$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft File: hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json) Hash identifier: mki24gWI5uNDSou+0+CNsXuTCy6cpvFyTMd28ZZfzxo= Subject key identifier: C5:92:E9:5C:5A:A8:7E:DE:9C:C2:A9:B2:4D:33:54:21:13:27:1D:6A Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 01995B69E6CD2BCE9EA1852B663126E8D754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft Manifest number: 0EF9 Signing time: Thu 18 Sep 2025 06:01:30 +0000 Manifest this update: Thu 18 Sep 2025 06:01:30 +0000 Manifest next update: Fri 19 Sep 2025 06:01:30 +0000 Files and hashes: 1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=) 2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=) 3: 4ONine07eIhpJhI9ECOeUP9WFQg.roa (hash: MmJtgZmAq2o+Sq5m0y3r9fQ0BH94PpmL5fYIQg/FZYc=) 4: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=) 5: 5aREl2tnqSeJ3EnaMuRJKgTaw8M.roa (hash: +59wYZhBzuDab+mIyrt+sW2gnNSJh6zN385z4HSytBc=) 6: 65ahf5r6xKbeZ8AGsp6YsLsmAZE.roa (hash: Sj/V9VHJ8TFvtffvUCl874DjTHZKJVL+voddh2kr3I4=) 7: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=) 8: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=) 9: AH9IWPeSjn4zPMXrJdOOZZAn9Aw.roa (hash: NZOres5BfCUJDRAZEdwJLZ3pKyCM0qr94CohvGLshJM=) 10: Dz3gNiJY89jDyvkJpGkeJcJTKB4.roa (hash: L3NLmxg4Uy+RiagoCPUuhkUaLSZMDoHR/IhNXoa1E1w=) 11: EqQMeL6zx5KJ7G-6yvg5oeaml80.roa (hash: +hIYVqIF3npRwqzc+KC9S17raCPIuUeac2Niy0EAaaQ=) 12: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=) 13: GgheZMui_9obLhlNhZVy8uWvs5U.roa (hash: 7NB7RYWksH/wQuJ5gKOAyFQPxId7nbq3caWrTZFbMUE=) 14: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=) 15: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=) 16: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=) 17: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=) 18: O0Y2pXvoTcwSg_AH3MrYw8lGjAI.roa (hash: SS9S9xCfIfcatYd8ThDYEjf3h4RzT0uB9Re77ZoPS4g=) 19: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=) 20: SqKkKM173VSrB36qGmxTUJHKCo0.roa (hash: 48hEcJJ8yoYkRJhZ40G+F37LnKZ8jLN3UCGXFfcuN8I=) 21: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=) 22: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=) 23: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=) 24: aq6KlZysbDLQ4D4CtmviBNX9mxE.roa (hash: 0VRSVc6dFAyx9rP2hf9m+j4g6HQK7GBOvG2B/JoJUo0=) 25: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=) 26: eRDw7dF55P7wHv9vfdNgciZiits.roa (hash: MdrDuZVh60KAJjt7uD5dLHrckgAME9PGiYJbxXCoOHg=) 27: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: GP7F/OPc67C7AYcPOE+5Hhlo35ewgeoKt0wlgyS7QXc=) 28: jVzLhR_-fZDDxOR849cM8vp6pzo.roa (hash: j+TN92lkP2jjoQ1DpZsUrV4hygUYX+rjfYRIwGn+Dyc=) 29: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=) 30: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=) 31: kMtd6Q6faSofDN0lp3zD9l3Gdzs.roa (hash: QTK8SH5Xb+6Bx10XX5dvQEh39Vc9s2UGKcmxtby4cBs=) 32: moTDq53FtqLZAk0AGJnD6LpxpL4.roa (hash: yDXZvfMOXGpBwTjMd4JFoseeDN5zwWwTjLyIqfnezgg=) 33: mrJC9W9EE59GYgtXbqXAdDLeR5M.roa (hash: EmQASPlX4VYn+oN5h+q7sFx0PUiUYy3q6dEHOc0jLAs=) 34: nBCkRyX1WlWGiDbtpEcZ1yzXCz8.roa (hash: N7pYS0DZbvPX9AJ7+c9P/Fy4kdTMZIvg/FrKj/0hE8k=) 35: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=) 36: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=) 37: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=) 38: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=) 39: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=) 40: ynxoqLNGRfbAQl1csrIqvWu2om8.roa (hash: 02FpxfF5rw0ZP5XHvGYcpaVTPQJddG9K1OzX9QimBYM=) 41: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 00:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:5b:69:e6:cd:2b:ce:9e:a1:85:2b:66:31:26:e8:d7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Sep 18 06:01:30 2025 GMT Not After : Sep 19 06:01:30 2025 GMT Subject: CN=c592e95c5aa87ede9cc2a9b24d33542113271d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c4:22:67:21:52:48:03:c3:ff:3c:a9:f5:b0: 07:2d:fd:ee:c4:8a:be:55:de:52:e5:8a:2d:a0:f9: 7c:d7:7d:fd:10:8a:15:21:0c:86:f8:be:4a:34:c2: a9:42:6a:0a:db:af:ca:c8:37:f7:ad:b9:f6:74:79: 1e:eb:e6:ad:fb:12:1c:22:83:23:59:6e:86:6b:ba: fb:9c:6e:64:78:b6:35:15:df:1a:ec:8f:ae:2c:17: 8d:36:f1:a7:75:bb:26:a3:de:d3:dd:dd:cb:f4:95: 70:5f:61:e0:00:f9:e8:6b:5f:19:86:35:57:89:42: 30:18:71:c5:54:2a:0b:75:29:fe:4b:31:31:b1:2a: e9:76:7f:f1:f5:87:6f:84:86:88:24:62:5c:f7:ae: c9:31:0a:36:4f:c4:16:32:27:79:c8:d2:d0:28:dd: 5e:d7:6e:0d:9e:60:fa:07:6b:04:ad:99:2a:58:e4: ff:10:95:04:d4:fb:5c:a6:60:7b:2d:32:c7:fb:23: 29:0f:7f:6c:75:fd:3b:16:5c:49:a6:26:70:b8:70: 12:6b:75:6c:59:53:da:a5:0a:00:ae:a7:2a:8a:3b: af:bb:4b:3b:09:7a:3f:44:2c:47:ba:e7:b8:c3:96: 69:b7:af:3d:23:d6:79:c4:db:79:d5:56:75:fd:29: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:92:E9:5C:5A:A8:7E:DE:9C:C2:A9:B2:4D:33:54:21:13:27:1D:6A X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:00:60:be:ff:d9:62:3a:a7:5f:87:26:f6:84:81:85:4b:ba: e4:f5:d5:7c:28:78:16:4a:75:95:a7:5e:64:56:c2:d0:77:b6: f9:42:99:9c:66:9b:5c:0f:e3:82:2c:20:13:d6:d2:e5:1e:bd: 75:02:44:ad:9b:8f:be:3c:da:3e:fd:16:54:a8:70:95:91:2f: b1:49:eb:f0:7e:d9:21:b0:cd:f7:ff:a8:38:00:31:80:8a:16: 21:a3:b0:51:4b:c7:bd:5c:16:55:0c:1a:34:cb:12:2f:56:e5: ab:58:09:2c:db:db:b4:82:3c:11:e9:ab:03:6f:17:a5:40:3b: eb:1c:cb:58:53:7b:36:fc:2f:90:85:11:61:86:47:a7:ec:ac: 65:71:41:70:bc:19:21:20:ea:2d:2b:9a:c7:43:39:db:22:04: 91:64:65:c2:f8:fc:55:1f:27:a1:c4:d5:1f:c8:5e:09:3f:1a: 73:6e:67:a6:5d:e9:02:4e:7d:48:ec:dc:7d:04:e0:2f:aa:24: 4e:70:87:b9:65:81:f4:a0:c7:73:7a:3e:4d:f4:c9:5b:dd:79: 65:43:cd:2b:a4:7c:d9:46:a2:d3:2e:22:df:76:a4:19:63:70: 11:1d:0f:56:47:c2:f0:d3:35:9a:b7:45:b1:89:5b:71:c1:e3: 5d:bf:dd:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlbaebNK86eoYUrZjEm6NdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUwOTE4MDYwMTMwWhcNMjUwOTE5MDYwMTMwWjAzMTEwLwYDVQQD EyhjNTkyZTk1YzVhYTg3ZWRlOWNjMmE5YjI0ZDMzNTQyMTEzMjcxZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMQiZyFSSAPD/zyp9bAHLf3uxIq+ Vd5S5YotoPl81339EIoVIQyG+L5KNMKpQmoK26/KyDf3rbn2dHke6+at+xIcIoMj WW6Ga7r7nG5keLY1Fd8a7I+uLBeNNvGndbsmo97T3d3L9JVwX2HgAPnoa18ZhjVX iUIwGHHFVCoLdSn+SzExsSrpdn/x9YdvhIaIJGJc967JMQo2T8QWMid5yNLQKN1e 124NnmD6B2sErZkqWOT/EJUE1PtcpmB7LTLH+yMpD39sdf07FlxJpiZwuHASa3Vs WVPapQoArqcqijuvu0s7CXo/RCxHuue4w5Zpt689I9Z5xNt51VZ1/SkfXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWS6VxaqH7enMKpsk0zVCETJx1qMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQBgvv/Z YjqnX4cm9oSBhUu65PXVfCh4Fkp1ladeZFbC0He2+UKZnGabXA/jgiwgE9bS5R69 dQJErZuPvjzaPv0WVKhwlZEvsUnr8H7ZIbDN9/+oOAAxgIoWIaOwUUvHvVwWVQwa NMsSL1blq1gJLNvbtII8EemrA28XpUA76xzLWFN7NvwvkIURYYZHp+ysZXFBcLwZ ISDqLSuax0M52yIEkWRlwvj8VR8nocTVH8heCT8ac25npl3pAk59SOzcfQTgL6ok TnCHuWWB9KDHc3o+TfTJW915ZUPNK6R82Uai0y4i33akGWNwER0PVkfC8NM1mrdF sYlbccHjXb/d2A== -----END CERTIFICATE-----Generated at Thu Sep 18 09:28:08 2025 by rpki-client