$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: hHILF/+auThZw1sh3Ce1j+c1hXk8nhyI7K/t7RtmssU= Subject key identifier: 9C:42:45:E6:2E:4D:57:F9:B0:5F:09:DC:4F:5F:81:A6:D3:CD:54:A6 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019A05FFB6D3FB95DA3E86321237A419B9FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 14AC Signing time: Tue 21 Oct 2025 09:00:35 +0000 Manifest this update: Tue 21 Oct 2025 09:00:35 +0000 Manifest next update: Wed 22 Oct 2025 09:00:35 +0000 Files and hashes: 1: 0dOOZcxouEyBwDParynks7StwHE.roa (hash: JJ6ZudJMCas3SwJxwt6lm5WwMowMP1vWjiYzBqRT97Y=) 2: 0j_F7ObjeWM_-MDv2vnltyDHFUk.roa (hash: OsaLtzwPIW8gqCsltJsusg8e34JBn85Om/z5CrRK5Uo=) 3: 2sVCpnUAKblWh9v7qVEsEKRUfWA.roa (hash: 1CKYprr2EavvDbIEOzey7tbCXji3ClAfurVr7rHadc8=) 4: 7-L8h3vxgPMOucvJUyn6jvtlWq4.roa (hash: JqzKMiGM9qG/KoIssHAuY0XkXfUrBvh/Eg7mCU+N938=) 5: 9oLYcSPHMvCe-Pv2M_rza63XTow.roa (hash: wcB89ybRT1IhIFGZVbatLp94YXi4OhrbT8jvmNnsE+Y=) 6: FlI6inWj2TmnnIGOS7ZVGBf_bD0.roa (hash: 5X+YWS6gSiJ/Tn7alo0GG3dyffx54L0u6yH14DDRlbA=) 7: GaWyzUO0HJeBjasyRqC97NsCSD4.roa (hash: UvlgjWI3E2c5HU/6Dd5CAeuvj7bfQfjld2BSF5GNKKQ=) 8: IVO47FxImh-y3rWgAak5j9Lhqu0.roa (hash: UCZgxxNbeCBV4XvQFqq64x8nscbBvfYrvynDklgIEQw=) 9: JA31DZScZvYIwJfErV7LU6Pm8FI.roa (hash: j2dwdPSin1EaN8bZ47DvZWD73l5sMHPdzBMxjZwMols=) 10: OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa (hash: CYtkRKt0tKCgVnuKUn9N15L60FkF9ZK/0wKUSmI7zGM=) 11: P3PfwPwkcE040d3Qr-D90iwF4_k.roa (hash: T1rptYAIYRS6lWsTlrVwQbPRhxvEwgxKU1Xm6hHDr7M=) 12: SYg89xuEXUG6bMD7Pl2CsVBcmVo.roa (hash: FafX8OoXWchxsyj8C7cAZtH+8tr3bEqU6ajEo9eZfcQ=) 13: V05XtxLuNAQpoO5H9P1IS4dSoX4.roa (hash: LXCIEksdGEPZzBTCWjbFwGM6+GL06zblhdET9a+UUAU=) 14: h6WkXFQCalKSUE8qQsL0s6At9NA.roa (hash: xC7sZws2p6+JMX2/NZkkNUsOt0/rPDjC11vfXSnqVOc=) 15: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: 8AiFsjh78Yamsfs4ST+jOdwIPcpycMC+j4MU669Cpgo=) 16: ijQaYqsX36Iual-crRkacGaVc58.roa (hash: ccJw28PP5f/TupBMNwlADhguaBvKtjfCXWHuFYXPLzA=) 17: tta7Y8CGam3Bk5ymO6HtDo5JmhU.roa (hash: XDbIU4BmGkvASLJz4BGT9b/lR8c31GenOVU33j6ph6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:05:ff:b6:d3:fb:95:da:3e:86:32:12:37:a4:19:b9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Oct 21 09:00:35 2025 GMT Not After : Oct 22 09:00:35 2025 GMT Subject: CN=9c4245e62e4d57f9b05f09dc4f5f81a6d3cd54a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bd:c8:3d:e0:ef:cf:90:87:44:15:6f:af:83: 47:fc:2a:3f:12:20:15:6d:29:44:4c:db:64:95:41: 3a:bb:36:bd:5a:58:17:05:a4:fd:f4:6f:90:5f:d8: 44:a2:e9:ec:2c:6b:a7:21:d6:0c:47:b9:38:4f:f6: f0:f2:f1:b7:b1:35:96:9e:de:2f:16:32:3f:78:b9: bf:9b:bb:3e:3e:4e:42:6b:92:a0:df:76:d3:c5:6a: 12:c1:a6:9e:ff:81:35:35:2f:6f:12:55:9c:7f:f4: 83:3a:7e:0f:07:5f:53:f0:65:bf:01:7a:36:85:7c: 4a:0b:bb:fb:c7:f4:d4:3d:62:c3:19:cb:db:78:7d: 32:0c:49:e3:b7:af:4a:52:ce:8a:04:d9:4b:7a:83: db:63:6b:f9:20:4b:fd:1d:a2:3a:2d:ef:53:9f:a5: f9:32:63:2b:30:e3:d3:03:53:95:cf:08:63:8b:57: e6:14:d5:7a:21:31:ad:f9:bf:74:47:ee:02:9e:e0: 28:65:0e:88:fb:2b:14:4d:49:6f:3d:18:f6:9c:0d: 4a:24:33:c3:35:c6:d5:fa:f0:2f:34:ec:e5:a0:ab: d2:bf:97:27:5c:be:2e:87:d1:c4:9f:17:6e:cb:90: ee:31:c6:74:5d:d8:32:18:b4:73:e8:89:3f:ba:76: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:42:45:E6:2E:4D:57:F9:B0:5F:09:DC:4F:5F:81:A6:D3:CD:54:A6 X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:88:46:1a:0d:4d:a7:bd:57:68:71:43:97:1f:f6:21:f4:a4: 3a:28:44:82:33:e8:23:08:61:1e:11:7f:0a:fe:24:af:be:3b: 6d:5f:91:cc:f4:95:94:1b:bc:bc:9f:ae:89:f3:6b:37:d1:04: d9:d8:fa:02:bd:3d:06:92:6e:97:91:e6:89:b9:6d:db:c4:47: 56:de:4c:d7:97:b4:4c:a4:14:77:d8:89:8c:d1:e5:b0:80:50: af:65:d3:65:b2:6e:d2:8d:a6:32:9b:e8:c8:a0:31:44:6f:65: ad:e5:81:d7:f3:c2:28:87:3c:fb:e6:40:72:6c:08:d3:03:e7: 1f:37:20:a7:be:6f:56:70:9a:7c:41:dd:59:1c:c2:17:fc:db: c4:ce:2c:a3:3b:ea:68:f2:4d:0e:96:e0:44:14:05:0a:78:5f: 71:98:83:26:10:f1:3c:a4:87:48:7a:92:a2:cd:18:57:a3:ac: 3b:45:f6:54:b9:6c:1e:49:c1:31:e3:9c:f2:ee:ec:de:17:8b: 58:25:61:23:ba:af:b7:9f:3d:04:a1:c9:41:01:61:0e:42:6f: f7:06:98:3c:cc:7e:11:2c:1a:f7:bc:54:08:d8:1a:4c:8a:1b: 81:6a:d9:c4:ac:bc:73:52:8a:e2:2e:a4:c8:ed:41:3d:e7:bb: b1:d9:b0:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoF/7bT+5XaPoYyEjekGbn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjUxMDIxMDkwMDM1WhcNMjUxMDIyMDkwMDM1WjAzMTEwLwYDVQQD Eyg5YzQyNDVlNjJlNGQ1N2Y5YjA1ZjA5ZGM0ZjVmODFhNmQzY2Q1NGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6L3IPeDvz5CHRBVvr4NH/Co/EiAV bSlETNtklUE6uza9WlgXBaT99G+QX9hEounsLGunIdYMR7k4T/bw8vG3sTWWnt4v FjI/eLm/m7s+Pk5Ca5Kg33bTxWoSwaae/4E1NS9vElWcf/SDOn4PB19T8GW/AXo2 hXxKC7v7x/TUPWLDGcvbeH0yDEnjt69KUs6KBNlLeoPbY2v5IEv9HaI6Le9Tn6X5 MmMrMOPTA1OVzwhji1fmFNV6ITGt+b90R+4CnuAoZQ6I+ysUTUlvPRj2nA1KJDPD NcbV+vAvNOzloKvSv5cnXL4uh9HEnxduy5DuMcZ0XdgyGLRz6Ik/unaQmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxCReYuTVf5sF8J3E9fgabTzVSmMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZohGGg1N p71XaHFDlx/2IfSkOihEgjPoIwhhHhF/Cv4kr747bV+RzPSVlBu8vJ+uifNrN9EE 2dj6Ar09BpJul5Hmiblt28RHVt5M15e0TKQUd9iJjNHlsIBQr2XTZbJu0o2mMpvo yKAxRG9lreWB1/PCKIc8++ZAcmwI0wPnHzcgp75vVnCafEHdWRzCF/zbxM4sozvq aPJNDpbgRBQFCnhfcZiDJhDxPKSHSHqSos0YV6OsO0X2VLlsHknBMeOc8u7s3heL WCVhI7qvt589BKHJQQFhDkJv9waYPMx+ESwa97xUCNgaTIobgWrZxKy8c1KK4i6k yO1BPee7sdmwdQ== -----END CERTIFICATE-----Generated at Tue Oct 21 16:58:55 2025 by rpki-client