$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: 80Ouz669+qrh1zKO6BWhccP5t/WpV8070Jz7zgPvLTg= Subject key identifier: 1B:A4:BE:1F:B7:EC:48:13:5F:C5:80:0F:09:6B:D5:D5:25:EF:CB:28 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 0198D5BBBAC2DEFF014450F890BC35C2DB11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 16CB Signing time: Sat 23 Aug 2025 07:01:46 +0000 Manifest this update: Sat 23 Aug 2025 07:01:46 +0000 Manifest next update: Sun 24 Aug 2025 07:01:46 +0000 Files and hashes: 1: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=) 2: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=) 3: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=) 4: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=) 5: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (hash: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=) 6: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=) 7: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: MG7oVBd1m4esznNkGWCHzpQXaZP8UVJmhOF+HXSoBpw=) 8: gp93L_YQvuGEaCDSOxiRg-T-4UM.roa (hash: cOL7dP+BUiqZrZ0lZLE/dQN9GFbGifb1tHwfI+S3noI=) 9: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=) 10: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=) 11: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (hash: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:ba:c2:de:ff:01:44:50:f8:90:bc:35:c2:db:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Aug 23 07:01:46 2025 GMT Not After : Aug 24 07:01:46 2025 GMT Subject: CN=1ba4be1fb7ec48135fc5800f096bd5d525efcb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:1a:af:3d:fd:13:4b:16:3c:6b:ed:ca:b6: f7:bd:94:e3:b7:5f:12:3a:53:4b:19:21:5c:60:5e: 16:d3:ec:52:13:c4:98:73:76:6b:2c:08:49:16:14: 0d:4b:95:10:3b:06:62:aa:4a:72:57:ec:3c:96:cb: f8:3e:69:8a:be:9b:5a:e8:47:ec:2b:21:b1:30:3f: 0f:8e:6d:31:8b:7b:c7:c7:69:21:a9:ed:48:2b:c9: f7:9b:30:52:97:19:1f:94:c2:2c:bf:5d:b1:5d:33: 48:0f:42:f2:70:fe:c8:20:0f:e4:c1:24:38:aa:bd: ff:a6:0f:23:0d:82:fa:be:cb:22:45:45:6a:bb:b9: 47:4b:55:85:54:75:2c:8d:1c:3c:7d:e5:03:ea:8f: 45:7b:e4:4f:80:c7:5e:e2:54:82:cc:5f:a2:08:01: cd:13:5e:1c:b5:e4:b5:9e:22:46:12:97:71:5a:a7: 6e:31:e3:e4:b6:b9:db:77:08:ed:52:66:84:d7:46: bb:cc:26:70:37:a8:dc:26:fb:e8:1c:03:b5:2f:6b: 58:d1:e4:15:d7:01:92:4e:bf:bb:d9:68:60:24:ac: 81:07:83:7f:10:4a:ae:3e:29:2f:24:29:56:5d:c5: 3c:72:eb:e5:81:ca:f1:ea:c3:b8:08:5e:51:47:93: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A4:BE:1F:B7:EC:48:13:5F:C5:80:0F:09:6B:D5:D5:25:EF:CB:28 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:71:c9:00:20:72:e7:09:6b:d5:3e:eb:ac:90:38:0a:cb:8b: f2:bb:c4:2d:14:9b:60:e0:81:1a:4d:da:e9:11:b2:db:f8:56: d6:84:19:29:b1:d5:39:ca:ed:12:0c:bc:2e:97:96:48:3d:3a: 3b:85:ed:b4:24:e1:4b:e3:f7:aa:94:c1:69:ad:ee:68:22:19: 3d:69:9a:eb:55:ae:0c:9c:71:7e:5a:43:ed:ea:f7:fb:d7:02: 33:62:5d:e3:38:59:a4:30:01:22:0a:8e:0f:bd:3e:fe:11:b9: 35:44:7e:26:1e:76:cd:35:09:2c:06:60:a4:e3:6e:be:1f:e3: d5:aa:58:ad:4b:c6:e7:7a:5b:df:cb:94:16:50:21:1c:d6:ad: f5:d1:01:6f:94:61:0f:7f:23:9a:13:6b:2a:c7:42:23:64:54: d3:86:83:99:a9:02:33:55:a1:a7:ba:5a:05:40:d9:a1:e9:b8: 20:fe:95:2e:6c:99:30:cd:ea:2d:49:20:bd:5b:0e:4b:00:27: 2d:e5:c1:cf:84:23:a2:d7:6a:f0:89:dc:f4:34:35:4a:bd:6e: 9c:c4:ff:9b:c0:a8:d5:57:f4:a2:d6:ea:8e:5f:56:41:ff:5c: 01:2c:93:2b:0a:74:08:ea:50:04:5b:15:95:a4:ea:df:0f:5f: 37:14:8e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu7rC3v8BRFD4kLw1wtsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjUwODIzMDcwMTQ2WhcNMjUwODI0MDcwMTQ2WjAzMTEwLwYDVQQD EygxYmE0YmUxZmI3ZWM0ODEzNWZjNTgwMGYwOTZiZDVkNTI1ZWZjYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp38arz39E0sWPGvtyrb3vZTjt18S OlNLGSFcYF4W0+xSE8SYc3ZrLAhJFhQNS5UQOwZiqkpyV+w8lsv4PmmKvpta6Efs KyGxMD8Pjm0xi3vHx2khqe1IK8n3mzBSlxkflMIsv12xXTNID0LycP7IIA/kwSQ4 qr3/pg8jDYL6vssiRUVqu7lHS1WFVHUsjRw8feUD6o9Fe+RPgMde4lSCzF+iCAHN E14cteS1niJGEpdxWqduMePktrnbdwjtUmaE10a7zCZwN6jcJvvoHAO1L2tY0eQV 1wGSTr+72WhgJKyBB4N/EEquPikvJClWXcU8cuvlgcrx6sO4CF5RR5N2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBukvh+37EgTX8WADwlr1dUl78soMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHHJACBy 5wlr1T7rrJA4CsuL8rvELRSbYOCBGk3a6RGy2/hW1oQZKbHVOcrtEgy8LpeWSD06 O4XttCThS+P3qpTBaa3uaCIZPWma61WuDJxxflpD7er3+9cCM2Jd4zhZpDABIgqO D70+/hG5NUR+Jh52zTUJLAZgpONuvh/j1apYrUvG53pb38uUFlAhHNat9dEBb5Rh D38jmhNrKsdCI2RU04aDmakCM1Whp7paBUDZoem4IP6VLmyZMM3qLUkgvVsOSwAn LeXBz4Qjotdq8Inc9DQ1Sr1unMT/m8Co1Vf0otbqjl9WQf9cASyTKwp0COpQBFsV laTq3w9fNxSONA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:26:14 2025 by rpki-client