$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: 9nywpm4KFGRZwoSZF/4i+WAtwQJxfIyzC3oJdMFHMBs= Subject key identifier: 95:CE:1E:08:B5:96:3F:0A:F5:71:22:7A:70:05:EC:7E:A6:C4:73:CF Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 0199FC2189741BF5415BFA25594484988429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 16E7 Signing time: Sun 19 Oct 2025 11:01:20 +0000 Manifest this update: Sun 19 Oct 2025 11:01:20 +0000 Manifest next update: Mon 20 Oct 2025 11:01:20 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: /Oj6Scr6rloYzMpmRZvrbAtk25SkKC/0/o2lknaPsL0=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:89:74:1b:f5:41:5b:fa:25:59:44:84:98:84:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Oct 19 11:01:20 2025 GMT Not After : Oct 20 11:01:20 2025 GMT Subject: CN=95ce1e08b5963f0af571227a7005ec7ea6c473cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9f:27:fc:10:0d:6a:05:44:14:45:2d:63:3f: 18:00:c6:08:5d:e8:80:3e:de:a8:27:ab:a2:c2:e4: 79:ae:73:e8:4b:55:05:ab:b4:6a:52:e0:07:2e:48: 1a:d6:38:4a:6b:b9:f6:c1:92:e5:53:da:37:9a:74: d5:4e:23:70:5a:61:8b:84:d7:cb:07:66:78:71:43: 6e:09:5e:c7:2b:88:ce:e5:8c:68:2d:ed:1d:f7:25: 4f:f6:d2:09:49:68:c4:56:02:c7:3f:49:54:ca:b7: c9:d7:05:92:97:6b:a9:ed:fd:18:60:9e:b5:9c:60: 9c:09:26:e4:dd:2c:bd:3b:1f:9e:24:1e:db:77:42: 60:eb:44:dc:8c:41:49:7d:91:82:d1:35:e4:c2:eb: f7:29:e9:67:9b:7f:75:30:e7:71:25:1a:53:02:62: c0:cc:48:d4:00:14:61:37:05:3e:c2:29:20:97:15: 44:84:68:4b:7c:db:1f:aa:4e:5f:21:a9:00:49:15: c3:09:70:65:dc:44:4d:49:4e:c6:61:44:9f:10:81: bb:42:72:d0:b4:4b:e6:c6:5e:81:53:87:1e:14:87: 10:c6:24:ca:f1:8a:c3:37:f8:09:d7:9b:fb:57:76: 5f:86:40:25:44:e4:a2:6a:cf:c2:ae:1b:fb:76:92: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CE:1E:08:B5:96:3F:0A:F5:71:22:7A:70:05:EC:7E:A6:C4:73:CF X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6f:c0:6a:7c:6e:8e:30:70:ae:f9:e9:9b:a4:f1:96:02:04: 88:8c:61:71:a2:57:02:19:bb:76:60:2c:fd:f3:37:85:e6:fc: d5:4c:f5:7f:b3:0c:f3:11:81:7d:fa:02:59:58:ac:92:4b:00: a3:2d:05:c6:25:f1:25:24:07:43:bb:8a:66:03:ad:68:a1:4f: f7:64:39:1f:b5:20:84:81:85:fb:04:d7:d0:3d:f3:5b:98:18: 8e:0f:9d:77:e7:e5:63:6c:44:5a:5c:32:bb:ca:b9:d7:a5:43: 44:6e:f2:1c:00:55:87:e4:88:0a:f7:48:06:fd:79:f5:1f:89: c5:f3:cd:22:7c:55:66:da:07:4f:ea:5c:d6:39:b9:a8:94:66: 8e:84:81:a9:6d:5a:38:c7:dc:a2:61:79:e6:17:8b:4d:b0:c4: cb:f4:ba:61:96:21:69:fa:24:6f:f1:71:7d:53:91:40:2e:5b: cc:4b:59:34:e2:a9:ca:9f:ef:78:68:be:56:16:08:2e:bb:3c: 77:1d:e9:6b:bf:00:9a:64:bb:37:b0:6d:ae:6d:a6:60:6b:2f: b4:c2:a9:06:64:c8:9d:4d:03:76:19:94:38:5b:79:00:04:c9: ad:df:f3:50:6d:c3:b4:ff:d3:ee:91:ac:dd:97:20:ef:d4:f5: fc:1a:d4:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IYl0G/VBW/olWUSEmIQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUxMDE5MTEwMTIwWhcNMjUxMDIwMTEwMTIwWjAzMTEwLwYDVQQD Eyg5NWNlMWUwOGI1OTYzZjBhZjU3MTIyN2E3MDA1ZWM3ZWE2YzQ3M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ8n/BANagVEFEUtYz8YAMYIXeiA Pt6oJ6uiwuR5rnPoS1UFq7RqUuAHLkga1jhKa7n2wZLlU9o3mnTVTiNwWmGLhNfL B2Z4cUNuCV7HK4jO5YxoLe0d9yVP9tIJSWjEVgLHP0lUyrfJ1wWSl2up7f0YYJ61 nGCcCSbk3Sy9Ox+eJB7bd0Jg60TcjEFJfZGC0TXkwuv3Kelnm391MOdxJRpTAmLA zEjUABRhNwU+wikglxVEhGhLfNsfqk5fIakASRXDCXBl3ERNSU7GYUSfEIG7QnLQ tEvmxl6BU4ceFIcQxiTK8YrDN/gJ15v7V3ZfhkAlROSias/Crhv7dpI2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXOHgi1lj8K9XEienAF7H6mxHPPMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW/Aanxu jjBwrvnpm6TxlgIEiIxhcaJXAhm7dmAs/fM3heb81Uz1f7MM8xGBffoCWViskksA oy0FxiXxJSQHQ7uKZgOtaKFP92Q5H7UghIGF+wTX0D3zW5gYjg+dd+flY2xEWlwy u8q516VDRG7yHABVh+SICvdIBv159R+JxfPNInxVZtoHT+pc1jm5qJRmjoSBqW1a OMfcomF55heLTbDEy/S6YZYhafokb/FxfVORQC5bzEtZNOKpyp/veGi+VhYILrs8 dx3pa78AmmS7N7Btrm2mYGsvtMKpBmTInU0DdhmUOFt5AATJrd/zUG3DtP/T7pGs 3Zcg79T1/BrUNQ== -----END CERTIFICATE-----Generated at Sun Oct 19 18:41:45 2025 by rpki-client