$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: TOPx1bA6Cp/ancROL2xmGF3EroVY+/71cNMEjWmC0MY= Subject key identifier: 05:47:B4:F3:85:08:8A:83:91:8A:2F:1E:9B:61:DD:E6:58:70:60:8D Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 0196CB3BD4144F5325729B7ECA5779680F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1540 Signing time: Tue 13 May 2025 20:00:17 +0000 Manifest this update: Tue 13 May 2025 20:00:17 +0000 Manifest next update: Wed 14 May 2025 20:00:17 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: atKI7qtxhSdUMGjuSsvIZ5I4cb41iKZockF0gfSbTKo=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 20:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:cb:3b:d4:14:4f:53:25:72:9b:7e:ca:57:79:68:0f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: May 13 20:00:17 2025 GMT Not After : May 14 20:00:17 2025 GMT Subject: CN=0547b4f385088a83918a2f1e9b61dde65870608d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:63:35:ee:bc:b2:04:d4:58:fd:80:91:46: d7:d4:7e:2f:da:7c:54:48:86:57:c3:c4:c1:2b:ac: 9c:48:5f:32:26:83:c6:60:08:8b:bd:7d:a6:41:e8: 14:89:b9:71:e0:14:f4:37:b4:3a:d6:7b:34:ea:60: c3:8b:b0:db:0e:64:6f:8a:21:83:44:d7:01:9a:cd: f9:cb:da:6b:f5:76:04:d2:0e:ca:b2:8e:97:dd:06: ad:0b:28:92:6f:1f:35:94:57:f1:38:8f:ce:11:3d: 5b:51:e8:22:7c:c2:9a:16:51:57:79:44:95:4f:d8: 1e:88:fb:3a:ea:76:f7:e9:d6:ee:9b:6a:92:c2:60: fa:c2:54:bc:20:92:66:77:de:29:ad:55:d6:70:ec: 6d:bd:2a:3f:5d:ed:6a:a9:85:23:51:36:0a:af:12: 08:9b:c7:83:60:20:31:7c:82:66:3b:3c:93:71:98: 66:a0:6c:de:08:f0:c9:1b:76:9e:e7:77:d8:be:95: 76:33:e0:fc:56:7e:97:96:ee:42:86:e4:e2:2e:2e: 9b:9a:65:bf:57:03:f7:b9:a9:a9:eb:8c:9f:83:d7: 20:d0:4c:02:15:e3:ff:f3:96:d7:63:a0:85:99:d2: be:04:0a:e6:59:cc:d9:e9:b3:ee:44:a0:ce:80:ac: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:47:B4:F3:85:08:8A:83:91:8A:2F:1E:9B:61:DD:E6:58:70:60:8D X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:17:f6:07:99:41:14:3c:66:b9:6e:4b:db:29:07:3c:f6:21: c2:d2:63:76:44:c1:2f:a6:6b:7d:bf:e4:63:03:7a:bc:d8:91: 8a:9d:84:ba:47:29:55:48:74:d8:7b:20:e9:ec:31:cf:2e:62: fc:0c:1f:2d:a6:03:aa:d4:9c:7c:59:77:ff:d6:74:5f:ad:1c: f1:f5:e6:c4:b8:0e:5b:5f:55:59:bf:82:24:75:bd:42:6a:d3: 10:26:45:02:a7:23:ab:69:f7:69:d9:2f:1c:5e:aa:10:bc:dd: 6a:3a:2a:41:69:95:e4:4c:da:de:cc:5c:af:64:52:e0:45:d4: 5c:61:74:55:cd:ff:cd:7b:dd:66:0a:d2:a6:ae:6b:d2:2d:ed: 47:91:bd:3c:db:45:83:90:32:5b:a2:e6:41:21:c1:23:c2:b0: 9a:28:3a:14:74:34:94:20:03:46:ad:59:e4:60:ab:05:84:bf: 13:92:27:73:ee:fa:a7:24:aa:f8:72:cb:bb:a0:23:a4:2e:1f: ab:ca:27:04:4f:05:b9:42:75:cb:71:e6:b4:8f:57:24:72:05: 81:ab:31:e3:6e:ee:3d:fd:6f:24:2d:98:52:f0:90:d8:1d:06: 5a:26:44:e3:d6:ac:5d:49:c6:e2:f4:95:ce:20:e9:78:f6:a5: cf:51:a0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbLO9QUT1Mlcpt+yld5aA8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUwNTEzMjAwMDE3WhcNMjUwNTE0MjAwMDE3WjAzMTEwLwYDVQQD EygwNTQ3YjRmMzg1MDg4YTgzOTE4YTJmMWU5YjYxZGRlNjU4NzA2MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAJjNe68sgTUWP2AkUbX1H4v2nxU SIZXw8TBK6ycSF8yJoPGYAiLvX2mQegUiblx4BT0N7Q61ns06mDDi7DbDmRviiGD RNcBms35y9pr9XYE0g7Kso6X3QatCyiSbx81lFfxOI/OET1bUegifMKaFlFXeUSV T9geiPs66nb36dbum2qSwmD6wlS8IJJmd94prVXWcOxtvSo/Xe1qqYUjUTYKrxII m8eDYCAxfIJmOzyTcZhmoGzeCPDJG3ae53fYvpV2M+D8Vn6Xlu5ChuTiLi6bmmW/ VwP3uamp64yfg9cg0EwCFeP/85bXY6CFmdK+BArmWczZ6bPuRKDOgKzV4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVHtPOFCIqDkYovHpth3eZYcGCNMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchf2B5lB FDxmuW5L2ykHPPYhwtJjdkTBL6Zrfb/kYwN6vNiRip2EukcpVUh02Hsg6ewxzy5i /AwfLaYDqtScfFl3/9Z0X60c8fXmxLgOW19VWb+CJHW9QmrTECZFAqcjq2n3adkv HF6qELzdajoqQWmV5Eza3sxcr2RS4EXUXGF0Vc3/zXvdZgrSpq5r0i3tR5G9PNtF g5AyW6LmQSHBI8Kwmig6FHQ0lCADRq1Z5GCrBYS/E5Inc+76pySq+HLLu6AjpC4f q8onBE8FuUJ1y3HmtI9XJHIFgasx427uPf1vJC2YUvCQ2B0GWiZE49asXUnG4vSV ziDpePalz1Ggzg== -----END CERTIFICATE-----Generated at Wed May 14 05:04:52 2025 by rpki-client