$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: iU/V8afBu9wAWMlZHkAlJXsveYimJL33ek3ormg4TLs= Subject key identifier: 6D:55:A9:F0:F8:7E:78:F0:BF:A6:77:29:8F:54:CA:9C:DD:5A:F8:20 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 0199FC8FA571F97D122A2F960C5F23993536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1444 Signing time: Sun 19 Oct 2025 13:01:36 +0000 Manifest this update: Sun 19 Oct 2025 13:01:36 +0000 Manifest next update: Mon 20 Oct 2025 13:01:36 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: 7UUAA6-rfwajvaAr2mkA9OmXfI4.roa (hash: CBN8ziM89MxVzMewBkXc6YlRG7fSrYHSwUHDuf97QWE=) 5: 9xV6VM7xSpJvhZz3wJWNWBeL10k.roa (hash: 6ww/vl8MNj9BtICfJmSYBaO923KLClJNIhoHyGGOV2w=) 6: BHwETxfxAG-FlW-2gR2swtW8f54.roa (hash: OSmpGtbSXpdE0u69iRKj0bOd9vpUc8AgFIuei1hFfpM=) 7: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: yqSj9bhI/Cpo6aN6WbCwbOeCIPMj+NZ8pMAmn7u69Ns=) 8: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 9: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 10: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 11: I1g6JGBc_MuJczCMQ8_G_2Vo12E.roa (hash: yhGATvC9gpwxKIKN67R79qmS2M3ypkmjHOCyPAuC254=) 12: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 13: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 14: cfz44yOSQ_0AbF1P2cnaJJgavzc.roa (hash: sb2SGQACNoFJRrfeB1oCMEyMZn4+rl9PS1uiW9uDl/M=) 15: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 16: pyfX2Wde-4YhzoDQWRc-_kW4ahs.roa (hash: DMnr5t8FYa3ZmawzVDuxQN95Av7e1Q0YztBCmOoG1UM=) 17: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 18: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 19: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:a5:71:f9:7d:12:2a:2f:96:0c:5f:23:99:35:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Oct 19 13:01:36 2025 GMT Not After : Oct 20 13:01:36 2025 GMT Subject: CN=6d55a9f0f87e78f0bfa677298f54ca9cdd5af820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:04:16:bd:4c:8a:33:67:60:8c:26:4c:3e: 12:15:36:5d:93:b2:f4:37:71:4c:80:b9:75:e1:1b: 1a:e1:46:a9:80:c9:8f:83:c0:27:b5:24:cc:00:ed: 40:6e:3a:8b:b4:00:ce:14:5d:4c:68:a5:02:95:7b: 43:8e:5a:01:46:d2:db:ab:85:83:d3:c4:a0:cb:bb: e7:6d:35:a5:6b:e5:2f:1b:53:9c:90:61:45:20:3f: 07:9e:6c:29:74:6c:7b:ee:66:8f:e8:21:5b:ee:04: 4e:85:89:55:a7:36:87:71:45:f2:fd:77:bd:ce:3e: c8:35:fc:e5:9f:d0:c0:db:21:8f:c8:06:92:66:34: 7a:3e:d2:f5:21:ce:b2:61:c0:1c:fe:32:f0:52:c9: f1:f1:c0:fa:b8:37:f4:30:8e:36:21:c8:28:71:67: f0:60:fd:61:6d:cd:d5:b4:c2:57:fd:d9:15:bf:41: 8d:ec:15:77:96:6b:23:79:e6:8d:a9:7a:d7:b2:99: a1:e6:01:ef:fb:60:36:8d:90:75:8c:d4:b4:da:1d: 75:7f:e8:74:f7:1b:5b:53:b4:f7:6b:ce:f5:13:2d: 9c:6a:33:3c:10:89:b2:d8:f6:1e:1f:c7:73:9a:7d: 0b:5c:4f:50:6f:95:5f:8d:5b:8e:e4:db:64:ce:e0: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:55:A9:F0:F8:7E:78:F0:BF:A6:77:29:8F:54:CA:9C:DD:5A:F8:20 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:3d:27:38:c6:26:88:c9:8d:80:0d:4f:5b:03:a8:20:4f:7a: 5d:8c:db:7b:af:ef:41:72:b5:d1:4c:03:c8:7d:44:30:07:7c: 5c:56:de:fa:c1:37:a2:80:d2:0d:c3:18:31:07:0f:91:3e:17: 38:a6:52:4c:bd:5f:3a:26:fa:82:04:40:6b:9b:2d:7f:a3:be: 38:08:a5:a1:7d:a3:87:29:4d:56:ca:24:a5:5f:a1:45:db:71: 76:a6:f9:7d:45:7e:8e:74:a1:2d:2e:f8:6e:22:10:4b:71:00: d4:13:b2:24:88:3b:97:f1:1a:05:ce:ff:fe:1e:b3:95:b3:95: c5:0a:d1:75:b9:be:1f:55:0b:9e:e2:79:c3:d1:c9:be:d9:94: de:a9:f0:48:c6:d5:c3:ac:74:39:6c:67:d2:28:55:5d:0f:16: 52:7f:d7:11:b7:2f:3b:bd:a7:1b:7b:52:3c:2d:dd:ee:69:cb: 76:86:e5:56:c0:05:c3:ac:49:ad:f0:e0:c2:81:4f:77:6f:fe: 70:fa:66:54:eb:28:84:72:36:7b:c8:b4:74:b6:b5:66:07:9d: 7a:6f:1d:18:72:3c:2a:2c:0f:67:fa:8e:70:86:13:84:81:ac: 33:2b:eb:19:f3:27:57:b6:15:65:b5:07:e6:2b:c6:c2:dc:6f: ce:9c:c7:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j6Vx+X0SKi+WDF8jmTU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUxMDE5MTMwMTM2WhcNMjUxMDIwMTMwMTM2WjAzMTEwLwYDVQQD Eyg2ZDU1YTlmMGY4N2U3OGYwYmZhNjc3Mjk4ZjU0Y2E5Y2RkNWFmODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi0EFr1MijNnYIwmTD4SFTZdk7L0 N3FMgLl14Rsa4UapgMmPg8AntSTMAO1AbjqLtADOFF1MaKUClXtDjloBRtLbq4WD 08Sgy7vnbTWla+UvG1OckGFFID8HnmwpdGx77maP6CFb7gROhYlVpzaHcUXy/Xe9 zj7INfzln9DA2yGPyAaSZjR6PtL1Ic6yYcAc/jLwUsnx8cD6uDf0MI42IcgocWfw YP1hbc3VtMJX/dkVv0GN7BV3lmsjeeaNqXrXspmh5gHv+2A2jZB1jNS02h11f+h0 9xtbU7T3a871Ey2cajM8EImy2PYeH8dzmn0LXE9Qb5VfjVuO5NtkzuAe3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1VqfD4fnjwv6Z3KY9UypzdWvggMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMT0nOMYm iMmNgA1PWwOoIE96XYzbe6/vQXK10UwDyH1EMAd8XFbe+sE3ooDSDcMYMQcPkT4X OKZSTL1fOib6ggRAa5stf6O+OAiloX2jhylNVsokpV+hRdtxdqb5fUV+jnShLS74 biIQS3EA1BOyJIg7l/EaBc7//h6zlbOVxQrRdbm+H1ULnuJ5w9HJvtmU3qnwSMbV w6x0OWxn0ihVXQ8WUn/XEbcvO72nG3tSPC3d7mnLdoblVsAFw6xJrfDgwoFPd2/+ cPpmVOsohHI2e8i0dLa1Zgedem8dGHI8KiwPZ/qOcIYThIGsMyvrGfMnV7YVZbUH 5ivGwtxvzpzHkg== -----END CERTIFICATE-----Generated at Sun Oct 19 15:06:34 2025 by rpki-client