$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: I65ybiZwkHgNC4+GvEwpA8AHhwupKvNndbM2/zY6oX0= Subject key identifier: 85:86:B4:09:8C:B1:26:33:AB:0B:6D:E8:5E:8F:06:FC:6A:B5:E5:5A Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 019A1806109129B1C3460C03EA8D27DCD44E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 17A1 Signing time: Fri 24 Oct 2025 21:00:41 +0000 Manifest this update: Fri 24 Oct 2025 21:00:41 +0000 Manifest next update: Sat 25 Oct 2025 21:00:41 +0000 Files and hashes: 1: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 2: FTrYYx4CBKkDflQVg1_J0y11QdQ.roa (hash: TOnemNVhdJLNIGqBvgUS4W9Hdvqcz6Ct0ExYEDZZ3M4=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RS_eHXQUq41tQvgc6GbNLviSAns.roa (hash: TQU9cNt++mpDY6Fc1sIB45y0XyCZcVPTbN6xJWetVtM=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 7: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: S6rFVcTE7XuTxp2aGPQnZJCi/13qAJAoLa/QmDdUuhM=) 8: jSGR9tfy_3ygU3uUFLplZcK8Vag.roa (hash: DRvu3x516N0p3/1eSLunfludmCKjydqZbLU+Em2yXlI=) 9: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 10: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:18:06:10:91:29:b1:c3:46:0c:03:ea:8d:27:dc:d4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Oct 24 21:00:41 2025 GMT Not After : Oct 25 21:00:41 2025 GMT Subject: CN=8586b4098cb12633ab0b6de85e8f06fc6ab5e55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:51:8b:88:66:90:2e:f0:63:fc:8d:2d:91: b4:16:aa:52:3f:c9:91:2d:c5:00:80:02:69:a2:e3: d2:f8:50:23:39:ea:36:28:91:a9:c9:2e:92:aa:51: 2a:eb:7d:0d:92:b0:c8:e2:3c:9c:7e:25:eb:fb:de: 20:6e:ee:64:de:35:9a:81:e4:79:b7:3f:5c:ef:38: a8:12:a7:f2:0d:cf:f6:25:b2:1c:ef:f9:54:ea:f0: a9:c7:16:b4:5a:bc:6c:1c:89:60:6a:39:7f:75:00: 53:2d:49:84:6a:c8:52:34:a4:f0:07:ad:b8:1c:51: 90:47:1d:3f:dd:90:d2:56:a5:2e:a3:20:4c:d6:98: f3:75:5c:c0:8e:83:aa:5a:b6:ce:fb:41:a1:2c:18: 7c:41:29:c7:db:ff:27:44:96:c9:f4:11:cc:5a:4d: 89:78:37:d1:7f:9e:83:1b:d7:1d:19:79:7a:27:6c: 8f:3f:b1:58:7d:fe:f7:2a:96:f5:23:44:ac:a6:b6: e7:3f:ca:41:e5:b5:af:63:85:40:17:23:ab:ff:da: f5:25:7a:2e:55:31:2e:10:43:f0:54:bb:37:05:ce: 50:33:69:ea:96:a9:ab:c8:db:a7:11:bb:ea:cf:bd: a5:2d:8d:25:f4:26:15:d5:9f:4b:d3:1f:a1:49:88: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:86:B4:09:8C:B1:26:33:AB:0B:6D:E8:5E:8F:06:FC:6A:B5:E5:5A X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:9b:13:d6:cc:2c:e7:07:b9:2e:0a:ce:ae:d2:da:a3:72:12: b5:b3:11:65:91:8d:08:44:eb:af:2c:62:bd:cb:83:ca:48:1d: 69:d1:3a:58:f2:79:50:0c:b7:bc:e3:4f:8e:86:e6:74:e0:d9: 2d:b6:be:32:b9:f8:25:c3:2d:0f:07:8f:07:2d:6a:26:cc:63: 62:7a:c4:9c:25:1f:22:35:fe:3d:eb:6d:72:52:26:f0:f4:54: 8a:b5:bb:df:20:8b:19:12:96:de:93:84:9f:c5:18:f5:5d:fc: ca:46:34:e0:dc:ed:5f:45:8b:d0:7e:ed:22:24:31:d7:9e:14: 48:9e:5b:7c:5c:94:ec:6b:06:de:fd:26:5b:be:2e:28:58:91: bf:f3:5c:6c:9f:1c:b9:09:53:66:d5:ec:f9:23:93:99:6d:d3: 10:e5:6b:e9:f2:39:9d:36:b5:1d:a5:19:c7:ab:4d:46:a2:87: ff:02:fe:3c:f2:4d:60:b7:ed:f2:7e:37:3a:93:7a:1d:16:7e: ae:be:e2:71:e9:f6:e8:87:85:76:81:50:00:96:e8:16:92:0d: 03:90:77:55:f3:4b:bc:d3:58:6e:bc:39:ff:7a:35:db:b1:3b: 25:5e:f2:e3:00:70:3f:42:d3:84:e3:f2:8b:64:50:47:54:c9: 85:46:7f:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoYBhCRKbHDRgwD6o0n3NROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUxMDI0MjEwMDQxWhcNMjUxMDI1MjEwMDQxWjAzMTEwLwYDVQQD Eyg4NTg2YjQwOThjYjEyNjMzYWIwYjZkZTg1ZThmMDZmYzZhYjVlNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/pRi4hmkC7wY/yNLZG0FqpSP8mR LcUAgAJpouPS+FAjOeo2KJGpyS6SqlEq630NkrDI4jycfiXr+94gbu5k3jWageR5 tz9c7zioEqfyDc/2JbIc7/lU6vCpxxa0WrxsHIlgajl/dQBTLUmEashSNKTwB624 HFGQRx0/3ZDSVqUuoyBM1pjzdVzAjoOqWrbO+0GhLBh8QSnH2/8nRJbJ9BHMWk2J eDfRf56DG9cdGXl6J2yPP7FYff73Kpb1I0SsprbnP8pB5bWvY4VAFyOr/9r1JXou VTEuEEPwVLs3Bc5QM2nqlqmryNunEbvqz72lLY0l9CYV1Z9L0x+hSYiiCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWGtAmMsSYzqwtt6F6PBvxqteVaMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5sT1sws 5we5LgrOrtLao3IStbMRZZGNCETrryxivcuDykgdadE6WPJ5UAy3vONPjobmdODZ Lba+Mrn4JcMtDwePBy1qJsxjYnrEnCUfIjX+PettclIm8PRUirW73yCLGRKW3pOE n8UY9V38ykY04NztX0WL0H7tIiQx154USJ5bfFyU7GsG3v0mW74uKFiRv/NcbJ8c uQlTZtXs+SOTmW3TEOVr6fI5nTa1HaUZx6tNRqKH/wL+PPJNYLft8n43OpN6HRZ+ rr7icen26IeFdoFQAJboFpINA5B3VfNLvNNYbrw5/3o127E7JV7y4wBwP0LThOPy i2RQR1TJhUZ/oQ== -----END CERTIFICATE-----Generated at Sat Oct 25 04:14:41 2025 by rpki-client