$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: 6190zi3AQJbIPp/36y5a16ljc8Ci/zq/fJXcA0KYGRE= Subject key identifier: C2:32:D4:06:DF:F4:DC:35:20:F6:63:1C:40:D3:7B:AD:EF:D5:FD:CC Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 0198D4E075BEF61FB057CA094DBDB9D9B8ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0950 Signing time: Sat 23 Aug 2025 03:02:16 +0000 Manifest this update: Sat 23 Aug 2025 03:02:16 +0000 Manifest next update: Sun 24 Aug 2025 03:02:16 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: E/ENeiMulVbzoZxCkcEb7v7LKjIuxs2otkInUAj7iKU=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:75:be:f6:1f:b0:57:ca:09:4d:bd:b9:d9:b8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Aug 23 03:02:16 2025 GMT Not After : Aug 24 03:02:16 2025 GMT Subject: CN=c232d406dff4dc3520f6631c40d37badefd5fdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:44:85:f9:ef:53:ec:ea:20:99:19:5e:a2: 20:43:e9:1a:cc:17:51:eb:fb:59:bb:56:b6:d6:fa: d8:24:b9:82:c1:77:5a:34:b8:bf:49:82:26:db:0d: 36:be:8e:08:d7:ce:73:16:db:e2:fc:ac:07:e3:97: a7:2c:4d:d2:36:d3:97:85:fe:66:5b:82:d2:d5:52: e1:9c:e1:40:7a:b5:b2:c5:0e:b2:9a:19:d9:0d:06: 0d:3d:ba:58:a6:57:a4:2b:96:56:3d:d9:7a:05:a9: 02:f6:a4:00:c1:e1:08:78:b8:ae:2d:f7:f2:65:ff: 99:8f:16:8b:ff:93:ed:07:de:e5:f5:99:13:ed:e7: bc:15:3d:7b:36:f5:24:17:b6:dc:c3:d7:a2:49:c2: 2c:05:bb:30:e4:3e:0c:7d:4a:3c:49:2a:f6:14:24: 1d:ec:60:c0:bd:ac:de:8a:52:0a:f5:89:ae:df:7e: 57:9f:79:1a:88:63:5b:2c:95:e8:2d:7a:91:63:ef: 94:90:35:51:04:26:5d:15:12:ff:b6:43:bb:39:89: ee:83:68:be:93:b8:07:1a:f6:25:1d:c4:6f:d3:7f: 1d:c0:cb:4a:3c:3e:cf:ea:40:f4:f0:74:81:ed:28: c2:ea:c4:df:13:72:47:91:f0:e9:4e:be:89:56:0d: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:32:D4:06:DF:F4:DC:35:20:F6:63:1C:40:D3:7B:AD:EF:D5:FD:CC X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:94:10:04:7e:f6:f3:24:86:18:7d:34:0a:e3:ee:e2:e0:98: 3c:ed:a4:aa:ba:e5:0f:5c:fe:3e:76:5f:c0:a9:cf:13:c0:3e: 89:d8:e9:dd:c0:9b:6d:fc:16:4c:88:54:ae:d2:30:14:5b:11: 10:db:94:ed:12:4c:4f:e6:84:22:e1:e4:e4:88:ab:ee:0d:2a: 69:1b:2e:7c:bf:ba:91:b6:ad:c4:53:2e:c9:9a:a9:7e:84:8b: 7c:2b:f4:81:cf:43:92:4f:51:4e:c3:34:cb:fd:76:ef:fe:69: 74:0e:4f:d5:5e:7b:2e:b1:b5:ea:d8:ae:af:25:6a:5d:7a:d6: e3:94:39:7c:37:0e:83:2b:f6:ce:f5:7a:f5:88:9d:79:3f:57: 3b:04:4a:76:c5:a3:b9:ec:8f:74:b4:7f:81:d3:ed:ed:c4:46: da:67:4d:f8:b1:82:8c:ed:5d:29:f4:e8:43:55:7c:5c:54:17: 24:24:5b:d7:af:26:2d:1a:b4:f9:16:a1:aa:30:a3:c7:7a:45: e2:9c:09:d0:73:6b:2b:b7:65:1d:a1:1f:a5:eb:f7:3d:73:6b: b7:60:11:ee:23:f7:bb:79:96:04:33:e5:52:35:43:2d:b0:ae: b3:4f:89:79:d0:06:8f:0b:5a:86:fd:b8:ce:e6:1b:e3:98:e5: d3:4d:21:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4HW+9h+wV8oJTb252bjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwODIzMDMwMjE2WhcNMjUwODI0MDMwMjE2WjAzMTEwLwYDVQQD EyhjMjMyZDQwNmRmZjRkYzM1MjBmNjYzMWM0MGQzN2JhZGVmZDVmZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi1EhfnvU+zqIJkZXqIgQ+kazBdR 6/tZu1a21vrYJLmCwXdaNLi/SYIm2w02vo4I185zFtvi/KwH45enLE3SNtOXhf5m W4LS1VLhnOFAerWyxQ6ymhnZDQYNPbpYplekK5ZWPdl6BakC9qQAweEIeLiuLffy Zf+ZjxaL/5PtB97l9ZkT7ee8FT17NvUkF7bcw9eiScIsBbsw5D4MfUo8SSr2FCQd 7GDAvazeilIK9Ymu335Xn3kaiGNbLJXoLXqRY++UkDVRBCZdFRL/tkO7OYnug2i+ k7gHGvYlHcRv038dwMtKPD7P6kD08HSB7SjC6sTfE3JHkfDpTr6JVg0UuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIy1Abf9Nw1IPZjHEDTe63v1f3MMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5QQBH72 8ySGGH00CuPu4uCYPO2kqrrlD1z+PnZfwKnPE8A+idjp3cCbbfwWTIhUrtIwFFsR ENuU7RJMT+aEIuHk5Iir7g0qaRsufL+6kbatxFMuyZqpfoSLfCv0gc9Dkk9RTsM0 y/127/5pdA5P1V57LrG16tiuryVqXXrW45Q5fDcOgyv2zvV69YideT9XOwRKdsWj ueyPdLR/gdPt7cRG2mdN+LGCjO1dKfToQ1V8XFQXJCRb168mLRq0+RahqjCjx3pF 4pwJ0HNrK7dlHaEfpev3PXNrt2AR7iP3u3mWBDPlUjVDLbCus0+JedAGjwtahv24 zuYb45jl000hxA== -----END CERTIFICATE-----Generated at Sat Aug 23 12:19:35 2025 by rpki-client