$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: VIgfMQV3FOIIWuwl1ojtZ4JwGk/c8cVVCF5/tyQ9eKk= Subject key identifier: FA:FE:35:37:F9:F1:10:55:64:02:6E:D7:07:A7:A8:C0:76:6C:DD:A9 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 0199FFC86E042FD100F2D28C57B19BB79F70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0A3D Signing time: Mon 20 Oct 2025 04:02:29 +0000 Manifest this update: Mon 20 Oct 2025 04:02:29 +0000 Manifest next update: Tue 21 Oct 2025 04:02:29 +0000 Files and hashes: 1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=) 2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=) 3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=) 4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=) 5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=) 6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=) 7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=) 8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=) 9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=) 10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=) 11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=) 12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: 3mVMnXYaPV7pvxVK2xW/f8spH/SV6HzijRrbOUOjuGE=) 13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=) 14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=) 15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=) 16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=) 17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=) 18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=) 19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=) 20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=) 21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:ff:c8:6e:04:2f:d1:00:f2:d2:8c:57:b1:9b:b7:9f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Oct 20 04:02:29 2025 GMT Not After : Oct 21 04:02:29 2025 GMT Subject: CN=fafe3537f9f1105564026ed707a7a8c0766cdda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:99:29:48:2d:9d:3a:db:29:40:c6:c6:56:e9: 64:e6:69:33:d1:72:78:64:9e:50:af:ca:8a:bf:86: 02:45:fa:a9:21:6b:5a:77:14:73:65:db:d8:d2:ca: 9d:8c:56:03:a4:14:6d:3c:cc:09:c5:f6:c4:04:95: 85:e8:73:01:75:f6:3f:b9:19:15:65:99:76:8f:ef: 57:93:6c:00:00:05:7e:7c:55:0a:55:c9:55:46:8d: 16:ec:c5:c0:59:75:25:7e:c0:e3:6d:3c:e9:ee:a2: 85:42:7d:47:ad:09:bc:c8:17:f0:27:71:0b:e4:f0: 51:26:bb:f2:bb:46:02:0a:fa:e3:f1:90:d1:1c:92: e2:f5:93:7e:30:43:fa:34:8d:7d:9a:88:51:ad:3c: 92:22:c9:ec:72:3f:35:b9:57:8a:90:0d:06:91:f8: 3c:8a:32:78:44:e9:4f:f5:5e:ac:39:9d:39:93:65: 44:96:86:72:7c:09:a9:9c:f9:bb:28:49:23:a0:56: c9:ca:98:67:67:9f:52:b7:70:2d:e3:c8:38:71:c5: 20:19:91:57:4f:89:96:33:ec:59:34:52:1a:c9:64: eb:9a:89:db:90:15:42:2f:02:05:e8:4f:dc:6f:b7: 5d:6f:34:7d:28:b7:5f:ee:9b:b6:b4:d3:69:96:d3: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FE:35:37:F9:F1:10:55:64:02:6E:D7:07:A7:A8:C0:76:6C:DD:A9 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e9:82:3d:b6:1a:6d:f4:34:7a:1b:ab:c7:38:47:95:d8:05: 1d:3b:6a:0a:83:37:b0:07:1b:e3:1c:de:4c:88:5e:5b:cc:91: db:77:36:41:85:2c:06:af:c6:be:44:d9:27:66:b6:68:91:26: ba:d6:f0:4e:e8:7e:4d:3c:6a:0c:ed:39:1d:75:6e:db:b4:13: cd:02:2f:e8:43:a3:38:13:27:f1:06:c6:e6:f5:5e:a4:c0:4c: 1e:c6:a8:d5:c9:bb:ec:16:09:17:d2:16:75:37:13:5f:82:10: 09:88:f5:00:db:f3:84:ef:77:65:7e:37:06:ae:20:2c:e3:44: b8:0e:c2:07:78:18:66:14:32:ca:d6:e7:41:93:11:93:f3:e6: b0:13:96:20:02:a2:4a:33:9d:a9:a8:bb:19:1d:78:15:c8:59: 43:3c:1e:3e:6c:dc:6f:7a:fa:66:ac:5f:f7:48:12:c4:df:c1: 63:3c:9d:35:06:4f:56:b1:79:3b:9e:b3:4e:13:e9:74:15:fb: 0e:b8:36:c8:ac:63:54:8d:35:fc:fb:eb:09:f6:31:bc:ee:89: 8b:68:ea:22:ee:46:c1:5d:68:25:19:8f:55:9d:3a:c1:d0:60: 4d:fc:f7:26:76:80:7f:4b:0f:30:3e:69:fd:e9:25:e2:90:0e: 79:73:7c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn/yG4EL9EA8tKMV7Gbt59wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjUxMDIwMDQwMjI5WhcNMjUxMDIxMDQwMjI5WjAzMTEwLwYDVQQD EyhmYWZlMzUzN2Y5ZjExMDU1NjQwMjZlZDcwN2E3YThjMDc2NmNkZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZkpSC2dOtspQMbGVulk5mkz0XJ4 ZJ5Qr8qKv4YCRfqpIWtadxRzZdvY0sqdjFYDpBRtPMwJxfbEBJWF6HMBdfY/uRkV ZZl2j+9Xk2wAAAV+fFUKVclVRo0W7MXAWXUlfsDjbTzp7qKFQn1HrQm8yBfwJ3EL 5PBRJrvyu0YCCvrj8ZDRHJLi9ZN+MEP6NI19mohRrTySIsnscj81uVeKkA0Gkfg8 ijJ4ROlP9V6sOZ05k2VEloZyfAmpnPm7KEkjoFbJyphnZ59St3At48g4ccUgGZFX T4mWM+xZNFIayWTrmonbkBVCLwIF6E/cb7ddbzR9KLdf7pu2tNNpltNpjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPr+NTf58RBVZAJu1wenqMB2bN2pMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaumCPbYa bfQ0ehurxzhHldgFHTtqCoM3sAcb4xzeTIheW8yR23c2QYUsBq/GvkTZJ2a2aJEm utbwTuh+TTxqDO05HXVu27QTzQIv6EOjOBMn8QbG5vVepMBMHsao1cm77BYJF9IW dTcTX4IQCYj1ANvzhO93ZX43Bq4gLONEuA7CB3gYZhQyytbnQZMRk/PmsBOWIAKi SjOdqai7GR14FchZQzwePmzcb3r6Zqxf90gSxN/BYzydNQZPVrF5O56zThPpdBX7 Drg2yKxjVI01/PvrCfYxvO6Ji2jqIu5GwV1oJRmPVZ06wdBgTfz3JnaAf0sPMD5p /ekl4pAOeXN8wA== -----END CERTIFICATE-----Generated at Mon Oct 20 06:36:28 2025 by rpki-client