$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: 8WTIDLznnByedG0U3Xkb3rkNnL2sFwzg1cOvgYyqpXU= Subject key identifier: 45:10:C6:31:C4:27:23:7E:6C:D8:A5:6D:CC:F9:74:B3:89:87:55:56 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 0197B7B3769A1D374AC3EDA930027C6A34D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 14AE Signing time: Sat 28 Jun 2025 18:01:21 +0000 Manifest this update: Sat 28 Jun 2025 18:01:21 +0000 Manifest next update: Sun 29 Jun 2025 18:01:21 +0000 Files and hashes: 1: 1cBjbhQO7ncLuCJPPP3ax-BP1rc.roa (hash: Jy5kekjzCQxDaa0ItIoXnMNYM41DXr2Kna+F8NZUTeI=) 2: 8hRBXjeqaNVqsRXwD3teVm2IptQ.roa (hash: 7trj/DN0w0nR+thBLV8DeXduqLYmWtu9yjYZdu4vyJw=) 3: Bx__fFiMMTggkGq_nd5kX3xmUcg.roa (hash: mKBt1ZL1NN3yHJQYqC4MudwNnNLAyAG6zsc+LH7T2yM=) 4: CLnjMLjaN6TgfiTPKuCp1qWork0.roa (hash: MihJ/9Q2aOSD5kcM3rgBq2rOZB5XjrnOSNAyQ0gi6BU=) 5: Ff-r3-0iyLfe2eC4tftKl7r4ksA.roa (hash: XBCuFAzYlK+KS0b0qdNX4BGXCyC4kES1ua5iNmQkljo=) 6: Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa (hash: jB+LwnmkqI7LD0NI0i2IOq5xZm+2j2nKXigXc5yngNg=) 7: Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa (hash: 4mvPk5YCIebKrrCqmTuHh7apgwePzT2ptGjzqSnMQ2k=) 8: MPADllIHWdYho5SL9cNb4fTjF5g.roa (hash: 0EWuYNC8MZ5sfsDzG+GHQhkCofnYevzEpH/1M0Pt09c=) 9: XhfMqezXvZ9Gr1SfZAFxxiBLdqw.roa (hash: QCoblTw77lmvmm3xeIb8Fg5RScedsC6Svua+HgD7wlE=) 10: _363_dFkTrxVWJRfmKGhVcGEYxw.roa (hash: EFI43I2qKJ1jnWCRyPrzhjddU2bZAD3g2m1Gb9lWY6w=) 11: aIC6ROQmIBkJtMQV3BLilIyM4Jc.roa (hash: +ZDiWP7vx5S7AAhHLcn6ylil5bTpyx1nO3rHC5JU56A=) 12: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: 13ofWP6tURy9GH4r+MBwj3dpernhON2Qw/28+G35ej4=) 13: irOUAsVrlxFg5m013u0wtydduUU.roa (hash: z7Yif2k8ig/75nD80USkf23TbWyOlu3D9+tkTdBp9Ks=) 14: o5T0k_44TSkIgUx_Ff4U-HFRZqU.roa (hash: IFaPUBy92F06F1cq2klHPE/ZCTKON9EkjF2KsBLKJXw=) 15: q9StAyu8IQxQODGldzud6Hz7gjM.roa (hash: HxF/ydsfM4P76p2qg7HDS8Ct7rDXryB8JaDzIZFolV4=) 16: qSlaLn-7EYhvBs__DrzBebluApA.roa (hash: /m9RdlfwCPFmSdntKKJTP1sX7ETuhSL8wJhpD8u8EQU=) 17: rgzdAffmWWAVB7HsZPyDscdDfUs.roa (hash: PHFUtB9FTI42HYVNCn11UAKgdzJHvZkAvCdcalSeSVs=) 18: vyh_XE53itxxZ2DN3zJiSHad7oQ.roa (hash: BwwJTDqClirjAI8z/+dm20U+LpRGL9usTj1KRJXE4gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:76:9a:1d:37:4a:c3:ed:a9:30:02:7c:6a:34:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jun 28 18:01:21 2025 GMT Not After : Jun 29 18:01:21 2025 GMT Subject: CN=4510c631c427237e6cd8a56dccf974b389875556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:da:56:fa:7c:8f:ea:f5:f0:d6:9c:c6:7c: dd:82:65:8e:a3:7e:a5:62:a9:66:c6:9d:1a:59:98: 66:c0:56:fe:fb:ba:15:78:eb:a8:45:27:3d:be:f4: d3:35:75:4e:fb:d7:90:1e:98:64:66:5f:be:8b:d7: c7:c6:b1:fe:5f:9f:6f:03:eb:90:e1:24:d6:6d:ec: 3d:0a:67:98:18:08:45:44:15:f8:9a:0b:dc:ed:23: 5e:7a:07:9c:71:bf:4f:f1:8d:0a:cd:23:fb:e0:11: 36:31:dc:b2:71:0b:c8:19:b2:b4:54:52:88:a7:bd: 98:46:be:84:91:59:45:c2:ce:1c:4c:ad:ad:fa:60: c7:39:81:f9:d4:24:d2:76:18:68:6c:ac:b9:7f:a3: ab:c2:10:dd:cb:54:8d:e1:4a:02:be:0d:45:e9:8f: 24:18:05:a4:f6:7b:05:77:a7:04:ab:20:d7:f1:b6: cb:a1:92:d3:67:27:04:06:09:3f:a8:14:22:12:69: 36:18:aa:c2:11:ef:30:58:8c:50:04:1e:e7:22:fb: ff:5e:65:f2:c0:21:9e:c8:5f:1d:42:1e:5d:a3:f7: fd:36:18:15:36:30:1c:dc:cd:63:f6:de:7a:0f:cc: 6a:26:87:4d:50:be:e7:a0:5c:97:e9:2a:6a:1f:b3: 3d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:10:C6:31:C4:27:23:7E:6C:D8:A5:6D:CC:F9:74:B3:89:87:55:56 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:32:a7:22:b1:3f:ab:c5:0e:8a:4b:b1:93:59:5f:e1:3e:33: 9c:c4:04:54:31:9e:ac:92:b5:7f:5c:a5:f4:ce:e7:ef:9d:5d: 26:bf:33:41:56:25:b3:c8:c9:bc:5b:53:f0:1c:a2:92:8c:25: 7c:c6:e8:e2:be:e0:e8:e1:26:2c:a0:d9:50:fb:4a:ea:9b:9b: 43:45:b9:db:32:70:db:65:28:0b:3d:79:d7:8b:d0:0e:0d:d2: 9b:4e:3c:6d:93:02:1b:e4:bb:fd:30:4a:27:56:0d:72:27:10: 9a:0e:01:78:ca:5d:ac:d9:1d:06:44:77:16:8c:f2:56:02:a1: ec:fe:c9:44:d4:7f:6b:5f:90:47:e8:95:9f:e7:ce:9f:9f:ad: 25:15:21:19:8e:a0:bb:bf:03:3d:bf:f0:d8:ef:43:fc:d4:02: f4:cb:3f:1f:54:0c:26:6f:f2:19:6b:0e:e1:64:99:9f:ad:2d: 27:54:f1:34:2f:87:83:7e:d8:cc:94:dc:09:06:6f:0e:d1:40: f5:12:27:ea:f6:00:ac:19:bf:01:50:3a:3b:1c:d0:d2:98:4d: 2f:b8:cc:ef:73:7a:9d:05:f5:61:d2:dc:a7:41:4e:2e:d6:41: b5:36:3e:12:dd:0d:06:12:c3:d7:22:a7:6d:76:8e:31:bf:95: ba:6b:f8:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s3aaHTdKw+2pMAJ8ajTRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjUwNjI4MTgwMTIxWhcNMjUwNjI5MTgwMTIxWjAzMTEwLwYDVQQD Eyg0NTEwYzYzMWM0MjcyMzdlNmNkOGE1NmRjY2Y5NzRiMzg5ODc1NTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr73aVvp8j+r18NacxnzdgmWOo36l Yqlmxp0aWZhmwFb++7oVeOuoRSc9vvTTNXVO+9eQHphkZl++i9fHxrH+X59vA+uQ 4STWbew9CmeYGAhFRBX4mgvc7SNeegeccb9P8Y0KzSP74BE2MdyycQvIGbK0VFKI p72YRr6EkVlFws4cTK2t+mDHOYH51CTSdhhobKy5f6OrwhDdy1SN4UoCvg1F6Y8k GAWk9nsFd6cEqyDX8bbLoZLTZycEBgk/qBQiEmk2GKrCEe8wWIxQBB7nIvv/XmXy wCGeyF8dQh5do/f9NhgVNjAc3M1j9t56D8xqJodNUL7noFyX6SpqH7M96QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUQxjHEJyN+bNilbcz5dLOJh1VWMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDKnIrE/ q8UOikuxk1lf4T4znMQEVDGerJK1f1yl9M7n751dJr8zQVYls8jJvFtT8Byikowl fMbo4r7g6OEmLKDZUPtK6pubQ0W52zJw22UoCz1514vQDg3Sm048bZMCG+S7/TBK J1YNcicQmg4BeMpdrNkdBkR3FozyVgKh7P7JRNR/a1+QR+iVn+fOn5+tJRUhGY6g u78DPb/w2O9D/NQC9Ms/H1QMJm/yGWsO4WSZn60tJ1TxNC+Hg37YzJTcCQZvDtFA 9RIn6vYArBm/AVA6OxzQ0phNL7jM73N6nQX1YdLcp0FOLtZBtTY+Et0NBhLD1yKn bXaOMb+Vumv4LA== -----END CERTIFICATE-----Generated at Sat Jun 28 21:26:59 2025 by rpki-client