$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: F517bzgiCmRAEG4NG1Bfh7P/iemjWO7EqDjLIG5EBgo= Subject key identifier: 3B:2D:68:20:87:04:31:86:98:8C:00:D4:A2:60:3F:C5:F9:EF:0E:46 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 0199FD33E955FE0D6AD95AE119C9E69B6D52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1764 Signing time: Sun 19 Oct 2025 16:01:01 +0000 Manifest this update: Sun 19 Oct 2025 16:01:01 +0000 Manifest next update: Mon 20 Oct 2025 16:01:01 +0000 Files and hashes: 1: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=) 2: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=) 3: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=) 4: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=) 5: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (hash: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=) 6: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=) 7: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: wMsruA2YJYpkaQL1MF7iY5FXSr4G050kFgGWlDSqlJ4=) 8: gp93L_YQvuGEaCDSOxiRg-T-4UM.roa (hash: cOL7dP+BUiqZrZ0lZLE/dQN9GFbGifb1tHwfI+S3noI=) 9: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=) 10: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=) 11: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (hash: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:33:e9:55:fe:0d:6a:d9:5a:e1:19:c9:e6:9b:6d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Oct 19 16:01:01 2025 GMT Not After : Oct 20 16:01:01 2025 GMT Subject: CN=3b2d682087043186988c00d4a2603fc5f9ef0e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:44:ca:22:86:65:4d:42:d9:f2:73:26:de: 56:7c:92:3c:66:50:bc:e3:89:8f:a5:10:50:61:c4: 94:e5:21:f7:26:98:d4:b7:b3:3a:a8:c1:13:0e:20: 68:0f:bf:9f:fd:fb:a0:b5:d5:6c:97:ce:43:f9:b4: bb:d4:52:31:b1:78:2b:17:f8:05:b3:d9:64:e6:58: 9d:5d:cc:2a:4d:93:f4:f0:1c:35:b8:05:ef:e5:47: 3a:c8:11:63:9d:b9:8a:63:20:87:fd:f3:02:d8:e8: 8e:ef:34:1f:76:a7:0d:4f:cc:53:a5:50:f3:ed:f1: e8:27:25:0e:b5:01:a6:b2:b5:39:12:2b:a4:67:28: 3c:ac:d2:be:13:34:5f:32:89:0b:17:08:82:1b:9d: e0:76:a4:c2:ec:56:bb:54:4f:bf:8e:d9:03:cd:8a: 6c:de:35:81:75:e0:04:c8:07:23:92:1a:44:54:b8: 32:1d:51:34:75:50:59:16:46:5a:0b:b3:a0:62:0e: d3:08:b9:57:98:ec:8b:4a:25:54:da:45:6b:a2:ae: c1:f2:a5:80:58:35:b4:71:a4:51:8a:f7:12:3d:e4: 1d:a3:0f:1d:b5:59:eb:d9:0b:64:b2:66:a9:9e:06: 5b:9b:f3:d0:eb:75:ac:5c:f4:ff:a3:a8:b5:d5:c0: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2D:68:20:87:04:31:86:98:8C:00:D4:A2:60:3F:C5:F9:EF:0E:46 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:4a:e8:d4:10:3c:93:9b:aa:e1:eb:0e:4d:a2:7f:21:8f:65: 70:02:1a:eb:28:d6:23:bb:fe:c0:7f:6b:64:4a:8a:5e:72:b2: 3f:15:08:34:32:ca:ae:0b:c7:93:90:80:d4:c0:63:49:7d:68: 38:d2:7d:07:6c:13:09:45:89:6e:1e:8d:c2:6d:42:66:f5:97: 2c:3f:77:67:dc:5d:47:bb:de:7e:d9:58:56:78:b4:a7:15:47: 2c:ad:84:85:ba:d7:4a:e7:54:e1:2f:4e:34:61:be:76:05:c9: 65:c3:4f:5a:37:09:ee:d5:d9:02:0e:55:5f:63:f7:1b:74:02: a5:be:39:ac:30:d0:0a:2d:a4:39:0f:0d:ad:65:8f:5e:86:d2: ce:ea:24:26:24:0d:8c:57:35:fa:88:b3:05:86:5e:1d:01:7f: 9d:cc:b8:69:09:a9:64:3c:5f:4f:0d:91:c3:75:6a:52:5b:0f: 81:aa:f1:6e:0e:a3:42:c7:45:b7:fa:3a:86:95:e7:cf:40:87: 41:2b:5e:5d:4a:3a:5f:3c:1a:39:76:7a:5f:ab:6e:d2:10:94: df:cc:3d:99:45:48:92:bd:3f:13:bb:31:d6:ec:53:ec:8f:51: 3e:c5:8f:c5:0b:a5:16:2a:42:85:28:40:46:dc:7f:b5:41:89: b1:db:5d:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9M+lV/g1q2VrhGcnmm21SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjUxMDE5MTYwMTAxWhcNMjUxMDIwMTYwMTAxWjAzMTEwLwYDVQQD EygzYjJkNjgyMDg3MDQzMTg2OTg4YzAwZDRhMjYwM2ZjNWY5ZWYwZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1BEyiKGZU1C2fJzJt5WfJI8ZlC8 44mPpRBQYcSU5SH3JpjUt7M6qMETDiBoD7+f/fugtdVsl85D+bS71FIxsXgrF/gF s9lk5lidXcwqTZP08Bw1uAXv5Uc6yBFjnbmKYyCH/fMC2OiO7zQfdqcNT8xTpVDz 7fHoJyUOtQGmsrU5EiukZyg8rNK+EzRfMokLFwiCG53gdqTC7Fa7VE+/jtkDzYps 3jWBdeAEyAcjkhpEVLgyHVE0dVBZFkZaC7OgYg7TCLlXmOyLSiVU2kVroq7B8qWA WDW0caRRivcSPeQdow8dtVnr2QtksmapngZbm/PQ63WsXPT/o6i11cDTIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDstaCCHBDGGmIwA1KJgP8X57w5GMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0ro1BA8 k5uq4esOTaJ/IY9lcAIa6yjWI7v+wH9rZEqKXnKyPxUINDLKrgvHk5CA1MBjSX1o ONJ9B2wTCUWJbh6Nwm1CZvWXLD93Z9xdR7veftlYVni0pxVHLK2EhbrXSudU4S9O NGG+dgXJZcNPWjcJ7tXZAg5VX2P3G3QCpb45rDDQCi2kOQ8NrWWPXobSzuokJiQN jFc1+oizBYZeHQF/ncy4aQmpZDxfTw2Rw3VqUlsPgarxbg6jQsdFt/o6hpXnz0CH QSteXUo6XzwaOXZ6X6tu0hCU38w9mUVIkr0/E7sx1uxT7I9RPsWPxQulFipChShA Rtx/tUGJsdtd2w== -----END CERTIFICATE-----Generated at Sun Oct 19 19:57:44 2025 by rpki-client