$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: jK5q22gxR8PmMgne0lCPQk3XrzfgSxkKxt4kW/Eg7eE= Subject key identifier: 23:68:57:D2:D6:68:D8:C0:46:53:86:3B:08:B7:76:CB:A5:BA:C0:54 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019742C14AD37A192B58B247E07D2A5AB6D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 128B Signing time: Fri 06 Jun 2025 01:00:53 +0000 Manifest this update: Fri 06 Jun 2025 01:00:53 +0000 Manifest next update: Sat 07 Jun 2025 01:00:53 +0000 Files and hashes: 1: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (hash: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=) 2: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=) 3: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=) 4: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: qzB8AVfWcpeA4Lw0UP1PJzhruWdvEkHyjcd2AGwib5g=) 5: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=) 6: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=) 7: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=) 8: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=) 9: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=) 10: nbOZXhIINfQc77gHfbI_Sb1Z3kc.roa (hash: NsyrOZGKSOyRSS6aHvrokQeFXOY4xYNam6BnK7E5duI=) 11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:42:c1:4a:d3:7a:19:2b:58:b2:47:e0:7d:2a:5a:b6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Jun 6 01:00:53 2025 GMT Not After : Jun 7 01:00:53 2025 GMT Subject: CN=236857d2d668d8c04653863b08b776cba5bac054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:50:2f:5d:58:af:2e:c5:82:fc:4d:8a:65: 86:6b:c1:02:94:03:5c:02:e9:30:01:75:ae:7f:cd: b8:61:5f:49:67:54:fd:7c:fb:75:95:4e:5c:9b:65: 5e:b6:cf:02:27:f7:1b:64:20:61:70:25:f8:70:1d: 6e:fb:e2:88:d5:e3:fa:d7:42:5c:96:bc:94:e1:e1: cb:b1:59:df:8f:ee:6f:f6:ee:2a:61:2c:a8:65:21: 5a:a8:b0:6f:bb:58:e5:9e:65:6f:f7:f2:f8:d8:a6: 3c:bc:a8:d7:a2:f9:5f:e6:6e:f2:9a:f9:fd:4e:ee: 55:70:f2:e9:5d:42:ce:77:95:ee:b2:1c:52:31:cd: 76:c0:6e:20:ab:e0:74:5c:b6:92:0f:d2:50:e6:c6: 65:cf:ca:63:7a:60:e0:9a:b4:86:5a:c4:a8:49:1c: 82:0a:3d:2b:7f:3b:94:4a:7d:e5:02:93:9d:b0:17: b9:7b:96:b8:50:07:37:15:18:02:b7:64:84:a9:bf: 3c:d5:32:c8:19:6b:5b:7e:db:1e:da:85:da:e4:98: 53:a3:0c:c3:85:46:df:86:68:08:9b:b1:68:99:a9: 92:6a:ff:7a:e8:3b:e0:fb:80:dc:38:e1:6b:2f:0e: c9:1c:29:26:7d:87:e6:f7:8d:4e:0e:ea:3b:bc:6b: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:68:57:D2:D6:68:D8:C0:46:53:86:3B:08:B7:76:CB:A5:BA:C0:54 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ee:7f:ad:67:ad:70:fa:43:1f:b6:42:c4:cc:76:2d:44:c7: 90:59:bf:f4:cd:b4:6d:64:f4:6f:d1:7a:e0:a7:0a:a6:32:6e: 68:c0:50:2e:e4:4c:14:d5:db:3c:cd:f7:c5:70:78:5c:21:8b: 97:33:cd:76:b2:78:d8:10:c1:b2:a9:c7:9e:bc:6b:fe:da:1d: 95:72:c5:84:89:6e:3c:76:a8:bb:1f:0c:f5:83:bb:f8:f2:60: 6f:b9:44:a5:e9:4f:db:fd:83:60:a1:2a:b3:68:63:a9:19:1f: 16:38:45:55:48:dc:09:7d:b3:f5:fd:58:0d:a7:1a:24:b5:83: b4:59:7d:3c:6f:28:52:41:db:69:98:43:0a:11:48:a7:dc:0c: 4d:a3:ff:88:06:88:96:49:cb:a2:ef:12:4b:c8:ce:f3:81:31: dc:f3:94:1f:40:2f:dc:13:d2:90:97:0e:aa:1e:e3:a5:42:1a: 75:67:92:1c:7a:1d:0f:f3:f1:1c:80:17:9f:9a:d9:a7:8c:d5: c3:f0:58:8d:a8:2d:fc:f0:64:e7:80:53:ca:79:08:11:94:ee: 31:e4:52:33:9d:38:f5:3f:ac:0c:fc:0f:5d:6e:76:ed:9d:07: 02:54:ee:55:88:d1:a5:de:e7:a1:4a:c1:d3:34:6b:2c:2c:c2: e4:b4:f1:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdCwUrTehkrWLJH4H0qWrbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjUwNjA2MDEwMDUzWhcNMjUwNjA3MDEwMDUzWjAzMTEwLwYDVQQD EygyMzY4NTdkMmQ2NjhkOGMwNDY1Mzg2M2IwOGI3NzZjYmE1YmFjMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc1QL11Yry7FgvxNimWGa8EClANc AukwAXWuf824YV9JZ1T9fPt1lU5cm2Vets8CJ/cbZCBhcCX4cB1u++KI1eP610Jc lryU4eHLsVnfj+5v9u4qYSyoZSFaqLBvu1jlnmVv9/L42KY8vKjXovlf5m7ymvn9 Tu5VcPLpXULOd5XushxSMc12wG4gq+B0XLaSD9JQ5sZlz8pjemDgmrSGWsSoSRyC Cj0rfzuUSn3lApOdsBe5e5a4UAc3FRgCt2SEqb881TLIGWtbftse2oXa5JhTowzD hUbfhmgIm7FomamSav966Dvg+4DcOOFrLw7JHCkmfYfm941ODuo7vGsVCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNoV9LWaNjARlOGOwi3dsulusBUMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOe5/rWet cPpDH7ZCxMx2LUTHkFm/9M20bWT0b9F64KcKpjJuaMBQLuRMFNXbPM33xXB4XCGL lzPNdrJ42BDBsqnHnrxr/todlXLFhIluPHaoux8M9YO7+PJgb7lEpelP2/2DYKEq s2hjqRkfFjhFVUjcCX2z9f1YDacaJLWDtFl9PG8oUkHbaZhDChFIp9wMTaP/iAaI lknLou8SS8jO84Ex3POUH0Av3BPSkJcOqh7jpUIadWeSHHodD/PxHIAXn5rZp4zV w/BYjagt/PBk54BTynkIEZTuMeRSM5049T+sDPwPXW527Z0HAlTuVYjRpd7noUrB 0zRrLCzC5LTxKg== -----END CERTIFICATE-----Generated at Fri Jun 6 11:15:17 2025 by rpki-client