$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: 1/hc+atvxqQc2eKVvfXSYu2p8JHpkFyOL4a7HcOBrRY= Subject key identifier: 43:8A:B2:04:9B:CB:B7:E8:BD:4A:47:C7:2E:0D:9B:49:FD:B3:E1:28 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 0197B6A211E9728A857BAAC93FD0113F2137 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 130F Signing time: Sat 28 Jun 2025 13:02:44 +0000 Manifest this update: Sat 28 Jun 2025 13:02:44 +0000 Manifest next update: Sun 29 Jun 2025 13:02:44 +0000 Files and hashes: 1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=) 2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=) 3: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=) 4: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=) 5: 9o1bJHIY2DKstOflrYyuB4_xDJU.roa (hash: v84lCLYd/0h8qh/tv6tRvbnV7bRzw3VazSaPX2e1ubo=) 6: BQ_7CRByLAUpF1evkSyLCrrovKE.roa (hash: uT3RGzji41/DL4m9M7hw+Zpz+kLpotb4EKSd9Zae5tA=) 7: CQSr_mSGvx_MO501tTIbCtodnJs.roa (hash: esowCKU64ui4/Ap6GOn6lU0uRgAnfvEQjSsW8NdABkY=) 8: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=) 9: I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa (hash: 5OhiLGp3GkkcRYzG4tfq1G76vW7BOIqKJjeoc64Pt4o=) 10: MhM8AdXgoCd4zrzFUNyYeB1JwVg.roa (hash: x8CsV2gfv0T+wUL+aorX982fUJ/l+SVnwH0Xs0/jba0=) 11: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=) 12: TEmBttlqOql-6WlBVV0HWvswEQo.roa (hash: fN7yflsLhVlqg4R45jJbYQ9DskvVzHDmzUKU/2SCJrQ=) 13: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=) 14: bm3jAPSokNwmkDXJzC1yE4mlh8U.roa (hash: Ugi+oeIGdBF2ZuSWBZVXXcNVIbH2fno96x0J1auQtLQ=) 15: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=) 16: ieLYYEtxw8yorIFSAMUiUnhPzxc.roa (hash: zpEjE+0wqNe3063Xp+u8y1IQ6Fze1n5YSctd31AydZQ=) 17: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=) 18: pubBNtMB3i07GYMPpVIhhyFOTo8.roa (hash: Mn01o/7jdUgPgTc66DieNIOLFHGdyMS6RTRjsWHR/O4=) 19: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=) 20: t65dNvZ6mIPWzEgYcMlAUQutKR4.roa (hash: IJP/pC4d01Se7R3R057e96hfMZC2OpsCJpYV3fv+Wfw=) 21: uGhxQuJoiydmGBCdoiTuE4rnskY.roa (hash: cp9F2KjzrCdyiwYgQ04s2rnpm15FpJSYgYYNO9VL9i4=) 22: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: aQJroHXxcCsCu5j7rgEj70uDmH2bjZW2FuyakLjkcxs=) 23: w35GeF1NRVWkdgYrM-D2oVh4XKk.roa (hash: 0xzHuhqUOoAiP/Y6/IovF7/iSmc6xQ7Xmuv7ej0uOJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a2:11:e9:72:8a:85:7b:aa:c9:3f:d0:11:3f:21:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jun 28 13:02:44 2025 GMT Not After : Jun 29 13:02:44 2025 GMT Subject: CN=438ab2049bcbb7e8bd4a47c72e0d9b49fdb3e128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:5b:6f:6d:cc:e2:8b:7a:57:10:52:f7:b2: 6f:c2:18:5b:c4:81:55:58:80:bb:4d:e7:ba:00:fe: a0:04:a9:28:6f:d9:94:de:b3:90:a7:64:de:ab:0e: b6:2e:cd:28:cc:1f:c5:1f:1d:49:d1:c2:2c:98:37: 13:4f:4c:68:2e:fa:e0:13:a2:48:90:72:89:fd:43: 33:14:33:3d:db:5b:ff:df:7e:39:69:19:05:d7:6e: b0:37:3d:f5:38:dc:35:9a:59:67:9e:db:ae:34:bb: 10:1d:11:01:b9:cb:18:20:f2:73:b8:f3:86:dc:fb: 70:b1:01:7b:74:8a:ba:d2:60:67:97:09:10:f6:ef: a2:0c:e2:6e:fa:1f:de:d3:20:a9:88:4c:06:d8:16: d9:af:8b:b0:01:75:9e:40:78:75:b6:55:d6:4f:65: 12:f2:c2:57:0a:ec:35:01:7d:5d:de:10:dc:0d:66: 93:e9:c4:ff:ea:54:ce:14:63:88:99:4d:ad:47:f5: f0:09:db:22:12:06:d8:f0:19:1a:67:27:b9:b8:84: ef:25:06:83:6f:17:b6:5a:b7:3e:15:21:01:d0:f5: 1d:26:b1:5c:7f:8b:d7:b6:b0:48:6c:df:51:84:31: cd:27:f6:ed:49:08:60:59:c4:a1:25:bb:47:fd:fe: 6f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8A:B2:04:9B:CB:B7:E8:BD:4A:47:C7:2E:0D:9B:49:FD:B3:E1:28 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:66:d4:38:64:61:e8:1f:5b:c3:af:44:b5:68:8f:1d:83:85: f1:fe:7d:2d:22:a2:e5:02:8d:55:ea:c5:4b:76:51:48:3b:f1: 0f:0b:75:db:3c:3e:77:77:e7:62:a5:75:15:b8:f1:06:f0:d5: 2c:b5:0f:e9:8c:10:88:28:51:a3:f2:48:b5:7a:3c:8c:ad:cc: 3e:47:d4:8e:60:ed:66:8b:80:c9:b4:68:1d:8a:80:41:b6:98: bb:02:16:60:72:c1:50:a8:db:52:88:78:9b:0d:f4:9c:b9:46: 53:cf:bd:5e:c0:fc:56:4f:5a:69:16:81:f1:9a:95:b8:79:a5: f7:c2:81:cc:9c:f9:76:6d:0e:50:ad:81:4f:a6:ae:f0:61:b0: 0a:0c:4c:34:f4:94:ee:f4:e0:97:a6:53:7d:f5:db:3b:07:06: f2:e9:b3:41:5a:cb:df:13:37:53:b7:ea:45:0b:04:26:71:7d: 37:77:b5:a3:fd:6e:30:cb:cc:45:1d:71:a1:c2:81:48:5d:ad: fc:36:f2:78:20:0e:dc:65:1e:a0:9b:2b:d8:17:b5:e4:15:01: 89:25:03:0e:e2:b3:40:2b:cd:c1:30:19:32:90:b3:d7:53:46: 83:11:ea:be:e7:2d:9c:7e:20:7b:f1:71:b9:90:c4:e5:b4:47: 27:bc:5a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2ohHpcoqFe6rJP9ARPyE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUwNjI4MTMwMjQ0WhcNMjUwNjI5MTMwMjQ0WjAzMTEwLwYDVQQD Eyg0MzhhYjIwNDliY2JiN2U4YmQ0YTQ3YzcyZTBkOWI0OWZkYjNlMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Bbb23M4ot6VxBS97JvwhhbxIFV WIC7Tee6AP6gBKkob9mU3rOQp2Teqw62Ls0ozB/FHx1J0cIsmDcTT0xoLvrgE6JI kHKJ/UMzFDM921v/3345aRkF126wNz31ONw1mllnntuuNLsQHREBucsYIPJzuPOG 3PtwsQF7dIq60mBnlwkQ9u+iDOJu+h/e0yCpiEwG2BbZr4uwAXWeQHh1tlXWT2US 8sJXCuw1AX1d3hDcDWaT6cT/6lTOFGOImU2tR/XwCdsiEgbY8BkaZye5uITvJQaD bxe2Wrc+FSEB0PUdJrFcf4vXtrBIbN9RhDHNJ/btSQhgWcShJbtH/f5vnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOKsgSby7fovUpHxy4Nm0n9s+EoMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmbUOGRh 6B9bw69EtWiPHYOF8f59LSKi5QKNVerFS3ZRSDvxDwt12zw+d3fnYqV1FbjxBvDV LLUP6YwQiChRo/JItXo8jK3MPkfUjmDtZouAybRoHYqAQbaYuwIWYHLBUKjbUoh4 mw30nLlGU8+9XsD8Vk9aaRaB8ZqVuHml98KBzJz5dm0OUK2BT6au8GGwCgxMNPSU 7vTgl6ZTffXbOwcG8umzQVrL3xM3U7fqRQsEJnF9N3e1o/1uMMvMRR1xocKBSF2t /DbyeCAO3GUeoJsr2Be15BUBiSUDDuKzQCvNwTAZMpCz11NGgxHqvuctnH4ge/Fx uZDE5bRHJ7xatg== -----END CERTIFICATE-----Generated at Sat Jun 28 21:28:17 2025 by rpki-client