$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: GWGtKs8O4Zi7zD0uIjQiUM97bdxNfGn9SnV5G9T8HeI= Subject key identifier: 9F:0C:29:53:0B:39:FE:B1:C7:14:DF:96:87:04:B8:23:A1:64:1B:DE Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 0197BB8767F25CB297A44A297B85C07FAFD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1658 Signing time: Sun 29 Jun 2025 11:51:42 +0000 Manifest this update: Sun 29 Jun 2025 11:51:42 +0000 Manifest next update: Mon 30 Jun 2025 11:51:42 +0000 Files and hashes: 1: 0SqzGu12mDjFCGhzy8gHIULllqg.roa (hash: q/N5B3QV4KYlMCuam0x9LaRBbkHiisoMmXCRQH3slec=) 2: 1-VZuIwVkRgo619APRmiGobLEe2k.roa (hash: ELMJnBOGAspkS2EKJPUzCE4JjiJqCGzZz4I7y3MQK0c=) 3: 1-tgzUJZoQ8k9qJvCTHao9N-dDTc.roa (hash: ypcaVWXpZE0yxJmFZqPm5HUerJnW6NHkDTmFHd+p52w=) 4: 1FgAgOKAkv5XcCRQ3J7QkwpKT98.roa (hash: 6Mdiww8rup10ctjHqTpOD/Pwd3nyKO+layuU1TvTAHQ=) 5: 1H9JH7QRuSDXr4xmXPNwRgB8SUk.roa (hash: ziKl+jwxMv6HwekIqZTTpxWFqrGnl6wqrBMe638R2JU=) 6: 1tP6HbCLfJQolIJff1meJLf4HpI.roa (hash: Jqq8+MBFvN33b5MWz0+bttdbA5gDNeaR+L9jbZUqu6E=) 7: 6F9y36lZeoE4bfjGXC_Ufk2fjfI.roa (hash: FZsvLuR+Gv0TTTTehRc9baUO0MbvwTK+elKj7u0SA+A=) 8: DiJuQ_kG7WvUzBjzRy7osCFiLa0.roa (hash: ZZdF3mZX0+NSB3GzJXDHjRpoKegOrxgL6WcAfOKZIVo=) 9: JpuV5HcluBalVoMeoldTQN8DAn8.roa (hash: 0lAWMY1XRCrRPS6rRebMRa+pBrqjVQZeCT1ofxGRwac=) 10: K4j3TVsL4gnmFiz9srl9RAcBvvY.roa (hash: wFXlK8wv1SsW+ShrU0Dc1r1iGz+dGvdi49gKuqhv10g=) 11: Lc0sdbOTNo4PG9AcRMnHD1ZdjTA.roa (hash: QyWcllmsgsfma+CXqtcPhBcL7qxdhG/KE09cbC5TDFE=) 12: LkQH73Bzans-M67Dt9wB0Aug-Rs.roa (hash: uDymSYsDDXNNxioYQBFNlhb25yiDu6U4/lOCsHx2B3Q=) 13: MInzBguVovJXOA4EeGsIk4wmGRY.roa (hash: 4sToEfKvsb0IJt14rA1lHzx97fbvK5KAmtUphg5AV2s=) 14: RKnIbaV6UL_9ANWtNqGZZQu3yts.roa (hash: jyYhVILnHC5qMnxjfXjvdXIkELevKM9iXOHgHKyLBGQ=) 15: RhpIQufBvlT8um36o8p8__NcaC0.roa (hash: SB9yn1L2urR2v3sLA87qzt8eBZ6ywq4EbVAEGhXLrdw=) 16: UkwQ5P4K-6hNdEb9fPfnCQvn8Cg.roa (hash: 3YnYR2wJLHM5g/DZxwAp32GCtIPF1553r3/M3FEeh+s=) 17: Wxba01eGRfIHYvB1oPclxJQ4A0o.roa (hash: sSvWgZ3B4RqSdjjqU7MubuyAeeaSCSvFOe1guspwNLI=) 18: X57-ZKJiC7pX1z2IhDWI4_Vb_x4.roa (hash: rQu7xdiT+nmHcmLVj2/49bWlcYuEeveWXCKAsMSKvZs=) 19: _iGFugOP1tiOEaPOTqAHoHJWFQc.roa (hash: 8esaTWX6gTmO0Sy1HkL3uRDiAwcID3fH35AmBjVF024=) 20: _qAPGYVD_1gJgljuSDHPl3Z-xK8.roa (hash: mSFnXP7nj9WP4ezEw+z517FTzVwTAKGKRj7RSpQ5oaI=) 21: bZwjzP4gjKnjcT_SMEdSZH0cpus.roa (hash: Ae2HLoEm9GipjYsypJz84+I8/D7aRxBKdkOkxmref+c=) 22: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: nCmFlvWWWGFyAcER5nPPoS7lMhasUyiQI5B9MIPNZCU=) 23: dNq1dUWXo15xfK5j2ALgaL9-X9M.roa (hash: mGCrS09whic27p0ypY0pInzSeZzWepSv0K6RiezO+4c=) 24: gXnyfZ7WRzAT1jk1R3OiRc3jdHI.roa (hash: 1IuLazqVse8UR3WGm/7OBA3uGo+uBSbgZ52bY8PWM0E=) 25: mazjpEOiTRGyO0IL263f_3CQd1U.roa (hash: MKiEFvVqubL0G1YHY988sj28nrhwlcgHnMA3zXfPogY=) 26: n7Fl57Sl1pGzpjbP-2vnnXGeCSM.roa (hash: yMYv0kAJ/QEz5fR9SrsfYu/yiezyRaShWj8NQosvLuo=) 27: vvKX9oflY3swSadfJukjOxOYg3M.roa (hash: wjPx8ZTmwvSDu1PVRFMY+WcMogZCOGW5+T7IBF9kYL4=) 28: z98VbFhhtrsppgBDCBBTlF7BgCs.roa (hash: VYrqnhsISaUc0EGr8J3bVX+m9jndPwar8EqDGjXw5HE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 07:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:bb:87:67:f2:5c:b2:97:a4:4a:29:7b:85:c0:7f:af:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jun 29 11:51:42 2025 GMT Not After : Jun 30 11:51:42 2025 GMT Subject: CN=9f0c29530b39feb1c714df968704b823a1641bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:3a:b9:1e:8b:01:97:e4:8f:5d:b2:06:26: 67:66:af:30:91:a9:6f:21:7e:82:d6:93:86:9b:cb: 5c:0e:85:56:af:d2:bd:88:a3:1d:07:6b:a5:13:63: b2:d0:e7:a3:c4:f8:8f:63:92:b6:3b:fe:77:eb:18: 55:1a:59:de:04:c3:48:b5:22:ae:4e:e7:52:2b:e1: bf:e6:2a:6c:76:6d:ab:24:b8:d6:5e:55:3d:b2:00: a3:b1:90:17:89:f1:29:0c:29:bd:0e:6c:9b:c3:10: 67:28:7d:26:ca:8a:1f:fe:99:9f:b3:7a:17:34:e5: 70:1b:96:8d:16:d0:f0:6f:08:ba:b6:a9:bb:52:10: 78:61:92:55:19:da:5a:55:cc:5b:96:1c:9e:e8:d8: 04:50:84:74:bb:eb:d8:17:d0:b0:52:bf:c6:de:bd: cf:e4:2e:5d:7e:fb:51:cc:3f:83:ae:27:05:5c:f4: 12:5b:25:23:d6:1f:c5:00:b7:f3:81:53:1c:b0:06: 56:18:71:1e:e4:00:fc:9c:b9:69:8a:e2:d1:27:6a: 8b:d1:af:2a:d7:05:06:5a:58:5c:7d:2f:a0:f7:7e: 6b:b5:f6:da:1b:c4:49:6b:e3:ca:10:24:25:fb:5c: a6:b0:1b:9e:11:ea:87:ad:08:f9:dd:ab:d2:18:b8: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0C:29:53:0B:39:FE:B1:C7:14:DF:96:87:04:B8:23:A1:64:1B:DE X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d9:e3:87:a8:fd:61:87:4c:2f:bd:9d:58:f2:f5:16:88:48: d7:f6:04:77:4e:9a:3c:4a:5c:6e:8e:28:4e:11:60:ef:ed:ac: 37:4a:a2:36:21:d4:bf:ca:bb:8a:41:6a:c0:75:0f:f6:38:5a: d3:fb:4d:20:9e:38:e1:09:df:74:32:1f:42:ad:55:95:af:54: 5f:6c:a2:6d:9c:5e:be:01:17:32:6b:6e:b1:ad:2a:11:af:7f: 5c:6a:e9:3e:e9:19:a0:0a:49:4f:e9:3d:1c:b0:77:45:09:2b: 43:d6:45:cb:46:d6:4f:fd:b0:aa:e7:da:90:80:1d:50:f9:31: 18:6e:e1:96:85:06:90:5e:98:66:0b:12:f4:e0:ae:74:2b:36: 54:f0:11:05:92:71:45:0b:10:4d:69:eb:33:c4:04:16:99:22: 7d:ea:7e:b4:48:d2:97:44:85:0c:c0:8a:a1:f6:4d:d9:46:81: 44:f1:db:49:ca:59:dc:f5:5c:1c:33:e9:7d:17:c6:93:71:11: ab:a6:5d:20:9e:0b:fb:f5:f5:0e:7d:fc:63:95:3d:d9:64:f0: 84:4f:7e:c7:c4:3a:07:c5:d0:0c:16:72:67:57:63:1f:4d:32: dd:e2:ea:36:80:46:f8:2e:5f:e2:34:f0:69:db:78:9e:7d:6d: 3c:57:ee:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe7h2fyXLKXpEope4XAf6/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjUwNjI5MTE1MTQyWhcNMjUwNjMwMTE1MTQyWjAzMTEwLwYDVQQD Eyg5ZjBjMjk1MzBiMzlmZWIxYzcxNGRmOTY4NzA0YjgyM2ExNjQxYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3E6uR6LAZfkj12yBiZnZq8wkalv IX6C1pOGm8tcDoVWr9K9iKMdB2ulE2Oy0OejxPiPY5K2O/536xhVGlneBMNItSKu TudSK+G/5ipsdm2rJLjWXlU9sgCjsZAXifEpDCm9DmybwxBnKH0myoof/pmfs3oX NOVwG5aNFtDwbwi6tqm7UhB4YZJVGdpaVcxblhye6NgEUIR0u+vYF9CwUr/G3r3P 5C5dfvtRzD+DricFXPQSWyUj1h/FALfzgVMcsAZWGHEe5AD8nLlpiuLRJ2qL0a8q 1wUGWlhcfS+g935rtfbaG8RJa+PKECQl+1ymsBueEeqHrQj53avSGLgk8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8MKVMLOf6xxxTflocEuCOhZBveMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNnjh6j9 YYdML72dWPL1FohI1/YEd06aPEpcbo4oThFg7+2sN0qiNiHUv8q7ikFqwHUP9jha 0/tNIJ444QnfdDIfQq1Vla9UX2yibZxevgEXMmtusa0qEa9/XGrpPukZoApJT+k9 HLB3RQkrQ9ZFy0bWT/2wqufakIAdUPkxGG7hloUGkF6YZgsS9OCudCs2VPARBZJx RQsQTWnrM8QEFpkifep+tEjSl0SFDMCKofZN2UaBRPHbScpZ3PVcHDPpfRfGk3ER q6ZdIJ4L+/X1Dn38Y5U92WTwhE9+x8Q6B8XQDBZyZ1djH00y3eLqNoBG+C5f4jTw adt4nn1tPFfuJA== -----END CERTIFICATE-----Generated at Sun Jun 29 16:49:34 2025 by rpki-client