$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: /QbFuRcZmCfrriYJpSHuQrtVDjQ34BZi2HNbkgLgoPY= Subject key identifier: 16:EC:CF:26:9F:0B:59:32:E2:CD:3E:C4:AE:8B:1F:AB:4A:EB:CF:1F Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019A0B93B9919C8172A32A0B66DF7FB7CFD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1711 Signing time: Wed 22 Oct 2025 11:00:21 +0000 Manifest this update: Wed 22 Oct 2025 11:00:21 +0000 Manifest next update: Thu 23 Oct 2025 11:00:21 +0000 Files and hashes: 1: 1-6_T1UR8RxQNCrO4uIs7DkXrQDQ.roa (hash: 9REY9ixrC0cn2b75D6q+Nm3sD55qb7ERu5o3EziHF5s=) 2: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=) 3: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=) 4: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=) 5: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=) 6: E_z1rRm2dPIkXYCFMVviLLfSyVg.roa (hash: VusW0dej7Bb9Ooea4R8NVWxaK/HakKSdSQk63k3jQc4=) 7: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: /iFR6CgqwF1v1rjO6UhHzneX0qMp7+48rLb8Qj+k/ew=) 8: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=) 9: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=) 10: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=) 11: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=) 12: eloma6ROlb3WGecKiAOHrBMJSNc.roa (hash: xqij8ENzmH6IHFmng7nPcmW1+/+AD15DS99+RfR6qA4=) 13: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=) 14: jhzB3ouu7eGFu6kVywcyzMtWs14.roa (hash: 7ZiZaqq6we6E8f2G4rGHZ2hDk0lAG3K7IdZ3KOrq/pc=) 15: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=) 16: uU-ifMK_qHTd5-jFyVoaIOWGfZ4.roa (hash: XoeemwCq+iCHIHS4i6Vait+Nw3TFTjEj7Y5B4TZ2wwM=) 17: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=) 18: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=) 19: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 11:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:93:b9:91:9c:81:72:a3:2a:0b:66:df:7f:b7:cf:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Oct 22 11:00:21 2025 GMT Not After : Oct 23 11:00:21 2025 GMT Subject: CN=16eccf269f0b5932e2cd3ec4ae8b1fab4aebcf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:36:33:1d:e6:e3:9f:77:de:1e:6f:8c:40:e1: 4c:fa:b8:ac:82:b1:96:4b:3b:2c:a8:81:5d:31:1c: b5:c2:77:ec:3b:51:62:05:b4:75:7f:e7:79:1d:7a: 3c:fe:f1:33:bf:40:ad:57:74:64:eb:be:5e:23:5a: c3:93:2c:9f:47:8e:55:4a:fa:e4:8c:5a:ea:35:64: f1:b9:72:4e:1c:94:a9:79:ad:63:6e:be:63:2e:9e: 2d:93:33:83:d2:6f:39:31:4c:fd:f4:24:d1:fc:de: bd:65:91:2d:b3:c4:6b:7d:2b:79:b2:4f:42:96:38: 73:3f:be:7e:cc:55:23:e2:f9:57:69:de:6e:a5:05: 39:61:3c:b5:10:b9:82:bb:95:ff:02:8e:da:a5:01: 27:55:4a:bf:0a:50:87:e5:27:9a:b7:3d:ac:9a:b2: ea:37:5b:30:2e:0d:af:71:d6:be:20:f6:e3:c2:19: 52:ac:b7:bf:00:36:f4:72:b5:0b:d2:e3:7d:0a:7f: 5d:ce:cc:d3:cf:fa:09:f9:8b:ec:8e:f5:84:55:bf: 4a:d7:a3:70:92:1b:61:33:15:2c:f6:e0:d0:61:e6: 7f:0f:89:5a:56:07:ac:3f:1b:3f:d7:02:9d:49:36: 00:19:78:6d:a6:af:46:a6:b0:a1:38:ce:b0:91:2e: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EC:CF:26:9F:0B:59:32:E2:CD:3E:C4:AE:8B:1F:AB:4A:EB:CF:1F X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:54:7a:29:02:89:83:7b:cc:f7:92:7c:f0:2d:6a:7c:2e:84: 9d:5d:fd:cf:5e:0f:b2:d8:5d:a9:ae:93:7e:6b:44:3d:56:65: cd:f7:a0:99:44:27:51:7d:c1:9a:b4:93:84:c0:1e:76:11:ea: fa:49:1c:06:ab:76:1b:58:37:28:40:9e:c4:15:17:42:25:d6: 32:72:29:5a:f8:24:9e:99:71:64:f6:f8:a6:41:69:54:c0:bd: 22:78:71:21:f9:e7:9b:97:d2:c1:93:bb:44:bf:8a:b7:f6:0f: 08:ab:74:65:4d:15:26:cf:f0:3d:de:6f:74:39:16:56:47:80: 9b:1f:0c:88:98:c4:d8:0f:99:e9:37:88:d9:9b:3f:b5:29:87: 69:49:0d:37:12:2d:12:d5:59:20:57:62:80:73:0a:ee:34:f8: a6:9c:ec:36:ad:97:a7:25:3f:74:5a:93:81:32:c3:7a:fb:ec: 6c:cc:dd:8f:91:7e:2d:9c:a5:b7:b8:b2:80:27:df:15:1f:a8: 4a:ba:99:35:e9:74:b7:ca:df:4d:ef:5b:52:dd:db:e3:c6:31: 2f:34:aa:89:68:b9:14:70:fa:de:b1:ba:06:62:ff:b0:c4:ec: 32:1d:50:6e:42:a4:a3:e1:83:d3:6b:cf:f6:79:0c:36:b7:65: 02:5a:25:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoLk7mRnIFyoyoLZt9/t8/RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjUxMDIyMTEwMDIxWhcNMjUxMDIzMTEwMDIxWjAzMTEwLwYDVQQD EygxNmVjY2YyNjlmMGI1OTMyZTJjZDNlYzRhZThiMWZhYjRhZWJjZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DYzHebjn3feHm+MQOFM+risgrGW SzssqIFdMRy1wnfsO1FiBbR1f+d5HXo8/vEzv0CtV3Rk675eI1rDkyyfR45VSvrk jFrqNWTxuXJOHJSpea1jbr5jLp4tkzOD0m85MUz99CTR/N69ZZEts8RrfSt5sk9C ljhzP75+zFUj4vlXad5upQU5YTy1ELmCu5X/Ao7apQEnVUq/ClCH5Seatz2smrLq N1swLg2vcda+IPbjwhlSrLe/ADb0crUL0uN9Cn9dzszTz/oJ+YvsjvWEVb9K16Nw khthMxUs9uDQYeZ/D4laVgesPxs/1wKdSTYAGXhtpq9GprChOM6wkS6CPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbszyafC1ky4s0+xK6LH6tK688fMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlR6KQKJ g3vM95J88C1qfC6EnV39z14Psthdqa6TfmtEPVZlzfegmUQnUX3BmrSThMAedhHq +kkcBqt2G1g3KECexBUXQiXWMnIpWvgknplxZPb4pkFpVMC9InhxIfnnm5fSwZO7 RL+Kt/YPCKt0ZU0VJs/wPd5vdDkWVkeAmx8MiJjE2A+Z6TeI2Zs/tSmHaUkNNxIt EtVZIFdigHMK7jT4ppzsNq2XpyU/dFqTgTLDevvsbMzdj5F+LZylt7iygCffFR+o SrqZNel0t8rfTe9bUt3b48YxLzSqiWi5FHD63rG6BmL/sMTsMh1QbkKko+GD02vP 9nkMNrdlAlolNw== -----END CERTIFICATE-----Generated at Wed Oct 22 21:29:52 2025 by rpki-client