$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: pWXWlGxbRxJCa026yI2Clai8j4eJTUuvq5jkc4SMSLU= Subject key identifier: 6F:09:09:F7:B5:97:DF:40:CD:E4:86:F1:C7:13:29:48:0C:2F:C5:EF Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019921E79242581DE84B62AF0476B52B342A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 171E Signing time: Sun 07 Sep 2025 02:00:48 +0000 Manifest this update: Sun 07 Sep 2025 02:00:48 +0000 Manifest next update: Mon 08 Sep 2025 02:00:48 +0000 Files and hashes: 1: 3HemvcGpa10fkEZgb6Z-o4k7Y3I.roa (hash: a1XCZrNTfqU9TQWTJM+VI0BWa7g1babTnrZlikC2mRA=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RJwe2BfOH2L8b2xvYWAb7A5I8YI.roa (hash: Ua7R/78tPOt1hUU0nncJ70Fr//DWyVNm+5rSWWhtzSo=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=) 7: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: XYBWkqQjP67IDvooJfUSQSL3fFvJ1g0WuE4xKTqQD3U=) 9: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=) 10: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 11: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 02:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:21:e7:92:42:58:1d:e8:4b:62:af:04:76:b5:2b:34:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Sep 7 02:00:48 2025 GMT Not After : Sep 8 02:00:48 2025 GMT Subject: CN=6f0909f7b597df40cde486f1c71329480c2fc5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:b2:ff:38:46:37:01:6d:3e:8c:e0:1a:ef: 74:ae:91:56:71:08:39:9d:7b:ec:ba:f0:77:d0:14: a0:9f:22:45:bf:a8:f1:36:16:44:c9:10:5c:7a:ba: 35:ee:f9:d5:24:a7:28:5e:d7:10:eb:46:b7:66:5d: 7e:cf:00:1d:53:47:3e:99:be:20:9f:f5:54:43:0c: 3b:c0:12:94:c5:ae:d7:74:48:10:03:c7:66:66:65: 5f:e9:86:2e:02:7c:ed:50:5a:36:d2:9f:2e:c0:1b: 01:62:4f:f4:60:d9:de:db:7f:ce:63:e8:27:f2:73: 52:eb:db:c0:45:91:7a:54:76:29:cb:0b:e7:96:25: 2b:52:8d:6d:6e:11:e1:16:4f:18:10:0e:a7:22:e7: 39:8d:ed:6c:2c:3f:58:45:ef:b6:2d:53:06:25:21: 65:2e:e1:4a:ed:36:e4:6e:53:f4:0e:ad:3c:9b:91: 3d:ec:06:92:1a:e6:c9:84:7a:37:88:16:6b:98:4b: 0c:f3:24:28:f2:ba:30:85:99:e0:80:6e:6d:58:3e: 5f:fd:ad:38:9b:7e:ec:57:23:c2:c2:a8:e5:8d:ca: 43:83:93:c9:4f:fe:60:3d:6d:17:18:f2:eb:fc:bb: 89:c5:26:22:6e:d1:38:8b:cb:6c:54:a2:f0:92:df: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:09:09:F7:B5:97:DF:40:CD:E4:86:F1:C7:13:29:48:0C:2F:C5:EF X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e8:3d:66:5a:df:f8:7d:5a:98:01:e3:4c:c9:30:51:e4:b0: 66:0b:22:f4:69:4c:f6:3a:0d:84:f4:27:51:8b:3d:c4:49:54: 02:88:0a:5b:a1:ba:dd:c4:25:d1:3e:03:45:d0:d4:00:3d:c9: 64:6d:81:f4:21:8b:cd:41:7d:7b:89:36:eb:0e:3b:da:16:c3: de:d3:e9:89:4f:f4:6a:73:6a:0a:2f:a4:d0:08:13:10:a4:75: d1:7b:6a:ee:fa:57:76:9f:c4:9c:d0:a4:ef:57:a9:41:3a:b0: 54:fe:4d:64:bc:1a:64:82:0b:1b:7c:91:14:8f:79:c3:89:d2: 62:5a:dd:5e:47:ce:8b:0d:fe:40:60:52:2e:0a:23:e5:f1:6f: 31:17:92:c6:1c:45:50:14:bb:8e:d5:87:c2:47:8f:39:32:87: 0f:f3:25:fb:2e:60:d2:2d:28:2e:9a:1b:d1:05:6c:63:e1:a1: 0e:d6:af:63:84:a4:57:48:f6:bc:e9:93:f6:24:3c:c2:47:bf: 9a:4f:e8:1b:c5:2a:f2:62:48:dd:d7:60:32:b9:16:54:fc:84: 15:e7:ce:f7:00:70:b3:ab:19:0f:7f:f5:54:e7:06:59:6f:da: a2:e0:b2:de:7e:e7:9c:d8:91:06:9e:0a:96:34:38:d2:3d:b2: 33:ed:47:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkh55JCWB3oS2KvBHa1KzQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUwOTA3MDIwMDQ4WhcNMjUwOTA4MDIwMDQ4WjAzMTEwLwYDVQQD Eyg2ZjA5MDlmN2I1OTdkZjQwY2RlNDg2ZjFjNzEzMjk0ODBjMmZjNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMOy/zhGNwFtPozgGu90rpFWcQg5 nXvsuvB30BSgnyJFv6jxNhZEyRBcero17vnVJKcoXtcQ60a3Zl1+zwAdU0c+mb4g n/VUQww7wBKUxa7XdEgQA8dmZmVf6YYuAnztUFo20p8uwBsBYk/0YNne23/OY+gn 8nNS69vARZF6VHYpywvnliUrUo1tbhHhFk8YEA6nIuc5je1sLD9YRe+2LVMGJSFl LuFK7TbkblP0Dq08m5E97AaSGubJhHo3iBZrmEsM8yQo8rowhZnggG5tWD5f/a04 m37sVyPCwqjljcpDg5PJT/5gPW0XGPLr/LuJxSYibtE4i8tsVKLwkt/eFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8JCfe1l99AzeSG8ccTKUgML8XvMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPug9Zlrf +H1amAHjTMkwUeSwZgsi9GlM9joNhPQnUYs9xElUAogKW6G63cQl0T4DRdDUAD3J ZG2B9CGLzUF9e4k26w472hbD3tPpiU/0anNqCi+k0AgTEKR10Xtq7vpXdp/EnNCk 71epQTqwVP5NZLwaZIILG3yRFI95w4nSYlrdXkfOiw3+QGBSLgoj5fFvMReSxhxF UBS7jtWHwkePOTKHD/Ml+y5g0i0oLpob0QVsY+GhDtavY4SkV0j2vOmT9iQ8wke/ mk/oG8Uq8mJI3ddgMrkWVPyEFefO9wBws6sZD3/1VOcGWW/aouCy3n7nnNiRBp4K ljQ40j2yM+1HDg== -----END CERTIFICATE-----Generated at Sun Sep 7 10:04:33 2025 by rpki-client