$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: ZpTsyt+N8vm6CzBokOnvZ3r85DAl5h1JpI8I96oqwh4= Subject key identifier: 42:59:AF:0F:16:AE:2D:DC:20:A8:F9:D4:F0:64:EE:50:C1:CE:3B:AC Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 0198D473D247DED468522EC507C4EE00552A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 09A2 Signing time: Sat 23 Aug 2025 01:03:36 +0000 Manifest this update: Sat 23 Aug 2025 01:03:36 +0000 Manifest next update: Sun 24 Aug 2025 01:03:36 +0000 Files and hashes: 1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=) 2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=) 3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=) 4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=) 5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=) 6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=) 7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=) 8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=) 9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=) 10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=) 11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=) 12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: 6M6xpA5AfOKkb5OjMS8+fI8YFEm8vogcXyOWMVn+nKo=) 13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=) 14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=) 15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=) 16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=) 17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=) 18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=) 19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=) 20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=) 21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 01:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:d2:47:de:d4:68:52:2e:c5:07:c4:ee:00:55:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Aug 23 01:03:36 2025 GMT Not After : Aug 24 01:03:36 2025 GMT Subject: CN=4259af0f16ae2ddc20a8f9d4f064ee50c1ce3bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:44:26:69:97:a4:49:73:39:19:f1:7c:3b:61: f9:c1:d7:62:45:17:90:be:37:08:fa:03:3e:da:79: f7:c5:30:e8:ff:d1:b3:70:95:79:f7:96:e8:e6:5c: b7:bc:e4:72:31:ba:f6:49:59:61:b0:b2:c0:06:8e: 02:c0:2c:64:13:72:e1:88:21:3b:2f:67:90:38:b1: 10:10:d9:ed:a2:75:8d:dd:f3:2f:89:33:2f:f8:67: c9:bb:f1:40:8b:53:1d:57:40:dc:4e:f9:2a:40:75: 5a:05:22:51:6e:bf:14:2b:21:cc:b0:38:51:5c:e6: da:f3:58:86:1b:b6:8a:47:ad:ec:4b:25:dd:55:f6: 04:1a:68:99:e6:a6:19:6a:05:88:ac:5f:da:28:e4: 3b:61:95:e5:78:f1:8f:23:38:c6:7c:31:3d:37:00: 6a:78:e3:7a:0e:06:bc:cb:fe:5a:93:ca:03:19:5d: 77:2d:63:09:38:f4:a1:aa:8f:54:b5:97:c2:ac:7e: 49:23:f8:24:14:60:59:cf:29:d7:c0:6a:a2:c2:3e: 83:a1:3a:84:0a:5c:cd:49:d7:63:4f:06:a2:0b:a9: 95:4d:15:3e:ee:da:7d:28:15:2d:1b:2a:fb:aa:73: 69:4b:18:e9:2b:86:88:0b:7b:02:9c:3c:eb:1b:e1: b2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:59:AF:0F:16:AE:2D:DC:20:A8:F9:D4:F0:64:EE:50:C1:CE:3B:AC X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:13:5c:cd:cc:c1:94:62:6a:8b:b9:0b:54:69:c1:e3:36:83: ce:b8:1c:bb:fd:f2:78:15:ae:b1:df:c3:a6:ea:72:f7:71:97: 61:39:18:fc:a5:04:92:91:b5:74:f6:22:d7:09:b3:a0:88:39: 02:24:bc:74:b4:52:00:7d:23:c1:f3:47:88:bf:9c:76:c8:6e: 87:78:d5:11:87:a4:57:cd:5a:0e:ad:bd:bb:3c:cd:2a:03:13: 46:42:07:75:26:c4:c7:d7:74:fe:a8:e6:6d:15:2f:40:f8:f4: 49:bc:93:ef:37:c4:5b:4f:17:e6:cf:0f:97:ff:24:4b:66:d1: c1:92:be:30:65:29:bd:07:d3:cc:10:f6:a8:96:ff:49:4b:b3: dd:43:75:23:81:44:f8:97:b2:c9:84:45:c3:ee:22:15:1f:fa: 62:4d:b1:52:e9:12:62:2c:e0:04:0f:ea:0c:4c:d7:74:ec:de: de:0c:20:7e:ab:5c:06:6f:8c:74:3c:4b:24:7e:16:42:09:f7: 36:db:bc:a3:c6:8c:52:aa:90:ec:44:04:c7:cd:fa:74:89:9f: d5:e1:c3:8e:c8:1e:96:2f:78:bf:66:1b:3d:27:91:92:39:51: b7:70:f3:29:29:41:6d:73:89:56:94:99:5c:be:62:1a:ee:9a: 1d:29:d7:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUc9JH3tRoUi7FB8TuAFUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjUwODIzMDEwMzM2WhcNMjUwODI0MDEwMzM2WjAzMTEwLwYDVQQD Eyg0MjU5YWYwZjE2YWUyZGRjMjBhOGY5ZDRmMDY0ZWU1MGMxY2UzYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10QmaZekSXM5GfF8O2H5wddiRReQ vjcI+gM+2nn3xTDo/9GzcJV595bo5ly3vORyMbr2SVlhsLLABo4CwCxkE3LhiCE7 L2eQOLEQENntonWN3fMviTMv+GfJu/FAi1MdV0DcTvkqQHVaBSJRbr8UKyHMsDhR XOba81iGG7aKR63sSyXdVfYEGmiZ5qYZagWIrF/aKOQ7YZXlePGPIzjGfDE9NwBq eON6Dga8y/5ak8oDGV13LWMJOPShqo9UtZfCrH5JI/gkFGBZzynXwGqiwj6DoTqE ClzNSddjTwaiC6mVTRU+7tp9KBUtGyr7qnNpSxjpK4aIC3sCnDzrG+GyvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJZrw8Wri3cIKj51PBk7lDBzjusMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBNczczB lGJqi7kLVGnB4zaDzrgcu/3yeBWusd/Dpupy93GXYTkY/KUEkpG1dPYi1wmzoIg5 AiS8dLRSAH0jwfNHiL+cdshuh3jVEYekV81aDq29uzzNKgMTRkIHdSbEx9d0/qjm bRUvQPj0SbyT7zfEW08X5s8Pl/8kS2bRwZK+MGUpvQfTzBD2qJb/SUuz3UN1I4FE +JeyyYRFw+4iFR/6Yk2xUukSYizgBA/qDEzXdOze3gwgfqtcBm+MdDxLJH4WQgn3 Ntu8o8aMUqqQ7EQEx836dImf1eHDjsgeli94v2YbPSeRkjlRt3DzKSlBbXOJVpSZ XL5iGu6aHSnX7w== -----END CERTIFICATE-----Generated at Sat Aug 23 11:31:53 2025 by rpki-client