$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: +by7GKZAlNCAvSGTiZv7dFklgGof2ASw8dIY2r5RlGo= Subject key identifier: 51:4B:19:FD:F1:20:9C:AD:5A:5C:1F:65:88:FE:D1:B1:B4:0C:BD:90 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 0199FC215693CC946467DE041EA38B3A13EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 1405 Signing time: Sun 19 Oct 2025 11:01:07 +0000 Manifest this update: Sun 19 Oct 2025 11:01:07 +0000 Manifest next update: Mon 20 Oct 2025 11:01:07 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: eiHZ63NdruaTzK/BL3kcjgsNh7yyLQNCx8g4ywHW0xk=) 9: e0hrDVtPTcuVIZ0bybivCyarPdY.roa (hash: S6a+ooiK7Lly9jfvdFW0/62kq3Ycr4hiGyo5OfldcA4=) 10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:56:93:cc:94:64:67:de:04:1e:a3:8b:3a:13:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Oct 19 11:01:07 2025 GMT Not After : Oct 20 11:01:07 2025 GMT Subject: CN=514b19fdf1209cad5a5c1f6588fed1b1b40cbd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:22:93:e5:92:4f:de:33:c0:26:08:19:3c: bf:5c:36:22:f8:53:67:46:f0:fc:4f:e8:9f:d7:ac: 4b:13:95:63:f7:e6:e0:94:ea:bb:e0:ab:28:30:02: 4b:5f:bc:87:7d:b5:43:24:7f:81:30:9f:e7:6a:90: 47:21:6b:41:1c:e5:31:55:ae:92:f8:4e:54:77:58: ad:59:d9:03:af:56:b0:b5:22:f5:8c:ab:76:23:fd: 10:2c:1d:de:03:80:84:c4:d9:3f:92:da:69:b0:bd: f4:57:a8:95:c4:44:be:1e:86:63:02:1b:f0:a4:45: d9:c9:df:83:e1:86:61:c5:fa:46:89:d7:fe:a7:6a: a5:4c:62:c6:16:e6:41:94:71:4b:9f:b1:07:03:a9: 70:f4:2d:36:5b:18:71:3e:66:4e:28:ef:fb:d4:97: 11:bf:3d:64:12:3d:b4:48:2f:14:5a:96:bb:8d:44: 98:e6:73:3a:97:70:9e:e8:75:b5:11:09:3d:c4:c2: 23:8b:a9:45:6a:b5:a1:36:b8:9d:3d:9c:0a:4e:29: 42:68:a3:98:da:2b:92:af:8c:5d:94:57:d3:7e:b6: 88:fd:c1:2a:66:da:4c:50:79:61:fe:d9:fe:ec:fa: b2:a8:62:5e:59:2a:c9:1e:51:d3:f1:15:f1:f2:56: cb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4B:19:FD:F1:20:9C:AD:5A:5C:1F:65:88:FE:D1:B1:B4:0C:BD:90 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9b:2b:5a:f3:bb:d3:dd:99:79:60:9e:cc:a7:45:20:eb:84: 29:78:96:f9:24:5b:1e:42:57:75:24:45:fa:23:4d:ed:cc:da: 16:42:92:cf:b1:2a:b5:42:53:b0:06:a2:78:6d:4b:64:ef:4d: d8:c8:ba:bd:4b:80:a7:14:de:ce:a7:f9:c3:fc:5a:d1:85:2d: 76:0f:e7:c0:5a:2c:aa:b0:dc:d5:6b:30:30:03:dd:e0:4d:2e: 53:31:ee:ed:56:48:b1:51:ee:50:67:07:c3:74:48:db:f7:4c: 58:b0:79:78:52:41:67:f0:2b:44:19:92:2c:8f:9b:61:fa:78: 18:82:2f:8a:c2:4e:cd:69:dd:f3:b6:61:4c:69:9e:30:7b:6a: 27:18:d3:f4:68:a0:7f:d4:fc:e9:1d:70:75:ba:eb:88:8e:27: df:08:c6:a4:de:d6:75:16:80:d1:75:f2:9e:ed:c1:2d:84:34: 22:c0:45:a7:1b:42:6b:5a:6a:eb:ea:63:b4:41:1c:ca:10:c8: a8:1a:9d:48:9e:ce:f8:5e:50:6b:76:98:02:91:6d:5e:20:71: 46:a2:0d:77:3e:99:ba:47:6e:74:94:51:06:17:e1:81:ad:93: 28:52:af:40:1d:23:fd:b4:3f:6d:8d:24:08:da:c1:e4:76:fe: 58:85:1c:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IVaTzJRkZ94EHqOLOhPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUxMDE5MTEwMTA3WhcNMjUxMDIwMTEwMTA3WjAzMTEwLwYDVQQD Eyg1MTRiMTlmZGYxMjA5Y2FkNWE1YzFmNjU4OGZlZDFiMWI0MGNiZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhUik+WST94zwCYIGTy/XDYi+FNn RvD8T+if16xLE5Vj9+bglOq74KsoMAJLX7yHfbVDJH+BMJ/napBHIWtBHOUxVa6S +E5Ud1itWdkDr1awtSL1jKt2I/0QLB3eA4CExNk/ktppsL30V6iVxES+HoZjAhvw pEXZyd+D4YZhxfpGidf+p2qlTGLGFuZBlHFLn7EHA6lw9C02WxhxPmZOKO/71JcR vz1kEj20SC8UWpa7jUSY5nM6l3Ce6HW1EQk9xMIji6lFarWhNridPZwKTilCaKOY 2iuSr4xdlFfTfraI/cEqZtpMUHlh/tn+7PqyqGJeWSrJHlHT8RXx8lbLHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFLGf3xIJytWlwfZYj+0bG0DL2QMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5srWvO7 092ZeWCezKdFIOuEKXiW+SRbHkJXdSRF+iNN7czaFkKSz7EqtUJTsAaieG1LZO9N 2Mi6vUuApxTezqf5w/xa0YUtdg/nwFosqrDc1WswMAPd4E0uUzHu7VZIsVHuUGcH w3RI2/dMWLB5eFJBZ/ArRBmSLI+bYfp4GIIvisJOzWnd87ZhTGmeMHtqJxjT9Gig f9T86R1wdbrriI4n3wjGpN7WdRaA0XXynu3BLYQ0IsBFpxtCa1pq6+pjtEEcyhDI qBqdSJ7O+F5Qa3aYApFtXiBxRqINdz6ZukdudJRRBhfhga2TKFKvQB0j/bQ/bY0k CNrB5Hb+WIUcmQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:49:45 2025 by rpki-client