$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: NHXN6uT8MDRGz21fthosYOedhIR9CyYwKVDNfN4nbtw= Subject key identifier: 74:9B:6F:E3:76:DE:36:89:7C:7B:00:D4:85:DD:CA:61:E0:C4:71:77 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 0197B96AFFDE535D1663C8D04E879F2203FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1314 Signing time: Sun 29 Jun 2025 02:01:26 +0000 Manifest this update: Sun 29 Jun 2025 02:01:26 +0000 Manifest next update: Mon 30 Jun 2025 02:01:26 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: iNra2SLChwndQSyh0g2Dyl6FCfDy2YE0wPRNp8AiICg=) 5: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 6: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 7: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 8: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=) 9: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=) 10: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 11: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 12: fhv64bxzWcauBoH7qXIpIF6wjQo.roa (hash: XBOHExDlxcs7IJl8NBFZOTlEqiJsW6a5rBKOKZnQpcM=) 13: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 14: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 15: sOABMeqqwZ1G0D1ULMJHO8KxxxQ.roa (hash: aqn/2HV1SWgZFD22dyBslfrAfJPMn4unQ/xtd1gPhfA=) 16: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=) 17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 19: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:6a:ff:de:53:5d:16:63:c8:d0:4e:87:9f:22:03:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jun 29 02:01:26 2025 GMT Not After : Jun 30 02:01:26 2025 GMT Subject: CN=749b6fe376de36897c7b00d485ddca61e0c47177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:28:84:d6:8c:27:35:90:f8:19:5f:70:b8: a2:10:72:43:10:cf:21:7d:f3:9b:1d:e4:6a:de:3e: 26:14:1c:3d:c7:51:e3:2d:67:67:6f:aa:b3:e6:52: 37:e9:53:6a:f0:27:53:02:e6:b1:30:ea:81:bf:00: b7:f2:00:ce:16:75:11:82:d7:95:8e:e6:5b:78:f9: 26:67:81:0b:b7:7d:0d:0d:be:61:74:36:e6:6d:fa: ab:4f:9d:f3:24:40:0c:61:1f:1b:9a:e9:a3:3e:3f: e2:b9:e3:c6:7d:c1:ea:d6:70:18:17:3e:25:86:10: 91:96:2a:06:0e:91:00:bc:12:f5:7e:a7:30:5e:8f: d0:5b:cf:f3:b0:f1:f0:42:74:9c:2f:8e:a5:18:4b: ce:89:74:f9:fb:95:66:e3:49:31:90:30:7c:6a:c1: f1:8e:34:a7:07:6a:f9:fa:9b:9c:44:08:30:88:96: 7d:c7:ad:88:6e:79:4b:8e:c7:01:d2:1d:bf:e1:10: b1:42:7b:24:6c:05:d2:10:10:39:dc:17:e4:a7:23: f4:b4:cc:37:4d:b7:a3:9e:6c:5b:9c:6f:70:83:1e: 1b:7d:87:80:02:37:e7:35:51:0b:e9:14:3b:5d:0e: d5:38:a3:91:ba:dd:0c:46:bc:b8:02:61:51:3f:0b: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9B:6F:E3:76:DE:36:89:7C:7B:00:D4:85:DD:CA:61:E0:C4:71:77 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9f:17:03:d7:a1:b3:2c:f8:0b:ae:81:fd:ec:10:d4:a4:43: 69:6b:1a:2e:50:ab:a0:3f:f7:c5:bf:b1:e2:00:65:94:10:f1: 7f:42:6d:b7:07:0b:af:21:d9:a0:e5:ae:16:b4:67:96:39:19: 7a:b0:08:c3:67:05:71:6a:69:80:7b:e1:35:0c:57:c2:53:44: 9b:c5:05:b3:73:f9:ee:5d:fb:8c:4f:c4:b0:30:ea:2d:2c:54: 80:66:e8:70:6a:1c:bc:0f:13:eb:9e:7c:fe:89:b3:0b:16:34: 46:e9:10:52:b3:d4:e8:a3:8f:18:0e:34:2e:7d:3f:e7:ba:74: 2b:f8:f2:63:df:45:1c:6e:0e:4e:1c:e0:8d:b8:2c:38:3b:a6: 81:27:32:5e:15:6c:d7:c8:62:9b:61:99:78:37:a2:cf:51:1b: 22:bb:c7:85:dc:5f:95:46:5c:c6:5e:c9:de:a9:01:fd:bd:b4: 45:7e:4f:85:ad:dd:ee:f0:44:b7:ec:4d:a7:08:69:47:30:1d: 11:f7:9a:43:05:c6:ba:16:32:0e:7a:54:96:da:9b:a8:3b:77: 61:ff:26:6b:31:af:bf:95:06:0f:8b:92:24:0a:79:b8:9e:61: 2d:0b:15:9a:4b:57:75:d3:d8:64:4b:8d:45:d2:4d:2a:01:a8: d6:e8:05:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe5av/eU10WY8jQToefIgP6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUwNjI5MDIwMTI2WhcNMjUwNjMwMDIwMTI2WjAzMTEwLwYDVQQD Eyg3NDliNmZlMzc2ZGUzNjg5N2M3YjAwZDQ4NWRkY2E2MWUwYzQ3MTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBwohNaMJzWQ+BlfcLiiEHJDEM8h ffObHeRq3j4mFBw9x1HjLWdnb6qz5lI36VNq8CdTAuaxMOqBvwC38gDOFnURgteV juZbePkmZ4ELt30NDb5hdDbmbfqrT53zJEAMYR8bmumjPj/iuePGfcHq1nAYFz4l hhCRlioGDpEAvBL1fqcwXo/QW8/zsPHwQnScL46lGEvOiXT5+5Vm40kxkDB8asHx jjSnB2r5+pucRAgwiJZ9x62IbnlLjscB0h2/4RCxQnskbAXSEBA53BfkpyP0tMw3 TbejnmxbnG9wgx4bfYeAAjfnNVEL6RQ7XQ7VOKORut0MRry4AmFRPwvv3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSbb+N23jaJfHsA1IXdymHgxHF3MB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp8XA9eh syz4C66B/ewQ1KRDaWsaLlCroD/3xb+x4gBllBDxf0JttwcLryHZoOWuFrRnljkZ erAIw2cFcWppgHvhNQxXwlNEm8UFs3P57l37jE/EsDDqLSxUgGbocGocvA8T6558 /omzCxY0RukQUrPU6KOPGA40Ln0/57p0K/jyY99FHG4OThzgjbgsODumgScyXhVs 18him2GZeDeiz1EbIrvHhdxflUZcxl7J3qkB/b20RX5Pha3d7vBEt+xNpwhpRzAd EfeaQwXGuhYyDnpUltqbqDt3Yf8mazGvv5UGD4uSJAp5uJ5hLQsVmktXddPYZEuN RdJNKgGo1ugFPQ== -----END CERTIFICATE-----Generated at Sun Jun 29 11:13:04 2025 by rpki-client