$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: 60IhrggFfIDsVdCDWiWwOSXEeOwBObFpSI/+XMCquHc= Subject key identifier: AA:2D:C8:05:E5:FC:DA:4D:22:33:96:39:33:1A:C2:9C:E6:10:E3:8F Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 0198D5F121803CEF972791BF039590C87461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 1545 Signing time: Sat 23 Aug 2025 08:00:06 +0000 Manifest this update: Sat 23 Aug 2025 08:00:06 +0000 Manifest next update: Sun 24 Aug 2025 08:00:06 +0000 Files and hashes: 1: 1-wNbXwWq_rcd31KdtUHBjHqlOYw.roa (hash: Vna41k3RUzjuu4Rno9oMx5pWO8RDhSOU/oHNJLNrfMg=) 2: 1cBjbhQO7ncLuCJPPP3ax-BP1rc.roa (hash: Jy5kekjzCQxDaa0ItIoXnMNYM41DXr2Kna+F8NZUTeI=) 3: 8hRBXjeqaNVqsRXwD3teVm2IptQ.roa (hash: 7trj/DN0w0nR+thBLV8DeXduqLYmWtu9yjYZdu4vyJw=) 4: Bx__fFiMMTggkGq_nd5kX3xmUcg.roa (hash: mKBt1ZL1NN3yHJQYqC4MudwNnNLAyAG6zsc+LH7T2yM=) 5: CLnjMLjaN6TgfiTPKuCp1qWork0.roa (hash: MihJ/9Q2aOSD5kcM3rgBq2rOZB5XjrnOSNAyQ0gi6BU=) 6: Ff-r3-0iyLfe2eC4tftKl7r4ksA.roa (hash: XBCuFAzYlK+KS0b0qdNX4BGXCyC4kES1ua5iNmQkljo=) 7: Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa (hash: jB+LwnmkqI7LD0NI0i2IOq5xZm+2j2nKXigXc5yngNg=) 8: I-d3mGhKAHlT8J9wAcisFqLqGFQ.roa (hash: +t66xrsaCPSb5WzTrykjh+nmEbajrQRTzYzj7itFceY=) 9: Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa (hash: 4mvPk5YCIebKrrCqmTuHh7apgwePzT2ptGjzqSnMQ2k=) 10: MPADllIHWdYho5SL9cNb4fTjF5g.roa (hash: 0EWuYNC8MZ5sfsDzG+GHQhkCofnYevzEpH/1M0Pt09c=) 11: XhfMqezXvZ9Gr1SfZAFxxiBLdqw.roa (hash: QCoblTw77lmvmm3xeIb8Fg5RScedsC6Svua+HgD7wlE=) 12: _363_dFkTrxVWJRfmKGhVcGEYxw.roa (hash: EFI43I2qKJ1jnWCRyPrzhjddU2bZAD3g2m1Gb9lWY6w=) 13: aIC6ROQmIBkJtMQV3BLilIyM4Jc.roa (hash: +ZDiWP7vx5S7AAhHLcn6ylil5bTpyx1nO3rHC5JU56A=) 14: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: msqK33InDFk3e1HyYxLy8pkBMTr2BcRGOtmRMzTaguo=) 15: irOUAsVrlxFg5m013u0wtydduUU.roa (hash: z7Yif2k8ig/75nD80USkf23TbWyOlu3D9+tkTdBp9Ks=) 16: o5T0k_44TSkIgUx_Ff4U-HFRZqU.roa (hash: IFaPUBy92F06F1cq2klHPE/ZCTKON9EkjF2KsBLKJXw=) 17: qSlaLn-7EYhvBs__DrzBebluApA.roa (hash: /m9RdlfwCPFmSdntKKJTP1sX7ETuhSL8wJhpD8u8EQU=) 18: rgzdAffmWWAVB7HsZPyDscdDfUs.roa (hash: PHFUtB9FTI42HYVNCn11UAKgdzJHvZkAvCdcalSeSVs=) 19: vyh_XE53itxxZ2DN3zJiSHad7oQ.roa (hash: BwwJTDqClirjAI8z/+dm20U+LpRGL9usTj1KRJXE4gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:21:80:3c:ef:97:27:91:bf:03:95:90:c8:74:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Aug 23 08:00:06 2025 GMT Not After : Aug 24 08:00:06 2025 GMT Subject: CN=aa2dc805e5fcda4d22339639331ac29ce610e38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:02:9a:d1:3c:81:b3:65:f4:16:fe:b3:36: 01:ff:40:aa:dc:d9:88:41:79:f9:4a:86:ce:06:21: d5:cd:98:a7:7f:61:a9:8d:99:55:de:0c:42:5d:04: 58:5f:46:8e:99:ed:e5:f5:0d:e4:ff:c6:da:af:15: 61:f8:0e:38:67:aa:d5:53:ff:46:19:82:f0:db:ce: 43:91:04:b8:d6:2c:70:b8:03:42:3b:97:c8:20:c8: e9:29:ce:29:7a:48:51:cd:c7:7d:ff:3d:08:e1:aa: da:54:7e:86:2f:06:d6:84:12:54:09:46:8f:52:4b: 8c:ef:9f:50:65:ce:34:cf:44:b5:7e:b4:97:32:cc: 1b:58:9e:d7:91:c6:f8:1e:5d:6e:cd:b5:7b:1f:72: 9e:7f:13:bc:49:18:9e:8a:8a:83:f8:ae:70:41:b9: 22:23:5a:38:97:81:6a:d3:83:24:e9:40:62:7e:e3: ed:a3:f9:13:75:a6:db:31:4e:bf:8c:f3:0e:d4:71: 30:a6:56:c8:ec:b4:36:43:f1:08:d5:c4:f2:88:4d: 0e:03:3d:d3:1f:3c:96:5b:b0:45:79:5c:09:a7:69: 29:13:28:f7:e3:16:5c:3d:d1:86:5c:06:3e:10:b3: 8d:b8:bd:02:5f:d6:9c:22:ff:69:99:b2:eb:34:9d: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:C8:05:E5:FC:DA:4D:22:33:96:39:33:1A:C2:9C:E6:10:E3:8F X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:73:1f:85:9c:ac:b2:09:d1:2c:77:f3:1c:e5:9b:98:c5:42: 93:74:5f:09:b6:63:d5:2e:7c:c6:5e:90:17:da:48:e4:a7:1a: fc:0a:80:04:5d:71:1e:16:60:5b:73:63:a8:d4:47:44:f2:bc: 30:02:f9:a7:80:63:6f:43:f9:19:12:f8:c6:51:ae:6d:3e:ba: 1a:ff:23:97:9b:ad:db:75:31:95:8a:45:58:76:d4:15:28:47: 41:0c:01:0d:61:f5:e4:4a:a2:6f:e2:40:be:d2:98:43:f8:12: 27:00:f7:78:6d:df:ce:1c:2e:98:23:ee:c3:ef:77:8b:60:1d: 95:7f:93:20:02:d4:8f:47:40:6f:b3:b1:49:da:36:1e:73:41: 3c:51:bf:0c:54:ed:0b:c9:db:09:7f:43:3f:5a:87:e2:f2:5c: 28:98:a1:c5:70:2c:bf:68:c0:5f:b1:2c:fe:54:b3:8b:9e:60: d3:c1:33:b7:0e:e2:42:9e:91:04:67:92:71:f8:19:6d:97:5e: e3:27:e7:6a:39:73:b1:d6:56:93:17:79:ec:46:ab:45:c7:87: 6f:7d:14:cc:ed:81:bb:21:9e:cf:48:6a:a4:a9:bb:79:33:ce: fc:f9:e4:20:16:17:8e:30:f9:7b:8e:55:b2:03:7e:f4:a7:2b: a4:88:db:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8SGAPO+XJ5G/A5WQyHRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjUwODIzMDgwMDA2WhcNMjUwODI0MDgwMDA2WjAzMTEwLwYDVQQD EyhhYTJkYzgwNWU1ZmNkYTRkMjIzMzk2MzkzMzFhYzI5Y2U2MTBlMzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvgCmtE8gbNl9Bb+szYB/0Cq3NmI QXn5SobOBiHVzZinf2GpjZlV3gxCXQRYX0aOme3l9Q3k/8barxVh+A44Z6rVU/9G GYLw285DkQS41ixwuANCO5fIIMjpKc4pekhRzcd9/z0I4araVH6GLwbWhBJUCUaP UkuM759QZc40z0S1frSXMswbWJ7Xkcb4Hl1uzbV7H3KefxO8SRieioqD+K5wQbki I1o4l4Fq04Mk6UBifuPto/kTdabbMU6/jPMO1HEwplbI7LQ2Q/EI1cTyiE0OAz3T HzyWW7BFeVwJp2kpEyj34xZcPdGGXAY+ELONuL0CX9acIv9pmbLrNJ0ZMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKotyAXl/NpNIjOWOTMawpzmEOOPMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3MfhZys sgnRLHfzHOWbmMVCk3RfCbZj1S58xl6QF9pI5Kca/AqABF1xHhZgW3NjqNRHRPK8 MAL5p4Bjb0P5GRL4xlGubT66Gv8jl5ut23UxlYpFWHbUFShHQQwBDWH15Eqib+JA vtKYQ/gSJwD3eG3fzhwumCPuw+93i2AdlX+TIALUj0dAb7OxSdo2HnNBPFG/DFTt C8nbCX9DP1qH4vJcKJihxXAsv2jAX7Es/lSzi55g08Eztw7iQp6RBGeScfgZbZde 4yfnajlzsdZWkxd57EarRceHb30UzO2BuyGez0hqpKm7eTPO/PnkIBYXjjD5e45V sgN+9KcrpIjbPA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:37:11 2025 by rpki-client