$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: OVzw1mLkV2BBN99/5hCeBUGGAA3y3+UW7UQlm3YTs3U= Subject key identifier: 0A:69:57:00:DC:98:87:D4:54:38:0E:C5:4B:48:C9:D8:FF:3A:A3:9B Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 019A2F696D3BC95478F8334FF4293F61AFA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1715 Signing time: Wed 29 Oct 2025 10:00:29 +0000 Manifest this update: Wed 29 Oct 2025 10:00:29 +0000 Manifest next update: Thu 30 Oct 2025 10:00:29 +0000 Files and hashes: 1: 1-cqQGhXn60MgU2VUeNpjveMW2qk.roa (hash: feFbGoFtjwOyIRFeQAOSoVibJ96/Lb0iYRt2u/rBKMg=) 2: 38_Nyvzqxd0PvNucOR1iwmjTQ_o.roa (hash: tMPubQJjYp/dcRFcviDk7lh4PnDXnz7NxUZ6aWZWDyw=) 3: 61vRkExsI62jJ48irmkSDqW7AqQ.roa (hash: JvZBuIGS2vn+dO3Q9/C07cjmDLxdJUfuxzakaBvC2Ms=) 4: B-leWKyHyUWQaTSAIdQFN-Zp9rw.roa (hash: zSJCyrn6RempGySvfu/Xbm5Mpb6WnVGqpUroJHwaWew=) 5: Fxmcu1Qi0nhsZOIxVkNPueqhUl4.roa (hash: 5Bu1yMZZneENHRnbSmQP3RKWM4Ya4gnEDHmeUdig1bo=) 6: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: etgy4UYB8u8N6nMuyRSRmieEPcHUPkhsEVQLJt4EZL4=) 7: KT_XRl68MXL3ukVnoMjZI1SdZ_Q.roa (hash: ug8+swCsKmFRIJydlY68K1ox72m3uNsfqqtSels/7I8=) 8: PLFnFsip4j-sETB8PPQgrmVAohU.roa (hash: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=) 9: UAEVVZJh_F--n89kLYAR_ZrMiAA.roa (hash: KwDeeF7UfAzk4CN3kaftHTo6xiyKPchWU5oi2GhJgUA=) 10: XgPwQOKsd9uJBigbEk6gk3WV4gw.roa (hash: MfMJHXV5sXbrxV0YBc5joH+vkuSR+zLfQaFUaN552Bw=) 11: Z9kOlfq-w01D8Ml4l6fqbORR_5E.roa (hash: gxikB87WE0XHMDAk0eS1AdtF8pmhQbJr0n4lM1hO40I=) 12: cUfpv5-AAffzxD9fcxzlAlyBCJ4.roa (hash: xpWzwpf+CMwbZhPneV1IeCxiayddwXs6mMP85+eMFG8=) 13: f7jihsbQZQOjudWmankbYdgvSd0.roa (hash: Kmr8nTMHln2GoQ9z1uNdCIRV8UiFMuI6zP59QLBGAfA=) 14: m8selLLRbKezlnaS1FUfG6Kw0Ns.roa (hash: gDn7HNTqTqOigQSPvIZJVIcZmeh/IZoOdyWyJdwiR84=) 15: oANVOGpGqSZNzfjjdghTPit9_38.roa (hash: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=) 16: thBlz8VmOwFy7VP6rRGU4IAeOPM.roa (hash: j47jyGdIQHFDmGyLmCcj/vCJ4acjKFHJg9XXhEJ2n2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Oct 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2f:69:6d:3b:c9:54:78:f8:33:4f:f4:29:3f:61:af:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Oct 29 10:00:29 2025 GMT Not After : Oct 30 10:00:29 2025 GMT Subject: CN=0a695700dc9887d454380ec54b48c9d8ff3aa39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:28:da:33:59:5e:90:91:d8:41:d7:d4:fc: ef:ed:1d:19:72:9e:a3:78:80:c7:1c:77:e4:3d:f6: 13:a7:7a:c6:39:4e:ae:5b:e3:27:d2:0d:a7:a4:24: ca:26:f7:9c:ee:0d:7f:a9:ba:00:67:08:9e:eb:99: 72:13:b8:ad:8d:8a:37:5f:e9:4c:81:43:f0:a3:67: ca:66:9c:c5:93:31:14:e8:ef:e0:01:99:55:d1:4b: 14:b3:fc:d0:21:45:09:b3:20:54:82:9d:d8:28:4d: c9:87:bc:d9:d0:b2:0e:dc:82:da:b7:cb:58:46:ee: ba:d8:4f:59:25:87:20:ed:36:99:d9:5d:2f:10:27: ce:22:94:b6:4b:7a:00:6d:27:76:ca:c8:44:b4:9f: 3a:4f:7e:a6:44:f5:ff:e5:b1:03:d4:67:58:b4:0b: 5f:1c:1d:a5:0c:6c:1a:3e:51:21:3c:12:b1:69:b4: 1f:8d:6d:69:3a:c4:83:1f:cb:1b:71:13:7e:88:c5: 7d:88:61:c8:ab:05:32:4f:1e:c6:55:f1:90:b6:58: 27:ca:91:96:f4:8b:89:ef:16:44:6f:98:fc:af:dc: 65:26:e0:23:18:c9:30:ea:7d:ce:e6:bb:e1:3e:6f: 5b:70:63:e9:26:7c:f5:40:78:66:d7:26:91:5d:6c: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:69:57:00:DC:98:87:D4:54:38:0E:C5:4B:48:C9:D8:FF:3A:A3:9B X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2c:de:9b:83:4c:6f:8a:23:11:4b:ac:97:3a:14:36:23:b0: 3b:d5:6b:68:13:0c:53:1f:a7:f4:d6:a0:24:ba:0b:9b:aa:6f: ae:0a:c9:13:4d:fc:7d:81:13:b3:65:3f:ab:67:a2:e6:cb:7c: e5:65:f7:a7:be:71:7e:17:78:c6:0d:c4:e5:43:cf:7c:6c:b4: 79:2e:cf:6d:82:91:4b:e0:f1:01:f0:1d:67:c4:40:99:e4:b8: ac:0b:d2:d7:92:70:d2:dc:d7:54:02:dc:5b:2a:5e:25:b2:be: 2a:0c:8a:7e:11:82:32:fd:f7:f6:44:ff:8d:75:43:6c:f4:5b: 65:78:91:6d:bf:f2:f4:41:54:8d:08:37:6a:8d:85:3b:5b:98: 88:25:f0:bb:8a:11:e8:81:68:fe:c8:8e:e8:af:7c:4d:28:db: 35:78:dc:16:e9:4c:62:6a:67:38:cb:e7:f9:f5:3d:2a:4f:8c: 25:36:21:49:82:6d:bb:1a:30:c8:ac:38:a9:3b:7c:35:53:9d: 67:a1:4a:9a:ac:38:af:ad:09:05:24:15:13:88:e2:1e:d8:eb: c8:97:a9:14:09:1b:73:d2:97:42:e8:09:cd:b4:b9:39:c6:11: fa:e1:29:62:e4:2a:73:d8:f5:b3:1f:bd:b2:1f:00:c9:86:83: ac:99:7c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZovaW07yVR4+DNP9Ck/Ya+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjUxMDI5MTAwMDI5WhcNMjUxMDMwMTAwMDI5WjAzMTEwLwYDVQQD EygwYTY5NTcwMGRjOTg4N2Q0NTQzODBlYzU0YjQ4YzlkOGZmM2FhMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN8o2jNZXpCR2EHX1Pzv7R0Zcp6j eIDHHHfkPfYTp3rGOU6uW+Mn0g2npCTKJvec7g1/qboAZwie65lyE7itjYo3X+lM gUPwo2fKZpzFkzEU6O/gAZlV0UsUs/zQIUUJsyBUgp3YKE3Jh7zZ0LIO3ILat8tY Ru662E9ZJYcg7TaZ2V0vECfOIpS2S3oAbSd2yshEtJ86T36mRPX/5bED1GdYtAtf HB2lDGwaPlEhPBKxabQfjW1pOsSDH8sbcRN+iMV9iGHIqwUyTx7GVfGQtlgnypGW 9IuJ7xZEb5j8r9xlJuAjGMkw6n3O5rvhPm9bcGPpJnz1QHhm1yaRXWzReQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAppVwDcmIfUVDgOxUtIydj/OqObMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyzem4NM b4ojEUuslzoUNiOwO9VraBMMUx+n9NagJLoLm6pvrgrJE038fYETs2U/q2ei5st8 5WX3p75xfhd4xg3E5UPPfGy0eS7PbYKRS+DxAfAdZ8RAmeS4rAvS15Jw0tzXVALc WypeJbK+KgyKfhGCMv339kT/jXVDbPRbZXiRbb/y9EFUjQg3ao2FO1uYiCXwu4oR 6IFo/siO6K98TSjbNXjcFulMYmpnOMvn+fU9Kk+MJTYhSYJtuxowyKw4qTt8NVOd Z6FKmqw4r60JBSQVE4jiHtjryJepFAkbc9KXQugJzbS5OcYR+uEpYuQqc9j1sx+9 sh8AyYaDrJl8VQ== -----END CERTIFICATE-----Generated at Wed Oct 29 18:33:29 2025 by rpki-client