQwMDMzWjAzMTEwLwYDVQQD Eyg1NDE0OWVlNGUyYzM4OTQzNTY1MDQyNWM3MzhiMjVhYjIyODY5NTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmPT3bbuZYEyP+JfX2wqcdbfURgI 7dO4KMsRYR7FBBy4escfCUE6ODUlbxpOD57QtMqX6ZHDNkkWmCpxmyxeQMSN05de Kbjynh5L7CipKGidZ4cUzIy+4oP5JOdqs+srCGkGcs44mo/ORaiS4Asa9D5kgrSQ GNZWAI3JukJKaNqd3e43lGB9EksLfRbp3XqGM6RWqW47Jy5pWsZZQZy5ED4AeejB mJO2yIx2iayxxqgEq9vwmUc3sZ1AA0OZ8ml7K+rrzwcwPeJhJYKDON32NKJoQjET 3lU5n9zwDJDWE4FiRlzTTjuOxD1jwOY1+FAb8upZUlU292DAcGF24kNFVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQUnuTiw4lDVlBCXHOLJasihpWFMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgukG07sE P3rycv1benCRVXHSAG9U24maYqX3TN1I1ib2cwoqIUHFokjuADXK3vdZDwXjDLAG /yqglAi9NQkPS2V4qAMlhsJ8Yx/MTcoUucapozsI4XzAi0E2iZQuqK/Pho5jloMc fJQJ7ZeUlKu7vZVUThDd39kejTxZVoFE7LUI1N0lINXHPzRUxHgzQWGt4B0OFOov 6BrQ7zmJ0SvbLdidnQWfFahI8FbLEyE7Dgk2IZXyBuLpgg9ifwJ9IJ0EMvBXq/jx zApsxXut3OOuviJbYjcHbAP7BIaLaxlukoH1glKYYuxvDHzX4RJtbpAuU+q+pBLh qS8YvU+bv00gbg== -----END CERTIFICATE-----Generated at Wed Jul 23 11:56:13 2025 by rpki-client