$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: pn1Af+eqXai7QVga2lp4InaFt3krCpxtQmpD0LJKx8E= Subject key identifier: 5B:96:B5:7C:2D:6E:E5:E1:B5:15:18:4A:FF:71:27:53:61:FA:69:CA Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 0197B8FD822E81BACF1B8F3F02482F5AE43D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 08B9 Signing time: Sun 29 Jun 2025 00:01:51 +0000 Manifest this update: Sun 29 Jun 2025 00:01:51 +0000 Manifest next update: Mon 30 Jun 2025 00:01:51 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: 1AORiZENuMhnIvUMbI3TkU06947Ma/zhXZzRjNehxSs=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 15: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 16: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:fd:82:2e:81:ba:cf:1b:8f:3f:02:48:2f:5a:e4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jun 29 00:01:51 2025 GMT Not After : Jun 30 00:01:51 2025 GMT Subject: CN=5b96b57c2d6ee5e1b515184aff71275361fa69ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:2f:fb:a3:b9:37:c3:14:f5:05:5d:0d:e1: 04:d9:8b:49:7e:eb:d7:85:8a:9e:31:b8:36:c9:63: 73:53:d9:d4:2d:4e:73:6d:93:cd:22:78:2c:96:77: e0:1e:2a:94:e2:c4:60:ff:21:6f:6d:1a:7b:6c:8d: f9:e2:1d:71:99:bd:5c:26:2f:65:8b:2e:02:c9:30: 1f:3a:ee:ec:c3:8c:53:ef:6f:9d:64:f0:c8:e3:d4: 12:65:63:82:08:49:bd:35:77:ce:13:34:6f:9f:5f: e8:48:41:44:47:91:85:8c:4b:cd:c2:de:54:26:27: 51:e2:a4:fa:bc:5d:9d:36:c4:33:5d:0d:c2:c3:5f: b9:e9:84:68:18:a2:c7:61:1e:c7:5f:00:7a:6d:ce: 59:e4:72:72:8c:68:db:79:ca:d2:ae:26:3d:7f:36: d4:d0:e6:ec:64:4f:31:b5:5b:14:95:92:bc:19:6d: 08:f4:df:b2:c5:f1:ee:00:bf:7e:7b:33:95:f4:04: 67:1a:67:46:46:f8:bd:7e:82:01:f4:1b:b2:0c:28: f6:37:9c:36:93:0c:a9:41:ec:a0:f7:19:75:e2:f7: 23:14:02:69:63:49:a6:bb:5b:98:8f:3c:66:75:d1: 3b:34:3b:16:98:ab:0a:58:e2:a7:d6:9b:6b:b4:0d: ce:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:96:B5:7C:2D:6E:E5:E1:B5:15:18:4A:FF:71:27:53:61:FA:69:CA X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0e:5d:29:85:5e:ea:72:5b:ed:4e:f5:2f:1c:5e:45:e6:b9: 56:87:ce:1a:1e:a6:d1:c2:a1:88:9e:41:a1:6e:5c:0a:38:2b: 3b:2c:6c:ac:3b:6c:ee:a8:d3:b0:78:fb:52:8b:1b:d7:13:f3: ea:26:79:83:d1:97:b4:5c:ca:b1:ce:20:ea:be:5e:bf:f2:24: 6f:04:44:a4:59:d5:c3:99:26:9c:dc:d6:e5:b7:50:3a:f2:30: 48:3f:fe:b7:10:0f:6d:d2:1e:96:73:f8:c9:1c:18:82:1a:64: 47:f9:61:79:f4:2d:ed:4a:82:04:16:a2:5e:eb:4f:c7:10:c3: 63:24:94:8e:64:c8:e1:07:cc:c1:71:b5:57:18:10:2f:23:1e: 92:9c:fb:12:87:37:51:70:0d:e1:3f:db:ce:28:d5:e0:6e:68: 13:63:82:cc:33:f1:0f:a7:2e:09:f5:bc:d6:bc:1a:14:21:82: bc:34:1d:17:0a:f5:ac:a6:6f:d9:69:f6:c0:65:d3:5a:e3:e6: 29:26:a3:c4:d8:c2:a5:50:5c:68:5f:9a:84:ee:78:53:33:6b: 60:f7:cf:55:90:28:b6:b0:08:d7:18:e0:0e:40:6a:65:b9:e2: 1e:94:3c:17:72:ae:50:28:ed:60:3b:17:ba:49:a1:65:c3:d8: be:8d:1e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4/YIugbrPG48/AkgvWuQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwNjI5MDAwMTUxWhcNMjUwNjMwMDAwMTUxWjAzMTEwLwYDVQQD Eyg1Yjk2YjU3YzJkNmVlNWUxYjUxNTE4NGFmZjcxMjc1MzYxZmE2OWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqEv+6O5N8MU9QVdDeEE2YtJfuvX hYqeMbg2yWNzU9nULU5zbZPNIngslnfgHiqU4sRg/yFvbRp7bI354h1xmb1cJi9l iy4CyTAfOu7sw4xT72+dZPDI49QSZWOCCEm9NXfOEzRvn1/oSEFER5GFjEvNwt5U JidR4qT6vF2dNsQzXQ3Cw1+56YRoGKLHYR7HXwB6bc5Z5HJyjGjbecrSriY9fzbU 0ObsZE8xtVsUlZK8GW0I9N+yxfHuAL9+ezOV9ARnGmdGRvi9foIB9BuyDCj2N5w2 kwypQeyg9xl14vcjFAJpY0mmu1uYjzxmddE7NDsWmKsKWOKn1ptrtA3ObQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuWtXwtbuXhtRUYSv9xJ1Nh+mnKMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ5dKYVe 6nJb7U71LxxeRea5VofOGh6m0cKhiJ5BoW5cCjgrOyxsrDts7qjTsHj7Uosb1xPz 6iZ5g9GXtFzKsc4g6r5ev/IkbwREpFnVw5kmnNzW5bdQOvIwSD/+txAPbdIelnP4 yRwYghpkR/lhefQt7UqCBBaiXutPxxDDYySUjmTI4QfMwXG1VxgQLyMekpz7Eoc3 UXAN4T/bzijV4G5oE2OCzDPxD6cuCfW81rwaFCGCvDQdFwr1rKZv2Wn2wGXTWuPm KSajxNjCpVBcaF+ahO54UzNrYPfPVZAotrAI1xjgDkBqZbniHpQ8F3KuUCjtYDsX ukmhZcPYvo0eaA== -----END CERTIFICATE-----Generated at Sun Jun 29 06:36:21 2025 by rpki-client