$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json) Hash identifier: ms9Z20UYE2u0Y9Jmz3EU33C91dC6X4+hsaU1z0p6K9g= Subject key identifier: B6:22:CA:83:56:FF:20:D8:C5:25:62:EA:15:C4:56:C1:82:90:76:52 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 01991CC13BEA942B767776E036ABAEF7CA45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft Manifest number: 0380 Signing time: Sat 06 Sep 2025 02:00:49 +0000 Manifest this update: Sat 06 Sep 2025 02:00:49 +0000 Manifest next update: Sun 07 Sep 2025 02:00:49 +0000 Files and hashes: 1: 04KCLm--9za3MwjcZovBV5MAsL4.roa (hash: bwrl0NNRWWWbqvvR9nUL3EtLFx6n2S969Soq1XaC/yI=) 2: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=) 3: 4MHLeZKHCc5v2eG_hUTKUO_SQW0.roa (hash: s89mh8mTzjBY6Fii8f0XQdlc/RvoNx8XMwrvpm8npEA=) 4: 7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa (hash: JBF3Cz4Y9X2mzfXIi45uJ7vNKUzCzYVEwRnol0zS7Q4=) 5: B5Yy28bxe6Cml3si8QCLfAS3HZQ.roa (hash: TxRm2vEUTkidg4jt/+K4Y9aI40elv3rNZTegLYb/KOE=) 6: CtLpnb8O0zqwjiRsh2UDSYabrp8.roa (hash: 928xWDhDrm3wH3o5YDkEXCr6MBqgt08d7F3K+U/kKlw=) 7: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=) 8: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: rdApDgKwk3Mj6bLbk8zUCkJ0/tc9wk/iLDztOshzy8g=) 9: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (hash: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=) 10: NxOAGrTxofYBFKIpjjp74BEE4ck.roa (hash: czQx6WXfZ8CdpvYil+i0WrvTtgukRGCx1yKLUOoXK04=) 11: Yk2pXWWJv4sGuxcLppogjSmk248.roa (hash: i4LHXRMr0CAiEgBhwaeFhn7uPBNJPB2vLXzYJP+HFUw=) 12: dukRtbUxZBVioJQ3ztIVswrYNNA.roa (hash: UotKdLzjPrXF5MwtzJADmQZtjx5PiQOZaqVsJCIhnRQ=) 13: fk0Xlg-9w-A2loQv9XksmSbPwOY.roa (hash: bL4uRe18zJHwNvTxqiRSt9A3zafbwK9vMP1pK6Mv+QQ=) 14: m7WrmCx6u03mQuCv5HV8jBx9bFo.roa (hash: Ha14BfkFTZRxDnv1SGkvf/k31l7c4G7JUHS2Zmnc08A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:c1:3b:ea:94:2b:76:77:76:e0:36:ab:ae:f7:ca:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Sep 6 02:00:49 2025 GMT Not After : Sep 7 02:00:49 2025 GMT Subject: CN=b622ca8356ff20d8c52562ea15c456c182907652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:47:48:b7:74:0b:f8:27:8c:d3:42:e4:ba: be:bd:8a:5b:2e:8e:8b:90:66:f4:5b:19:b6:41:4f: 44:38:0b:98:ab:ac:e6:4b:5c:cc:18:2b:99:09:2d: 78:8c:22:61:86:74:b2:80:2a:41:c8:92:83:df:d1: 08:94:46:7a:50:a3:b4:0e:30:27:ae:3a:a0:2b:3b: 3d:63:1f:a8:ed:b8:78:48:fa:dc:40:6f:b3:63:c3: 97:e3:ec:5c:88:3e:80:cd:b0:30:d0:2a:95:da:78: 38:9b:8b:ef:e8:68:b2:6c:81:85:c3:a0:38:95:06: a4:a9:4d:eb:53:e3:69:d5:2f:26:96:2a:06:40:10: b2:f0:6c:c8:9c:50:c3:37:6c:ec:ee:fe:ca:3b:cc: 79:af:aa:7d:96:f0:54:6b:14:89:4a:9d:ae:18:07: c7:40:8a:e7:67:ee:97:18:a2:5b:19:75:df:e5:49: 37:d1:da:2d:f1:15:f4:65:3a:5e:15:ff:5a:7f:32: 54:dc:67:81:05:03:d3:e8:cf:e7:49:db:ab:bf:26: b2:7c:ba:f4:62:dc:3a:91:b5:fa:0c:1f:f8:89:13: 52:f2:7e:a3:a1:85:5b:53:90:91:89:b9:3c:af:0a: a7:37:aa:fb:03:48:98:1e:6c:e1:bc:52:a4:dc:e9: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:22:CA:83:56:FF:20:D8:C5:25:62:EA:15:C4:56:C1:82:90:76:52 X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ff:e5:56:3e:e2:cf:91:7d:87:55:41:c5:98:77:f6:63:79: 92:61:69:fe:e3:66:83:89:c7:de:e3:d1:6c:aa:e7:c3:a3:3b: 64:1c:e6:9c:9f:5a:99:6f:78:3e:55:1d:a1:25:06:45:67:06: 0e:69:74:3b:2d:01:e5:80:fd:b5:18:69:45:2d:f5:d7:ca:54: ed:cb:0f:a2:38:80:eb:2f:1b:d9:db:50:a1:6f:61:e3:83:32: bc:c2:e5:39:83:28:ad:07:58:6b:94:a2:0e:07:1a:95:73:25: 86:9b:c3:31:f9:2b:36:6a:ad:b2:4d:ec:b9:71:e6:98:89:f8: aa:af:b4:81:67:aa:29:6c:27:f9:09:0b:a1:eb:d9:a4:ed:2a: 14:81:d6:20:f1:9e:8b:7f:05:a9:c7:09:27:b4:09:69:1f:51: 35:cb:c4:bf:aa:db:67:8a:64:9d:78:53:6b:95:e3:eb:6d:a7: 8b:23:18:27:e7:d1:c0:f2:e8:e3:67:3f:c5:74:b7:c1:d8:93: 16:35:8f:26:34:27:fb:63:8b:e5:f5:f6:22:86:bd:f6:d1:dc: a3:d6:38:b3:9a:0b:a7:7b:49:38:09:ba:74:92:da:e3:10:64: 0f:d9:41:9e:03:de:8a:75:61:3b:ce:09:83:8e:51:f6:bb:51: f6:b3:1c:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkcwTvqlCt2d3bgNquu98pFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjUwOTA2MDIwMDQ5WhcNMjUwOTA3MDIwMDQ5WjAzMTEwLwYDVQQD EyhiNjIyY2E4MzU2ZmYyMGQ4YzUyNTYyZWExNWM0NTZjMTgyOTA3NjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya9HSLd0C/gnjNNC5Lq+vYpbLo6L kGb0Wxm2QU9EOAuYq6zmS1zMGCuZCS14jCJhhnSygCpByJKD39EIlEZ6UKO0DjAn rjqgKzs9Yx+o7bh4SPrcQG+zY8OX4+xciD6AzbAw0CqV2ng4m4vv6GiybIGFw6A4 lQakqU3rU+Np1S8mlioGQBCy8GzInFDDN2zs7v7KO8x5r6p9lvBUaxSJSp2uGAfH QIrnZ+6XGKJbGXXf5Uk30dot8RX0ZTpeFf9afzJU3GeBBQPT6M/nSdurvyayfLr0 Ytw6kbX6DB/4iRNS8n6joYVbU5CRibk8rwqnN6r7A0iYHmzhvFKk3OnIhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYiyoNW/yDYxSVi6hXEVsGCkHZSMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhf/lVj7i z5F9h1VBxZh39mN5kmFp/uNmg4nH3uPRbKrnw6M7ZBzmnJ9amW94PlUdoSUGRWcG Dml0Oy0B5YD9tRhpRS3118pU7csPojiA6y8b2dtQoW9h44MyvMLlOYMorQdYa5Si DgcalXMlhpvDMfkrNmqtsk3suXHmmIn4qq+0gWeqKWwn+QkLoevZpO0qFIHWIPGe i38FqccJJ7QJaR9RNcvEv6rbZ4pknXhTa5Xj622niyMYJ+fRwPLo42c/xXS3wdiT FjWPJjQn+2OL5fX2Ioa99tHco9Y4s5oLp3tJOAm6dJLa4xBkD9lBngPeinVhO84J g45R9rtR9rMcDA== -----END CERTIFICATE-----Generated at Sat Sep 6 05:15:47 2025 by rpki-client