
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier: YHfKyyu9Oun+6nmwmQs/VP2PjaKufjKlEL8iBaUayaE=
Subject key identifier: AF:A1:5B:88:25:24:93:F4:CE:B7:BB:46:46:53:5B:93:76:6C:F0:59
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 019A1F51DBB4807992264351256CEA7978DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number: 0D05
Signing time: Sun 26 Oct 2025 07:00:49 +0000
Manifest this update: Sun 26 Oct 2025 07:00:49 +0000
Manifest next update: Mon 27 Oct 2025 07:00:49 +0000
Files and hashes: 1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=)
2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=)
3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=)
4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=)
5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=)
6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=)
7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=)
8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=)
9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=)
10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=)
11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=)
12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=)
13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=)
14: MKk2eIZdBEHoejBBXOnExSwoMxY.roa (hash: a46f0IAxws6EBAs2zTmMvZ2jH6RBYNwGRDtcrPOSWm4=)
15: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=)
16: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=)
17: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=)
18: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=)
19: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=)
20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=)
21: _LaL2NGVikd-BXS-ihRrP5NY6ik.roa (hash: 8tMeMGtCDzB7YrSEIzydRyBsTv0sIFfm9Cd8vLZYHTU=)
22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=)
23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=)
24: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=)
25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: 1oBZ3ih30AZKlxssz/6M9FDE0f3AucV3FMmSAYF538M=)
26: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=)
27: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=)
28: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=)
29: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=)
30: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=)
31: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=)
32: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=)
33: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=)
34: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=)
35: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=)
36: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=)
37: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=)
38: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:db:b4:80:79:92:26:43:51:25:6c:ea:79:78:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Oct 26 07:00:49 2025 GMT
Not After : Oct 27 07:00:49 2025 GMT
Subject: CN=afa15b88252493f4ceb7bb4646535b93766cf059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:6e:6d:27:4c:53:46:2c:4d:3c:10:94:98:
e2:12:ef:b3:9c:47:63:4e:84:ba:d0:75:07:5e:79:
c3:ab:93:e8:d1:ff:c8:31:82:2b:c8:b6:0e:2c:94:
48:8a:d1:fc:6c:4b:9c:3a:63:61:b6:c6:29:65:63:
d3:2f:bc:da:21:03:de:73:07:d3:87:9a:5a:e3:c3:
aa:3a:b1:42:09:32:2c:50:47:46:62:a8:44:9e:3b:
a4:47:a9:74:ed:e9:5e:44:56:d2:09:45:e5:20:0a:
8d:8f:c9:cd:36:4e:48:79:92:d0:4e:b0:fb:76:ad:
fa:bf:d9:c0:0d:8b:a6:28:2b:d9:11:6e:a2:cf:f7:
15:0c:26:bd:6b:13:e9:f9:76:73:95:f0:36:f8:91:
fe:98:45:2c:bd:51:56:41:f5:ea:2f:f6:09:23:de:
23:4f:ef:2e:e4:31:66:21:92:f6:a7:aa:3f:ae:59:
cf:84:3f:6e:2b:28:df:13:39:29:d9:3d:65:cc:a9:
8e:fd:3a:9c:bb:f8:f0:13:ba:3a:e3:2c:56:52:4b:
73:91:36:70:17:61:96:11:28:ac:9d:6f:16:ad:4a:
eb:fd:70:35:3f:40:95:f3:db:76:17:27:17:82:15:
42:e1:9e:69:9f:4d:bb:bf:62:06:2b:3b:5e:b6:5b:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A1:5B:88:25:24:93:F4:CE:B7:BB:46:46:53:5B:93:76:6C:F0:59
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:ad:80:ff:39:8a:40:2c:47:41:6d:14:6d:ab:41:e8:ce:c0:
bc:37:86:02:2d:88:44:35:59:87:bb:b5:4b:a1:cc:a0:27:e5:
96:ea:ed:d5:e9:bd:b6:46:b6:59:1e:dd:6d:6c:9d:be:b4:18:
4a:d0:7d:69:7c:74:35:31:74:a7:2f:63:0d:7b:ec:81:5e:6a:
8d:29:11:88:4c:ab:39:fb:19:f5:39:15:88:fd:c4:80:b6:a5:
c1:08:bd:8a:9e:b4:14:fd:7a:de:46:8d:cd:a3:38:48:db:2e:
17:2c:03:f9:84:62:ae:3b:0d:8d:12:3b:4c:c1:75:79:67:2d:
63:2c:f0:97:57:8f:97:6a:43:4b:8c:63:61:d0:d9:70:e9:21:
48:be:16:45:d8:46:47:1f:0c:f7:f8:be:32:7b:9c:d0:10:b9:
f2:7d:34:e4:32:05:39:2c:2d:53:7e:56:d1:26:60:64:36:52:
f2:3e:1b:f1:1e:d2:d9:7d:0c:56:aa:6e:67:ef:11:e1:28:92:
d1:07:3a:ae:bb:52:e0:9b:1f:69:6b:bb:bd:a4:41:e6:87:bb:
fc:82:94:dd:14:b6:a4:45:87:d1:af:69:09:a8:0f:df:95:b8:
8d:65:27:06:bd:9f:61:f7:25:eb:ae:e9:65:76:99:56:ce:03:
1d:66:3c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofUdu0gHmSJkNRJWzqeXjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjUxMDI2MDcwMDQ5WhcNMjUxMDI3MDcwMDQ5WjAzMTEwLwYDVQQD
EyhhZmExNWI4ODI1MjQ5M2Y0Y2ViN2JiNDY0NjUzNWI5Mzc2NmNmMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDJubSdMU0YsTTwQlJjiEu+znEdj
ToS60HUHXnnDq5Po0f/IMYIryLYOLJRIitH8bEucOmNhtsYpZWPTL7zaIQPecwfT
h5pa48OqOrFCCTIsUEdGYqhEnjukR6l07eleRFbSCUXlIAqNj8nNNk5IeZLQTrD7
dq36v9nADYumKCvZEW6iz/cVDCa9axPp+XZzlfA2+JH+mEUsvVFWQfXqL/YJI94j
T+8u5DFmIZL2p6o/rlnPhD9uKyjfEzkp2T1lzKmO/Tqcu/jwE7o64yxWUktzkTZw
F2GWESisnW8WrUrr/XA1P0CV89t2FycXghVC4Z5pn027v2IGKztetlvXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+hW4glJJP0zre7RkZTW5N2bPBZMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA062A/zmK
QCxHQW0UbatB6M7AvDeGAi2IRDVZh7u1S6HMoCfllurt1em9tka2WR7dbWydvrQY
StB9aXx0NTF0py9jDXvsgV5qjSkRiEyrOfsZ9TkViP3EgLalwQi9ip60FP163kaN
zaM4SNsuFywD+YRirjsNjRI7TMF1eWctYyzwl1ePl2pDS4xjYdDZcOkhSL4WRdhG
Rx8M9/i+Mnuc0BC58n005DIFOSwtU35W0SZgZDZS8j4b8R7S2X0MVqpuZ+8R4SiS
0Qc6rrtS4JsfaWu7vaRB5oe7/IKU3RS2pEWH0a9pCagP35W4jWUnBr2fYfcl667p
ZXaZVs4DHWY8HQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:34:25 2025 by rpki-client