$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: 3dx7Xyhad2JorODPM8r32cRmsuatLL+TchTFhAHrVCo= Subject key identifier: 3D:A0:72:F7:63:B0:11:F5:12:09:F3:3F:5C:42:34:44:E9:14:E0:C8 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 01974B1FB0C1E1AF604D8AA608269F474EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 15A0 Signing time: Sat 07 Jun 2025 16:00:57 +0000 Manifest this update: Sat 07 Jun 2025 16:00:57 +0000 Manifest next update: Sun 08 Jun 2025 16:00:57 +0000 Files and hashes: 1: 1-TiCaqN63y014VBjU4cN2TUy_V8.roa (hash: R9/uJWNYkuWkn9362/6eXHCOuC8x3gv8eszIJhtU6eQ=) 2: 2ZYVCHlVP79fGQDnUrmsC7N7n-A.roa (hash: K2aFrZIoX9SmdcEF5JzKuoA3IcG5HQKJ3ewD9wnPQMA=) 3: 3UFn9ZKL5xnyw3p3E5ZPlAB21Ko.roa (hash: 6Pd7GRQDu0g4GEPlaJKLxZv9PduNId/exEPYyekEroo=) 4: 5-QDCscMj9Leh6LzChmbvJFc3ig.roa (hash: EWC7cGHbOy6BhIFCFJ7EqN8NK2hfdxSdyM/lKvfMq/o=) 5: 5KpVCQ3CyEztQ9cIEvVYbZRbiYQ.roa (hash: wEh76twlgMaB5r7NetVkn53k9vIu3IdtKnUUcrVB2Dg=) 6: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: W2ZwxE40sXnwQY0YXz/ZxnUkqzN2nJwHZjxDkHeYKeY=) 7: HrBRmTFS8Ys6uQLM7rhI98nFihs.roa (hash: MW9T552xzBnfQZt2F48RqgD/8u4vhEhciQf3oFl+8uM=) 8: IppBZHr6rtDZFlGkYGSC_b4iLf8.roa (hash: JW9Kh503AbeAiJw1huy2tMda6a91+tj0zAGKx3bgPiI=) 9: K-bptzEyfSxe5brLutYZPui7KJo.roa (hash: RaMo3W1jAz/KokfzelPm6eQVRrUb/HW8AUWUJAZdGqY=) 10: O4G0X_PGrMW4h3U4KT4uijqkrhQ.roa (hash: 5S4xFFqPIUJkH1oerMYER6zbbt7AyzO7IDLvTuazmD0=) 11: XkV_BzJ-10BB1M0sgp5kpjzCQ_0.roa (hash: 4EePChQLAU75id7JSNxKuA3gIb+9FFNSZgknDwLIyC0=) 12: iv3qLKysxVV4ZL5RT241TdjAl14.roa (hash: r9qUMWgU+MUkMxe2hq37VcclKhs/bYytS6pmpmAT6kU=) 13: rB9cGQ3QbZZEDCnbnexBO3g-aqw.roa (hash: 2H+IeYUnWlwSyufBzTPesu0/NN+MSp0WuweXrOO7518=) 14: vW6DP49xFYD9QamGuDpSrklSowc.roa (hash: PfNEb7N7MrV2yrb5oWGvEI95qISNxbt/vnCmIR8GyTs=) 15: vYpftoIYl0802LMSZotEkwGtO1k.roa (hash: AuWrLadvB2ERH3IjebmtnUJ/nP6gZejuogzS6BRYY2s=) 16: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (hash: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=) 17: zg3nFQ0Sg8cWpJOYqLKRP35LJU8.roa (hash: 2J2iLBS4crA0QUVX97KQglPfQbj/gfi5p+BnPc66cJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:1f:b0:c1:e1:af:60:4d:8a:a6:08:26:9f:47:4e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jun 7 16:00:57 2025 GMT Not After : Jun 8 16:00:57 2025 GMT Subject: CN=3da072f763b011f51209f33f5c423444e914e0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:05:80:7e:d6:7a:f0:86:24:d6:69:50:15:4c: 5f:e4:17:c0:ef:23:c2:11:70:39:0c:be:9f:87:b6: f9:14:a8:4b:13:f1:6d:af:f4:9f:ab:6f:35:7d:07: 00:23:22:0d:84:9d:71:04:bc:3c:19:ab:19:10:89: ed:6a:4e:bc:74:e5:b8:be:e2:e3:d7:31:9c:f9:97: 2a:8c:c0:1b:2e:35:5e:c0:05:05:6e:37:4b:4e:b8: e3:5f:77:14:12:75:6b:35:9f:e6:e9:d3:6d:2d:33: 1f:22:17:f3:c9:a5:a2:31:7c:f5:41:67:4b:08:8e: 94:bf:21:92:9e:ec:54:25:24:65:a3:9e:55:e9:ed: 43:d9:55:c6:fc:96:25:c7:d8:4a:fd:d0:63:0b:33: b7:b6:aa:92:96:8b:3f:c7:b8:c0:41:0c:ba:26:a4: d9:02:f9:19:6f:7e:87:6c:db:27:ac:92:05:e5:c2: 1d:0f:f2:ff:21:73:e8:6f:98:b9:45:6f:f8:d3:0b: f7:e5:61:1d:d2:b0:67:4c:2c:84:47:07:69:80:34: 56:e9:7e:0d:68:c5:54:b2:98:d8:48:62:4d:ab:db: 97:60:46:b3:ca:6f:b6:a9:bf:9d:ed:eb:2c:27:5a: e4:b0:30:5d:54:c2:55:9e:7a:98:e1:f3:85:fd:1d: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A0:72:F7:63:B0:11:F5:12:09:F3:3F:5C:42:34:44:E9:14:E0:C8 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:1c:a0:cd:a5:e7:fb:5a:e1:86:dd:11:a9:c9:39:62:62: 03:0b:5d:83:4e:25:56:60:47:c4:03:29:b6:5a:fb:18:11:0c: 8a:48:98:37:b9:6b:fd:2b:7c:b8:36:a1:f0:54:41:95:0a:66: b2:27:d6:19:96:c6:a4:e3:e7:b4:c3:86:0b:d6:5b:77:82:59: a9:9b:dd:47:e1:ba:f9:08:38:e4:9b:e3:a4:da:22:fd:87:1d: 76:ba:8a:0c:13:64:88:81:07:4f:77:b5:b2:03:fd:55:b1:64: a4:2f:17:78:c7:31:27:f6:03:47:f2:a0:7e:cd:f3:e8:aa:83: f6:16:f6:6f:9f:8b:76:42:63:bb:21:c8:83:d2:1f:1e:8f:72: 33:8a:b9:76:59:07:ce:fc:dd:84:41:5f:97:89:48:29:d7:70: e7:8d:3e:e9:9b:b3:04:b0:59:bc:a4:93:50:dc:55:fa:f7:35: 9a:b4:58:15:cc:95:7a:d4:e4:68:f2:5f:51:44:32:67:cb:30: cd:ad:db:6d:d8:4f:1f:48:cc:ff:ad:ae:87:99:42:10:81:b5: 7e:77:b9:32:cd:c1:dd:99:02:33:ba:ba:67:ec:4d:d3:aa:77: 3a:2d:47:21:b2:e7:0c:85:c2:3a:77:c6:b5:78:ff:e7:ea:99: ee:f5:60:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLH7DB4a9gTYqmCCafR079MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjUwNjA3MTYwMDU3WhcNMjUwNjA4MTYwMDU3WjAzMTEwLwYDVQQD EygzZGEwNzJmNzYzYjAxMWY1MTIwOWYzM2Y1YzQyMzQ0NGU5MTRlMGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAWAftZ68IYk1mlQFUxf5BfA7yPC EXA5DL6fh7b5FKhLE/Ftr/Sfq281fQcAIyINhJ1xBLw8GasZEIntak68dOW4vuLj 1zGc+ZcqjMAbLjVewAUFbjdLTrjjX3cUEnVrNZ/m6dNtLTMfIhfzyaWiMXz1QWdL CI6UvyGSnuxUJSRlo55V6e1D2VXG/JYlx9hK/dBjCzO3tqqSlos/x7jAQQy6JqTZ AvkZb36HbNsnrJIF5cIdD/L/IXPob5i5RW/40wv35WEd0rBnTCyERwdpgDRW6X4N aMVUspjYSGJNq9uXYEazym+2qb+d7essJ1rksDBdVMJVnnqY4fOF/R3+zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2gcvdjsBH1EgnzP1xCNETpFODIMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWccoM2l 5/ta4YbdEanJOWJiAwtdg04lVmBHxAMptlr7GBEMikiYN7lr/St8uDah8FRBlQpm sifWGZbGpOPntMOGC9Zbd4JZqZvdR+G6+Qg45JvjpNoi/YcddrqKDBNkiIEHT3e1 sgP9VbFkpC8XeMcxJ/YDR/Kgfs3z6KqD9hb2b5+LdkJjuyHIg9IfHo9yM4q5dlkH zvzdhEFfl4lIKddw540+6ZuzBLBZvKSTUNxV+vc1mrRYFcyVetTkaPJfUUQyZ8sw za3bbdhPH0jM/62uh5lCEIG1fne5Ms3B3ZkCM7q6Z+xN06p3Oi1HIbLnDIXCOnfG tXj/5+qZ7vVguw== -----END CERTIFICATE-----Generated at Sat Jun 7 22:21:42 2025 by rpki-client