$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: W+ZMdFIcfm1eH9pj2YF0eASf2fSIGc7qLqaEshk5Wx4= Subject key identifier: 8C:0A:3F:E1:04:31:7F:59:9C:CC:3D:AD:69:BF:A2:41:D5:19:7A:94 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 0198D5BB9F93E15DEA04BC34B23A0FB25AA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 13A9 Signing time: Sat 23 Aug 2025 07:01:39 +0000 Manifest this update: Sat 23 Aug 2025 07:01:39 +0000 Manifest next update: Sun 24 Aug 2025 07:01:39 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: 7UUAA6-rfwajvaAr2mkA9OmXfI4.roa (hash: CBN8ziM89MxVzMewBkXc6YlRG7fSrYHSwUHDuf97QWE=) 5: 9xV6VM7xSpJvhZz3wJWNWBeL10k.roa (hash: 6ww/vl8MNj9BtICfJmSYBaO923KLClJNIhoHyGGOV2w=) 6: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: mDiXcKtQM3U4UjWd/sjfslRPDzUeb0fFi4Hw8CIU5So=) 7: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 8: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 9: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 10: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=) 11: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=) 12: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 13: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 14: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 15: pyfX2Wde-4YhzoDQWRc-_kW4ahs.roa (hash: DMnr5t8FYa3ZmawzVDuxQN95Av7e1Q0YztBCmOoG1UM=) 16: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 17: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=) 18: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 19: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 20: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:9f:93:e1:5d:ea:04:bc:34:b2:3a:0f:b2:5a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Aug 23 07:01:39 2025 GMT Not After : Aug 24 07:01:39 2025 GMT Subject: CN=8c0a3fe104317f599ccc3dad69bfa241d5197a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:22:47:7d:f7:41:55:20:fc:33:dc:75:cd: 94:ea:6b:8d:65:35:a1:cf:a1:90:57:2b:31:8b:f4: c4:9a:24:bc:49:cd:94:99:d7:83:55:4a:dd:e6:c5: 1c:5a:c2:c2:7d:e9:29:8f:b7:e6:c4:9f:f3:26:01: 08:0b:df:b1:80:22:4c:3c:09:71:57:c1:ef:40:85: 48:d2:20:af:9f:68:97:5b:32:85:f6:61:e3:d7:d3: da:01:dc:bf:a8:1d:e9:8c:1d:1a:31:f1:70:23:19: 69:40:43:c2:c1:8a:c1:28:89:ad:2a:85:d2:5c:86: bc:50:6b:99:ea:36:b2:b3:12:91:ea:69:a8:8a:31: 14:54:c1:8a:51:30:63:3c:86:59:67:b9:6e:ec:73: 3a:40:57:77:dc:96:1e:e9:75:21:9b:01:39:2f:6f: ca:ef:47:be:b6:65:01:b5:e1:85:2d:81:3a:05:8c: 8b:f2:00:c0:ae:69:a3:4d:3c:e4:62:95:91:78:a4: 16:26:57:7b:54:bf:81:97:1d:55:e5:50:68:24:53: ee:57:52:4a:64:12:88:5d:45:68:a6:43:1d:49:1b: 96:75:59:c9:48:65:45:e9:3b:e3:c3:16:ae:1f:cc: 2e:c6:e1:6c:35:c4:f3:76:60:38:0d:fd:b1:73:05: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:3F:E1:04:31:7F:59:9C:CC:3D:AD:69:BF:A2:41:D5:19:7A:94 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:be:a4:98:40:61:86:aa:fa:22:6a:81:21:e5:bf:85:30:be: a5:30:85:46:7f:81:a2:a5:aa:fa:b8:e5:1c:19:f7:7c:53:4e: a9:2a:83:7c:57:b4:d1:b0:fe:a6:94:99:b6:3e:99:c8:42:45: b7:51:28:75:f5:a1:e8:05:d1:3d:47:b8:d0:b2:92:c6:c6:dd: 15:f1:02:67:06:b7:9a:49:9e:2c:d2:c3:09:e3:6a:25:b1:e8: de:18:14:4c:cc:12:61:c8:be:48:81:75:d2:dc:06:ca:cb:6e: 93:1e:68:71:1c:39:cb:c6:74:93:67:ec:e3:cb:b5:f2:98:88: e5:b5:90:c9:3a:06:79:29:54:7c:a9:de:c8:c9:19:57:48:bb: 58:0d:97:3e:ca:ce:37:c4:94:e1:39:c0:69:c9:70:9c:0d:41: b2:b5:bf:a9:87:1c:5b:a3:ff:f6:09:5f:55:ee:42:52:d8:8b: de:a7:23:cf:a9:6c:db:91:79:ae:e6:5a:40:f7:50:32:90:05: 2d:74:1f:60:f9:8b:94:dd:be:14:59:cb:dd:a6:20:43:2b:b9: ed:b9:72:9e:ec:cf:8a:7f:f3:77:fd:03:c8:06:80:de:10:5b: 5b:de:28:54:8c:99:5e:6e:3f:21:9a:60:8f:47:a6:96:60:02: 45:53:fb:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu5+T4V3qBLw0sjoPslqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUwODIzMDcwMTM5WhcNMjUwODI0MDcwMTM5WjAzMTEwLwYDVQQD Eyg4YzBhM2ZlMTA0MzE3ZjU5OWNjYzNkYWQ2OWJmYTI0MWQ1MTk3YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdgiR333QVUg/DPcdc2U6muNZTWh z6GQVysxi/TEmiS8Sc2UmdeDVUrd5sUcWsLCfekpj7fmxJ/zJgEIC9+xgCJMPAlx V8HvQIVI0iCvn2iXWzKF9mHj19PaAdy/qB3pjB0aMfFwIxlpQEPCwYrBKImtKoXS XIa8UGuZ6jaysxKR6mmoijEUVMGKUTBjPIZZZ7lu7HM6QFd33JYe6XUhmwE5L2/K 70e+tmUBteGFLYE6BYyL8gDArmmjTTzkYpWReKQWJld7VL+Blx1V5VBoJFPuV1JK ZBKIXUVopkMdSRuWdVnJSGVF6TvjwxauH8wuxuFsNcTzdmA4Df2xcwWtCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwKP+EEMX9ZnMw9rWm/okHVGXqUMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARr6kmEBh hqr6ImqBIeW/hTC+pTCFRn+BoqWq+rjlHBn3fFNOqSqDfFe00bD+ppSZtj6ZyEJF t1EodfWh6AXRPUe40LKSxsbdFfECZwa3mkmeLNLDCeNqJbHo3hgUTMwSYci+SIF1 0twGystukx5ocRw5y8Z0k2fs48u18piI5bWQyToGeSlUfKneyMkZV0i7WA2XPsrO N8SU4TnAaclwnA1BsrW/qYccW6P/9glfVe5CUtiL3qcjz6ls25F5ruZaQPdQMpAF LXQfYPmLlN2+FFnL3aYgQyu57blynuzPin/zd/0DyAaA3hBbW94oVIyZXm4/IZpg j0emlmACRVP7Jg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:15 2025 by rpki-client