$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: TrO7qKPC/wwS9OAkus8avyza8XdfBxsVY8IxFc7VB6Y= Subject key identifier: 98:D5:4E:D1:6E:87:63:38:E9:7D:2C:84:AA:F6:BF:50:3F:D0:12:57 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 0199270E5036340A05152E5CF978C05EE59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 13E1 Signing time: Mon 08 Sep 2025 02:01:13 +0000 Manifest this update: Mon 08 Sep 2025 02:01:13 +0000 Manifest next update: Tue 09 Sep 2025 02:01:13 +0000 Files and hashes: 1: 2CMmm-IO3y31CC1PnY_uGGrhn9w.roa (hash: 4X4+4X/uOYbuErCckaKak0v4fA7/5gtq1a9L2A4Lw/g=) 2: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=) 3: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=) 4: 8ZC0k7rzA0E1rhNje27CVkEZJ3k.roa (hash: A0opDIEQI4MN92tRbOLHdM7zZc/0nBThej01ve87lSE=) 5: CGtvlVAjeOKgmOegCwgkAU5viUg.roa (hash: tYOH0itDmxfLkiehctgBZN5JIUldgyHwoFbKsMtsM8Q=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: AJDlwCNllqqpSHhewdrF0DJ3eBapzycsdI++w8E5zYo=) 7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=) 8: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=) 9: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=) 10: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=) 11: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=) 12: mX1m4UQyXXwpGD0jqQb_y8LC8FI.roa (hash: rM0m6jdxRtvhd5JgDnoJoekO12B/OCdpvQvQXsOMtes=) 13: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=) 14: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=) 15: xs8kgLY-61uyKfGESALykLk9Pj0.roa (hash: uV1wjICOu9X1DokywqYjnW+r/mANbpnz+9BPI0bQ5c8=) 16: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=) 17: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:27:0e:50:36:34:0a:05:15:2e:5c:f9:78:c0:5e:e5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Sep 8 02:01:13 2025 GMT Not After : Sep 9 02:01:13 2025 GMT Subject: CN=98d54ed16e876338e97d2c84aaf6bf503fd01257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:f6:39:5b:95:74:90:ab:99:12:19:22:80: 26:9c:cc:51:85:8d:0a:c8:4d:7f:95:cc:5c:d1:a2: 15:b3:4c:8e:9a:28:dd:3b:df:d3:e0:29:0a:08:1a: 95:74:71:be:39:7e:b0:c9:12:ea:c6:ea:d9:4a:4a: 20:2f:45:96:3a:e7:19:1c:b8:90:9d:65:9b:d6:2a: 69:e4:af:2e:6c:6c:6f:26:b0:61:88:d1:ae:66:b9: 86:99:c4:e7:68:4c:fd:78:00:56:48:6b:82:2f:4f: 18:1a:bb:f5:f6:4a:fb:3c:3d:22:e2:ad:a8:65:83: 0b:2c:e3:26:4c:0c:be:d7:e5:71:d0:be:2e:1c:28: 5c:f0:5b:c2:c2:b8:6e:20:a6:93:fc:cc:0e:55:42: 1b:d8:6b:8f:b1:de:40:9b:69:d2:94:3a:35:87:0d: 00:0e:4f:3c:e2:78:e4:2a:ca:55:7d:24:f1:25:6b: e1:84:bc:a6:61:c4:38:ef:d9:05:b3:6b:a1:3a:8d: 8d:f3:1c:fe:4e:ef:94:9a:08:22:b9:ab:7c:40:ac: a9:28:1b:dd:33:a0:3c:ac:1f:55:c2:bc:ab:e3:7e: 92:e4:1d:22:e7:cb:3c:f7:36:67:a3:5e:0f:61:d1: 0c:92:18:de:bd:38:2c:2b:1a:e6:a4:4a:97:c0:ca: 3a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D5:4E:D1:6E:87:63:38:E9:7D:2C:84:AA:F6:BF:50:3F:D0:12:57 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:78:76:88:a8:b9:73:00:93:8f:da:d4:e1:50:25:6b:69:ba: 95:d6:d2:f5:60:54:cb:4a:79:8e:d4:44:1a:39:59:4b:8b:05: 36:06:62:1e:68:f8:a8:9a:70:b1:5f:3b:77:3d:d1:21:70:02: 1b:b5:2a:40:bb:4d:9a:d4:9f:c3:ce:5d:f3:1d:7b:43:7a:d5: 1a:fa:dd:c4:ea:ce:fa:fe:88:82:c9:01:8b:0a:47:2b:67:45: 92:2f:33:68:a0:2e:d6:9e:1b:13:6a:34:78:6e:64:e4:3f:37: 6b:ee:78:6f:27:96:23:4b:37:f4:8c:bc:91:06:fa:90:b9:97: 44:6f:0a:1c:1b:f0:10:b2:46:45:f9:97:3c:b4:04:1b:a0:17: 66:ed:f2:27:45:4c:6b:6d:74:8c:88:c7:69:66:df:b6:b6:a1: a6:cb:f4:b9:8d:fd:4c:5d:12:5e:53:75:e5:b4:5c:05:5c:c2: 0d:bb:e6:54:cc:ba:2f:01:b0:6c:d7:0b:42:17:e6:10:75:57: 23:4a:68:fd:05:e2:33:6e:f0:a5:c9:34:89:ce:24:c7:f5:cf: e8:40:a4:21:c3:2a:91:a4:a3:14:a8:2d:fb:73:ff:5c:86:75: af:7e:80:b8:4e:f3:7a:d3:c7:0f:89:d1:73:ce:2a:08:aa:be: d9:ee:9c:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZknDlA2NAoFFS5c+XjAXuWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjUwOTA4MDIwMTEzWhcNMjUwOTA5MDIwMTEzWjAzMTEwLwYDVQQD Eyg5OGQ1NGVkMTZlODc2MzM4ZTk3ZDJjODRhYWY2YmY1MDNmZDAxMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXL2OVuVdJCrmRIZIoAmnMxRhY0K yE1/lcxc0aIVs0yOmijdO9/T4CkKCBqVdHG+OX6wyRLqxurZSkogL0WWOucZHLiQ nWWb1ipp5K8ubGxvJrBhiNGuZrmGmcTnaEz9eABWSGuCL08YGrv19kr7PD0i4q2o ZYMLLOMmTAy+1+Vx0L4uHChc8FvCwrhuIKaT/MwOVUIb2GuPsd5Am2nSlDo1hw0A Dk884njkKspVfSTxJWvhhLymYcQ479kFs2uhOo2N8xz+Tu+Umggiuat8QKypKBvd M6A8rB9Vwryr436S5B0i58s89zZno14PYdEMkhjevTgsKxrmpEqXwMo6kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjVTtFuh2M46X0shKr2v1A/0BJXMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHh2iKi5 cwCTj9rU4VAla2m6ldbS9WBUy0p5jtREGjlZS4sFNgZiHmj4qJpwsV87dz3RIXAC G7UqQLtNmtSfw85d8x17Q3rVGvrdxOrO+v6IgskBiwpHK2dFki8zaKAu1p4bE2o0 eG5k5D83a+54byeWI0s39Iy8kQb6kLmXRG8KHBvwELJGRfmXPLQEG6AXZu3yJ0VM a210jIjHaWbftrahpsv0uY39TF0SXlN15bRcBVzCDbvmVMy6LwGwbNcLQhfmEHVX I0po/QXiM27wpck0ic4kx/XP6ECkIcMqkaSjFKgt+3P/XIZ1r36AuE7zetPHD4nR c84qCKq+2e6cZQ== -----END CERTIFICATE-----Generated at Mon Sep 8 08:47:33 2025 by rpki-client