$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: KFrbe+RXVPSyIuPvxZuF4i704qN01w9MYD3OrRGiptI= Subject key identifier: 79:EA:30:38:08:F6:19:22:FA:39:5A:57:6B:FD:64:ED:65:D5:C1:A5 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019A0780D9864F783DC829807D98C04492C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 113C Signing time: Tue 21 Oct 2025 16:01:16 +0000 Manifest this update: Tue 21 Oct 2025 16:01:16 +0000 Manifest next update: Wed 22 Oct 2025 16:01:16 +0000 Files and hashes: 1: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (hash: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=) 2: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 3: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 4: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 5: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: TT2Y8o0R/BVPSaAGhVoXdiQyAsLrv9Q8N4qL0/YWOJ4=) 6: K03TI5nYUitEhr3tDnZaspm3S48.roa (hash: 0GhwyXOcDmriRSuXnm9/II1OmPaoLu8Djc5b090uRNw=) 7: OHszSGY9IAc7LRuICB5fLtwPJEE.roa (hash: rQ/hF7bQMR8MBO0Cmc6ufUVgRC+5bZHKljx2lgxb3/s=) 8: RRfbWS9gJIpkQlUHUBT_C-4iKW4.roa (hash: 5YJMcnD8st6XyEBie4P9czS9E91f4FDnUOlRC1amfu0=) 9: RdAiuj0CKwGdWqOPsTysiaxS8RM.roa (hash: RUegU9jus91oC1XvjlC85kvkBYAhgdo3GTaU32XzLRI=) 10: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 11: VQdBddpukAmJt5hMDo3MH_s40gY.roa (hash: Ye0y1BoPENu4y2+F2w73JV34dGGP4dVDpycXyq9GQwY=) 12: XIaayusDHQd-T-OQnZeJmKeMqGM.roa (hash: 4YgriKRQoCnrntt03LwL2mbgR+kxZCmjlyyQb3gT+ZE=) 13: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 14: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 15: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 16: mvKNPFMV6qBSG3SFSM4qWTU0PTM.roa (hash: 0KVXMDqCW8pJ5nUQOv8p5VWslPhCTBVdym4Cj/bx29s=) 17: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 18: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:80:d9:86:4f:78:3d:c8:29:80:7d:98:c0:44:92:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Oct 21 16:01:16 2025 GMT Not After : Oct 22 16:01:16 2025 GMT Subject: CN=79ea303808f61922fa395a576bfd64ed65d5c1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0f:59:e6:6b:0b:aa:5e:f3:63:85:7a:b9:e0: d3:5e:08:10:2b:bc:ae:64:55:f5:b1:09:73:5f:95: a2:aa:1b:aa:1d:46:59:e4:78:ee:25:1e:c5:a0:e3: 06:82:26:34:77:03:06:10:18:65:da:97:98:de:7b: 7f:1c:5b:4f:00:20:9a:b1:25:c2:d2:45:62:c4:15: 03:85:14:8f:c0:49:16:58:13:94:30:b7:36:65:64: c2:08:cb:f4:94:c1:fb:48:50:57:2f:0e:5c:3b:3b: 47:0f:97:b7:60:bd:69:87:69:ff:87:4f:b6:71:ca: 62:18:a1:f3:f2:1e:7b:88:5b:49:34:33:18:f5:21: 57:c3:87:11:fe:6a:74:82:36:f3:44:90:1d:0c:ef: 90:8d:a2:99:fe:e2:96:be:84:3f:1c:3e:b4:07:fa: 62:9e:66:7a:77:c0:72:4f:b0:f1:78:95:64:5f:39: 9d:89:12:7e:ce:d4:33:94:67:89:bc:07:b8:82:c3: e8:ee:3a:35:89:6d:c3:81:d3:95:a5:5b:6d:b9:a2: a0:21:5f:ca:26:20:6c:47:2b:36:c1:79:41:f0:a4: e4:d8:36:9a:1a:ab:da:1b:21:5c:2c:c7:c6:a7:5a: 83:96:72:e2:2f:82:86:d1:d8:d2:e6:c6:ef:ad:20: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EA:30:38:08:F6:19:22:FA:39:5A:57:6B:FD:64:ED:65:D5:C1:A5 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:18:7a:2b:4a:29:46:d8:0a:41:2d:48:d0:fb:f6:e6:38:73: 80:21:e5:c8:c2:bd:6d:bd:85:09:10:1d:82:ac:1a:fd:ff:e3: dc:86:17:d6:1d:f3:12:0e:6f:c8:a7:08:5e:09:e9:c9:e3:52: af:b9:a3:70:3c:08:a0:c0:3f:c0:7a:06:7f:55:ed:f4:0f:b4: bb:9c:b4:b4:90:1a:66:80:95:85:08:f9:1e:a5:65:c8:50:ac: 7e:e8:70:a3:67:ad:85:2c:3c:21:52:70:74:4b:87:46:06:f5: 26:4d:26:e7:e6:25:a2:ae:69:a9:a5:33:a9:fc:60:75:44:c8: f2:ce:6d:65:1a:64:91:b2:11:5f:23:71:c6:67:cc:8c:bb:46: 13:20:f7:ab:d9:d3:fd:73:90:d9:81:23:63:7b:97:3f:cb:0d: 11:9f:d3:bb:84:99:83:d2:f7:4e:d6:8b:ce:ae:37:b1:bb:0e: b4:0b:f4:21:3d:cb:d5:34:71:34:5c:38:2f:71:80:3e:5a:72: 95:a0:31:e0:61:e2:6f:d2:07:22:8b:30:f7:31:0b:54:66:9f: 02:0b:25:4b:0c:f4:53:ae:97:1b:b5:3d:4c:60:fb:7e:bb:37: 13:a1:90:5f:ea:4b:ba:d5:a8:1d:21:ed:96:e7:a6:3c:1d:33: 56:37:dd:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHgNmGT3g9yCmAfZjARJLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUxMDIxMTYwMTE2WhcNMjUxMDIyMTYwMTE2WjAzMTEwLwYDVQQD Eyg3OWVhMzAzODA4ZjYxOTIyZmEzOTVhNTc2YmZkNjRlZDY1ZDVjMWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q9Z5msLql7zY4V6ueDTXggQK7yu ZFX1sQlzX5WiqhuqHUZZ5HjuJR7FoOMGgiY0dwMGEBhl2peY3nt/HFtPACCasSXC 0kVixBUDhRSPwEkWWBOUMLc2ZWTCCMv0lMH7SFBXLw5cOztHD5e3YL1ph2n/h0+2 ccpiGKHz8h57iFtJNDMY9SFXw4cR/mp0gjbzRJAdDO+QjaKZ/uKWvoQ/HD60B/pi nmZ6d8ByT7DxeJVkXzmdiRJ+ztQzlGeJvAe4gsPo7jo1iW3DgdOVpVttuaKgIV/K JiBsRys2wXlB8KTk2DaaGqvaGyFcLMfGp1qDlnLiL4KG0djS5sbvrSD5pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnqMDgI9hki+jlaV2v9ZO1l1cGlMB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhh6K0op RtgKQS1I0Pv25jhzgCHlyMK9bb2FCRAdgqwa/f/j3IYX1h3zEg5vyKcIXgnpyeNS r7mjcDwIoMA/wHoGf1Xt9A+0u5y0tJAaZoCVhQj5HqVlyFCsfuhwo2ethSw8IVJw dEuHRgb1Jk0m5+Yloq5pqaUzqfxgdUTI8s5tZRpkkbIRXyNxxmfMjLtGEyD3q9nT /XOQ2YEjY3uXP8sNEZ/Tu4SZg9L3TtaLzq43sbsOtAv0IT3L1TRxNFw4L3GAPlpy laAx4GHib9IHIosw9zELVGafAgslSwz0U66XG7U9TGD7frs3E6GQX+pLutWoHSHt luemPB0zVjfdPw== -----END CERTIFICATE-----Generated at Tue Oct 21 20:24:55 2025 by rpki-client