$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: iUUJnC2sLq0ULGuhz8cnQnmR9fP6gwKcH2BJlvLhw/Y= Subject key identifier: 0A:90:6D:1A:34:15:6B:2A:A9:9B:A0:62:13:E1:AC:7F:87:B5:51:4C Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 0197B88FC6C74D1990FAF7634C933B0F437E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 16B7 Signing time: Sat 28 Jun 2025 22:01:59 +0000 Manifest this update: Sat 28 Jun 2025 22:01:59 +0000 Manifest next update: Sun 29 Jun 2025 22:01:59 +0000 Files and hashes: 1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=) 2: 1UUsByoEofzjEeiAmIAz-WfMDBU.roa (hash: /7lgakegoy05PQfBI5+T4clOyf4KsMTGCdFLL/29XDY=) 3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=) 4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=) 5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=) 6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=) 7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: DtcgD2p/Onmxfdi2bymAWkGWhJeOAl6YJvc/LYq9rR8=) 8: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=) 9: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=) 10: PsG0AtBemY9a4yDfPpt9i4Kr2GY.roa (hash: sBzY2h3ELjAXI6xknFWXGyJRwY7PSfLmEfEaa7NAk3M=) 11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=) 12: TGoRKnPJi8w2mb-huIb9J65xjBo.roa (hash: ePazxEN5ghQaWUW2X4iM0oyeSePfu0C9ZykGzy3wrTA=) 13: TWE2GQbK5ZzsTrZP_-cvHhqi5o4.roa (hash: Ukt/h+lTDs0ybwVVqLmtBTv2gykUegHHPF+gzdqT32U=) 14: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=) 15: hj8L9GkvIvtNkKP3RDq4IS6qH84.roa (hash: Bkn5aqxtoPsMfsZ5PI8rL7/trWBK1cuaEqeQuBeWvM0=) 16: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=) 17: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=) 18: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 22:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:8f:c6:c7:4d:19:90:fa:f7:63:4c:93:3b:0f:43:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jun 28 22:01:59 2025 GMT Not After : Jun 29 22:01:59 2025 GMT Subject: CN=0a906d1a34156b2aa99ba06213e1ac7f87b5514c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:60:35:34:c2:ba:88:ed:99:ae:67:2e:e0: 79:e7:10:d2:bf:4a:24:b3:d7:75:f6:ff:80:16:38: fd:4c:97:db:1e:f1:ce:99:27:68:30:7b:9d:42:8e: 75:c6:02:6e:b4:9c:f8:f9:fe:f9:07:79:fc:13:9a: 0d:54:97:2a:70:28:65:b2:3c:7f:b1:f3:9f:4a:4b: f8:15:bf:3e:f7:6a:00:f1:4d:e8:3f:11:ad:42:50: 91:11:b8:07:2e:e2:b4:5e:5d:4a:25:09:3f:66:ef: 0d:0c:da:e0:cd:ca:bb:4c:e0:5b:36:23:a6:1b:11: 82:5b:7a:71:3f:4f:66:dc:12:fe:66:f7:77:80:68: fb:ee:71:41:a7:61:51:9a:35:3a:f4:ba:b2:21:2a: fd:5c:fc:e3:5e:12:b6:d7:9d:d5:ae:17:e5:98:23: 37:7c:ff:5e:6b:c1:cd:31:d9:5b:86:5b:23:e1:8f: 78:a4:30:66:a7:11:6e:3f:bb:1f:37:51:2b:13:67: ce:dd:97:c4:9e:f1:37:3c:eb:45:29:92:fb:7d:25: 3a:87:7d:33:91:89:d0:33:c1:42:10:05:d1:15:17: 91:bd:b5:b7:58:fe:5d:9e:eb:b3:60:9f:20:07:1a: fd:f8:29:88:a1:28:65:37:78:3b:bf:ba:90:e3:54: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:90:6D:1A:34:15:6B:2A:A9:9B:A0:62:13:E1:AC:7F:87:B5:51:4C X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:72:c5:84:8a:ee:ee:53:7a:61:00:e3:45:97:cb:d0:28:b0: d8:3c:c0:1a:bf:d1:15:89:a2:b1:54:05:21:b6:90:bd:a0:6f: 8e:62:c6:92:6e:8b:7c:b0:cd:2d:5a:9a:6b:77:5e:4c:3f:bd: bb:82:00:9d:31:a4:75:89:16:f2:87:98:da:16:cb:7c:ca:37: 57:6e:c9:db:73:fe:75:fb:40:49:38:0b:1a:ce:de:17:ab:e7: 98:54:d7:12:09:16:f3:f9:37:5d:0d:d0:4a:1a:ae:4c:08:aa: 0a:8d:41:86:2e:b8:97:16:af:c6:a3:04:d7:26:a5:3d:af:4c: 90:ab:92:92:53:12:dc:ee:5c:d2:eb:33:80:af:98:4b:19:76: 05:97:d0:44:5f:f6:40:85:2a:e3:ed:c1:3a:43:ae:48:ea:9e: 9a:7f:37:fb:a7:9e:7a:8d:fc:8c:dd:d7:67:ba:91:33:c7:ef: 7a:e1:35:bc:a7:d3:d0:46:0e:3e:45:54:06:f2:10:70:08:9b: ce:cd:4e:4c:b7:64:5e:18:00:f6:5e:2c:24:62:56:b3:38:eb: 34:ac:f4:ba:cb:22:b1:87:1f:5e:07:ef:d1:47:8f:1d:8f:ea: 9f:63:e3:0d:dd:4f:b1:e3:f1:24:2a:c3:75:8c:87:8d:4d:91: e8:62:b8:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4j8bHTRmQ+vdjTJM7D0N+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjUwNjI4MjIwMTU5WhcNMjUwNjI5MjIwMTU5WjAzMTEwLwYDVQQD EygwYTkwNmQxYTM0MTU2YjJhYTk5YmEwNjIxM2UxYWM3Zjg3YjU1MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8RgNTTCuojtma5nLuB55xDSv0ok s9d19v+AFjj9TJfbHvHOmSdoMHudQo51xgJutJz4+f75B3n8E5oNVJcqcChlsjx/ sfOfSkv4Fb8+92oA8U3oPxGtQlCREbgHLuK0Xl1KJQk/Zu8NDNrgzcq7TOBbNiOm GxGCW3pxP09m3BL+Zvd3gGj77nFBp2FRmjU69LqyISr9XPzjXhK2153VrhflmCM3 fP9ea8HNMdlbhlsj4Y94pDBmpxFuP7sfN1ErE2fO3ZfEnvE3POtFKZL7fSU6h30z kYnQM8FCEAXRFReRvbW3WP5dnuuzYJ8gBxr9+CmIoShlN3g7v7qQ41Qk1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqQbRo0FWsqqZugYhPhrH+HtVFMMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHLFhIru 7lN6YQDjRZfL0Ciw2DzAGr/RFYmisVQFIbaQvaBvjmLGkm6LfLDNLVqaa3deTD+9 u4IAnTGkdYkW8oeY2hbLfMo3V27J23P+dftASTgLGs7eF6vnmFTXEgkW8/k3XQ3Q ShquTAiqCo1Bhi64lxavxqME1yalPa9MkKuSklMS3O5c0uszgK+YSxl2BZfQRF/2 QIUq4+3BOkOuSOqemn83+6eeeo38jN3XZ7qRM8fveuE1vKfT0EYOPkVUBvIQcAib zs1OTLdkXhgA9l4sJGJWszjrNKz0ussisYcfXgfv0UePHY/qn2PjDd1PsePxJCrD dYyHjU2R6GK4nA== -----END CERTIFICATE-----Generated at Sun Jun 29 08:22:51 2025 by rpki-client