$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: /jZxVSWMtj1IxUh9kOhWlniig51xdi053ljbK5x9Whs= Subject key identifier: 71:DA:15:5B:00:7C:D1:D3:2F:AF:C3:7C:C5:CF:94:A3:F4:48:A1:89 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019961D998ED4B9D667016955A33D92E5C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 115F Signing time: Fri 19 Sep 2025 12:01:14 +0000 Manifest this update: Fri 19 Sep 2025 12:01:14 +0000 Manifest next update: Sat 20 Sep 2025 12:01:14 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: rJxHv5/z/f6B4XZV6zd/+FWdhGGum1Ii00Os9VH3bFs=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Sep 2025 07:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:61:d9:98:ed:4b:9d:66:70:16:95:5a:33:d9:2e:5c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Sep 19 12:01:14 2025 GMT Not After : Sep 20 12:01:14 2025 GMT Subject: CN=71da155b007cd1d32fafc37cc5cf94a3f448a189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c9:39:5d:df:d3:53:ab:01:91:e6:76:50:e6: 42:22:4a:c2:98:1b:26:01:10:89:2f:3f:8b:34:a1: 5e:a8:cd:a0:b4:ae:ba:7a:48:dd:af:7b:9f:2c:61: 21:2f:f9:22:91:94:6b:82:53:4b:4c:92:02:ec:1c: cd:4a:5b:04:13:fc:2a:a4:b2:9a:00:ed:d0:43:66: 80:cf:ed:cf:6f:34:2c:af:7f:00:68:f4:8f:44:7a: 1e:b1:21:3f:9d:18:c3:c5:8d:0a:78:d4:ea:6b:4b: 1b:46:3b:44:73:38:da:f4:81:a2:d3:e1:55:ce:15: 81:7e:6b:7e:b1:15:2f:a5:85:79:90:82:86:c7:e6: 21:aa:df:e9:5b:8b:50:7d:43:68:8a:cd:15:d4:b9: f4:d2:95:b5:de:97:ba:fa:59:36:0e:e1:12:67:33: 6e:76:e1:83:d4:36:41:90:7a:51:cd:ad:97:01:20: 55:94:b8:eb:54:52:58:b9:d2:4f:b9:3d:8c:16:d8: 33:e6:f8:ac:21:44:58:d1:42:24:e6:03:c2:31:8d: f5:38:47:46:24:ff:aa:9f:e3:61:2e:9a:05:5d:fa: a6:31:81:6c:ab:da:12:ee:52:58:4d:8f:fb:7f:dc: 0b:dc:42:1f:45:a4:8c:a4:09:d4:2c:e0:74:6c:cb: f5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DA:15:5B:00:7C:D1:D3:2F:AF:C3:7C:C5:CF:94:A3:F4:48:A1:89 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c0:8d:f6:cb:a8:2e:74:5e:25:05:2a:e5:ba:56:b4:c3:7e: 71:1d:43:20:2c:2b:b4:d1:05:d5:6e:6e:7d:a6:06:80:c4:ff: b4:53:e2:22:2f:4a:29:bd:15:1c:01:9a:04:43:34:32:af:29: 21:f5:23:56:d0:2f:2f:12:f4:9b:e8:68:f5:05:e0:24:00:d7: 4c:b1:b3:d4:a5:ee:07:49:e3:5e:a2:11:60:95:da:19:5b:f1: a0:84:b9:b9:f1:81:95:72:90:c4:d9:5b:4b:d9:78:17:c1:8a: ba:98:5f:06:f6:d9:15:38:91:c6:56:a2:e5:91:af:cc:ce:c3: 14:0e:ad:79:94:7c:b0:df:ec:fa:aa:ad:a4:40:d6:20:f5:81: d4:56:c4:49:c7:84:3b:93:1e:71:51:d6:38:92:ef:3c:c1:32: fc:34:1f:4b:05:06:1c:31:08:70:64:c9:7a:4b:a4:0c:b9:ee: 95:11:bc:4d:5f:43:4f:49:00:b9:d8:04:41:56:c8:c2:71:ac: d4:ac:60:60:48:81:af:6e:8f:1c:9c:ae:ec:21:96:a3:91:c9: 86:07:3e:b5:2d:34:52:77:53:25:bb:a6:69:d1:0d:ba:6c:7c: d3:39:aa:61:04:df:11:01:d4:6e:c9:47:95:ee:1d:6c:e5:e9: 33:43:c9:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlh2ZjtS51mcBaVWjPZLlxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUwOTE5MTIwMTE0WhcNMjUwOTIwMTIwMTE0WjAzMTEwLwYDVQQD Eyg3MWRhMTU1YjAwN2NkMWQzMmZhZmMzN2NjNWNmOTRhM2Y0NDhhMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsk5Xd/TU6sBkeZ2UOZCIkrCmBsm ARCJLz+LNKFeqM2gtK66ekjdr3ufLGEhL/kikZRrglNLTJIC7BzNSlsEE/wqpLKa AO3QQ2aAz+3PbzQsr38AaPSPRHoesSE/nRjDxY0KeNTqa0sbRjtEczja9IGi0+FV zhWBfmt+sRUvpYV5kIKGx+Yhqt/pW4tQfUNois0V1Ln00pW13pe6+lk2DuESZzNu duGD1DZBkHpRza2XASBVlLjrVFJYudJPuT2MFtgz5visIURY0UIk5gPCMY31OEdG JP+qn+NhLpoFXfqmMYFsq9oS7lJYTY/7f9wL3EIfRaSMpAnULOB0bMv1kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHaFVsAfNHTL6/DfMXPlKP0SKGJMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsCN9suo LnReJQUq5bpWtMN+cR1DICwrtNEF1W5ufaYGgMT/tFPiIi9KKb0VHAGaBEM0Mq8p IfUjVtAvLxL0m+ho9QXgJADXTLGz1KXuB0njXqIRYJXaGVvxoIS5ufGBlXKQxNlb S9l4F8GKuphfBvbZFTiRxlai5ZGvzM7DFA6teZR8sN/s+qqtpEDWIPWB1FbESceE O5MecVHWOJLvPMEy/DQfSwUGHDEIcGTJekukDLnulRG8TV9DT0kAudgEQVbIwnGs 1KxgYEiBr26PHJyu7CGWo5HJhgc+tS00UndTJbumadENumx80zmqYQTfEQHUbslH le4dbOXpM0PJ6A== -----END CERTIFICATE-----Generated at Fri Sep 19 14:33:07 2025 by rpki-client