$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: rV5BHGfDrtSs6EZFQl//3Wifd0F4s+hvLgbRaCjQiP4= Subject key identifier: D1:32:7A:15:A4:D3:B7:02:3B:7D:27:A5:2B:9B:57:9E:34:A1:12:F3 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019A20D236CC6B0DCCD92D901DBB2A88828F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 171E Signing time: Sun 26 Oct 2025 14:00:38 +0000 Manifest this update: Sun 26 Oct 2025 14:00:38 +0000 Manifest next update: Mon 27 Oct 2025 14:00:38 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: AtwxiaWD2VkWFbil1zk8Ej3SydQDIg5eC1hVqR/fQAM=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 12:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:20:d2:36:cc:6b:0d:cc:d9:2d:90:1d:bb:2a:88:82:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Oct 26 14:00:38 2025 GMT Not After : Oct 27 14:00:38 2025 GMT Subject: CN=d1327a15a4d3b7023b7d27a52b9b579e34a112f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:7c:05:b3:19:ca:73:4f:7f:1d:23:9e:ba: 6d:68:a1:dc:f2:a8:7d:2b:26:03:ce:a3:4a:2e:33: fd:c0:a6:d6:43:88:93:b3:4d:06:bb:8d:af:75:3f: 85:9d:ed:dc:38:aa:07:92:62:26:64:b9:50:57:49: 99:5e:f8:49:2d:48:a0:e4:8f:04:3d:0f:e6:72:f8: 14:ee:e2:3f:40:a2:79:1c:4b:07:a3:38:81:6a:fc: 97:d0:ee:3e:20:8c:ae:a2:2a:40:d4:8b:b4:0a:eb: 2a:a5:f8:79:9e:38:08:be:d1:b8:5d:35:ac:60:95: a7:bc:1b:84:c4:55:10:97:48:04:02:49:c0:eb:5b: 02:8f:da:7e:00:1a:73:e4:ea:2f:84:0c:33:f9:46: ad:b2:4e:2d:bf:4f:1d:83:fd:51:99:26:e0:3b:07: 0e:11:cf:22:9c:63:a9:92:34:d2:e6:63:c7:c3:4a: 82:fc:1e:c9:52:c8:46:94:a1:1d:bc:4b:9c:53:27: 02:07:3f:3f:13:e2:c4:80:49:a5:49:71:43:10:47: ee:32:f6:fb:b6:cc:1d:96:f2:db:d1:d0:da:c2:7a: 03:81:31:c2:af:a0:03:40:39:60:c1:49:97:5b:10: 29:66:93:8c:b9:53:e4:b6:fe:38:21:4b:4f:26:eb: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:32:7A:15:A4:D3:B7:02:3B:7D:27:A5:2B:9B:57:9E:34:A1:12:F3 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:16:22:07:77:99:36:5b:e1:5b:70:b7:89:90:75:d3:1e:a0: f0:fd:11:59:f6:2b:f7:39:9e:00:16:61:a1:e6:92:5a:ea:e0: 2f:bc:f8:16:04:45:b6:3d:fa:a8:68:2a:ca:02:f7:0a:04:82: 43:c4:45:79:a2:c5:fb:a1:0c:26:c7:28:6d:c5:cc:1d:f3:c6: 92:4d:37:3d:18:8f:35:39:6f:98:6c:63:65:33:ab:d2:18:bb: b7:a4:e8:15:7d:f8:f0:bd:dc:46:af:67:c2:0d:89:59:c3:22: 65:0f:b9:d7:7d:ae:d4:34:9e:23:6c:22:5b:4d:6f:1c:e7:9c: 5a:72:60:be:57:03:d7:de:1b:ca:e5:fe:a9:6c:36:a2:ed:76: 6a:b8:89:15:d2:08:dd:ca:05:eb:63:3e:56:81:6f:05:72:64: 72:9d:3d:db:1b:69:f2:1b:69:64:c5:b0:f0:7b:f4:a7:c6:34: 25:3c:4e:6f:13:78:b2:98:97:f9:2e:58:a1:3b:e6:b0:c5:f5: 1e:29:6e:de:9f:7b:21:13:39:c0:dd:f4:d4:c9:d3:9a:ad:de: c5:5c:f0:26:1f:99:e2:34:52:c2:ab:2f:58:e4:e6:32:be:aa: 19:e3:bb:ae:c2:2a:17:ef:2a:df:0b:63:71:12:cb:72:4e:85: 02:f0:65:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZog0jbMaw3M2S2QHbsqiIKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUxMDI2MTQwMDM4WhcNMjUxMDI3MTQwMDM4WjAzMTEwLwYDVQQD EyhkMTMyN2ExNWE0ZDNiNzAyM2I3ZDI3YTUyYjliNTc5ZTM0YTExMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx58BbMZynNPfx0jnrptaKHc8qh9 KyYDzqNKLjP9wKbWQ4iTs00Gu42vdT+Fne3cOKoHkmImZLlQV0mZXvhJLUig5I8E PQ/mcvgU7uI/QKJ5HEsHoziBavyX0O4+IIyuoipA1Iu0Cusqpfh5njgIvtG4XTWs YJWnvBuExFUQl0gEAknA61sCj9p+ABpz5OovhAwz+Uatsk4tv08dg/1RmSbgOwcO Ec8inGOpkjTS5mPHw0qC/B7JUshGlKEdvEucUycCBz8/E+LEgEmlSXFDEEfuMvb7 tswdlvLb0dDawnoDgTHCr6ADQDlgwUmXWxApZpOMuVPktv44IUtPJuto5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEyehWk07cCO30npSubV540oRLzMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxYiB3eZ NlvhW3C3iZB10x6g8P0RWfYr9zmeABZhoeaSWurgL7z4FgRFtj36qGgqygL3CgSC Q8RFeaLF+6EMJscobcXMHfPGkk03PRiPNTlvmGxjZTOr0hi7t6ToFX348L3cRq9n wg2JWcMiZQ+5132u1DSeI2wiW01vHOecWnJgvlcD194byuX+qWw2ou12ariJFdII 3coF62M+VoFvBXJkcp092xtp8htpZMWw8Hv0p8Y0JTxObxN4spiX+S5YoTvmsMX1 Hilu3p97IRM5wN301MnTmq3exVzwJh+Z4jRSwqsvWOTmMr6qGeO7rsIqF+8q3wtj cRLLck6FAvBlpA== -----END CERTIFICATE-----Generated at Sun Oct 26 17:53:23 2025 by rpki-client