$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: YvPkjQqazlZ7eTuCfI8lmzZ3gEdUIrJyISU68dWvSkk= Subject key identifier: F9:DC:F4:17:85:13:E5:33:AE:E7:D2:1C:65:E0:83:03:FE:1A:5F:61 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 0198D4A83A3B2EAE3213486FF42023BF6F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 136C Signing time: Sat 23 Aug 2025 02:00:51 +0000 Manifest this update: Sat 23 Aug 2025 02:00:51 +0000 Manifest next update: Sun 24 Aug 2025 02:00:51 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: 0VBg4z/eOIo+tBuIS0cnkzCskfNZPvFAiQDn6fNfIvQ=) 9: e0hrDVtPTcuVIZ0bybivCyarPdY.roa (hash: S6a+ooiK7Lly9jfvdFW0/62kq3Ycr4hiGyo5OfldcA4=) 10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a8:3a:3b:2e:ae:32:13:48:6f:f4:20:23:bf:6f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Aug 23 02:00:51 2025 GMT Not After : Aug 24 02:00:51 2025 GMT Subject: CN=f9dcf4178513e533aee7d21c65e08303fe1a5f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:37:c4:15:11:07:28:0f:1a:d7:fd:e8:23: 5e:70:f1:22:50:79:75:d9:1d:00:88:24:23:4b:6f: 22:1e:0d:16:20:a7:bd:16:5f:8a:23:60:70:15:fb: c3:17:ff:c4:ed:af:56:0e:c2:fd:90:05:e1:4b:ea: 7f:13:64:1e:ea:dd:8d:82:70:c9:b3:80:df:0c:da: 81:22:15:59:99:c3:cb:06:92:57:ba:49:e2:1e:c9: da:56:b2:a5:3b:ea:50:b0:2a:d0:be:78:49:f4:6e: ab:70:b2:72:f2:91:be:72:d4:ec:f8:93:63:1d:f1: 85:b0:d5:27:45:a3:d6:8a:ff:d8:e8:39:61:23:ee: c3:98:30:cb:fb:f3:44:11:14:38:0f:42:c4:9d:26: f1:12:c2:93:df:9e:ab:94:f4:1c:4e:37:36:76:50: 92:35:b7:24:a8:46:7e:ac:1a:1d:02:7c:28:bc:0e: 5b:64:5f:9b:7a:19:76:be:c0:89:9c:a1:22:26:14: ec:a8:0e:68:4f:5b:4d:a2:a4:02:4e:39:91:1f:65: 38:81:19:7e:fe:57:ac:30:57:d7:c4:2e:8c:58:9f: f8:59:93:e0:dd:59:e9:cb:f9:ef:54:4c:e7:f2:38: fe:cf:21:96:b9:21:a5:0f:68:3e:55:08:0e:1f:76: 33:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DC:F4:17:85:13:E5:33:AE:E7:D2:1C:65:E0:83:03:FE:1A:5F:61 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:29:7f:d1:10:39:30:c4:17:77:99:86:d6:14:38:d2:8e:7e: 4e:27:e0:d8:c6:fd:cc:74:e4:11:6e:a1:44:06:7e:06:46:c8: c4:45:ee:65:47:c5:85:f2:71:a2:88:ba:f6:f2:de:89:63:85: 85:e0:95:69:99:3f:13:2e:6f:eb:61:3a:4d:62:03:d4:b5:81: b0:42:b1:c0:28:d2:3c:15:1e:b6:3e:9c:18:a5:68:ea:ef:4a: 60:60:e3:42:e3:3d:98:ab:99:d5:0f:0e:2e:0c:87:6e:04:69: 76:40:63:f9:7f:1a:fa:0b:93:43:3f:7a:de:e2:cd:e2:63:03: 01:33:b4:67:2b:26:51:61:60:7c:59:90:bf:38:3a:75:89:b9: 70:ab:be:44:60:a2:35:d1:92:ac:e2:ee:1a:f8:e7:c2:ff:de: 62:66:7e:7f:6b:c6:8f:14:44:e6:92:e1:40:98:db:22:67:58: 22:57:78:16:cb:f3:91:06:6a:74:f2:5c:54:7f:6d:50:2a:d5: a2:6a:8b:2d:f4:ab:45:9e:ae:8c:7c:f5:74:82:88:2e:fc:9a: ee:60:cb:0a:0b:8f:d6:7d:9c:a9:b5:cf:1f:da:d7:cc:91:0d: 8f:8d:60:33:3e:28:b5:da:6f:d0:d8:9e:f2:d2:9b:c1:c2:3d: 4c:33:44:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUqDo7Lq4yE0hv9CAjv2+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUwODIzMDIwMDUxWhcNMjUwODI0MDIwMDUxWjAzMTEwLwYDVQQD EyhmOWRjZjQxNzg1MTNlNTMzYWVlN2QyMWM2NWUwODMwM2ZlMWE1ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApic3xBURBygPGtf96CNecPEiUHl1 2R0AiCQjS28iHg0WIKe9Fl+KI2BwFfvDF//E7a9WDsL9kAXhS+p/E2Qe6t2NgnDJ s4DfDNqBIhVZmcPLBpJXukniHsnaVrKlO+pQsCrQvnhJ9G6rcLJy8pG+ctTs+JNj HfGFsNUnRaPWiv/Y6DlhI+7DmDDL+/NEERQ4D0LEnSbxEsKT356rlPQcTjc2dlCS NbckqEZ+rBodAnwovA5bZF+behl2vsCJnKEiJhTsqA5oT1tNoqQCTjmRH2U4gRl+ /lesMFfXxC6MWJ/4WZPg3Vnpy/nvVEzn8jj+zyGWuSGlD2g+VQgOH3YzswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnc9BeFE+UzrufSHGXggwP+Gl9hMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyl/0RA5 MMQXd5mG1hQ40o5+Tifg2Mb9zHTkEW6hRAZ+BkbIxEXuZUfFhfJxooi69vLeiWOF heCVaZk/Ey5v62E6TWID1LWBsEKxwCjSPBUetj6cGKVo6u9KYGDjQuM9mKuZ1Q8O LgyHbgRpdkBj+X8a+guTQz963uLN4mMDATO0ZysmUWFgfFmQvzg6dYm5cKu+RGCi NdGSrOLuGvjnwv/eYmZ+f2vGjxRE5pLhQJjbImdYIld4FsvzkQZqdPJcVH9tUCrV omqLLfSrRZ6ujHz1dIKILvya7mDLCguP1n2cqbXPH9rXzJENj41gMz4otdpv0Nie 8tKbwcI9TDNE9w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:30:17 2025 by rpki-client