$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: 1KhJ10qaj7EenHts9PDrsgYffIAOo3UujeKRlX6NjiY= Subject key identifier: 64:13:45:B1:C7:6E:88:5C:9E:CE:7B:98:B2:34:83:BE:01:35:5C:B1 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 0198D4E0220A3702B633F942B906FBD87197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 1494 Signing time: Sat 23 Aug 2025 03:01:55 +0000 Manifest this update: Sat 23 Aug 2025 03:01:55 +0000 Manifest next update: Sun 24 Aug 2025 03:01:55 +0000 Files and hashes: 1: 1-9kyTG57lW5pauShjAbSgqx7ELA.roa (hash: yqYBQ/TJzQNk1+uZ7N56AeKifi1WJfBnexFUg+0LLyM=) 2: 2yA59QtsMWk9pMkqZsRhCUNRv5s.roa (hash: 3lhj+8t7WakD0taOb/n8+n5eS8DbEqnleZ93py5eK2o=) 3: 3g3144t54HGRa28h02Xw83J7Clc.roa (hash: XX+LOOOsUzF/wHBB2Iscv3ZSGgGpMaFj5N2D9xm/JPo=) 4: 5Mam-Pg9a629tSWFczaVxFg4D58.roa (hash: uI87FyR3KvBIESOCI6aSMEI2WoHQnyL7wu0aXhj5lC4=) 5: 5QprB05ll1uYCquytR4n1W116WM.roa (hash: kOFqQKS/OdPIqYk3rxYLUDVI5uzIqTlMZr9WxgzKLwM=) 6: 6sSkl7UX1wQmJbbfGMATKxJXY54.roa (hash: IeSF56cYT3VKQor9+nTqChrxam+t4/ky7I5rJ/pHZBg=) 7: B0TfHkEyVnbd2N0e6k2tgOD6_wI.roa (hash: Urqkg7JIHNdsGel84r9NTaWTAKTT4SDTb2BONLXGY8w=) 8: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: h/Gs8I6qHHNW+uPUp23czTS5pamAx6jT4wc+Eyfuk7I=) 9: DbZqiucLKtXg_tnHgCLsTj7slY8.roa (hash: Y3nl2lYy9DUM+ulrcRJHTjNNQpfHThzYB54J4kpUdvc=) 10: HWormeP5NTMFg9cNiU120qWb8MM.roa (hash: 3Vx0k4vPLIVcmX2N61XugSe2WGxKb/dBPzzUHtK6wl4=) 11: KV367d6Zsc-zqT-odrHl0DYDJsM.roa (hash: FKc2KZrRBCocDmqxqhbBguDKolkUjxKD7WOeyPk9toM=) 12: KffqQYj4gMaNvn0q5SyjiNhf6Vo.roa (hash: 9crEtv8/iEFdMiq2HyzvvG51KyitSfa/U/shMlHv5/k=) 13: VrEU9PE5EfCqbrb7nZMyqxga0y4.roa (hash: pCI3583YgOq3CB+JSxU25k69djgvqQV7uPOrhj4rCz8=) 14: aTytGUXYEIGxtGOF3WUFFC8JcwQ.roa (hash: Vs+sK7xqct09FIQXh0SoHFV8Yu6CjDQxZx7xtJlTgNE=) 15: ek3EtDyVxedBXi4kaK3trrMaJmg.roa (hash: /bg27e+bXjbGnL2ey015MY0hFpRmcorpPjjRaoCBolE=) 16: exNBWzsJdV3aicSdEIBpUGacx74.roa (hash: 6hKpyXwmjMPvF2uI11MjVhC+6m0ZJvy5FnDNsSRaDUA=) 17: fNC7ZXZ-1ULFrWkO8J5UybYfGTI.roa (hash: JakG1+wEwBj7MRAmGKQKU//mA0wgIrSo6KrQr/NJN9Q=) 18: fuKyxGw_5UKeL4AWKKV3APO-jXs.roa (hash: 1i6kDmcAC1XA98X8VCsAJMMtYyeOaBwcuGwbyAjYXgY=) 19: j84LLRjxqovhQ1f-Vo1W8Ggomrg.roa (hash: lE8VSDD6OngPZMSO0N6X5XYw09YDfgl2syZ7P/y5Ujc=) 20: lnfSRPIjJ_rnv2rA9LFnWqyasxU.roa (hash: 6y5/RH+pWSVtrPaN0CjFr8pkFmjDA1Ymsw/HEzVgX0w=) 21: lydOFdT2ZB4VXyRnspFs-1TL_6A.roa (hash: 8itP19agssSYawEYfpGuFEww3nKwbJHsZKc1MH8kG3s=) 22: nsOvbjb1TNSx2u7BUmQra8F8iNU.roa (hash: y2lXY8swYsJj5FkjF0M5Xak7JQxiOHB7809PchjSzjM=) 23: q9EzhRak9A-maSvUjMGlPsmVdWk.roa (hash: fhhhD7VzymISsohMui+Cyx0H2ETVK9ly9iR82236g+Q=) 24: qLO5cj38BRyYdeH-rfctS6n9M7U.roa (hash: aMShn4FXdnTufUpyHOP7ThkTMbndZL+QIAZz0lq4l0Y=) 25: vMuPv15czUN3TyQjsF6vfToUN84.roa (hash: z4fYQjlVjkuFyievVhhGkwXvN23Mi1wn1+WiCtl5UkU=) 26: xJs9bo-w5TvWpljc1sQfqueBbtQ.roa (hash: TAtPCmil9M2Rr0khwcHfGhF81jVdFJvO7+4kHsp/Iv8=) 27: yikB75qCLmOR70Lyl75i3suSq54.roa (hash: 6RAQHbYTc4wjn8qsz3QMR9klg79Q+jkBfTxmlxzlVAA=) 28: zMJTAmcHfhPygeRGw0akn5BVjiE.roa (hash: 64YD3oejRwoQqSEq4heIfb2pYf1YBqxtvQb2DS8JHbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:22:0a:37:02:b6:33:f9:42:b9:06:fb:d8:71:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Aug 23 03:01:55 2025 GMT Not After : Aug 24 03:01:55 2025 GMT Subject: CN=641345b1c76e885c9ece7b98b23483be01355cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c8:f9:97:8a:f6:2a:ff:b3:d8:a8:06:80:9e: b0:53:52:39:ea:0c:0b:9e:e1:76:98:f0:d5:78:cc: 95:9e:f1:a9:de:17:60:b0:a0:d2:4f:b7:2c:de:67: 2f:d8:5c:b3:d2:b0:2d:c7:36:c2:07:33:af:cb:b3: 09:27:75:81:2e:b8:c8:22:e7:f7:87:21:fd:b4:5f: 49:66:65:67:7f:68:ec:6b:34:94:ce:91:56:fd:dd: ec:71:53:e2:48:53:df:69:7e:2d:f1:8b:62:0b:23: 8a:e1:fb:62:83:1c:4b:7e:4b:42:99:8c:55:b9:a3: 14:8a:5f:85:c2:b3:ec:4d:d9:89:33:9e:da:9d:4c: 8e:84:8d:7a:9f:71:99:a2:d9:6e:cb:8e:ba:8c:fd: 09:bd:4e:07:ac:c7:43:50:9c:c8:b0:22:a4:6a:02: 85:f3:60:90:79:e4:f2:01:35:c2:a4:ce:3a:cf:eb: 16:4e:ab:ec:31:60:9e:89:9a:a8:3a:bc:f5:82:55: 53:44:17:06:50:4b:1b:d5:39:f2:2e:53:03:2f:1b: c9:e3:dc:b3:c4:42:66:93:4c:72:f1:f7:23:59:83: 8f:32:5e:07:a6:07:53:f4:d2:93:33:17:79:8d:b1: 85:50:70:72:0b:09:09:5b:b7:33:42:78:8a:d4:e2: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:13:45:B1:C7:6E:88:5C:9E:CE:7B:98:B2:34:83:BE:01:35:5C:B1 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:91:0f:6b:38:b7:ac:01:73:bd:34:0c:e0:90:49:02:f3:bb: 2f:fb:05:cb:0b:59:7f:e0:36:c7:48:91:3c:bd:59:d1:05:ae: a9:e8:72:8e:12:99:06:33:04:d7:f7:3b:19:ca:32:5a:43:9e: c8:16:21:62:c1:8b:28:fc:5c:5e:47:f1:c4:3c:8c:a4:44:c2: 78:93:75:fb:c0:27:db:f6:5e:aa:c3:00:ff:e3:62:15:b6:e1: 9e:3a:4e:c4:58:6f:0d:06:73:37:e8:e5:9d:df:62:dc:55:16: 38:37:7d:d9:3b:5f:45:5c:95:c1:7b:d6:e4:ff:24:e0:d9:13: 99:08:67:48:04:65:eb:57:89:6b:7d:97:14:50:c4:d4:e5:45: 5e:41:e1:a1:78:af:59:98:e4:c8:e6:f9:ee:ab:1c:2e:63:09: a7:06:55:bb:a3:8c:4d:97:c2:e7:23:ec:9b:73:f9:40:b4:b8: a5:02:71:56:cb:21:7b:52:49:09:82:2e:ed:0d:af:31:ac:e0: 24:07:5c:f7:32:f7:27:ef:e3:89:8d:ca:1f:3d:d2:16:69:fb: e5:31:3e:b3:9b:5b:d5:70:40:eb:cc:87:d2:07:86:d4:23:fc: d8:33:39:07:1c:7f:8a:02:5f:a9:d4:aa:ff:e0:64:e5:13:75: 51:bc:97:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4CIKNwK2M/lCuQb72HGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjUwODIzMDMwMTU1WhcNMjUwODI0MDMwMTU1WjAzMTEwLwYDVQQD Eyg2NDEzNDViMWM3NmU4ODVjOWVjZTdiOThiMjM0ODNiZTAxMzU1Y2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sj5l4r2Kv+z2KgGgJ6wU1I56gwL nuF2mPDVeMyVnvGp3hdgsKDST7cs3mcv2Fyz0rAtxzbCBzOvy7MJJ3WBLrjIIuf3 hyH9tF9JZmVnf2jsazSUzpFW/d3scVPiSFPfaX4t8YtiCyOK4ftigxxLfktCmYxV uaMUil+FwrPsTdmJM57anUyOhI16n3GZotluy466jP0JvU4HrMdDUJzIsCKkagKF 82CQeeTyATXCpM46z+sWTqvsMWCeiZqoOrz1glVTRBcGUEsb1TnyLlMDLxvJ49yz xEJmk0xy8fcjWYOPMl4HpgdT9NKTMxd5jbGFUHByCwkJW7czQniK1OK1jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQTRbHHbohcns57mLI0g74BNVyxMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpEPazi3 rAFzvTQM4JBJAvO7L/sFywtZf+A2x0iRPL1Z0QWuqehyjhKZBjME1/c7GcoyWkOe yBYhYsGLKPxcXkfxxDyMpETCeJN1+8An2/ZeqsMA/+NiFbbhnjpOxFhvDQZzN+jl nd9i3FUWODd92TtfRVyVwXvW5P8k4NkTmQhnSARl61eJa32XFFDE1OVFXkHhoXiv WZjkyOb57qscLmMJpwZVu6OMTZfC5yPsm3P5QLS4pQJxVsshe1JJCYIu7Q2vMazg JAdc9zL3J+/jiY3KHz3SFmn75TE+s5tb1XBA68yH0geG1CP82DM5Bxx/igJfqdSq /+Bk5RN1UbyXag== -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:40 2025 by rpki-client