$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: ry5+zuZe20+wHqujQOVS0t+NcWtqNSLwSD+rc2hikAQ= Subject key identifier: 30:5D:06:78:F3:2F:83:15:6C:5F:06:F0:FB:EC:BC:29:76:48:06:7C Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019A4D73DDB100681A0CC65AE906443FE419 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 11D9 Signing time: Tue 04 Nov 2025 06:00:30 +0000 Manifest this update: Tue 04 Nov 2025 06:00:30 +0000 Manifest next update: Wed 05 Nov 2025 06:00:30 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: EXQrwUwK3OYxalelF0kxkkfW56mrDxNyE8GPtMkINlY=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:73:dd:b1:00:68:1a:0c:c6:5a:e9:06:44:3f:e4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Nov 4 06:00:30 2025 GMT Not After : Nov 5 06:00:30 2025 GMT Subject: CN=305d0678f32f83156c5f06f0fbecbc297648067c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:a7:33:ad:4b:09:ba:f4:61:06:92:ff:e2: aa:17:b1:e2:fa:03:73:50:58:1b:67:ca:b7:39:85: 00:51:87:5b:fb:25:19:8d:25:fe:cb:47:bc:6b:7a: 1b:fc:3a:ba:94:0c:28:f0:66:83:90:8d:c0:f3:82: a3:a7:c2:a8:d2:38:c0:0a:8e:4d:b4:d2:20:10:c7: 7a:a8:44:0e:94:1d:4a:da:e5:22:d8:60:c9:d6:c6: 0f:9f:13:58:19:2e:c4:99:e3:31:20:5e:d5:8d:50: ab:b0:3f:68:c8:e2:54:7b:66:28:e1:5c:a0:81:79: 47:04:09:21:e2:c3:42:a2:da:4d:fb:3d:fd:e8:e4: cd:89:9e:bc:ac:49:13:ed:43:64:58:ac:06:1b:35: a4:dc:96:b3:48:51:dc:a0:b4:a2:4f:df:3e:dd:18: ec:c0:fd:64:38:c5:9c:25:2b:a6:49:e3:c8:87:c9: 00:a8:b6:0d:9c:11:16:df:a7:51:ce:d0:d5:57:bd: 4d:0e:16:ef:a6:0b:60:4f:65:ac:89:e3:d9:8d:3f: ce:56:f9:84:54:cb:d5:36:b3:17:e5:8a:1d:75:0e: 98:a0:d5:19:14:39:10:dc:13:af:e6:17:6c:4f:f6: 68:7b:e1:71:71:f0:fd:bd:98:06:b6:ff:fd:b0:c6: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5D:06:78:F3:2F:83:15:6C:5F:06:F0:FB:EC:BC:29:76:48:06:7C X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ca:78:84:41:89:0e:b4:28:24:cc:09:4c:61:1d:79:a1:ac: 40:ba:5b:dd:ee:41:82:65:42:e0:b2:da:6f:2d:e6:54:1d:bd: 14:5c:04:af:4c:8f:ac:f7:ca:ea:f2:83:ca:7d:ca:c5:bd:d4: f7:7e:be:93:be:6c:d9:f2:d4:37:40:b1:d9:e2:2d:c4:c2:97: 19:d3:e2:1f:5e:e9:27:ac:ad:f9:05:98:14:d0:49:20:bf:22: 0e:e0:5e:70:a9:78:49:10:d4:06:34:5b:5d:27:d6:f0:59:47: 85:07:ff:bf:41:b2:3e:86:63:ab:e0:52:7f:47:a5:22:bf:87: b6:ef:c9:bf:25:ca:5a:18:52:44:00:d9:4f:70:08:82:f2:04: f1:6e:18:b7:cc:37:68:b5:15:58:b9:c9:f7:6d:11:94:04:a9: 60:d6:35:f6:b4:68:dc:e9:6a:a4:ce:f7:09:98:59:0b:6b:c9: 04:3f:0a:37:b8:31:fa:ef:35:43:56:6f:54:49:b0:e1:37:16: ca:1e:75:c0:e3:95:71:e1:7d:8c:f6:61:a0:19:21:b5:4c:cd: d8:4c:76:a4:89:8c:e3:e9:80:49:f2:ea:92:e5:20:b1:6b:54: 82:77:f3:95:4c:a1:12:26:e0:15:51:4d:4e:43:c8:a0:f9:c8: 1e:8c:ae:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNc92xAGgaDMZa6QZEP+QZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUxMTA0MDYwMDMwWhcNMjUxMTA1MDYwMDMwWjAzMTEwLwYDVQQD EygzMDVkMDY3OGYzMmY4MzE1NmM1ZjA2ZjBmYmVjYmMyOTc2NDgwNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiGnM61LCbr0YQaS/+KqF7Hi+gNz UFgbZ8q3OYUAUYdb+yUZjSX+y0e8a3ob/Dq6lAwo8GaDkI3A84Kjp8Ko0jjACo5N tNIgEMd6qEQOlB1K2uUi2GDJ1sYPnxNYGS7EmeMxIF7VjVCrsD9oyOJUe2Yo4Vyg gXlHBAkh4sNCotpN+z396OTNiZ68rEkT7UNkWKwGGzWk3JazSFHcoLSiT98+3Rjs wP1kOMWcJSumSePIh8kAqLYNnBEW36dRztDVV71NDhbvpgtgT2WsiePZjT/OVvmE VMvVNrMX5YoddQ6YoNUZFDkQ3BOv5hdsT/Zoe+FxcfD9vZgGtv/9sMY8+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBdBnjzL4MVbF8G8PvsvCl2SAZ8MB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcp4hEGJ DrQoJMwJTGEdeaGsQLpb3e5BgmVC4LLaby3mVB29FFwEr0yPrPfK6vKDyn3Kxb3U 936+k75s2fLUN0Cx2eItxMKXGdPiH17pJ6yt+QWYFNBJIL8iDuBecKl4SRDUBjRb XSfW8FlHhQf/v0GyPoZjq+BSf0elIr+Htu/JvyXKWhhSRADZT3AIgvIE8W4Yt8w3 aLUVWLnJ920RlASpYNY19rRo3OlqpM73CZhZC2vJBD8KN7gx+u81Q1ZvVEmw4TcW yh51wOOVceF9jPZhoBkhtUzN2Ex2pImM4+mASfLqkuUgsWtUgnfzlUyhEibgFVFN TkPIoPnIHoyuNw== -----END CERTIFICATE-----Generated at Tue Nov 4 14:06:56 2025 by rpki-client