$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: XI0eftFMYrkMNrusHjcDNMd06IYlR/aUwKca8E7hYoE= Subject key identifier: E4:28:CF:AD:3E:08:95:31:AC:6A:C9:90:88:7D:15:1D:59:79:11:84 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 0197C45C30FB6A05D29F788BC100BBE02D13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 12DF Signing time: Tue 01 Jul 2025 05:01:05 +0000 Manifest this update: Tue 01 Jul 2025 05:01:05 +0000 Manifest next update: Wed 02 Jul 2025 05:01:05 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: otzl8laeWH86/xCfT64BgC0iObH0VScHlg2tvkHxuD0=) 9: e0hrDVtPTcuVIZ0bybivCyarPdY.roa (hash: S6a+ooiK7Lly9jfvdFW0/62kq3Ycr4hiGyo5OfldcA4=) 10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c4:5c:30:fb:6a:05:d2:9f:78:8b:c1:00:bb:e0:2d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jul 1 05:01:05 2025 GMT Not After : Jul 2 05:01:05 2025 GMT Subject: CN=e428cfad3e089531ac6ac990887d151d59791184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:fb:1d:37:17:5e:7a:2c:d3:e7:8a:4c:76: d1:91:72:6e:c2:9b:47:6b:7f:5d:83:57:40:cb:72: d6:8e:79:64:17:f5:5f:bf:86:a5:3f:c9:ed:10:ad: e4:d7:f3:2a:2e:cf:4a:9a:e9:5d:d6:f8:a0:3b:ea: 58:ef:98:b7:66:22:9b:65:92:3e:51:15:c6:49:93: 42:bf:13:dd:9b:6d:2a:6e:a1:77:52:cb:02:bd:a6: e6:89:c0:8a:c4:7a:eb:31:36:ee:dd:d0:46:93:2e: 3e:2c:05:b2:d5:40:0a:8e:b5:ab:35:e9:76:f8:61: 5b:d8:d0:f7:03:9a:19:a9:15:a1:6c:7f:dc:e6:0e: 58:39:78:a3:46:7b:84:73:0b:a9:c6:49:49:e5:ec: ff:e2:9c:7a:6a:8c:d0:ab:80:5e:06:d9:05:a3:fa: 1d:4f:74:33:76:c0:52:ef:41:54:6c:2b:05:cc:0b: a3:8d:25:70:72:a3:49:e7:1d:2e:84:d2:c8:5a:1d: 71:7b:ac:d9:4a:d3:d2:33:e3:94:b7:be:c0:4e:9a: de:11:a1:e9:73:e5:23:b6:42:bb:7d:41:b9:cf:84: 27:68:73:c2:e8:9f:68:35:94:0d:25:bd:a6:27:e6: 47:60:d8:bc:fd:cd:79:d6:d5:5d:8a:9a:52:6b:c5: 10:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:28:CF:AD:3E:08:95:31:AC:6A:C9:90:88:7D:15:1D:59:79:11:84 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fe:4a:e3:1d:ba:94:dd:b9:d1:d4:a2:73:ed:4b:d4:57:6c: 23:50:22:d1:af:56:f1:06:b5:ed:a5:ca:8d:f5:1e:7c:28:6f: 79:6d:67:06:c2:2b:e3:b6:38:b2:51:7b:cf:2e:18:ac:8b:a7: 59:09:02:97:f4:ee:fb:28:be:2c:a9:e7:ad:f6:3a:49:80:9d: 14:ca:1f:30:1c:fd:dc:1a:33:0b:3d:f1:4b:be:33:0f:77:f8: 8f:bc:65:83:90:73:e3:29:d5:c1:74:a7:fc:cd:41:2e:4f:c0: 77:8b:83:2f:a7:dd:3c:80:97:4e:4e:0b:0a:ad:97:61:d9:fb: 0a:d0:ac:54:5b:9c:1b:08:01:f8:da:c2:ef:1b:3e:69:2c:2d: a3:94:61:64:42:e0:bc:61:69:c8:f7:d5:6f:6a:fd:c8:da:cc: b7:55:20:6d:ed:aa:f9:6e:cd:53:ec:79:0a:dc:a8:89:b2:9d: 02:d5:1d:30:96:63:48:f9:1a:6d:a7:89:96:cc:69:a6:4c:48: ae:0a:47:94:87:95:a5:2b:09:ce:b6:da:6d:d0:da:de:6c:67: 7a:4f:a3:74:5b:bb:09:3a:af:d9:8b:e1:0c:16:d9:88:c0:9a: 90:f6:08:a7:69:92:8e:45:4e:42:7f:97:cf:42:0d:b9:70:2d: 86:88:c4:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfEXDD7agXSn3iLwQC74C0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUwNzAxMDUwMTA1WhcNMjUwNzAyMDUwMTA1WjAzMTEwLwYDVQQD EyhlNDI4Y2ZhZDNlMDg5NTMxYWM2YWM5OTA4ODdkMTUxZDU5NzkxMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM37HTcXXnos0+eKTHbRkXJuwptH a39dg1dAy3LWjnlkF/Vfv4alP8ntEK3k1/MqLs9Kmuld1vigO+pY75i3ZiKbZZI+ URXGSZNCvxPdm20qbqF3UssCvabmicCKxHrrMTbu3dBGky4+LAWy1UAKjrWrNel2 +GFb2ND3A5oZqRWhbH/c5g5YOXijRnuEcwupxklJ5ez/4px6aozQq4BeBtkFo/od T3QzdsBS70FUbCsFzAujjSVwcqNJ5x0uhNLIWh1xe6zZStPSM+OUt77ATpreEaHp c+UjtkK7fUG5z4QnaHPC6J9oNZQNJb2mJ+ZHYNi8/c151tVdippSa8UQ6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQoz60+CJUxrGrJkIh9FR1ZeRGEMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf5K4x26 lN250dSic+1L1FdsI1Ai0a9W8Qa17aXKjfUefChveW1nBsIr47Y4slF7zy4YrIun WQkCl/Tu+yi+LKnnrfY6SYCdFMofMBz93BozCz3xS74zD3f4j7xlg5Bz4ynVwXSn /M1BLk/Ad4uDL6fdPICXTk4LCq2XYdn7CtCsVFucGwgB+NrC7xs+aSwto5RhZELg vGFpyPfVb2r9yNrMt1Ugbe2q+W7NU+x5CtyoibKdAtUdMJZjSPkabaeJlsxppkxI rgpHlIeVpSsJzrbabdDa3mxnek+jdFu7CTqv2YvhDBbZiMCakPYIp2mSjkVOQn+X z0INuXAthojEyg== -----END CERTIFICATE-----Generated at Tue Jul 1 12:40:12 2025 by rpki-client