$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: lkuqeF9KDWSy08XJ6xrWOGVUzor5aQ5NZZPrjn08am4= Subject key identifier: F2:0C:A1:28:67:81:AF:71:F1:19:DB:8C:4A:89:17:1D:FD:F4:4E:82 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 0199FC8F4959B5B56A806E34A739E5D7C525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 17EB Signing time: Sun 19 Oct 2025 13:01:12 +0000 Manifest this update: Sun 19 Oct 2025 13:01:12 +0000 Manifest next update: Mon 20 Oct 2025 13:01:12 +0000 Files and hashes: 1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=) 2: 0t-N62F11L22RXi8LFNfQS2TvDQ.roa (hash: fZ442BH/ml9qRqaBuzjKJulrHPDUDH1jI4JlwuQOcx8=) 3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=) 4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=) 5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=) 6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=) 7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: yx7WHZJXd47vF8aDp6hOOOsH0Zfp5Hcga3Jvuig6lIU=) 8: D8-tg2HFfaxtzWtLFVQ2_Tw33X4.roa (hash: W0yzlxsbtTJh4rdHCOnewjEeTldRIygMs+3n84CIFt0=) 9: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=) 10: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=) 11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=) 12: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=) 13: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=) 14: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=) 15: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:49:59:b5:b5:6a:80:6e:34:a7:39:e5:d7:c5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Oct 19 13:01:12 2025 GMT Not After : Oct 20 13:01:12 2025 GMT Subject: CN=f20ca1286781af71f119db8c4a89171dfdf44e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fc:10:38:06:db:23:c7:0f:0f:be:4d:9c:12: ac:21:79:9e:f5:06:dc:f0:9b:7c:b5:7c:5c:81:15: 2b:79:cc:13:d4:de:79:e7:df:be:a3:1a:d6:48:a0: f4:00:60:59:db:ce:32:d7:cc:81:ba:70:03:66:cb: ac:41:30:7e:56:f0:1a:74:ae:f4:ba:fc:95:28:a4: 5c:63:3b:25:08:a0:49:36:33:38:00:e9:27:b7:f9: ef:9e:1a:f3:32:ae:33:01:a9:ba:d8:1a:a9:c6:77: 44:f3:e6:62:00:a8:b3:37:5b:06:9d:d6:56:47:2c: 33:bc:f7:09:f9:ae:9e:da:be:f8:2e:4b:42:13:8b: 9d:ac:82:fc:f0:21:c8:3f:68:85:22:c9:c5:7b:c1: 44:76:40:b4:31:92:10:1b:0b:31:f5:ae:4c:21:0a: 03:79:26:ec:80:15:3d:95:46:6a:60:e9:8e:f5:cf: 57:8d:d2:cb:db:6e:c8:8f:68:99:6e:0e:e6:65:92: 45:b0:90:51:a3:e0:68:52:b0:7f:97:a8:92:29:2e: 91:81:71:23:25:a3:03:bd:d5:d5:f9:e9:d9:a6:28: 87:8c:c7:b0:b0:6d:19:71:70:91:9b:28:25:01:48: 17:b7:1d:6d:ad:3a:de:fa:63:21:81:82:a1:d5:b1: 12:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0C:A1:28:67:81:AF:71:F1:19:DB:8C:4A:89:17:1D:FD:F4:4E:82 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f9:7f:f4:51:04:20:8f:88:b0:02:4d:14:ee:1e:02:1a:9c: d5:aa:8e:7d:cc:2d:5f:e5:de:e7:bc:0b:a2:25:e8:a6:11:c4: 60:46:d4:37:dc:84:14:7f:86:7b:da:ec:92:08:29:9c:81:23: ca:25:38:30:ad:e3:d3:a8:98:09:b3:64:ad:bf:12:d0:a8:71: 55:f0:2d:5e:b9:a0:6c:1e:b9:59:34:d6:1f:b9:93:ba:83:e8: 51:85:57:45:96:53:29:44:45:40:f9:5b:ad:11:b3:af:61:26: f6:3e:30:b8:3a:2e:d1:07:78:8f:55:43:99:54:06:ab:c8:7f: e5:78:f1:51:d7:b3:84:dc:4e:aa:3d:b6:a5:3a:4b:51:a2:c9: dc:7e:85:2f:be:d2:d9:f8:5c:4c:ee:0d:6c:3a:b4:4d:52:0e: d1:88:2d:2a:e4:bc:fe:48:34:8d:da:e2:ef:6c:c0:b2:96:00: 7b:62:8d:fa:77:6c:08:af:61:84:d1:0a:75:ad:12:ae:0c:92: 76:9d:2a:af:80:66:30:b8:a8:78:86:cc:2b:c7:02:f9:42:92: 27:8f:10:1a:f8:82:27:37:36:6b:e5:ba:01:c0:0c:57:1e:04: f0:fb:b4:fa:54:74:f8:a5:a8:d8:69:eb:28:01:b6:9f:2f:5d: b4:b4:16:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j0lZtbVqgG40pznl18UlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjUxMDE5MTMwMTEyWhcNMjUxMDIwMTMwMTEyWjAzMTEwLwYDVQQD EyhmMjBjYTEyODY3ODFhZjcxZjExOWRiOGM0YTg5MTcxZGZkZjQ0ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/wQOAbbI8cPD75NnBKsIXme9Qbc 8Jt8tXxcgRUrecwT1N5559++oxrWSKD0AGBZ284y18yBunADZsusQTB+VvAadK70 uvyVKKRcYzslCKBJNjM4AOknt/nvnhrzMq4zAam62BqpxndE8+ZiAKizN1sGndZW RywzvPcJ+a6e2r74LktCE4udrIL88CHIP2iFIsnFe8FEdkC0MZIQGwsx9a5MIQoD eSbsgBU9lUZqYOmO9c9XjdLL227Ij2iZbg7mZZJFsJBRo+BoUrB/l6iSKS6RgXEj JaMDvdXV+enZpiiHjMewsG0ZcXCRmyglAUgXtx1trTre+mMhgYKh1bESBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIMoShnga9x8RnbjEqJFx399E6CMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/l/9FEE II+IsAJNFO4eAhqc1aqOfcwtX+Xe57wLoiXophHEYEbUN9yEFH+Ge9rskggpnIEj yiU4MK3j06iYCbNkrb8S0KhxVfAtXrmgbB65WTTWH7mTuoPoUYVXRZZTKURFQPlb rRGzr2Em9j4wuDou0Qd4j1VDmVQGq8h/5XjxUdezhNxOqj22pTpLUaLJ3H6FL77S 2fhcTO4NbDq0TVIO0YgtKuS8/kg0jdri72zAspYAe2KN+ndsCK9hhNEKda0SrgyS dp0qr4BmMLioeIbMK8cC+UKSJ48QGviCJzc2a+W6AcAMVx4E8Pu0+lR0+KWo2Gnr KAG2ny9dtLQWDw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:05:39 2025 by rpki-client