$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: qa5sk7wgmiZb6OXJK/nmsthitdBFhLYO280Rd3GSfsA= Subject key identifier: E7:76:2F:A2:6A:7F:D9:E9:0A:E1:9B:99:93:A0:48:85:2E:8F:A5:CB Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 0197B6A160448B189D84132F84D7675C70F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 15E7 Signing time: Sat 28 Jun 2025 13:01:58 +0000 Manifest this update: Sat 28 Jun 2025 13:01:58 +0000 Manifest next update: Sun 29 Jun 2025 13:01:58 +0000 Files and hashes: 1: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 2: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 3: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: S8aq7uw9NHnBuc65O5cRkqPwlRJUOp3jmD9S91AYStc=) 4: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 5: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 6: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 7: Ry99V7wdnB63QA0YiggryZhHU-U.roa (hash: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=) 8: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 9: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 10: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 11: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 12: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 13: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 14: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 15: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:60:44:8b:18:9d:84:13:2f:84:d7:67:5c:70:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jun 28 13:01:58 2025 GMT Not After : Jun 29 13:01:58 2025 GMT Subject: CN=e7762fa26a7fd9e90ae19b9993a048852e8fa5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:9a:16:57:8c:9c:ad:51:07:6e:c9:6f:42: f2:19:b7:3f:ff:45:89:f2:b2:e5:f5:d0:90:25:eb: a5:0d:b0:88:30:ee:ee:60:c0:19:6c:83:3f:4d:c8: f1:4e:c3:df:f6:5e:56:c6:4f:df:c5:20:d3:22:74: 19:f9:1f:4c:35:4f:ce:02:cf:7c:45:a2:71:87:85: e0:af:d4:32:71:36:dc:7a:e3:be:69:c0:c7:96:99: f9:48:0c:49:63:39:75:33:e0:69:aa:ac:84:a3:9c: 4c:7d:d0:68:4d:d3:bd:cb:63:79:b8:4d:49:59:02: e1:cd:be:84:7a:42:82:36:10:9b:4a:81:a8:ec:26: 11:8e:61:6f:52:47:ba:d9:20:8b:b4:72:cb:63:c5: f7:32:75:51:32:67:f7:e0:7c:e2:80:7d:9b:ab:98: 3f:68:ca:29:69:f6:3f:ad:2a:87:dd:43:20:04:c1: c0:3a:55:27:86:9e:14:8a:81:6b:2d:85:f0:98:e4: ba:13:3b:e8:39:b5:12:0a:3a:8c:63:67:e8:e3:57: 84:02:b2:68:bc:c6:80:a2:0e:f0:38:9f:f9:20:0d: 6f:37:01:d8:09:e6:7f:ca:5c:24:50:37:ec:72:49: 9c:1f:5c:2b:45:bf:c3:9a:4d:3f:a1:99:25:42:08: 59:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:76:2F:A2:6A:7F:D9:E9:0A:E1:9B:99:93:A0:48:85:2E:8F:A5:CB X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a5:74:02:50:dd:a0:68:4c:23:a4:d7:0e:ba:31:82:19:c9: d7:b8:d1:cc:70:40:87:93:47:6c:bc:82:81:20:16:4e:29:e8: da:38:83:0c:bd:e7:6f:b1:c5:8e:d0:c0:4f:c3:7a:cb:44:60: 76:8d:64:01:d0:1f:db:24:78:67:44:7a:5c:34:3e:cd:1d:38: 68:53:56:71:b6:16:50:f2:32:30:92:98:a0:0e:ac:68:f4:eb: ac:1d:0a:ed:71:9e:2f:e7:b1:3c:3a:a0:74:5b:bb:dd:32:55: 2b:7d:2a:b6:0a:da:fa:d4:5b:5b:12:72:78:71:a9:5e:dc:f0: af:95:d9:f1:cd:10:90:a1:cf:29:3f:6a:ab:38:5f:d0:4a:4d: 70:5d:c2:e2:69:68:0c:e5:c3:17:1f:f7:19:b2:d5:92:65:85: 30:1c:1e:fe:ff:8f:59:42:38:f3:d2:8d:5f:8d:9a:6c:f6:c5: 63:6d:b2:53:7d:cb:10:97:f1:b9:56:2a:4d:d9:3b:c9:b5:d1: 5f:5b:26:4c:be:a4:90:58:69:84:45:55:8b:ed:3c:d3:92:9b: ab:70:e3:33:f0:8c:bb:77:4c:27:58:65:f7:93:3c:3f:e0:dc: 24:21:ad:0f:04:d6:ce:34:f2:09:b5:1d:db:49:cb:12:83:a1: 4a:f1:17:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oWBEixidhBMvhNdnXHD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUwNjI4MTMwMTU4WhcNMjUwNjI5MTMwMTU4WjAzMTEwLwYDVQQD EyhlNzc2MmZhMjZhN2ZkOWU5MGFlMTliOTk5M2EwNDg4NTJlOGZhNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphGaFleMnK1RB27Jb0LyGbc//0WJ 8rLl9dCQJeulDbCIMO7uYMAZbIM/TcjxTsPf9l5Wxk/fxSDTInQZ+R9MNU/OAs98 RaJxh4Xgr9QycTbceuO+acDHlpn5SAxJYzl1M+BpqqyEo5xMfdBoTdO9y2N5uE1J WQLhzb6EekKCNhCbSoGo7CYRjmFvUke62SCLtHLLY8X3MnVRMmf34HzigH2bq5g/ aMopafY/rSqH3UMgBMHAOlUnhp4UioFrLYXwmOS6EzvoObUSCjqMY2fo41eEArJo vMaAog7wOJ/5IA1vNwHYCeZ/ylwkUDfsckmcH1wrRb/Dmk0/oZklQghZRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd2L6Jqf9npCuGbmZOgSIUuj6XLMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqV0AlDd oGhMI6TXDroxghnJ17jRzHBAh5NHbLyCgSAWTino2jiDDL3nb7HFjtDAT8N6y0Rg do1kAdAf2yR4Z0R6XDQ+zR04aFNWcbYWUPIyMJKYoA6saPTrrB0K7XGeL+exPDqg dFu73TJVK30qtgra+tRbWxJyeHGpXtzwr5XZ8c0QkKHPKT9qqzhf0EpNcF3C4mlo DOXDFx/3GbLVkmWFMBwe/v+PWUI489KNX42abPbFY22yU33LEJfxuVYqTdk7ybXR X1smTL6kkFhphEVVi+0805Kbq3DjM/CMu3dMJ1hl95M8P+DcJCGtDwTWzjTyCbUd 20nLEoOhSvEX6g== -----END CERTIFICATE-----Generated at Sat Jun 28 20:16:20 2025 by rpki-client