$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft File: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json) Hash identifier: S7GxtrfLP/n4jL5ez0SakKT0LJKzf3vk24l4/o1vd1E= Subject key identifier: 7F:5E:FB:DC:E9:D7:DB:75:99:16:56:F7:38:B4:B0:6A:41:4A:DD:42 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 0199258D1DD1FD350429A7378DDC710C4A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft Manifest number: 1690 Signing time: Sun 07 Sep 2025 19:00:29 +0000 Manifest this update: Sun 07 Sep 2025 19:00:29 +0000 Manifest next update: Mon 08 Sep 2025 19:00:29 +0000 Files and hashes: 1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=) 2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=) 3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=) 4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=) 5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=) 6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=) 7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=) 8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=) 9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=) 10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=) 11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: QSo9PpQj05Ww0tCzednR7GhgTDISsqSXk5fmNw4cs9Q=) 12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=) 13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=) 14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=) 15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=) 16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=) 17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=) 18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=) 19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=) 20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=) 21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=) 22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=) 23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=) 24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=) 25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=) 26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=) 27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=) 28: olvBi524Gp3rI2E2UN409GVcjvQ.roa (hash: vTG53M/PHsVm4KjJT/BnZq8SO+0VF2H1PbNP7yYXlSU=) 29: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=) 30: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=) 31: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=) 32: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=) 33: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=) 34: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:25:8d:1d:d1:fd:35:04:29:a7:37:8d:dc:71:0c:4a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Sep 7 19:00:29 2025 GMT Not After : Sep 8 19:00:29 2025 GMT Subject: CN=7f5efbdce9d7db75991656f738b4b06a414add42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0f:bc:04:18:ec:50:d1:a2:03:6b:97:9b:72: ab:bd:5f:f3:35:6b:5d:67:fd:89:3c:43:f8:68:11: 48:bf:47:b9:15:03:e0:78:8f:d3:1d:2e:26:4d:70: 47:91:23:8a:a4:96:e0:7c:0e:f7:37:df:44:75:38: 26:cc:50:8d:82:54:79:6a:13:7a:09:ab:57:fc:6d: fb:f4:1f:8c:f4:a9:54:0b:28:7d:80:69:d4:4d:6c: 28:c2:07:0d:ad:24:9a:ff:e5:c2:f4:35:4a:ce:c1: 36:cb:24:81:a0:36:77:b5:4f:83:fd:35:f6:0c:0c: 60:83:d3:ae:1c:87:02:2e:62:db:9e:7a:87:fc:ae: 63:3f:d9:28:f5:b4:25:3c:7d:82:dd:9e:24:44:59: e7:87:d1:d3:9b:69:ef:fd:78:a9:b1:a8:46:59:a5: de:f0:3b:59:4c:be:8a:34:18:aa:a7:44:ff:36:d2: bc:36:c1:fe:b0:5d:7b:e5:8b:cc:3c:4b:08:80:3b: e4:8e:33:19:e2:a2:c1:0b:f6:da:c6:24:84:14:fc: 39:c4:d5:34:06:22:6f:76:96:ef:5a:63:c8:8a:fa: 09:a9:de:19:59:d6:44:7d:e4:c4:14:30:7b:83:62: 96:11:ca:15:11:55:ce:47:49:ed:6e:3f:93:77:1b: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5E:FB:DC:E9:D7:DB:75:99:16:56:F7:38:B4:B0:6A:41:4A:DD:42 X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9b:30:67:e9:24:70:15:c8:7f:59:86:84:ba:b2:1b:84:5b: 85:74:bb:ba:ab:4c:30:62:c6:27:8f:f2:e9:bc:56:28:2b:54: cf:c9:b9:8b:1d:64:c3:7b:94:e3:0d:65:06:e6:36:a4:c0:a8: 23:87:88:94:31:2a:4d:8e:cb:94:9f:de:72:3f:12:75:ff:15: 73:d8:5e:e3:f9:e2:48:0c:92:cb:e2:cb:91:15:73:7a:55:a9: 1d:50:4d:1b:cc:dc:43:13:8a:7a:5f:be:f0:6f:ff:47:12:16: 0f:ff:8e:c9:81:b2:cd:48:fd:da:1a:df:fb:f4:73:0c:d5:f7: 6b:00:b2:9b:bf:57:81:54:bc:9c:8b:69:89:0f:09:89:2b:04: 52:a1:e7:c7:b6:79:f0:f3:3b:80:44:0f:e1:44:74:e1:ba:20: 56:f7:aa:c2:24:27:7d:d8:68:95:6c:3a:a1:c5:28:98:a3:53: 56:9d:92:5e:73:15:82:9e:f3:51:96:3c:90:42:56:28:28:b9: de:3b:b3:57:21:58:77:b8:c4:ef:d0:38:2f:5c:db:fe:3a:d6: ec:d0:48:b1:89:80:53:79:dd:af:4a:2a:22:5c:65:be:79:6d: cf:99:5b:bc:b4:ea:c8:4c:76:0d:9c:0a:97:e4:6c:31:8e:55: 8e:39:e4:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkljR3R/TUEKac3jdxxDEoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjUwOTA3MTkwMDI5WhcNMjUwOTA4MTkwMDI5WjAzMTEwLwYDVQQD Eyg3ZjVlZmJkY2U5ZDdkYjc1OTkxNjU2ZjczOGI0YjA2YTQxNGFkZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q+8BBjsUNGiA2uXm3KrvV/zNWtd Z/2JPEP4aBFIv0e5FQPgeI/THS4mTXBHkSOKpJbgfA73N99EdTgmzFCNglR5ahN6 CatX/G379B+M9KlUCyh9gGnUTWwowgcNrSSa/+XC9DVKzsE2yySBoDZ3tU+D/TX2 DAxgg9OuHIcCLmLbnnqH/K5jP9ko9bQlPH2C3Z4kRFnnh9HTm2nv/XipsahGWaXe 8DtZTL6KNBiqp0T/NtK8NsH+sF175YvMPEsIgDvkjjMZ4qLBC/baxiSEFPw5xNU0 BiJvdpbvWmPIivoJqd4ZWdZEfeTEFDB7g2KWEcoVEVXOR0ntbj+TdxsvLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9e+9zp19t1mRZW9zi0sGpBSt1CMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5swZ+kk cBXIf1mGhLqyG4RbhXS7uqtMMGLGJ4/y6bxWKCtUz8m5ix1kw3uU4w1lBuY2pMCo I4eIlDEqTY7LlJ/ecj8Sdf8Vc9he4/niSAySy+LLkRVzelWpHVBNG8zcQxOKel++ 8G//RxIWD/+OyYGyzUj92hrf+/RzDNX3awCym79XgVS8nItpiQ8JiSsEUqHnx7Z5 8PM7gEQP4UR04bogVveqwiQnfdholWw6ocUomKNTVp2SXnMVgp7zUZY8kEJWKCi5 3juzVyFYd7jE79A4L1zb/jrW7NBIsYmAU3ndr0oqIlxlvnltz5lbvLTqyEx2DZwK l+RsMY5Vjjnkog== -----END CERTIFICATE-----Generated at Sun Sep 7 23:10:40 2025 by rpki-client