$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: 9/od/X+IdwBIhmuG2ZL6K9W2YQjEI418vK7Ux5q0ZBc= Subject key identifier: 0E:43:88:62:8B:02:A4:EE:E3:7A:4F:03:39:DA:2E:59:39:9C:13:00 Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 019A2B8CBAA66EAD65D8AC85F4E33E5E9857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 140F Signing time: Tue 28 Oct 2025 16:00:34 +0000 Manifest this update: Tue 28 Oct 2025 16:00:34 +0000 Manifest next update: Wed 29 Oct 2025 16:00:34 +0000 Files and hashes: 1: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (hash: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=) 2: 1-fD0_gyy16CbQhND5Cq9_D_TVJM.roa (hash: 1YUT/oHeu46DAHuJD9uNps9J96AG+60Vn+GnT3asOpo=) 3: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=) 4: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=) 5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: MseU8xNUjs4wmGKXeeX7N6e5DnfKTtduJjHeoVroVsY=) 6: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=) 7: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=) 8: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=) 9: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=) 10: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=) 11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2b:8c:ba:a6:6e:ad:65:d8:ac:85:f4:e3:3e:5e:98:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Oct 28 16:00:34 2025 GMT Not After : Oct 29 16:00:34 2025 GMT Subject: CN=0e4388628b02a4eee37a4f0339da2e59399c1300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:75:05:4b:65:ac:d5:10:38:09:20:0f:f2: 6d:8f:8f:13:75:d0:a4:9c:f4:c5:2b:00:c7:e0:67: 51:35:f5:1e:3f:ae:72:c7:c7:a7:4c:08:e4:a8:65: 81:f9:9a:c6:65:be:7e:27:d2:4e:b9:4d:26:f4:7a: 69:ed:1f:85:e0:26:3e:72:71:e2:e7:93:9a:11:45: 79:fa:e2:ea:08:85:d7:13:2c:72:17:3c:c1:a9:41: 19:0a:c5:a4:e3:13:d7:3f:8e:e2:af:9c:e4:a8:bd: c7:86:59:b4:ed:a6:a5:4f:91:67:90:16:39:04:8b: b7:3a:02:5c:df:78:6a:f4:95:13:88:17:10:7f:a9: f2:a4:15:26:3f:be:a6:a8:09:2e:a7:0f:59:1a:18: cf:b8:88:0f:64:c0:87:b1:71:c0:5a:ef:5c:13:08: 64:2c:88:87:47:80:98:c4:01:a6:9c:e5:72:57:e9: f0:cd:79:3c:57:f9:ca:99:ac:0b:de:5d:79:1c:1d: af:a7:69:97:1e:e8:78:1d:e6:b7:ff:11:3b:b5:a8: 92:d0:c1:3f:70:ce:12:70:2b:ee:e6:b1:22:95:d4: ff:ca:9b:56:48:40:ec:47:d0:1c:0a:16:2e:73:f9: 44:85:29:9f:50:78:83:01:ee:64:5f:a3:de:c0:51: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:43:88:62:8B:02:A4:EE:E3:7A:4F:03:39:DA:2E:59:39:9C:13:00 X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b8:dc:6c:90:1a:7f:78:9c:7c:f3:7f:06:c5:27:e6:3a:9b: 8d:2e:23:c5:35:ab:e3:b0:94:cb:96:2c:9a:72:32:b6:b2:0b: 32:13:08:f3:be:ba:a8:29:aa:98:3b:8b:db:5f:e9:dc:5e:28: b5:e1:c9:9c:7a:ae:d3:c9:16:d1:ba:25:09:78:a9:40:5c:5f: 87:d8:27:a0:d6:90:3c:5e:3c:11:5a:20:aa:1c:81:c6:bd:42: 75:02:c9:0c:1c:73:78:18:ce:1b:ff:3e:47:3e:85:35:2a:f4: a9:11:14:5e:30:96:34:28:3f:ca:9b:e8:a5:5e:8d:db:de:6b: 98:fd:d9:ed:dc:d1:17:79:56:06:ad:03:3c:f3:98:06:04:71: cb:13:4a:c5:f1:82:6a:dc:87:94:dd:9c:7c:40:87:5e:2b:1a: 6a:34:55:05:ad:98:8f:33:3b:68:01:fc:a9:9b:4a:e9:2c:c7: e2:c5:19:eb:9d:15:fd:27:34:1c:fc:60:b6:48:84:fa:09:20: 3e:77:70:c7:94:cb:30:3a:ce:56:d6:07:f7:01:fe:c6:74:ec: 22:ca:1e:9c:37:00:dc:57:b2:a4:83:33:17:c4:ea:e0:8c:4a: 44:46:f6:a7:c3:a5:f5:21:71:82:c8:61:62:72:46:b5:fd:a5: a9:1c:74:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZorjLqmbq1l2KyF9OM+XphXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjUxMDI4MTYwMDM0WhcNMjUxMDI5MTYwMDM0WjAzMTEwLwYDVQQD EygwZTQzODg2MjhiMDJhNGVlZTM3YTRmMDMzOWRhMmU1OTM5OWMxMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBl1BUtlrNUQOAkgD/Jtj48TddCk nPTFKwDH4GdRNfUeP65yx8enTAjkqGWB+ZrGZb5+J9JOuU0m9Hpp7R+F4CY+cnHi 55OaEUV5+uLqCIXXEyxyFzzBqUEZCsWk4xPXP47ir5zkqL3Hhlm07aalT5FnkBY5 BIu3OgJc33hq9JUTiBcQf6nypBUmP76mqAkupw9ZGhjPuIgPZMCHsXHAWu9cEwhk LIiHR4CYxAGmnOVyV+nwzXk8V/nKmawL3l15HB2vp2mXHuh4Hea3/xE7taiS0ME/ cM4ScCvu5rEildT/yptWSEDsR9AcChYuc/lEhSmfUHiDAe5kX6PewFFeKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5DiGKLAqTu43pPAznaLlk5nBMAMB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7jcbJAa f3icfPN/BsUn5jqbjS4jxTWr47CUy5YsmnIytrILMhMI8766qCmqmDuL21/p3F4o teHJnHqu08kW0bolCXipQFxfh9gnoNaQPF48EVogqhyBxr1CdQLJDBxzeBjOG/8+ Rz6FNSr0qREUXjCWNCg/ypvopV6N295rmP3Z7dzRF3lWBq0DPPOYBgRxyxNKxfGC atyHlN2cfECHXisaajRVBa2YjzM7aAH8qZtK6SzH4sUZ650V/Sc0HPxgtkiE+gkg Pndwx5TLMDrOVtYH9wH+xnTsIsoenDcA3FeypIMzF8Tq4IxKREb2p8Ol9SFxgshh YnJGtf2lqRx0iQ== -----END CERTIFICATE-----Generated at Tue Oct 28 20:34:09 2025 by rpki-client