$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: 89Q6ZK5KxYV00JUrTS3cD4d+qU7iRcg8uUwGk0ui1Q8= Subject key identifier: 87:19:83:7D:EE:FD:39:82:E4:CC:16:3D:61:E6:21:E2:0C:45:C4:87 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019A194F4008D80444B825439BB858FDC83E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 170F Signing time: Sat 25 Oct 2025 03:00:15 +0000 Manifest this update: Sat 25 Oct 2025 03:00:15 +0000 Manifest next update: Sun 26 Oct 2025 03:00:15 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9-BujRyAiG67GPBXPyZf0-ILLF4.roa (hash: KkFtXt5WRV9VBYy3IBvnda5CkZe910L5RSJzKX/5FFY=) 6: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 7: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: s5M4PwQK3N1SX7I3WFf2kuhAsVm+LAkHUPfpafHtrUA=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:4f:40:08:d8:04:44:b8:25:43:9b:b8:58:fd:c8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Oct 25 03:00:15 2025 GMT Not After : Oct 26 03:00:15 2025 GMT Subject: CN=8719837deefd3982e4cc163d61e621e20c45c487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:6c:c0:ee:0b:12:e7:12:7c:43:8c:58:b7: 83:dc:dd:84:1d:10:56:44:6f:8c:6a:de:7a:6b:2c: 50:9f:1d:3d:cd:f8:7d:d4:c0:65:c6:82:08:4a:f0: e3:64:1e:06:2e:47:ec:4e:ce:1e:d8:33:64:fc:c1: 68:df:e3:49:96:71:ee:ac:b2:15:13:93:ad:70:12: d6:8e:34:ec:bc:99:e1:2f:4d:45:24:f2:d0:25:6e: ef:ac:6f:e7:62:0d:42:00:d1:ea:3d:24:92:ea:74: b1:70:f4:15:b5:96:32:fb:67:a1:81:67:b1:58:9a: 01:54:80:5b:62:98:92:29:1f:1f:da:5f:ff:6a:98: ad:79:8c:b1:f9:56:87:17:79:4d:ea:d8:ae:9e:b2: d5:c3:a4:64:3c:4a:96:ba:57:97:4f:88:80:1f:92: 69:12:c6:69:42:1a:a1:35:c6:9f:db:4e:58:05:68: 85:6c:7c:e5:aa:fe:be:ad:2d:28:6c:ce:4e:c7:09: e9:07:e6:db:2d:af:f3:95:f7:0c:56:06:7c:21:a7: 53:94:4b:b8:42:9d:0c:e9:1b:8d:5d:a7:e4:b7:18: c0:96:bf:b0:45:c1:c0:23:18:20:d9:17:ce:fc:93: d8:16:98:31:32:86:02:19:7c:6a:f0:5b:84:03:dd: fb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:19:83:7D:EE:FD:39:82:E4:CC:16:3D:61:E6:21:E2:0C:45:C4:87 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ea:e3:8e:10:58:5b:c6:1a:12:37:ee:94:93:a7:02:a1:7a: 5e:c9:1e:6b:2e:19:80:4b:56:65:0a:43:95:c2:e3:4c:47:74: 9d:c1:75:8d:91:b3:e6:3d:5e:28:98:a4:6c:34:21:85:cc:c6: b5:1c:9a:35:16:42:6f:c8:85:3c:33:67:3b:37:3e:34:71:2f: 11:6d:d5:40:3a:3d:7e:4f:9c:43:c5:1f:fb:cd:a3:d1:d3:e0: a0:0e:e2:69:bd:d8:3d:7c:34:90:b8:a1:9a:e1:7c:da:7c:f9: f3:cb:96:d9:66:53:bb:39:ef:77:06:58:5c:cd:0a:cd:11:07: 4a:97:32:3b:6b:31:2b:78:dc:93:47:21:83:b6:59:bb:30:6a: 7d:cb:4c:54:9b:ca:3f:3e:2d:f9:2e:28:26:f6:76:95:92:83: b5:2f:48:2a:54:24:02:00:43:a2:8d:f5:60:5f:97:09:c8:1f: 1e:00:f8:57:d1:22:5b:f9:9e:51:ea:6a:c6:3f:97:83:4d:de: 56:52:e3:28:39:d6:a7:72:67:4e:ce:55:cc:03:25:e9:48:09: 54:3f:db:15:8f:fa:05:57:c9:69:85:2f:0f:1e:17:d9:25:8d: 4b:7d:f5:3c:40:71:58:95:7f:fc:ed:a5:6c:25:7b:24:ac:19: 85:99:bb:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZT0AI2AREuCVDm7hY/cg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUxMDI1MDMwMDE1WhcNMjUxMDI2MDMwMDE1WjAzMTEwLwYDVQQD Eyg4NzE5ODM3ZGVlZmQzOTgyZTRjYzE2M2Q2MWU2MjFlMjBjNDVjNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03JswO4LEucSfEOMWLeD3N2EHRBW RG+Mat56ayxQnx09zfh91MBlxoIISvDjZB4GLkfsTs4e2DNk/MFo3+NJlnHurLIV E5OtcBLWjjTsvJnhL01FJPLQJW7vrG/nYg1CANHqPSSS6nSxcPQVtZYy+2ehgWex WJoBVIBbYpiSKR8f2l//apiteYyx+VaHF3lN6tiunrLVw6RkPEqWuleXT4iAH5Jp EsZpQhqhNcaf205YBWiFbHzlqv6+rS0obM5OxwnpB+bbLa/zlfcMVgZ8IadTlEu4 Qp0M6RuNXafktxjAlr+wRcHAIxgg2RfO/JPYFpgxMoYCGXxq8FuEA937mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcZg33u/TmC5MwWPWHmIeIMRcSHMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOurjjhBY W8YaEjfulJOnAqF6Xskeay4ZgEtWZQpDlcLjTEd0ncF1jZGz5j1eKJikbDQhhczG tRyaNRZCb8iFPDNnOzc+NHEvEW3VQDo9fk+cQ8Uf+82j0dPgoA7iab3YPXw0kLih muF82nz588uW2WZTuznvdwZYXM0KzREHSpcyO2sxK3jck0chg7ZZuzBqfctMVJvK Pz4t+S4oJvZ2lZKDtS9IKlQkAgBDoo31YF+XCcgfHgD4V9EiW/meUepqxj+Xg03e VlLjKDnWp3JnTs5VzAMl6UgJVD/bFY/6BVfJaYUvDx4X2SWNS331PEBxWJV//O2l bCV7JKwZhZm7Ig== -----END CERTIFICATE-----Generated at Sat Oct 25 09:03:58 2025 by rpki-client