$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: FUeZp2cLMbJfxtiw8RWck/sp8Akf4P1ucYis5gVfhec= Subject key identifier: 53:AF:00:DD:9A:19:9F:B0:27:F4:2C:D1:83:1D:31:2C:C1:9E:93:72 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 01991AD2FA36F08B31A9B0F51E7CA2296EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0CBE Signing time: Fri 05 Sep 2025 17:00:58 +0000 Manifest this update: Fri 05 Sep 2025 17:00:58 +0000 Manifest next update: Sat 06 Sep 2025 17:00:58 +0000 Files and hashes: 1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=) 2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=) 3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 4: 6f1sSkB9WX-VDyBfu2FjGF8_768.roa (hash: 81FaTuTny3LusxPdZBC/CvEnuJ1t4vAJ75jZ7Dn4nWk=) 5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: QpNn4HKkw8QLcSxNmTmXov2ed0W+KCVx5IBr8L3HJQ0=) 7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=) 15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=) 17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 18: i-TboqvR4QwoJ4ln5MB6Q0lRrLg.roa (hash: t8GdeR+oskUDLv8QTLlQVLSxK4jgz1+No6165ZL4RhM=) 19: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 20: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=) 21: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=) 22: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 23: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 24: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) 25: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1a:d2:fa:36:f0:8b:31:a9:b0:f5:1e:7c:a2:29:6e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Sep 5 17:00:58 2025 GMT Not After : Sep 6 17:00:58 2025 GMT Subject: CN=53af00dd9a199fb027f42cd1831d312cc19e9372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:b2:8b:fc:73:ef:d2:7f:ac:c3:c7:56:88: 3c:1b:5e:55:94:ca:4e:cd:09:7d:13:1b:1f:c4:5e: 5c:43:c6:df:49:37:9f:c8:a4:b9:e8:7a:fc:24:38: b6:97:4c:41:d5:08:8b:d2:cc:41:ac:aa:25:f9:1d: 49:d6:37:6c:2d:78:c3:85:a2:dd:24:fa:9f:ea:79: 51:6d:d5:80:b6:b1:c5:bb:6e:52:49:b3:ae:c9:9b: 05:bd:f3:b7:24:4f:cf:b0:17:7c:73:65:c8:23:3d: 8b:ad:6e:7a:8f:b8:9a:e9:c8:db:87:21:59:b4:5e: 67:aa:84:e9:12:b8:2e:eb:1a:f5:24:e1:97:e7:33: 9c:21:11:6b:11:61:81:88:48:f3:2b:11:5b:28:5d: 4a:fd:d1:16:fa:48:1d:9c:bb:c6:b6:09:3b:f2:0c: 94:bb:6a:45:44:e9:12:28:4b:0a:54:a4:c3:b5:0a: 6c:88:2b:7a:04:97:a1:82:cd:d0:52:66:b7:45:45: 22:c3:b1:21:78:c1:22:04:2e:fe:7d:e1:ff:e2:4c: 02:e6:e9:f4:db:9f:23:bd:18:09:5e:99:c9:b8:80: 88:49:bd:92:08:f6:6d:26:83:5f:b4:90:6b:9e:7e: 97:c2:92:60:bf:c2:f8:76:5a:07:f5:46:bb:e8:22: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AF:00:DD:9A:19:9F:B0:27:F4:2C:D1:83:1D:31:2C:C1:9E:93:72 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:83:6d:17:44:3e:58:b7:0f:64:36:a3:bd:6a:33:6a:5e:a0: 7c:5f:06:c3:dd:0f:21:66:5b:5c:5f:45:fc:99:ea:47:77:04: aa:8f:52:0c:a8:e2:22:84:8c:be:31:14:6c:2e:5c:93:42:f1: 12:3f:93:7b:b8:ec:62:35:40:25:57:c8:b7:f6:7c:fb:a4:0c: af:d7:74:77:16:18:e6:e8:42:74:44:8b:f6:08:dd:83:10:3f: 9d:3a:85:d1:a5:54:f9:3d:7f:ff:85:fd:85:a3:51:0a:a4:f9: 3e:41:13:33:e4:75:fa:71:24:3d:31:03:d8:84:0e:59:6a:28: 6b:6f:7d:af:a5:41:64:5c:13:08:ea:80:bf:eb:0b:27:0c:06: 14:01:90:6a:59:7d:78:e2:d5:15:1b:40:66:64:b3:1d:25:1d: 54:95:f8:1e:40:47:89:5d:9e:b7:63:e4:6a:12:54:b0:00:f6: d4:74:17:f8:be:41:ff:88:e0:fa:54:73:21:a7:7d:b6:0a:72: ae:00:ca:dc:d1:63:d2:24:6e:f5:66:5c:09:e3:21:d7:ea:83: c7:75:c7:3d:0b:25:ca:32:f8:5e:e5:08:77:38:9d:7c:37:ba: 74:01:de:0a:b6:21:42:71:3e:86:87:11:71:e1:95:71:ac:c8: b0:95:c0:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZka0vo28IsxqbD1HnyiKW6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUwOTA1MTcwMDU4WhcNMjUwOTA2MTcwMDU4WjAzMTEwLwYDVQQD Eyg1M2FmMDBkZDlhMTk5ZmIwMjdmNDJjZDE4MzFkMzEyY2MxOWU5MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS+yi/xz79J/rMPHVog8G15VlMpO zQl9ExsfxF5cQ8bfSTefyKS56Hr8JDi2l0xB1QiL0sxBrKol+R1J1jdsLXjDhaLd JPqf6nlRbdWAtrHFu25SSbOuyZsFvfO3JE/PsBd8c2XIIz2LrW56j7ia6cjbhyFZ tF5nqoTpErgu6xr1JOGX5zOcIRFrEWGBiEjzKxFbKF1K/dEW+kgdnLvGtgk78gyU u2pFROkSKEsKVKTDtQpsiCt6BJehgs3QUma3RUUiw7EheMEiBC7+feH/4kwC5un0 258jvRgJXpnJuICISb2SCPZtJoNftJBrnn6XwpJgv8L4dloH9Ua76CIOBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOvAN2aGZ+wJ/Qs0YMdMSzBnpNyMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYNtF0Q+ WLcPZDajvWozal6gfF8Gw90PIWZbXF9F/JnqR3cEqo9SDKjiIoSMvjEUbC5ck0Lx Ej+Te7jsYjVAJVfIt/Z8+6QMr9d0dxYY5uhCdESL9gjdgxA/nTqF0aVU+T1//4X9 haNRCqT5PkETM+R1+nEkPTED2IQOWWooa299r6VBZFwTCOqAv+sLJwwGFAGQall9 eOLVFRtAZmSzHSUdVJX4HkBHiV2et2PkahJUsAD21HQX+L5B/4jg+lRzIad9tgpy rgDK3NFj0iRu9WZcCeMh1+qDx3XHPQslyjL4XuUIdzidfDe6dAHeCrYhQnE+hocR ceGVcazIsJXAdA== -----END CERTIFICATE-----Generated at Sat Sep 6 01:43:38 2025 by rpki-client