$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: uWcOcsDHEYA5N0vkj2S0eW5LJa2EuJSrlGrvB+Dj2OA= Subject key identifier: 64:9B:F5:5F:64:7A:67:D1:51:E1:F9:7E:EF:E7:F3:B3:86:BB:E8:A8 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 0199345BDCCD33493AA1C69887D2C33AF1B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 138F Signing time: Wed 10 Sep 2025 16:00:59 +0000 Manifest this update: Wed 10 Sep 2025 16:00:59 +0000 Manifest next update: Thu 11 Sep 2025 16:00:59 +0000 Files and hashes: 1: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (hash: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=) 2: 1-fD0_gyy16CbQhND5Cq9_D_TVJM.roa (hash: 1YUT/oHeu46DAHuJD9uNps9J96AG+60Vn+GnT3asOpo=) 3: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=) 4: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=) 5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: ljeMU7ETA0hF0sZpAejBkSuf4FxsFvxBlxCIjRV6TMI=) 6: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=) 7: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=) 8: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=) 9: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=) 10: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=) 11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:34:5b:dc:cd:33:49:3a:a1:c6:98:87:d2:c3:3a:f1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Sep 10 16:00:59 2025 GMT Not After : Sep 11 16:00:59 2025 GMT Subject: CN=649bf55f647a67d151e1f97eefe7f3b386bbe8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:1b:5b:70:3e:31:3b:d3:06:dd:c5:5a:c6: 6c:23:a2:51:b3:9e:64:28:b0:48:d8:7e:b7:c9:95: 55:31:8f:33:b0:6a:43:d5:a3:d9:ee:bc:99:9f:e5: 6d:9e:e6:c8:35:18:7a:4d:7c:a1:65:86:db:62:63: 49:f3:c4:d3:74:60:2d:cf:da:6d:9c:55:2d:a1:e3: f8:b7:6e:b7:bc:c1:a8:fb:ea:d0:d3:e1:84:5d:be: b9:99:a1:29:f4:b3:ee:45:f0:ac:87:0e:4e:a1:de: d3:74:d6:b4:2e:01:2a:57:c2:20:c5:f1:6a:dc:e6: b8:b8:c5:46:71:d6:7b:c2:12:fb:4e:5e:0f:3e:f9: 2a:55:6b:ac:fe:7c:7b:d1:cc:27:a3:7f:c1:a8:cc: 41:aa:80:9d:87:ca:44:47:0c:e3:ab:86:87:98:ea: 53:56:ab:03:62:40:46:ba:79:12:49:4d:31:05:a4: 9c:33:e9:29:b8:38:3a:86:62:bf:0c:b2:b0:0e:ec: 31:ad:7e:68:00:df:75:ae:f1:ea:62:b2:27:c6:f8: f1:c1:12:97:90:05:99:3c:89:b8:f2:c0:e0:12:28: 5c:3f:43:75:fc:76:79:ac:ee:a9:d3:0d:aa:93:ef: 01:10:47:24:53:16:40:1a:ce:a6:37:70:7d:86:b3: 70:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9B:F5:5F:64:7A:67:D1:51:E1:F9:7E:EF:E7:F3:B3:86:BB:E8:A8 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:6c:7b:a6:93:20:34:7a:60:7c:36:11:05:d1:08:f7:6e:a0: 40:c2:59:3a:65:77:e9:da:2f:c8:18:8c:7c:fa:e1:18:b5:b1: 66:f9:ca:21:3d:28:b3:1d:57:49:62:de:11:a4:bb:e7:14:85: 4f:06:b0:59:b7:14:45:14:70:2e:ca:04:e3:bd:f0:0e:ba:2c: f3:d2:4b:23:ea:0a:88:77:77:9b:cc:57:df:4b:cb:6a:24:7b: 15:2f:84:80:b2:04:a7:64:1b:90:75:d2:d2:e1:1d:d9:34:b0: 5b:52:1f:5f:cf:2c:d1:58:75:98:d6:6d:38:d6:a0:06:a9:2a: fd:67:64:5d:5d:9f:46:f2:12:db:7a:fd:69:ff:3e:c7:cb:ce: 40:1f:12:fd:ad:c7:7d:72:f6:a3:ad:22:3d:01:5d:f8:12:79: d5:bd:32:df:ba:37:69:56:31:08:77:5e:60:0e:b6:e9:fa:9a: 2a:b7:13:61:c4:cd:c0:ce:73:df:a7:36:b2:b2:05:cf:cd:39: bf:05:ce:9c:1b:38:5e:fc:49:dd:b9:74:8b:40:b8:fa:4c:fd: dd:62:db:fe:c2:2b:43:3a:57:23:59:70:d1:b9:ce:f4:02:6a: 3e:83:a1:84:04:cb:84:b3:e0:9e:6a:cc:23:07:24:82:1a:db: bf:e6:76:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk0W9zNM0k6ocaYh9LDOvG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjUwOTEwMTYwMDU5WhcNMjUwOTExMTYwMDU5WjAzMTEwLwYDVQQD Eyg2NDliZjU1ZjY0N2E2N2QxNTFlMWY5N2VlZmU3ZjNiMzg2YmJlOGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQbW3A+MTvTBt3FWsZsI6JRs55k KLBI2H63yZVVMY8zsGpD1aPZ7ryZn+VtnubINRh6TXyhZYbbYmNJ88TTdGAtz9pt nFUtoeP4t263vMGo++rQ0+GEXb65maEp9LPuRfCshw5Ood7TdNa0LgEqV8IgxfFq 3Oa4uMVGcdZ7whL7Tl4PPvkqVWus/nx70cwno3/BqMxBqoCdh8pERwzjq4aHmOpT VqsDYkBGunkSSU0xBaScM+kpuDg6hmK/DLKwDuwxrX5oAN91rvHqYrInxvjxwRKX kAWZPIm48sDgEihcP0N1/HZ5rO6p0w2qk+8BEEckUxZAGs6mN3B9hrNw8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSb9V9kemfRUeH5fu/n87OGu+ioMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGx7ppMg NHpgfDYRBdEI926gQMJZOmV36dovyBiMfPrhGLWxZvnKIT0osx1XSWLeEaS75xSF TwawWbcURRRwLsoE473wDros89JLI+oKiHd3m8xX30vLaiR7FS+EgLIEp2QbkHXS 0uEd2TSwW1IfX88s0Vh1mNZtONagBqkq/WdkXV2fRvIS23r9af8+x8vOQB8S/a3H fXL2o60iPQFd+BJ51b0y37o3aVYxCHdeYA626fqaKrcTYcTNwM5z36c2srIFz805 vwXOnBs4XvxJ3bl0i0C4+kz93WLb/sIrQzpXI1lw0bnO9AJqPoOhhATLhLPgnmrM Iwckghrbv+Z2cg== -----END CERTIFICATE-----Generated at Wed Sep 10 20:40:07 2025 by rpki-client