$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: AGVOBo3CdGqqGZwNWbXWQC4Jz3n/Jt36SjgnHSrLeos= Subject key identifier: A2:CA:9A:51:FC:39:D0:D0:81:95:1D:D3:CA:89:73:BB:D7:C5:39:52 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01974C31C7B2B41E795D65CADFF218DF6591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1596 Signing time: Sat 07 Jun 2025 21:00:20 +0000 Manifest this update: Sat 07 Jun 2025 21:00:20 +0000 Manifest next update: Sun 08 Jun 2025 21:00:20 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: uiGJ99A8GenY+UQczWLGrzn81JEtIH3FUD9zF2VIkH8=) 7: Ie2e1wt_FuvjPhvPZmJ8YbfF_Tw.roa (hash: 0jvW11Eh+nanPzwmW1R+ZUtO2i7ehli0d4txf/mUkQE=) 8: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 9: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 10: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 11: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 12: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 13: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 14: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 15: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 16: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4c:31:c7:b2:b4:1e:79:5d:65:ca:df:f2:18:df:65:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jun 7 21:00:20 2025 GMT Not After : Jun 8 21:00:20 2025 GMT Subject: CN=a2ca9a51fc39d0d081951dd3ca8973bbd7c53952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:87:57:cc:c1:40:9b:1e:9b:fd:b9:06:bc:cb: f5:8f:95:83:4c:da:1d:e9:6c:0d:76:d7:d4:21:12: 6b:1f:8e:09:e6:ab:9e:1d:9b:79:c7:93:2e:aa:24: fd:ca:19:33:1f:c4:93:b3:b0:bc:e1:66:97:6e:2d: 37:51:52:52:4a:c3:c8:a6:b9:cd:02:fc:2f:91:f0: d2:4b:8f:06:34:e8:1e:c2:0c:6e:cf:e8:b3:1c:2c: ee:ec:ba:57:48:c8:d3:df:71:45:9e:ca:8f:d6:08: 9c:b4:1e:2c:11:4e:df:51:a7:bc:88:9d:30:ed:76: 42:29:8e:4e:b0:c0:cc:bd:48:ef:6e:cf:59:e0:9a: 69:5e:63:2d:58:81:9c:25:d3:f8:82:64:8a:82:4a: 7c:a8:ca:09:7c:fe:3d:82:10:9d:86:a2:f5:80:dc: bf:b6:35:79:09:a3:08:de:8d:3e:96:99:1c:57:40: 7e:b7:b7:e2:b7:09:6d:dd:cd:da:84:c2:9a:db:bb: c6:d9:90:6e:7a:e3:05:68:98:5c:b0:e8:d3:ec:f5: cf:2e:64:3b:63:bf:1f:62:13:ea:f5:8f:82:fd:d8: cb:fa:a4:ba:c3:6c:ad:06:5d:c4:1e:e9:13:d3:0a: 6d:28:10:d1:02:50:c9:71:1b:dc:2d:49:d4:f5:cb: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CA:9A:51:FC:39:D0:D0:81:95:1D:D3:CA:89:73:BB:D7:C5:39:52 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0a:8d:0d:39:fb:9b:d8:97:25:68:57:f7:f9:5d:28:08:c9: 7c:8c:99:f2:fb:a4:84:af:70:60:d1:52:60:20:31:ea:d8:7e: 6c:1b:21:4a:d6:3b:e3:00:93:a8:b9:5b:72:bb:ac:8e:0a:ba: 44:d0:11:30:50:ca:17:9b:64:b3:3b:b8:0e:ec:8e:08:fc:16: d3:06:df:cf:5f:5b:a5:f1:9f:0d:04:f8:dc:c4:90:78:48:d6: c2:00:b3:9d:be:83:b5:fb:7f:47:4d:37:2e:b7:22:b4:2a:63: 32:7c:cf:ed:db:7f:47:7a:13:e1:aa:bc:14:c7:d4:35:42:b5: ff:09:fd:8b:db:fa:85:40:c3:26:ab:7e:bf:70:aa:cb:9d:51: 53:0b:ce:6a:b3:dc:84:7f:c9:fb:e4:a2:ea:ab:9e:c4:be:00: e8:57:15:ea:5c:ec:dc:85:3a:e4:da:e0:8a:15:96:8d:12:ed: 32:db:f1:bc:8f:75:d6:03:e6:e0:33:28:ef:48:17:01:85:fe: f7:f1:4f:e8:eb:7c:7b:93:08:06:97:c3:35:23:c3:d2:1b:91: d2:78:60:3f:14:1d:db:7e:c5:f6:81:7c:bd:4d:0f:fb:b8:06: c0:ed:5e:5e:82:6b:06:76:ce:06:8d:5a:e7:d7:8f:be:ba:3d: 38:d4:74:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdMMceytB55XWXK3/IY32WRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUwNjA3MjEwMDIwWhcNMjUwNjA4MjEwMDIwWjAzMTEwLwYDVQQD EyhhMmNhOWE1MWZjMzlkMGQwODE5NTFkZDNjYTg5NzNiYmQ3YzUzOTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IdXzMFAmx6b/bkGvMv1j5WDTNod 6WwNdtfUIRJrH44J5queHZt5x5MuqiT9yhkzH8STs7C84WaXbi03UVJSSsPIprnN AvwvkfDSS48GNOgewgxuz+izHCzu7LpXSMjT33FFnsqP1gictB4sEU7fUae8iJ0w 7XZCKY5OsMDMvUjvbs9Z4JppXmMtWIGcJdP4gmSKgkp8qMoJfP49ghCdhqL1gNy/ tjV5CaMI3o0+lpkcV0B+t7fitwlt3c3ahMKa27vG2ZBueuMFaJhcsOjT7PXPLmQ7 Y78fYhPq9Y+C/djL+qS6w2ytBl3EHukT0wptKBDRAlDJcRvcLUnU9cs1vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLKmlH8OdDQgZUd08qJc7vXxTlSMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAqNDTn7 m9iXJWhX9/ldKAjJfIyZ8vukhK9wYNFSYCAx6th+bBshStY74wCTqLlbcrusjgq6 RNARMFDKF5tkszu4DuyOCPwW0wbfz19bpfGfDQT43MSQeEjWwgCznb6Dtft/R003 LrcitCpjMnzP7dt/R3oT4aq8FMfUNUK1/wn9i9v6hUDDJqt+v3Cqy51RUwvOarPc hH/J++Si6quexL4A6FcV6lzs3IU65NrgihWWjRLtMtvxvI911gPm4DMo70gXAYX+ 9/FP6Ot8e5MIBpfDNSPD0huR0nhgPxQd237F9oF8vU0P+7gGwO1eXoJrBnbOBo1a 59ePvro9ONR0yA== -----END CERTIFICATE-----Generated at Sun Jun 8 06:08:18 2025 by rpki-client