$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: AL0b4sJMNt4UZqQBG1ekVlSAgCZJfeqILoJzXB2u8Rw= Subject key identifier: 92:B0:54:06:A0:9A:35:76:D1:3F:2F:AE:5E:7A:A2:87:43:66:E1:7E Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 0198D96069761F10ADFAB3997722539D1B22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 1656 Signing time: Sun 24 Aug 2025 00:00:30 +0000 Manifest this update: Sun 24 Aug 2025 00:00:30 +0000 Manifest next update: Mon 25 Aug 2025 00:00:30 +0000 Files and hashes: 1: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=) 2: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=) 3: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=) 4: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=) 5: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=) 6: XJb3trIMR2o2CfWTOuYiqHcFzws.roa (hash: BRkLNlJqve/L2aNsuMJ+5pqTXL5/kYQCmhET9weR1yA=) 7: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=) 8: Z48A1_I47mYSHVTo4XpKWd1w_wY.roa (hash: NvJ6V/CehduL5Zgko7xVcI92EacH0CBv0m1gyVIWLQM=) 9: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=) 10: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: 5o0+hxHRyZy3+CGixieczpaccgUdFKnhocyXGlHJuO4=) 11: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=) 12: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=) 13: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=) 14: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=) 15: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=) 16: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=) 17: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 17:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d9:60:69:76:1f:10:ad:fa:b3:99:77:22:53:9d:1b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Aug 24 00:00:30 2025 GMT Not After : Aug 25 00:00:30 2025 GMT Subject: CN=92b05406a09a3576d13f2fae5e7aa2874366e17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:da:c9:87:43:8e:e0:c8:ff:f3:1a:6f:e6:67: 61:59:8e:6d:33:cc:b1:ad:7f:05:aa:7f:c1:6f:87: 64:db:94:90:72:42:80:00:25:cd:46:fa:d5:b9:bd: 55:a4:cf:6c:f0:15:0e:47:86:89:1f:17:42:31:f7: cb:2b:d1:37:27:a8:19:99:02:19:2a:dd:68:a4:a1: b3:f1:6c:b7:07:6f:ad:fd:9a:bd:b9:e6:59:90:c6: 6b:af:72:55:53:fa:61:fe:ba:c7:2d:f8:df:22:6c: f2:2c:2c:a0:94:b9:52:86:27:14:e5:25:31:bf:ff: 5d:9a:38:42:50:44:c1:e1:69:f6:c3:91:03:b6:1a: 8d:ba:65:85:65:46:3e:73:b7:7a:39:7a:3b:64:25: a3:91:11:aa:9c:50:a6:fa:6d:c3:22:ca:f2:75:de: d3:b0:00:de:d7:11:4d:2f:d5:5f:98:0a:0c:7a:00: 32:dc:63:b3:cd:d5:4d:9a:a2:33:c4:fa:70:89:3f: b8:c7:ad:a4:e8:02:0a:25:9a:98:d9:2c:aa:f2:8f: eb:c6:77:7e:20:f2:f6:79:30:3e:05:0e:4d:d6:a5: c0:84:3c:87:4c:ac:5a:0f:3d:17:65:54:b6:92:f8: 1d:75:2a:5a:aa:ab:ce:40:13:00:28:98:01:8a:ed: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B0:54:06:A0:9A:35:76:D1:3F:2F:AE:5E:7A:A2:87:43:66:E1:7E X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ba:01:bc:5a:28:8f:89:a4:b5:6c:87:5f:63:70:e5:8f:69: 2a:fd:5d:35:b2:5e:b7:dc:c0:44:22:ec:d6:6f:0c:94:e3:bd: b8:cc:2c:dc:e1:6c:20:54:4d:04:c5:75:86:d7:b9:1b:92:69: a5:4b:0e:83:b4:85:f9:f0:a0:07:c9:e7:d0:89:c5:3c:aa:05: 74:c1:78:7f:49:73:a5:58:01:b9:89:ef:85:af:14:ba:74:57: 51:97:9b:e9:72:72:9c:e4:52:24:e5:a2:2b:64:bd:20:d0:05: f7:b9:66:26:3a:bd:dc:a8:6e:bb:a7:70:b3:80:c8:6d:03:f6: da:e5:f6:5c:d9:ed:5e:46:6f:88:ac:0a:7e:91:59:4a:41:72: 93:80:91:c8:0c:a7:f3:77:27:7c:ae:bb:0b:03:68:bd:69:85: 79:df:45:e4:34:41:6f:da:e8:a9:a1:4b:fe:44:a8:ff:5a:15: f0:d6:13:e3:30:92:ef:a1:f0:f1:99:97:ff:35:5e:ce:aa:c2: e5:2a:eb:72:60:2a:13:59:16:e1:7d:47:4f:32:0e:44:6b:6e: 74:91:92:c6:2d:fd:92:5d:9f:76:1e:f9:53:47:f2:78:bb:db: c1:b7:6c:19:0b:67:ae:2d:f4:34:9b:83:e0:c3:80:21:da:21: a3:ca:09:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjZYGl2HxCt+rOZdyJTnRsiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjUwODI0MDAwMDMwWhcNMjUwODI1MDAwMDMwWjAzMTEwLwYDVQQD Eyg5MmIwNTQwNmEwOWEzNTc2ZDEzZjJmYWU1ZTdhYTI4NzQzNjZlMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtrJh0OO4Mj/8xpv5mdhWY5tM8yx rX8Fqn/Bb4dk25SQckKAACXNRvrVub1VpM9s8BUOR4aJHxdCMffLK9E3J6gZmQIZ Kt1opKGz8Wy3B2+t/Zq9ueZZkMZrr3JVU/ph/rrHLfjfImzyLCyglLlShicU5SUx v/9dmjhCUETB4Wn2w5EDthqNumWFZUY+c7d6OXo7ZCWjkRGqnFCm+m3DIsrydd7T sADe1xFNL9VfmAoMegAy3GOzzdVNmqIzxPpwiT+4x62k6AIKJZqY2Syq8o/rxnd+ IPL2eTA+BQ5N1qXAhDyHTKxaDz0XZVS2kvgddSpaqqvOQBMAKJgBiu2SCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKwVAagmjV20T8vrl56oodDZuF+MB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlboBvFoo j4mktWyHX2Nw5Y9pKv1dNbJet9zARCLs1m8MlOO9uMws3OFsIFRNBMV1hte5G5Jp pUsOg7SF+fCgB8nn0InFPKoFdMF4f0lzpVgBuYnvha8UunRXUZeb6XJynORSJOWi K2S9INAF97lmJjq93Khuu6dws4DIbQP22uX2XNntXkZviKwKfpFZSkFyk4CRyAyn 83cnfK67CwNovWmFed9F5DRBb9roqaFL/kSo/1oV8NYT4zCS76Hw8ZmX/zVezqrC 5SrrcmAqE1kW4X1HTzIORGtudJGSxi39kl2fdh75U0fyeLvbwbdsGQtnri30NJuD 4MOAIdoho8oJyA== -----END CERTIFICATE-----Generated at Sun Aug 24 03:06:23 2025 by rpki-client