$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: EOC2ed6d7XXyraX26rEIF3DY+wGJz92jPaXBvE3BJvc= Subject key identifier: 57:60:18:93:07:0F:41:F4:3C:33:5A:FC:B4:04:56:40:14:87:F4:9E Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 0197B7EA321D7ADB2C6E78E0A3C5AA65A17E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1637 Signing time: Sat 28 Jun 2025 19:01:08 +0000 Manifest this update: Sat 28 Jun 2025 19:01:08 +0000 Manifest next update: Sun 29 Jun 2025 19:01:08 +0000 Files and hashes: 1: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=) 2: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=) 3: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=) 4: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=) 5: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (hash: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=) 6: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=) 7: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: it/9rpQu45oZ7tfsMCRB7dKzJ2vK9So2+o1fXuVqlMM=) 8: gp93L_YQvuGEaCDSOxiRg-T-4UM.roa (hash: cOL7dP+BUiqZrZ0lZLE/dQN9GFbGifb1tHwfI+S3noI=) 9: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=) 10: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=) 11: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (hash: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:32:1d:7a:db:2c:6e:78:e0:a3:c5:aa:65:a1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jun 28 19:01:08 2025 GMT Not After : Jun 29 19:01:08 2025 GMT Subject: CN=57601893070f41f43c335afcb40456401487f49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:a1:1d:01:88:58:43:16:71:f7:cc:3a:0d: 09:97:78:8d:c7:4a:1a:f8:bc:b3:e0:17:7c:e5:17: c5:2e:41:f2:bb:c4:4a:6f:8b:5f:d2:aa:ee:e6:82: fa:6a:05:66:2d:eb:9c:a1:0f:66:a1:81:2e:4f:42: 61:4b:f8:30:fc:32:b7:51:3f:a6:fc:e5:44:e8:ce: 46:b6:03:98:b0:fd:29:14:f3:83:28:66:f7:01:d0: 0a:4e:92:59:77:9a:92:83:ff:83:91:b3:2c:e4:13: ed:38:45:23:96:2d:da:2f:b5:3c:5c:ce:e8:8f:bf: fa:c4:7e:d5:c9:89:71:b7:9f:1e:6e:00:ee:85:c8: 3a:d5:98:d5:04:b1:ae:04:d4:80:ce:9b:0d:50:25: 35:41:67:63:e1:a5:f0:0c:35:25:17:ec:35:f2:54: 7e:40:01:ab:14:a0:21:81:4a:3f:07:b5:ea:78:e7: 0c:73:b5:43:c2:48:d8:0d:9e:9d:48:89:94:ac:93: b1:22:d2:64:09:29:56:ff:6e:ef:f1:5f:36:7b:23: ae:8a:45:29:7a:01:72:cd:67:bf:1b:04:36:9f:5b: b0:00:dd:cb:82:2e:24:06:e0:41:9a:66:9d:c5:18: 0a:2f:7e:9a:2c:d2:82:36:2a:3b:67:da:95:01:5f: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:60:18:93:07:0F:41:F4:3C:33:5A:FC:B4:04:56:40:14:87:F4:9E X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:87:2b:d4:c2:54:70:84:fc:03:31:0d:94:54:6c:37:b4:d9: 98:ff:d0:cd:85:ba:ef:f5:06:26:a8:fb:04:9b:7e:4c:3b:e6: fb:05:bf:51:3d:70:bd:62:26:79:5a:92:59:ff:d9:56:8e:10: 78:c9:80:78:c8:4f:2f:0d:aa:eb:c2:31:b1:99:81:46:58:49: 18:a1:f4:f0:87:91:70:4b:44:7a:7d:c2:22:1a:78:d5:cc:7b: a9:c4:95:ca:08:d5:80:bc:5f:1c:d1:24:16:d9:9e:ab:f2:40: 1c:43:a1:42:53:fc:06:1a:62:cc:03:22:b6:b4:a5:16:b4:55: c8:e9:47:56:92:37:03:b4:8d:15:2b:61:07:e8:fe:58:55:55: 68:36:00:93:ba:03:d4:d7:8f:c6:17:1b:f6:91:79:ca:5d:f1: 98:c6:65:66:be:d3:a0:f1:bd:2d:22:38:e5:06:cd:7b:21:9f: c7:36:cf:8e:da:82:31:55:2e:8c:90:21:23:fa:4e:0f:53:5e: 4d:2f:67:d2:d4:04:af:8f:ae:07:ed:3a:8c:ba:bf:94:eb:6e: d0:a7:2c:80:7e:d0:f8:bc:cc:c4:83:c2:3e:5f:1c:b8:7e:9f: bc:26:ca:e8:07:ea:01:77:51:03:72:2b:c1:87:89:19:ec:0b: 27:ea:9d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36jIdetssbnjgo8WqZaF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjUwNjI4MTkwMTA4WhcNMjUwNjI5MTkwMTA4WjAzMTEwLwYDVQQD Eyg1NzYwMTg5MzA3MGY0MWY0M2MzMzVhZmNiNDA0NTY0MDE0ODdmNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrahHQGIWEMWcffMOg0Jl3iNx0oa +Lyz4Bd85RfFLkHyu8RKb4tf0qru5oL6agVmLeucoQ9moYEuT0JhS/gw/DK3UT+m /OVE6M5GtgOYsP0pFPODKGb3AdAKTpJZd5qSg/+DkbMs5BPtOEUjli3aL7U8XM7o j7/6xH7VyYlxt58ebgDuhcg61ZjVBLGuBNSAzpsNUCU1QWdj4aXwDDUlF+w18lR+ QAGrFKAhgUo/B7XqeOcMc7VDwkjYDZ6dSImUrJOxItJkCSlW/27v8V82eyOuikUp egFyzWe/GwQ2n1uwAN3Lgi4kBuBBmmadxRgKL36aLNKCNio7Z9qVAV9t9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdgGJMHD0H0PDNa/LQEVkAUh/SeMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArocr1MJU cIT8AzENlFRsN7TZmP/QzYW67/UGJqj7BJt+TDvm+wW/UT1wvWImeVqSWf/ZVo4Q eMmAeMhPLw2q68IxsZmBRlhJGKH08IeRcEtEen3CIhp41cx7qcSVygjVgLxfHNEk Ftmeq/JAHEOhQlP8BhpizAMitrSlFrRVyOlHVpI3A7SNFSthB+j+WFVVaDYAk7oD 1NePxhcb9pF5yl3xmMZlZr7ToPG9LSI45QbNeyGfxzbPjtqCMVUujJAhI/pOD1Ne TS9n0tQEr4+uB+06jLq/lOtu0KcsgH7Q+LzMxIPCPl8cuH6fvCbK6AfqAXdRA3Ir wYeJGewLJ+qdlQ== -----END CERTIFICATE-----Generated at Sat Jun 28 21:28:17 2025 by rpki-client