$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: rj3L9laLJrDIrQDSjVtpWPin2mVCbdCho232y/s4oaU= Subject key identifier: 7F:17:79:15:FB:58:7D:0D:9C:28:4D:A5:F8:A1:DE:4C:F6:25:F3:A4 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 0197CE03C74FAF2E2EA0BD4459818F757D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 15C6 Signing time: Thu 03 Jul 2025 02:00:43 +0000 Manifest this update: Thu 03 Jul 2025 02:00:43 +0000 Manifest next update: Fri 04 Jul 2025 02:00:43 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: /c6XXnwTkf065/nx2OvRNWtZgtY6JJ9aY7mWC24q9jc=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ce:03:c7:4f:af:2e:2e:a0:bd:44:59:81:8f:75:7d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jul 3 02:00:43 2025 GMT Not After : Jul 4 02:00:43 2025 GMT Subject: CN=7f177915fb587d0d9c284da5f8a1de4cf625f3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:ab:c8:e9:e0:10:62:08:cf:0e:9c:2d:21: e9:8d:ed:cb:47:69:c0:52:c2:ea:35:51:03:ad:fa: 99:c4:06:b7:fa:21:97:bd:9d:78:43:90:b4:10:6f: b6:0b:5e:b2:98:be:1b:25:c5:f6:f7:36:73:af:b6: 06:68:be:91:b2:02:0c:5b:31:84:51:be:14:cb:92: 91:ae:a6:5d:ee:a5:85:28:21:3a:fc:f8:6d:57:ad: 8b:04:e9:9e:9c:79:ff:bf:05:a8:c1:df:aa:db:2c: 5b:b6:fe:fc:16:6a:31:fa:a8:9b:21:8f:39:bf:26: 27:ee:c4:61:c2:08:97:b8:e4:7d:51:17:36:dd:6b: dd:92:a3:e0:67:70:3f:2d:d6:17:24:17:74:cd:5f: 6e:e0:67:7f:55:16:9e:8e:1c:ba:ae:da:a3:c3:0d: 9f:b0:aa:43:df:23:9b:29:1b:00:dc:02:f1:57:7b: ca:54:f7:1c:cd:b3:71:6f:b5:49:19:f7:3c:d5:ec: 44:ec:a8:09:fe:52:e8:58:7e:2d:c7:7e:1a:2c:16: 23:b9:14:a0:0c:00:0a:d9:96:f2:62:69:18:df:14: 65:54:11:2f:5f:1b:c3:93:a2:9f:50:2a:be:d5:d8: 07:e8:4b:c2:6a:13:d5:ed:fe:9d:47:01:73:d2:24: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:17:79:15:FB:58:7D:0D:9C:28:4D:A5:F8:A1:DE:4C:F6:25:F3:A4 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:31:31:91:cf:72:43:a4:1c:86:b6:68:90:f1:07:7b:2f:f1: ca:4d:07:ec:ba:08:0b:71:fe:0f:d8:67:2e:d0:0c:28:a9:69: bb:4c:93:34:86:88:4c:27:8b:17:72:c0:64:48:e5:79:e4:8c: 75:07:b4:70:f0:12:17:ea:6f:a2:1b:62:45:78:ba:9b:f9:5f: 09:36:04:4d:85:7f:7a:e5:96:d0:0e:8f:9e:72:6c:fc:92:c5: b0:b5:b6:91:f5:5e:d0:5e:dc:96:3a:1f:f6:b1:f8:4f:ea:17: ed:a0:35:cf:4e:b9:b5:6c:c1:8b:04:6a:de:9d:8e:bd:ed:5c: ba:64:d1:06:ca:d3:73:d4:e5:8b:9e:91:c9:dd:11:5f:d3:fd: 96:67:89:4c:19:11:70:88:40:29:58:e4:04:2b:8e:99:ed:09: 0c:bb:bc:7f:a3:4b:77:ef:a8:28:f5:67:23:66:4a:ee:44:92: 1c:b3:ae:a7:3e:a1:e6:f4:46:a3:82:ae:cd:1a:3e:51:18:31: ce:7c:9b:99:7b:c6:3c:e0:33:05:92:fa:aa:1a:ad:bc:42:78: ef:b7:b2:96:c7:bd:62:cf:41:f4:1c:5a:70:7d:95:c7:d2:3a: 7f:4d:c6:1d:ef:8a:58:43:7d:9d:6e:c2:10:0d:8e:dc:65:a7: f5:35:7f:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfOA8dPry4uoL1EWYGPdX1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUwNzAzMDIwMDQzWhcNMjUwNzA0MDIwMDQzWjAzMTEwLwYDVQQD Eyg3ZjE3NzkxNWZiNTg3ZDBkOWMyODRkYTVmOGExZGU0Y2Y2MjVmM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnOryOngEGIIzw6cLSHpje3LR2nA UsLqNVEDrfqZxAa3+iGXvZ14Q5C0EG+2C16ymL4bJcX29zZzr7YGaL6RsgIMWzGE Ub4Uy5KRrqZd7qWFKCE6/PhtV62LBOmenHn/vwWowd+q2yxbtv78Fmox+qibIY85 vyYn7sRhwgiXuOR9URc23WvdkqPgZ3A/LdYXJBd0zV9u4Gd/VRaejhy6rtqjww2f sKpD3yObKRsA3ALxV3vKVPcczbNxb7VJGfc81exE7KgJ/lLoWH4tx34aLBYjuRSg DAAK2ZbyYmkY3xRlVBEvXxvDk6KfUCq+1dgH6EvCahPV7f6dRwFz0iSgNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8XeRX7WH0NnChNpfih3kz2JfOkMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjExkc9y Q6QchrZokPEHey/xyk0H7LoIC3H+D9hnLtAMKKlpu0yTNIaITCeLF3LAZEjleeSM dQe0cPASF+pvohtiRXi6m/lfCTYETYV/euWW0A6PnnJs/JLFsLW2kfVe0F7cljof 9rH4T+oX7aA1z065tWzBiwRq3p2Ove1cumTRBsrTc9Tli56Ryd0RX9P9lmeJTBkR cIhAKVjkBCuOme0JDLu8f6NLd++oKPVnI2ZK7kSSHLOupz6h5vRGo4KuzRo+URgx znybmXvGPOAzBZL6qhqtvEJ477eylse9Ys9B9BxacH2Vx9I6f03GHe+KWEN9nW7C EA2O3GWn9TV/YQ== -----END CERTIFICATE-----Generated at Thu Jul 3 05:13:33 2025 by rpki-client