$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft File: hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json) Hash identifier: HEe8f6avbHHjMo5i+9m5/pEo/ROf9QfE6kFMmctlCSI= Subject key identifier: B1:58:C1:CD:A7:B7:B0:2C:66:78:84:BD:01:2B:8D:1C:65:D5:2B:97 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019767A9428EF890D5C3267FE95ADE368401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft Manifest number: 0DE3 Signing time: Fri 13 Jun 2025 05:00:35 +0000 Manifest this update: Fri 13 Jun 2025 05:00:35 +0000 Manifest next update: Sat 14 Jun 2025 05:00:35 +0000 Files and hashes: 1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=) 2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=) 3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=) 4: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=) 5: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=) 6: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=) 7: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=) 8: ERVdycpY4bKVWQxSzavqyLO77UA.roa (hash: KjnUBMfnbY2dTYCqn8dXExC2kP5qWbontZX2wFEns5A=) 9: FMoS-o9DiVgUmecx3SfvDXEo6xw.roa (hash: 1UzCsZkjWYFE709BjoGlEdeWX/dMS9WtM2S2yyY1T4U=) 10: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=) 11: Gb0UHBAB0Dc0hCzGDJbXXC0YxPA.roa (hash: 7raBqAGSGU7xoGR3vt8m25hhNoG1Gw7C5q3QDR2lkQw=) 12: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=) 13: Hld29G1DWYar_V03vvNEEAXl32I.roa (hash: g5H45h/y6fGU8XE9r1rX3k8z88V8C5urUpMK18n0TuA=) 14: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=) 15: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=) 16: LyVym4UPK98Ng-1a9OLHRZHLRmw.roa (hash: /EWVi2VWVGQ7yEZI1vDOB6bTXscAFP3frjxwug5o7DE=) 17: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=) 18: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=) 19: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=) 20: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=) 21: WcNfc2ebH1nabssdIAaljgMAMvI.roa (hash: gIeR1+oo2boP6Zw5hratvRw93AbF/Ul3dA94pgz+zkM=) 22: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=) 23: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=) 24: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=) 25: d0u-ehuUqLrY5tyibnzgkeCwZXc.roa (hash: 0qBz5naJyINGxrtms8qZ9KJTRQQ0DHsskm0N3y0uv2g=) 26: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: IXNETN6Xr+1if70vO8sqhmRWfLbdqt8kWrFLE/C6qqQ=) 27: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=) 28: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=) 29: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=) 30: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=) 31: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=) 32: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=) 33: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=) 34: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=) 35: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=) 36: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:67:a9:42:8e:f8:90:d5:c3:26:7f:e9:5a:de:36:84:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jun 13 05:00:35 2025 GMT Not After : Jun 14 05:00:35 2025 GMT Subject: CN=b158c1cda7b7b02c667884bd012b8d1c65d52b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:dc:b4:0d:b9:8e:a6:e6:13:2c:3a:1c:5e: 05:26:26:d8:b4:d6:cd:b7:bf:23:8f:fb:b2:b7:18: 18:d3:15:ac:be:8f:25:ef:cc:7f:e4:b6:3e:53:be: f7:2c:57:a2:4e:34:75:b4:5a:f2:bf:d8:79:a6:a7: 75:cc:15:a6:53:03:2e:65:8a:69:de:97:9b:25:c9: 1c:a3:2f:c9:37:ab:03:06:d5:36:d7:ee:84:fa:f2: 87:9e:b1:e2:5e:02:e1:59:66:fc:82:f2:eb:ad:bf: 76:a6:9b:f6:ec:25:e6:4c:69:a9:6a:47:e1:43:f8: 6c:ac:cc:2f:18:64:06:ae:e5:c8:b2:4f:81:62:e8: 5c:73:d4:34:2f:d6:0d:12:3e:39:68:34:03:42:ba: 85:12:18:b3:f0:75:10:41:8b:11:f3:e2:11:36:bc: 1c:09:ff:d1:03:f6:1d:f3:53:68:43:2b:ba:e3:fa: 91:59:bc:73:4c:84:4d:0f:d7:1c:c5:b7:8e:96:6a: 10:6a:6d:67:47:21:a4:d8:46:52:1a:ba:68:14:a1: 26:f3:66:43:3e:45:75:33:1e:a2:17:42:c5:d2:b4: 1d:be:59:7a:fe:b9:6d:a3:23:70:83:70:9c:97:2b: 9e:b8:a9:e1:fc:24:f9:94:ba:13:ee:ce:cf:3e:36: d2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:58:C1:CD:A7:B7:B0:2C:66:78:84:BD:01:2B:8D:1C:65:D5:2B:97 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:67:e4:ed:ce:dc:93:3b:47:ce:5b:59:bc:62:4c:06:b5:8e: a4:3d:15:aa:1e:82:c9:d3:a9:59:b5:62:46:91:bc:02:8e:55: d7:3c:63:95:67:a4:81:71:d0:d5:22:a0:ed:6d:d5:a3:81:c2: f9:3c:65:27:32:33:ba:bd:81:35:0c:fe:bb:d5:de:af:d3:9e: 42:38:d7:4c:58:2c:b3:eb:18:e8:8c:e8:26:3d:b3:48:0e:35: e8:32:f1:19:9c:35:9a:52:54:65:75:8d:cb:d7:b0:56:dd:80: e2:9b:e6:59:20:af:f1:3f:c2:9e:4b:a3:cf:c3:79:a5:3e:2c: 99:2e:4e:15:08:c6:60:76:03:c4:08:a6:9e:ce:9e:cb:a2:1e: bc:b1:45:9e:69:d5:fb:96:b7:b6:ea:3c:b2:0d:a6:d4:85:fb: 30:8e:90:86:65:f2:d6:a6:58:cb:58:37:c0:3b:35:b2:50:e3: ae:2b:01:9e:31:2f:3b:0b:68:cd:7c:dd:ab:1b:05:db:b2:29: af:00:fb:3c:6d:a8:9d:5d:c9:61:11:68:5b:e7:0d:da:18:44: 62:fd:b5:a6:e5:1e:76:f5:54:22:9b:e3:c3:0d:9b:2a:46:47: 34:08:8e:66:df:d4:48:50:75:9d:b3:30:4e:93:02:c5:73:18: 0e:f0:72:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdnqUKO+JDVwyZ/6VreNoQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUwNjEzMDUwMDM1WhcNMjUwNjE0MDUwMDM1WjAzMTEwLwYDVQQD EyhiMTU4YzFjZGE3YjdiMDJjNjY3ODg0YmQwMTJiOGQxYzY1ZDUyYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3enctA25jqbmEyw6HF4FJibYtNbN t78jj/uytxgY0xWsvo8l78x/5LY+U773LFeiTjR1tFryv9h5pqd1zBWmUwMuZYpp 3pebJckcoy/JN6sDBtU21+6E+vKHnrHiXgLhWWb8gvLrrb92ppv27CXmTGmpakfh Q/hsrMwvGGQGruXIsk+BYuhcc9Q0L9YNEj45aDQDQrqFEhiz8HUQQYsR8+IRNrwc Cf/RA/Yd81NoQyu64/qRWbxzTIRND9ccxbeOlmoQam1nRyGk2EZSGrpoFKEm82ZD PkV1Mx6iF0LF0rQdvll6/rltoyNwg3CclyueuKnh/CT5lLoT7s7PPjbS8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFYwc2nt7AsZniEvQErjRxl1SuXMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmfk7c7c kztHzltZvGJMBrWOpD0Vqh6CydOpWbViRpG8Ao5V1zxjlWekgXHQ1SKg7W3Vo4HC +TxlJzIzur2BNQz+u9Xer9OeQjjXTFgss+sY6IzoJj2zSA416DLxGZw1mlJUZXWN y9ewVt2A4pvmWSCv8T/Cnkujz8N5pT4smS5OFQjGYHYDxAimns6ey6IevLFFnmnV +5a3tuo8sg2m1IX7MI6QhmXy1qZYy1g3wDs1slDjrisBnjEvOwtozXzdqxsF27Ip rwD7PG2onV3JYRFoW+cN2hhEYv21puUedvVUIpvjww2bKkZHNAiOZt/USFB1nbMw TpMCxXMYDvByYQ== -----END CERTIFICATE-----Generated at Fri Jun 13 13:35:38 2025 by rpki-client