$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: Ejq50KFdI7aiR3Puxjl3d5N8m9yRl8PzM0sBnpQ6oh0= Subject key identifier: 1A:5C:65:41:41:76:99:4D:DE:AC:8F:76:69:61:6C:6B:8A:FC:9E:3A Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019A066DCD45386F7075D09D54C11D9A2CFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0D38 Signing time: Tue 21 Oct 2025 11:00:50 +0000 Manifest this update: Tue 21 Oct 2025 11:00:50 +0000 Manifest next update: Wed 22 Oct 2025 11:00:50 +0000 Files and hashes: 1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=) 2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=) 3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 4: 6f1sSkB9WX-VDyBfu2FjGF8_768.roa (hash: 81FaTuTny3LusxPdZBC/CvEnuJ1t4vAJ75jZ7Dn4nWk=) 5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: JMXtmfaQN0WNS+dwIAVV3bKB24qACRsG/JzotrRMkXw=) 7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=) 15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=) 17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 18: i-TboqvR4QwoJ4ln5MB6Q0lRrLg.roa (hash: t8GdeR+oskUDLv8QTLlQVLSxK4jgz1+No6165ZL4RhM=) 19: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 20: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=) 21: pY04MvNLEI4_6cNhPFy2qVDxgKo.roa (hash: 5Dml35iXrbHiY5zOgy9nGWNDdTfpvu/1v0vbsuq03Rs=) 22: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 23: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 24: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) 25: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:6d:cd:45:38:6f:70:75:d0:9d:54:c1:1d:9a:2c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Oct 21 11:00:50 2025 GMT Not After : Oct 22 11:00:50 2025 GMT Subject: CN=1a5c65414176994ddeac8f7669616c6b8afc9e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:a2:b1:c3:8d:6d:f2:a5:4c:38:7d:00:eb: b2:1d:c6:0e:22:e5:68:71:e9:98:22:e8:f7:f4:15: b7:1f:f0:fc:4a:24:20:91:1e:7c:e9:ed:f3:37:00: 3b:65:f6:bb:85:5c:09:7a:af:44:fb:89:54:f1:5f: e6:b6:22:2d:28:b0:6f:45:42:c9:26:46:ee:2e:be: 1a:05:fa:9d:c3:9c:ca:f6:ab:1d:44:50:ca:1e:75: a3:9c:6d:e0:40:eb:c2:24:d3:0e:15:bb:5d:04:9d: 33:c9:da:7f:ee:48:3a:59:ca:9a:9a:9f:69:75:0c: 50:7a:10:79:38:21:1e:7c:c4:ad:03:71:c9:94:d8: c2:01:2b:d5:be:e5:42:99:ce:de:be:21:53:39:8a: b7:06:7c:3d:e4:6f:53:8a:eb:db:f3:7b:78:dc:d6: c1:26:24:ea:4a:83:fe:df:f1:f4:ab:5a:65:18:fd: 54:d4:c6:2d:63:58:7c:13:2c:a6:15:7c:c2:2a:7b: 5c:1d:c8:ee:fe:27:bb:47:13:51:08:2f:a5:0d:fa: 13:9a:96:46:2a:77:fd:90:ee:81:3b:ab:05:e6:36: 90:ed:93:c6:ca:25:04:1b:47:26:84:f0:54:2a:8e: 3e:6c:0e:17:a2:f9:26:15:67:81:ee:2e:12:f7:f9: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:65:41:41:76:99:4D:DE:AC:8F:76:69:61:6C:6B:8A:FC:9E:3A X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:38:37:ff:f3:a7:0b:75:a8:e1:53:d8:6c:d3:df:cd:27:c8: b8:8b:48:93:84:5a:56:5a:7a:4d:35:77:82:39:24:a8:3b:6e: 14:bb:b1:35:df:6b:e1:e4:7d:5e:6c:91:d8:a2:a6:7a:2d:f0: 5f:f0:d3:9c:47:4f:2e:59:af:9c:98:ca:8a:25:82:38:11:51: be:00:3b:d0:0d:41:ad:68:ec:4d:88:5a:d0:ea:67:64:91:f0: 15:a9:39:32:f1:ad:a5:42:fe:81:c9:2e:ff:e8:90:95:47:2f: 09:27:0b:a6:d5:90:c3:d3:44:1f:71:9e:32:88:7c:2d:e5:c9: b9:d5:1b:22:a1:48:c8:32:7d:f9:55:c7:95:5d:7b:0e:34:51: 25:94:ed:dd:16:45:cb:e9:14:b1:06:1c:cc:2b:a4:a0:88:95: e6:43:62:01:e9:41:67:26:ee:b1:39:66:4d:eb:75:4c:78:6b: b5:8e:4e:7f:da:22:d6:93:7a:19:90:ac:7d:b8:44:c6:2d:30: e6:47:72:a2:bc:97:3c:ed:8f:44:8e:e1:1d:95:3a:ee:57:08: 95:4d:cf:24:6a:23:e1:f5:49:c9:89:a0:98:15:fd:2e:67:b4: 22:02:c8:4f:f0:43:25:ea:3e:6e:3a:b0:7c:ea:04:f8:a6:d9: 77:36:e2:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGbc1FOG9wddCdVMEdmiz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUxMDIxMTEwMDUwWhcNMjUxMDIyMTEwMDUwWjAzMTEwLwYDVQQD EygxYTVjNjU0MTQxNzY5OTRkZGVhYzhmNzY2OTYxNmM2YjhhZmM5ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9GiscONbfKlTDh9AOuyHcYOIuVo cemYIuj39BW3H/D8SiQgkR586e3zNwA7Zfa7hVwJeq9E+4lU8V/mtiItKLBvRULJ JkbuLr4aBfqdw5zK9qsdRFDKHnWjnG3gQOvCJNMOFbtdBJ0zydp/7kg6Wcqamp9p dQxQehB5OCEefMStA3HJlNjCASvVvuVCmc7eviFTOYq3Bnw95G9Tiuvb83t43NbB JiTqSoP+3/H0q1plGP1U1MYtY1h8EyymFXzCKntcHcju/ie7RxNRCC+lDfoTmpZG Knf9kO6BO6sF5jaQ7ZPGyiUEG0cmhPBUKo4+bA4XovkmFWeB7i4S9/mfAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpcZUFBdplN3qyPdmlhbGuK/J46MB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjg3//On C3Wo4VPYbNPfzSfIuItIk4RaVlp6TTV3gjkkqDtuFLuxNd9r4eR9XmyR2KKmei3w X/DTnEdPLlmvnJjKiiWCOBFRvgA70A1BrWjsTYha0OpnZJHwFak5MvGtpUL+gcku /+iQlUcvCScLptWQw9NEH3GeMoh8LeXJudUbIqFIyDJ9+VXHlV17DjRRJZTt3RZF y+kUsQYczCukoIiV5kNiAelBZybusTlmTet1THhrtY5Of9oi1pN6GZCsfbhExi0w 5kdyoryXPO2PRI7hHZU67lcIlU3PJGoj4fVJyYmgmBX9Lme0IgLIT/BDJeo+bjqw fOoE+KbZdzbiFA== -----END CERTIFICATE-----Generated at Tue Oct 21 14:18:53 2025 by rpki-client