$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft File: bocQSk20xGNxp_i2pEH8MOzf4g8.mft (raw, json) Hash identifier: jGK9+YQq47oY2feQ0YPHcP14X6Mwju3kM81P4Rww2Rs= Subject key identifier: F1:71:0C:6A:2F:AA:E6:49:FA:27:53:BA:98:F4:A9:E5:D6:44:32:66 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 0198D583A95D00DBA54BBD3AE98B174B77BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft Manifest number: 0637 Signing time: Sat 23 Aug 2025 06:00:32 +0000 Manifest this update: Sat 23 Aug 2025 06:00:32 +0000 Manifest next update: Sun 24 Aug 2025 06:00:32 +0000 Files and hashes: 1: 1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa (hash: cGP1padkbbQVYWoE/e/vrGnkmIgEvHGkoKHwvNi2i1Y=) 2: 3BtMqXJycGGvfjNPXXTPm6tK57g.roa (hash: jPysS0bfydTK8RBC0P3rH2Kj76tPYYDoeG+8kJZDQRc=) 3: 3I5gldML-uQbyv9CkIBz-mgvWWk.roa (hash: eQaCI89QTy4mD37K4tNIxvLzbLgt03MOpzY9mO0sl3s=) 4: 3StlQJLBcPu1qxdEZ3JJOhm1Udg.roa (hash: iujEO2PTtn9nL8OTjRi898AzV+a2An7SXBq6YG65KaI=) 5: 52FAWMjukwSClkWfxKSDo4XBBoo.roa (hash: ypKj+SswxrhtvLkdDH0jGSwTM/p8FbWFW1TsPUqiZDY=) 6: 53-6v4txkTBlrr4mQ9BEOoOITGQ.roa (hash: /V7dlEX/iodJqJllmpCrS8JubIsPMm3gyCbsrYPAXNQ=) 7: 7xT-V2AfJ7cOEF-PLphwU7XPcF8.roa (hash: GxKtYKMpCX488B9i4qJSbSRlCLZBdKpoVEcbLS88GPw=) 8: DZEVG3s_YbDQv7uyGTLk5eEnBEc.roa (hash: vmmNG9wBUVs1bjs4kQtuxT15lN0hpOkAyVIAzMJ8j60=) 9: EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa (hash: Qthm1o1lZVCkgyrZ5XiBtPb86SGLq9HwTrkWvzHtL+4=) 10: JUWcBBikgmbqMXwsOXAyZ2CWc4Y.roa (hash: M7E6ywtCcvNZ1OSJ2u9/DqjHMTLCOhLEuB3bum1kBz0=) 11: LztToIfHj5MPHP69zf_0q_SimrU.roa (hash: 0JPoHmLHmn9stIi7tg5FnXzBytZDbUKqcPQHQVNsAoU=) 12: Wz7uvxRJjmNbpMHXqyc5XIPjHYg.roa (hash: hYhipTaQ14gbpmM2CsGVDCplldw8XWpgCwk8ecMo+1k=) 13: Z0FuRe_3oJ_yWcDW6-1F-dZGvm8.roa (hash: xch+qAPR9QzGm1NgKYI8gVA4Qr0GtidJo5DTI17Jweo=) 14: ZbHp2Q0SQCE3MMYBAQ4MOMTgPEM.roa (hash: TQP4ZxqijWk9XzygHeIy2mb/KtPqcpn8/1/3cIo31Ss=) 15: _TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa (hash: rOZR+3np3EA3AflU2r578HJgACioxVlkiKkqQOW791k=) 16: bocQSk20xGNxp_i2pEH8MOzf4g8.crl (hash: A0B5FWcwdMeDRcdpNFuixvg2gJ3sn+Wqc4zEyCt09YM=) 17: cCj87e869xFxifTftOqfvb6-2mo.roa (hash: bTsfeRR2v5VlvWqbaZbJaCthKlgXU0XAN9dl2IiSZuE=) 18: ckz8rqoc5X4WUxyhv3Kxg8VkWsk.roa (hash: 7S83sUKQXBMZe7VPFJaJQ8ERQa/kJSmK47Sjp9MOUBA=) 19: f017PzkxNN7Z5ETh0qCvv8t0lNo.roa (hash: RBBJWOHQn7zT4E3wUOt8OhgmQHDecS8xI1YeXa1Jnyc=) 20: hu0DNVNBS-52vImMrFag5xmRonA.roa (hash: S+JBIuGEFQfqRFNizmiIiEzsKVPxb9FoL2Uoi+rMdKU=) 21: kVb7Jw3eFm0rH_2hI_sFxpUe654.roa (hash: DhV0642v9bLRlCfdgD3Msa05srzFpUmzNDU1xI+EO2k=) 22: lkA5Va7IYiwu51AaeP4GUMUh7UE.roa (hash: /Zu4enZk5+JQNDPl22NC+bTj0qnkZzWb8K6ssL0z1co=) 23: pTFWP5ts7dNfHyhFc9nDm9T7Shk.roa (hash: KrXatMakUf7FEk5x5p0WIjNpbDIla1OfAVog24ZN1j0=) 24: pTWEmcxxbUcq7hN8YLy4UKx8H5o.roa (hash: NIjS07+RdWb042ouJdf2t90kSuPSNm0zpB6M3O7x/pg=) 25: rGOYtq_Thi1bHxPEPh_-1162hwE.roa (hash: sMSgNyPNu+dXEEK26rDJLJvw6klu2nxdHF72XJN9xsY=) 26: sYcIUF9JZUL8nalnP6guQpiQpFo.roa (hash: O15muEWAoO/BLk3AT82wezr5i9pcEWqA91vts9pFe9Q=) 27: sb2r06lxfTTfMKPVTEx0vt1r-0g.roa (hash: 5dDyMJ189GNvtSXAZ+TZwVb2T1qx9G0K1HzclsMu1P4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:a9:5d:00:db:a5:4b:bd:3a:e9:8b:17:4b:77:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Aug 23 06:00:32 2025 GMT Not After : Aug 24 06:00:32 2025 GMT Subject: CN=f1710c6a2faae649fa2753ba98f4a9e5d6443266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:4d:45:c5:02:b1:49:38:6d:13:12:4a:3e: 70:76:8c:c7:17:07:89:80:11:f9:28:ee:25:33:36: 4b:66:c8:91:ea:51:a8:4d:17:4a:bf:f8:4b:7d:d0: 1b:29:92:7f:7a:52:00:66:0a:be:ac:64:e4:e8:41: a7:72:a5:d7:25:92:74:60:22:01:7c:9e:22:4c:3f: fa:4a:39:70:d3:22:72:c4:fd:e0:6d:13:dc:64:70: 27:49:16:67:89:49:6a:81:4f:8e:79:6b:13:fa:c3: 32:f6:08:12:bd:56:20:99:3f:3d:dc:1b:28:d6:f3: fe:c9:11:da:40:9d:d3:63:79:0f:0e:1c:9b:9f:ce: 1c:da:cd:36:e6:43:b7:55:ca:2b:31:a8:2c:a1:1b: 62:4b:e9:48:16:fd:92:03:f5:96:cd:f6:26:46:6c: d5:2f:9a:73:38:3a:37:99:39:29:c7:a4:54:96:f6: 27:25:88:75:dc:45:2f:71:5c:d7:43:3d:0c:19:ff: df:d9:88:3c:73:83:4c:36:a0:9b:49:3d:d0:2d:7e: 3d:99:e3:f3:73:97:98:5f:7b:cc:62:52:bb:d2:ad: 0d:41:b9:b1:6c:68:36:ac:f9:ee:99:66:6e:f3:f6: a8:f3:e0:c9:21:39:20:68:88:44:f4:36:c7:87:b7: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:71:0C:6A:2F:AA:E6:49:FA:27:53:BA:98:F4:A9:E5:D6:44:32:66 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:dd:5a:c5:b9:e0:9d:9c:91:78:bc:02:09:ca:71:99:1b:61: e9:b7:21:c3:9a:75:15:4c:0f:8b:e7:78:ba:7b:cf:cb:dd:bd: 20:98:a4:df:3a:c4:c5:c8:27:32:10:50:09:c9:b4:b5:a5:81: 43:27:40:a9:fb:68:5b:d9:df:4a:98:74:c0:84:81:c2:68:e1: af:13:ab:77:49:99:7f:c1:94:5f:c2:d7:b4:da:27:27:17:89: 23:a0:10:46:7e:b8:f5:d2:29:58:ca:77:42:56:f7:9c:49:ee: f1:a5:7b:e5:41:c6:19:02:54:69:2e:c1:81:11:ab:ab:fa:c4: cc:13:0e:39:82:4c:50:55:50:f8:0d:fb:f5:5d:5d:97:c3:2c: 2f:84:37:70:dc:41:b7:a1:f1:c1:f5:b3:f3:3f:bd:85:a9:eb: 4e:e6:39:a9:f9:ee:d9:6b:b2:69:ae:0e:e8:b8:38:22:fc:ff: 30:e6:df:8c:d2:99:75:94:7d:6a:1f:b5:52:04:76:61:0a:1f: 4f:54:d2:22:4c:76:02:95:53:f3:03:20:47:71:39:6e:47:87: 7c:91:b9:f7:6d:9b:45:08:a4:4f:a2:eb:db:48:9e:d8:1b:cc: ae:0e:93:d9:c6:77:96:af:a8:97:ee:86:3d:c3:e5:bc:53:81: 59:17:42:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg6ldANulS7066YsXS3e+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUwODIzMDYwMDMyWhcNMjUwODI0MDYwMDMyWjAzMTEwLwYDVQQD EyhmMTcxMGM2YTJmYWFlNjQ5ZmEyNzUzYmE5OGY0YTllNWQ2NDQzMjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveNNRcUCsUk4bRMSSj5wdozHFweJ gBH5KO4lMzZLZsiR6lGoTRdKv/hLfdAbKZJ/elIAZgq+rGTk6EGncqXXJZJ0YCIB fJ4iTD/6Sjlw0yJyxP3gbRPcZHAnSRZniUlqgU+OeWsT+sMy9ggSvVYgmT893Bso 1vP+yRHaQJ3TY3kPDhybn84c2s025kO3VcorMagsoRtiS+lIFv2SA/WWzfYmRmzV L5pzODo3mTkpx6RUlvYnJYh13EUvcVzXQz0MGf/f2Yg8c4NMNqCbST3QLX49mePz c5eYX3vMYlK70q0NQbmxbGg2rPnumWZu8/ao8+DJITkgaIhE9DbHh7erBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFxDGovquZJ+idTupj0qeXWRDJmMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUt1axbng nZyReLwCCcpxmRth6bchw5p1FUwPi+d4unvPy929IJik3zrExcgnMhBQCcm0taWB QydAqftoW9nfSph0wISBwmjhrxOrd0mZf8GUX8LXtNonJxeJI6AQRn649dIpWMp3 Qlb3nEnu8aV75UHGGQJUaS7BgRGrq/rEzBMOOYJMUFVQ+A379V1dl8MsL4Q3cNxB t6HxwfWz8z+9hanrTuY5qfnu2Wuyaa4O6Lg4Ivz/MObfjNKZdZR9ah+1UgR2YQof T1TSIkx2ApVT8wMgR3E5bkeHfJG5922bRQikT6Lr20ie2BvMrg6T2cZ3lq+ol+6G PcPlvFOBWRdCqA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:08:53 2025 by rpki-client