$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: YgUqWn3h3qZqbT4khDuFF1CRKOcdxdSXazlRmcPHvSo= Subject key identifier: 34:55:E8:22:2D:28:D5:C9:CF:C1:3A:FE:1B:D9:4F:4C:76:8F:DB:04 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 0198D5BBCBCD21320932FCA1C16A2633ADB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0E58 Signing time: Sat 23 Aug 2025 07:01:51 +0000 Manifest this update: Sat 23 Aug 2025 07:01:51 +0000 Manifest next update: Sun 24 Aug 2025 07:01:51 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: T54DL0dW+54To1pJPXDYwyRkVNH2JtQUljCfmYYNAkE=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:cb:cd:21:32:09:32:fc:a1:c1:6a:26:33:ad:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Aug 23 07:01:51 2025 GMT Not After : Aug 24 07:01:51 2025 GMT Subject: CN=3455e8222d28d5c9cfc13afe1bd94f4c768fdb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:cb:e9:43:ad:0a:33:90:31:2d:82:24:74: e4:5e:30:29:5c:ae:3a:71:ee:43:26:ff:c3:e4:e6: 5b:cc:21:a8:ef:a1:20:1a:c5:4d:55:61:e1:d2:b3: 25:36:4f:ef:aa:91:76:39:53:f8:a3:7e:2d:f2:a4: 7b:11:73:94:03:83:72:a4:9c:8a:ac:46:c9:f6:e6: 2f:b3:fa:5f:1e:58:9b:d1:93:3f:98:57:be:a7:bd: cc:42:fa:c8:55:eb:ac:45:1e:a8:52:f2:db:85:6a: 5d:18:62:ff:b8:01:e9:3b:21:0f:bd:94:e9:e2:4e: 83:f0:8a:9c:ea:79:8b:8c:1a:8a:1c:02:b0:96:a3: d4:71:91:1b:f8:ad:92:96:a2:a8:77:5b:f8:66:69: bc:54:be:60:33:d2:ef:cb:c3:20:8a:9c:b4:8f:0b: 3c:d0:7d:37:12:34:8f:0b:99:69:c8:3f:8b:72:d7: fa:69:ad:23:d1:76:da:d8:4e:4b:7b:3e:c1:7f:ce: 85:5f:9b:44:4a:85:01:f7:75:2a:73:d5:84:90:62: 84:10:06:de:5f:31:55:58:fe:09:15:eb:8d:b8:e9: 3b:81:6f:16:82:08:de:d0:25:ce:7d:94:59:a5:29: fb:65:d6:c4:fc:79:61:34:ed:8f:b5:cb:3c:3e:f3: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:55:E8:22:2D:28:D5:C9:CF:C1:3A:FE:1B:D9:4F:4C:76:8F:DB:04 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6f:ad:a3:ea:bb:d1:18:39:a2:be:62:79:c2:09:ae:8a:ce: 20:00:d3:7b:bc:47:7b:bb:92:52:35:4c:f5:c9:3f:7d:cd:13: 52:63:ef:7c:ae:a7:15:d1:12:01:45:62:bb:e4:e8:08:e7:a9: 58:d5:97:a5:b6:b3:fd:0d:c1:cd:31:83:50:f8:17:1b:36:a2: 9c:b4:25:26:e7:0d:b9:89:a1:8c:bc:e0:84:11:7d:94:f3:9c: a7:c4:21:cc:f8:d6:c3:59:aa:ba:b7:86:4a:aa:ae:5f:53:20: 92:31:21:62:c8:2b:3f:1a:b3:9a:02:62:66:49:86:80:0c:4d: 31:74:2a:b0:80:de:98:97:0d:d4:a6:13:a2:ea:24:d0:89:da: 40:34:f9:c9:e7:fc:4e:de:45:22:ef:9d:3c:9c:f4:c2:72:60: ca:31:1f:18:15:f5:56:37:58:1f:73:c7:a4:05:86:50:33:a2: 61:24:b0:26:8b:7f:1e:b1:a0:17:a2:fd:16:05:01:ea:3b:20: 56:ab:e8:99:6b:9e:ae:d1:56:b0:5f:13:ee:73:c0:39:0a:79: c4:55:e2:0d:38:3f:e0:32:73:25:be:9f:93:bb:00:4b:d5:5a: 5c:26:78:ea:b3:22:f6:54:03:2d:a6:61:af:1c:ea:6b:68:26: a4:61:f3:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu8vNITIJMvyhwWomM62yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUwODIzMDcwMTUxWhcNMjUwODI0MDcwMTUxWjAzMTEwLwYDVQQD EygzNDU1ZTgyMjJkMjhkNWM5Y2ZjMTNhZmUxYmQ5NGY0Yzc2OGZkYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHXL6UOtCjOQMS2CJHTkXjApXK46 ce5DJv/D5OZbzCGo76EgGsVNVWHh0rMlNk/vqpF2OVP4o34t8qR7EXOUA4NypJyK rEbJ9uYvs/pfHlib0ZM/mFe+p73MQvrIVeusRR6oUvLbhWpdGGL/uAHpOyEPvZTp 4k6D8Iqc6nmLjBqKHAKwlqPUcZEb+K2SlqKod1v4Zmm8VL5gM9Lvy8Mgipy0jws8 0H03EjSPC5lpyD+Lctf6aa0j0Xba2E5Lez7Bf86FX5tESoUB93Uqc9WEkGKEEAbe XzFVWP4JFeuNuOk7gW8Wggje0CXOfZRZpSn7ZdbE/HlhNO2Ptcs8PvMACwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRV6CItKNXJz8E6/hvZT0x2j9sEMB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArm+to+q7 0Rg5or5iecIJrorOIADTe7xHe7uSUjVM9ck/fc0TUmPvfK6nFdESAUViu+ToCOep WNWXpbaz/Q3BzTGDUPgXGzainLQlJucNuYmhjLzghBF9lPOcp8QhzPjWw1mqureG SqquX1MgkjEhYsgrPxqzmgJiZkmGgAxNMXQqsIDemJcN1KYTouok0InaQDT5yef8 Tt5FIu+dPJz0wnJgyjEfGBX1VjdYH3PHpAWGUDOiYSSwJot/HrGgF6L9FgUB6jsg VqvomWuertFWsF8T7nPAOQp5xFXiDTg/4DJzJb6fk7sAS9VaXCZ46rMi9lQDLaZh rxzqa2gmpGHziw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:30:30 2025 by rpki-client