$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: I7ACX+T+1oepEpMteTHViTIpc6saKlyJMhX81MArE9M= Subject key identifier: 35:32:4C:40:92:C2:8B:24:D7:C7:AA:68:8D:D7:E9:B4:CB:5F:8D:EA Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 0196A6C16F2D9D80DACD84B9C23668BF1F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 082B Signing time: Tue 06 May 2025 18:00:16 +0000 Manifest this update: Tue 06 May 2025 18:00:16 +0000 Manifest next update: Wed 07 May 2025 18:00:16 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: 2o9yLwC1qqIwSHo+pyfuBMnTkB3wovCX6VOoZX9ByR0=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 15: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 16: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a6:c1:6f:2d:9d:80:da:cd:84:b9:c2:36:68:bf:1f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: May 6 18:00:16 2025 GMT Not After : May 7 18:00:16 2025 GMT Subject: CN=35324c4092c28b24d7c7aa688dd7e9b4cb5f8dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:85:30:51:c0:49:7b:f4:1a:d1:8c:cb:80:1b: 97:da:c7:cc:cc:1e:ac:82:77:6a:64:f1:94:e0:f0: d6:34:f5:be:6d:0a:6c:8d:0e:67:80:43:7c:2e:5f: 74:84:65:e0:e3:8e:ce:2b:08:40:27:2c:95:a8:70: 25:46:ff:7c:3d:68:e6:90:a2:8d:18:65:c2:75:10: 5d:49:44:14:1a:d9:41:97:7f:f5:5a:fd:a6:05:90: ed:c3:6f:a6:0f:a4:46:a4:d6:e4:3a:82:09:4c:3d: 3f:7c:5b:86:0e:24:05:14:5e:5d:bb:1d:2f:dc:71: 76:e5:40:26:c2:ef:58:80:ba:b5:e7:74:44:d9:0e: 18:da:0c:76:f1:93:6b:b2:4f:3a:4d:b6:d4:03:f6: 7f:77:8b:dc:3a:ed:58:13:28:41:96:34:48:ce:9e: 79:8a:cb:e1:fe:89:e6:af:dc:2b:f1:6f:06:d0:11: e8:a5:e9:d9:81:af:4a:b4:c9:c6:53:c5:25:57:8d: c4:f4:9e:4a:76:66:e1:32:2e:ff:d3:25:54:4c:18: ab:49:b6:54:e4:ed:4b:f9:f6:96:4b:a1:d6:d2:de: c2:56:71:62:12:30:dc:66:9d:03:7a:12:bc:f6:e8: 68:6e:fc:f2:85:a5:45:42:69:1e:ab:fc:ec:47:ad: f0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:32:4C:40:92:C2:8B:24:D7:C7:AA:68:8D:D7:E9:B4:CB:5F:8D:EA X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6d:fc:0e:dc:c6:03:db:fa:6b:0e:a9:84:19:f4:f2:39:4d: 2f:3e:5e:40:2d:b9:e4:ea:eb:4a:11:2d:f8:91:5f:bb:ae:ae: ad:cc:e0:0f:62:77:4e:aa:d4:5c:94:e8:e8:9d:f6:72:d9:3f: 5e:fd:91:f0:5d:90:10:37:ab:e5:a7:a6:b0:60:05:73:79:f0: 0d:e7:00:e7:d6:36:98:43:88:20:fe:64:6a:b2:4c:b0:ff:d2: 3c:ea:02:b6:1d:e5:e5:4e:9e:d6:da:61:b8:0f:84:52:92:64: de:06:b7:dd:ad:63:fb:f4:f8:32:36:cd:99:52:81:a1:37:ae: b2:09:6b:e8:1e:0d:a0:72:82:e4:26:8f:fe:6a:84:ef:4e:30: 81:8e:ab:33:b3:86:a5:5f:16:22:ea:9a:25:57:29:ae:c4:d0: ba:7d:93:0d:b6:2e:a4:93:7d:16:b0:b7:c7:34:16:d9:11:bb: 25:da:1a:2d:92:10:e4:45:25:92:96:e1:d2:db:49:8b:bf:23: 03:c4:56:a2:06:e4:cf:6f:fc:af:bb:07:d5:88:f1:37:4a:4c: f8:e6:f8:8a:cd:b5:0f:97:a8:35:91:b7:40:12:2f:8c:43:c9: 8d:f5:cf:21:b4:40:96:a3:1e:77:c5:7c:c2:1d:74:6c:52:7e: a5:f3:1d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZamwW8tnYDazYS5wjZovx+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwNTA2MTgwMDE2WhcNMjUwNTA3MTgwMDE2WjAzMTEwLwYDVQQD EygzNTMyNGM0MDkyYzI4YjI0ZDdjN2FhNjg4ZGQ3ZTliNGNiNWY4ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYUwUcBJe/Qa0YzLgBuX2sfMzB6s gndqZPGU4PDWNPW+bQpsjQ5ngEN8Ll90hGXg447OKwhAJyyVqHAlRv98PWjmkKKN GGXCdRBdSUQUGtlBl3/1Wv2mBZDtw2+mD6RGpNbkOoIJTD0/fFuGDiQFFF5dux0v 3HF25UAmwu9YgLq153RE2Q4Y2gx28ZNrsk86TbbUA/Z/d4vcOu1YEyhBljRIzp55 isvh/onmr9wr8W8G0BHopenZga9KtMnGU8UlV43E9J5KdmbhMi7/0yVUTBirSbZU 5O1L+faWS6HW0t7CVnFiEjDcZp0DehK89uhobvzyhaVFQmkeq/zsR63w+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUyTECSwosk18eqaI3X6bTLX43qMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM238DtzG A9v6aw6phBn08jlNLz5eQC255OrrShEt+JFfu66urczgD2J3TqrUXJTo6J32ctk/ Xv2R8F2QEDer5aemsGAFc3nwDecA59Y2mEOIIP5karJMsP/SPOoCth3l5U6e1tph uA+EUpJk3ga33a1j+/T4MjbNmVKBoTeusglr6B4NoHKC5CaP/mqE704wgY6rM7OG pV8WIuqaJVcprsTQun2TDbYupJN9FrC3xzQW2RG7JdoaLZIQ5EUlkpbh0ttJi78j A8RWogbkz2/8r7sH1YjxN0pM+Ob4is21D5eoNZG3QBIvjEPJjfXPIbRAlqMed8V8 wh10bFJ+pfMdzg== -----END CERTIFICATE-----Generated at Wed May 7 04:18:22 2025 by rpki-client