$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: ja8ug7fvNVlOeBbwMv3DINXfT7e4BQElGoyaNvmePKc= Subject key identifier: 2E:B2:B2:13:76:DC:21:13:46:4F:1F:01:F0:71:71:7E:BA:62:78:A8 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 0196AB0C2BB27A79FA04D58EC1108D0BBE4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1288 Signing time: Wed 07 May 2025 14:00:23 +0000 Manifest this update: Wed 07 May 2025 14:00:23 +0000 Manifest next update: Thu 08 May 2025 14:00:23 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: SalrHUF7T2aHGgB+kQpCqoUmu3HBWhmWFNO+vdZWClM=) 5: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 6: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 7: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 8: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=) 9: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=) 10: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 11: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 12: fhv64bxzWcauBoH7qXIpIF6wjQo.roa (hash: XBOHExDlxcs7IJl8NBFZOTlEqiJsW6a5rBKOKZnQpcM=) 13: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 14: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 15: sOABMeqqwZ1G0D1ULMJHO8KxxxQ.roa (hash: aqn/2HV1SWgZFD22dyBslfrAfJPMn4unQ/xtd1gPhfA=) 16: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=) 17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 19: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 13:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ab:0c:2b:b2:7a:79:fa:04:d5:8e:c1:10:8d:0b:be:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: May 7 14:00:23 2025 GMT Not After : May 8 14:00:23 2025 GMT Subject: CN=2eb2b21376dc2113464f1f01f071717eba6278a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:05:ca:b9:ce:f0:45:6f:ad:f6:86:6e:82: a7:be:71:4d:e4:ab:53:d7:e7:d4:d7:cd:7a:9c:60: b1:34:84:84:6b:1a:af:4e:73:78:32:3f:19:76:1d: 5b:62:9c:1a:49:13:f1:e3:0e:6b:61:0c:36:9a:e1: d4:d9:b4:52:a7:dc:3e:77:ad:58:9a:96:9b:ca:c0: 61:0a:71:d8:31:cf:f2:e7:75:fc:7a:db:4d:1c:2b: c4:2c:c2:e6:00:de:cb:ba:63:cf:cb:42:d8:b0:d5: fd:3d:f3:87:3f:0b:93:02:5d:3b:92:c4:31:42:b4: ea:34:a6:18:ff:99:cf:fc:2f:cf:91:f3:cc:72:25: ac:52:82:80:37:17:b8:3c:a7:06:67:68:f9:5d:a1: 46:c7:e3:10:b1:da:05:3d:f4:f5:ab:a2:ed:fd:6a: aa:7a:41:5e:78:a4:5b:73:9e:21:17:18:f8:10:e6: 01:92:70:77:8d:80:eb:73:5c:c8:32:f8:7a:02:ac: 46:a1:cd:3c:05:be:1f:57:7d:aa:0a:0a:15:ed:f6: 5d:ea:1c:df:39:16:64:f2:de:4e:c9:e4:82:8a:5a: 8d:6a:62:7b:74:38:97:5c:b2:fa:36:a6:1a:8d:bf: 27:be:ac:b4:ac:05:96:ca:b7:aa:bd:fa:60:9d:a5: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B2:B2:13:76:DC:21:13:46:4F:1F:01:F0:71:71:7E:BA:62:78:A8 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ca:e5:bd:38:4a:b2:78:90:f6:e4:5a:62:2d:95:40:57:71: b6:a0:e7:44:cd:5a:48:88:a6:09:8b:b5:a8:9a:a6:69:30:f3: d8:70:31:76:d5:a0:42:38:ba:9e:b5:91:5d:8d:3a:f0:02:3c: a4:29:e9:61:af:c6:89:40:ff:aa:46:70:b5:42:ad:cc:6e:b8: 57:d4:47:57:d0:b6:99:a8:e7:09:c8:03:4b:1b:64:ed:2b:fb: 8d:f8:d2:67:ad:b7:90:d2:a2:5b:51:89:1d:f8:59:46:9b:9d: 51:7b:05:62:9e:bb:ce:43:bb:7e:1c:26:05:23:e7:23:f0:fc: 4c:28:00:fd:69:16:bd:4e:eb:0b:61:55:c4:8f:d3:92:ba:94: 3a:17:29:37:34:d7:8a:31:07:27:af:81:30:08:46:8d:77:68: b4:89:4f:bb:63:0c:0b:27:c5:93:5e:12:25:00:8f:b7:ca:13: 90:1e:d1:ad:b8:41:18:61:76:6b:b7:19:28:f9:8d:52:d4:0e: cb:e7:95:ae:3f:df:b2:21:ff:9f:f3:14:a1:d6:5b:84:b2:d3: 9f:7d:dc:d2:b1:aa:d1:92:15:ec:ef:3a:e9:37:0e:c3:21:4a: 37:12:28:38:ad:63:6c:2e:90:b9:af:2a:03:0f:60:84:38:6c: 3d:f7:1f:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZarDCuyenn6BNWOwRCNC75KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUwNTA3MTQwMDIzWhcNMjUwNTA4MTQwMDIzWjAzMTEwLwYDVQQD EygyZWIyYjIxMzc2ZGMyMTEzNDY0ZjFmMDFmMDcxNzE3ZWJhNjI3OGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKAFyrnO8EVvrfaGboKnvnFN5KtT 1+fU1816nGCxNISEaxqvTnN4Mj8Zdh1bYpwaSRPx4w5rYQw2muHU2bRSp9w+d61Y mpabysBhCnHYMc/y53X8ettNHCvELMLmAN7LumPPy0LYsNX9PfOHPwuTAl07ksQx QrTqNKYY/5nP/C/PkfPMciWsUoKANxe4PKcGZ2j5XaFGx+MQsdoFPfT1q6Lt/Wqq ekFeeKRbc54hFxj4EOYBknB3jYDrc1zIMvh6AqxGoc08Bb4fV32qCgoV7fZd6hzf ORZk8t5OyeSCilqNamJ7dDiXXLL6NqYajb8nvqy0rAWWyreqvfpgnaWnlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6yshN23CETRk8fAfBxcX66YnioMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMrlvThK sniQ9uRaYi2VQFdxtqDnRM1aSIimCYu1qJqmaTDz2HAxdtWgQji6nrWRXY068AI8 pCnpYa/GiUD/qkZwtUKtzG64V9RHV9C2majnCcgDSxtk7Sv7jfjSZ623kNKiW1GJ HfhZRpudUXsFYp67zkO7fhwmBSPnI/D8TCgA/WkWvU7rC2FVxI/TkrqUOhcpNzTX ijEHJ6+BMAhGjXdotIlPu2MMCyfFk14SJQCPt8oTkB7RrbhBGGF2a7cZKPmNUtQO y+eVrj/fsiH/n/MUodZbhLLTn33c0rGq0ZIV7O866TcOwyFKNxIoOK1jbC6Qua8q Aw9ghDhsPfcfXw== -----END CERTIFICATE-----Generated at Wed May 7 16:37:14 2025 by rpki-client