$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: YmK+YdmdrJ/4TfhcCACvSApo8ZjvbFBDU/j45+4GQRk= Subject key identifier: 10:36:A0:C4:32:D1:C6:81:B4:68:68:D3:DC:E5:0E:60:EC:11:05:2A Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 01991E41B51FA74424FBDD7F57F396BC360F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 1434 Signing time: Sat 06 Sep 2025 09:00:46 +0000 Manifest this update: Sat 06 Sep 2025 09:00:46 +0000 Manifest next update: Sun 07 Sep 2025 09:00:46 +0000 Files and hashes: 1: 0dOOZcxouEyBwDParynks7StwHE.roa (hash: JJ6ZudJMCas3SwJxwt6lm5WwMowMP1vWjiYzBqRT97Y=) 2: 0j_F7ObjeWM_-MDv2vnltyDHFUk.roa (hash: OsaLtzwPIW8gqCsltJsusg8e34JBn85Om/z5CrRK5Uo=) 3: 2sVCpnUAKblWh9v7qVEsEKRUfWA.roa (hash: 1CKYprr2EavvDbIEOzey7tbCXji3ClAfurVr7rHadc8=) 4: 7-L8h3vxgPMOucvJUyn6jvtlWq4.roa (hash: JqzKMiGM9qG/KoIssHAuY0XkXfUrBvh/Eg7mCU+N938=) 5: 9oLYcSPHMvCe-Pv2M_rza63XTow.roa (hash: wcB89ybRT1IhIFGZVbatLp94YXi4OhrbT8jvmNnsE+Y=) 6: FlI6inWj2TmnnIGOS7ZVGBf_bD0.roa (hash: 5X+YWS6gSiJ/Tn7alo0GG3dyffx54L0u6yH14DDRlbA=) 7: GaWyzUO0HJeBjasyRqC97NsCSD4.roa (hash: UvlgjWI3E2c5HU/6Dd5CAeuvj7bfQfjld2BSF5GNKKQ=) 8: IVO47FxImh-y3rWgAak5j9Lhqu0.roa (hash: UCZgxxNbeCBV4XvQFqq64x8nscbBvfYrvynDklgIEQw=) 9: JA31DZScZvYIwJfErV7LU6Pm8FI.roa (hash: j2dwdPSin1EaN8bZ47DvZWD73l5sMHPdzBMxjZwMols=) 10: OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa (hash: CYtkRKt0tKCgVnuKUn9N15L60FkF9ZK/0wKUSmI7zGM=) 11: P3PfwPwkcE040d3Qr-D90iwF4_k.roa (hash: T1rptYAIYRS6lWsTlrVwQbPRhxvEwgxKU1Xm6hHDr7M=) 12: SYg89xuEXUG6bMD7Pl2CsVBcmVo.roa (hash: FafX8OoXWchxsyj8C7cAZtH+8tr3bEqU6ajEo9eZfcQ=) 13: V05XtxLuNAQpoO5H9P1IS4dSoX4.roa (hash: LXCIEksdGEPZzBTCWjbFwGM6+GL06zblhdET9a+UUAU=) 14: h6WkXFQCalKSUE8qQsL0s6At9NA.roa (hash: xC7sZws2p6+JMX2/NZkkNUsOt0/rPDjC11vfXSnqVOc=) 15: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: HOrBEv815xkhC5kCI78SujjiphWwDZmdqLrOGsV9Ajo=) 16: ijQaYqsX36Iual-crRkacGaVc58.roa (hash: ccJw28PP5f/TupBMNwlADhguaBvKtjfCXWHuFYXPLzA=) 17: tta7Y8CGam3Bk5ymO6HtDo5JmhU.roa (hash: XDbIU4BmGkvASLJz4BGT9b/lR8c31GenOVU33j6ph6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:41:b5:1f:a7:44:24:fb:dd:7f:57:f3:96:bc:36:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Sep 6 09:00:46 2025 GMT Not After : Sep 7 09:00:46 2025 GMT Subject: CN=1036a0c432d1c681b46868d3dce50e60ec11052a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:d1:1b:2b:dd:b6:3f:13:3b:37:ae:96:05: 36:af:f9:70:27:17:03:9e:17:14:a6:d3:70:f1:7f: 76:c8:c4:f0:76:01:26:be:4f:d7:23:4f:00:2f:ae: f0:a7:4d:d4:4d:12:85:20:4e:ff:6b:92:29:c4:0a: 09:ad:84:11:46:ef:25:92:06:01:24:74:ce:34:8c: f2:84:71:53:36:0c:67:ae:e7:45:67:3f:a5:21:37: c6:17:9d:72:6d:15:a9:54:0d:7e:c2:b0:6a:23:63: a9:08:7e:fc:aa:6f:1b:5b:10:db:20:13:bc:3b:16: fa:da:0e:d2:f7:54:e3:5a:b8:9d:9c:74:97:7e:33: 24:b6:d8:29:b4:ff:c3:0a:b3:00:b0:3c:20:1e:5a: 62:d5:ae:62:b5:3d:1b:b1:11:67:87:d0:ec:2a:7a: df:36:27:b7:41:79:b6:5c:e6:c2:e4:ca:f3:b8:aa: 3d:2f:31:a2:3d:93:b0:41:c2:c3:8f:9d:90:36:5b: 38:db:ad:61:26:8a:27:8f:1d:0b:ae:d6:85:71:ef: c7:b9:e6:e0:59:38:c5:a7:54:92:43:f7:c4:ec:77: 1f:34:8f:0b:60:94:35:55:37:1d:e7:ba:bc:aa:3f: ff:24:9f:11:04:a7:67:bf:11:bf:b7:be:dd:a1:5f: b0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:36:A0:C4:32:D1:C6:81:B4:68:68:D3:DC:E5:0E:60:EC:11:05:2A X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a2:f0:1a:71:5a:d8:9b:d8:d4:75:e3:84:5a:94:9c:af:ec: bc:96:37:eb:d6:40:9e:17:77:26:79:07:90:ff:35:dc:1c:e0: 7c:78:f0:b6:81:25:46:ab:81:9f:54:9f:ab:f7:e7:46:4e:b4: ff:0b:b8:51:0c:8a:67:05:a6:f3:f8:50:24:9a:21:f4:96:27: 8d:24:fb:9a:62:f1:7b:1c:07:a9:5b:b1:d9:23:74:e6:cb:a6: db:df:d4:48:25:89:58:66:4a:a8:ae:1c:67:57:84:8d:65:5f: 14:27:79:15:a9:d0:22:24:93:19:df:df:b9:71:1c:8d:7a:b4: b2:77:f3:e6:49:a9:13:2d:78:31:a1:ab:40:c3:fa:23:0a:bb: 39:d5:53:50:36:68:1d:b6:2f:3a:47:8c:44:0a:4e:32:c2:df: 23:0a:53:be:ad:bd:e4:dd:21:42:66:64:db:84:dc:49:78:58: 02:9f:8d:f1:64:65:4d:52:81:25:75:69:63:46:e0:81:a9:f1: c9:30:c4:7f:e4:cd:06:e0:f5:31:17:e5:c6:13:85:3e:27:14: 68:7b:28:d5:8f:14:3d:5b:a7:84:76:5a:4d:67:86:24:2c:72: 4d:5b:22:11:fa:86:06:ab:22:f7:b2:ea:2a:31:7b:a7:0f:9f: 13:45:37:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeQbUfp0Qk+91/V/OWvDYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjUwOTA2MDkwMDQ2WhcNMjUwOTA3MDkwMDQ2WjAzMTEwLwYDVQQD EygxMDM2YTBjNDMyZDFjNjgxYjQ2ODY4ZDNkY2U1MGU2MGVjMTEwNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRPRGyvdtj8TOzeulgU2r/lwJxcD nhcUptNw8X92yMTwdgEmvk/XI08AL67wp03UTRKFIE7/a5IpxAoJrYQRRu8lkgYB JHTONIzyhHFTNgxnrudFZz+lITfGF51ybRWpVA1+wrBqI2OpCH78qm8bWxDbIBO8 Oxb62g7S91TjWridnHSXfjMkttgptP/DCrMAsDwgHlpi1a5itT0bsRFnh9DsKnrf Nie3QXm2XObC5MrzuKo9LzGiPZOwQcLDj52QNls4261hJoonjx0LrtaFce/Huebg WTjFp1SSQ/fE7HcfNI8LYJQ1VTcd57q8qj//JJ8RBKdnvxG/t77doV+wRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA2oMQy0caBtGho09zlDmDsEQUqMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqLwGnFa 2JvY1HXjhFqUnK/svJY369ZAnhd3JnkHkP813BzgfHjwtoElRquBn1Sfq/fnRk60 /wu4UQyKZwWm8/hQJJoh9JYnjST7mmLxexwHqVux2SN05sum29/USCWJWGZKqK4c Z1eEjWVfFCd5FanQIiSTGd/fuXEcjXq0snfz5kmpEy14MaGrQMP6Iwq7OdVTUDZo HbYvOkeMRApOMsLfIwpTvq295N0hQmZk24TcSXhYAp+N8WRlTVKBJXVpY0bgganx yTDEf+TNBuD1MRflxhOFPicUaHso1Y8UPVunhHZaTWeGJCxyTVsiEfqGBqsi97Lq KjF7pw+fE0U3Qw== -----END CERTIFICATE-----Generated at Sat Sep 6 12:11:18 2025 by rpki-client