$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: TMDoE/dFyIolFnA4YKePtTaDA63CIWfeOo/Ozs/tiX8= Subject key identifier: D2:F6:E2:99:7C:BD:D1:9C:23:FF:6F:9E:87:65:56:82:FF:2E:D8:35 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019827B549272336D4ECAF9E3068C6E48F53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0C3D Signing time: Sun 20 Jul 2025 12:00:48 +0000 Manifest this update: Sun 20 Jul 2025 12:00:48 +0000 Manifest next update: Mon 21 Jul 2025 12:00:48 +0000 Files and hashes: 1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=) 2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=) 3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 4: 6f1sSkB9WX-VDyBfu2FjGF8_768.roa (hash: 81FaTuTny3LusxPdZBC/CvEnuJ1t4vAJ75jZ7Dn4nWk=) 5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: sO1Zzsgm1E49JWT03kFVlk66vhi4YdG/AdaLy13q+lY=) 7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=) 15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=) 17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 18: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 19: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=) 20: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=) 21: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 22: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 23: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) 24: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:49:27:23:36:d4:ec:af:9e:30:68:c6:e4:8f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jul 20 12:00:48 2025 GMT Not After : Jul 21 12:00:48 2025 GMT Subject: CN=d2f6e2997cbdd19c23ff6f9e87655682ff2ed835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:6a:32:6e:ae:b4:06:fa:f2:9b:da:56:3d: 0d:ab:87:03:7b:a7:df:35:46:89:c1:7d:60:4e:8d: 6e:67:9b:08:c5:48:4f:e2:34:78:81:13:03:f8:e0: f0:d2:ab:a6:f1:b2:21:48:56:09:f8:06:76:b0:fc: f7:75:a8:2d:43:94:79:e2:f0:41:62:56:82:97:b8: 6c:4f:36:25:28:d5:96:f7:e0:64:48:94:1c:8e:22: d9:ee:1c:57:c1:74:68:28:3b:a5:0e:46:59:1e:b9: 6c:fc:a9:ab:a4:bf:b6:8d:c9:4d:e6:01:22:8e:d0: 9b:6f:3d:00:25:56:f9:10:ca:4e:c3:f8:dd:fd:65: e6:69:93:7d:07:f8:47:db:ca:12:bb:36:1b:e5:9c: e1:6b:c6:79:53:7d:f6:9c:98:85:87:20:00:62:9d: bc:9f:be:9b:e6:43:66:99:96:65:17:82:c3:30:d5: 34:20:34:d8:c0:94:0c:a8:6a:9e:60:2f:a6:a8:69: 35:01:d1:49:78:e0:40:db:e9:4a:46:c0:65:3c:18: 87:93:7e:6c:29:26:3d:cc:d3:c8:14:1b:eb:cb:6b: f4:cd:7c:6c:59:f9:b1:c1:52:c8:62:05:6d:fe:ce: a8:33:82:ea:f7:ab:60:6a:9a:63:1d:e9:ee:6e:e2: 5e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F6:E2:99:7C:BD:D1:9C:23:FF:6F:9E:87:65:56:82:FF:2E:D8:35 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f2:87:89:a4:0e:df:17:c4:00:e5:46:f1:a2:a5:cc:73:f0: 6e:ec:e5:c4:eb:81:45:4b:bd:5c:d2:1f:7b:1e:9e:fc:84:a5: 6a:2b:79:4f:1e:a5:74:32:d0:7f:99:eb:cb:26:a0:fd:c4:87: cc:5e:53:a3:ba:d8:0a:eb:b6:7d:17:64:1d:d7:e5:45:37:b4: eb:93:06:7e:e1:04:3e:06:c6:25:b7:0f:81:fb:6b:1e:2c:5e: d6:66:ac:a0:a9:0c:9a:fc:2a:2c:08:1e:6b:d4:91:b4:45:49: 48:44:89:23:fb:f9:78:0f:48:94:45:4f:16:59:36:e9:41:92: b1:00:75:8d:8d:30:ad:61:70:de:c3:8a:dc:47:f6:ff:cc:f7: 98:93:ef:d1:80:89:21:36:b0:db:71:da:2c:28:df:44:23:35: 73:ee:18:91:67:a5:f8:2d:29:2b:1d:ee:16:50:fe:85:aa:80: ad:40:97:fc:5b:4e:9f:6d:d5:65:b4:60:49:f5:13:9a:0e:4a: 05:dc:90:1b:07:1f:59:33:87:0b:99:30:11:28:5c:86:6d:a9: 51:43:6a:f8:dc:f5:de:c7:fd:0b:2e:18:19:3d:21:17:fc:cc: ac:45:e6:94:cb:d0:5f:6c:07:33:cd:a1:2b:f4:2e:0b:b3:4b: 9e:91:68:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntUknIzbU7K+eMGjG5I9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUwNzIwMTIwMDQ4WhcNMjUwNzIxMTIwMDQ4WjAzMTEwLwYDVQQD EyhkMmY2ZTI5OTdjYmRkMTljMjNmZjZmOWU4NzY1NTY4MmZmMmVkODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jhqMm6utAb68pvaVj0Nq4cDe6ff NUaJwX1gTo1uZ5sIxUhP4jR4gRMD+ODw0qum8bIhSFYJ+AZ2sPz3dagtQ5R54vBB YlaCl7hsTzYlKNWW9+BkSJQcjiLZ7hxXwXRoKDulDkZZHrls/KmrpL+2jclN5gEi jtCbbz0AJVb5EMpOw/jd/WXmaZN9B/hH28oSuzYb5Zzha8Z5U332nJiFhyAAYp28 n76b5kNmmZZlF4LDMNU0IDTYwJQMqGqeYC+mqGk1AdFJeOBA2+lKRsBlPBiHk35s KSY9zNPIFBvry2v0zXxsWfmxwVLIYgVt/s6oM4Lq96tgappjHenubuJe1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL24pl8vdGcI/9vnodlVoL/Ltg1MB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPKHiaQO 3xfEAOVG8aKlzHPwbuzlxOuBRUu9XNIfex6e/ISlait5Tx6ldDLQf5nryyag/cSH zF5To7rYCuu2fRdkHdflRTe065MGfuEEPgbGJbcPgftrHixe1masoKkMmvwqLAge a9SRtEVJSESJI/v5eA9IlEVPFlk26UGSsQB1jY0wrWFw3sOK3Ef2/8z3mJPv0YCJ ITaw23HaLCjfRCM1c+4YkWel+C0pKx3uFlD+haqArUCX/FtOn23VZbRgSfUTmg5K BdyQGwcfWTOHC5kwEShchm2pUUNq+Nz13sf9Cy4YGT0hF/zMrEXmlMvQX2wHM82h K/QuC7NLnpFoiQ== -----END CERTIFICATE-----Generated at Sun Jul 20 14:12:07 2025 by rpki-client