$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft File: bocQSk20xGNxp_i2pEH8MOzf4g8.mft (raw, json) Hash identifier: J+DOICo3k5tdDSaiE2SI3EDVmgIRUEmK3RSH2lJA8Bk= Subject key identifier: 20:4E:E7:36:6B:7E:C0:1F:28:1E:E8:BE:A4:F0:CA:9C:38:5C:ED:F0 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 0197BB8FF5E136A6E55DE4D358EA4AD1B219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft Manifest number: 059C Signing time: Sun 29 Jun 2025 12:01:03 +0000 Manifest this update: Sun 29 Jun 2025 12:01:03 +0000 Manifest next update: Mon 30 Jun 2025 12:01:03 +0000 Files and hashes: 1: 1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa (hash: cGP1padkbbQVYWoE/e/vrGnkmIgEvHGkoKHwvNi2i1Y=) 2: 3I5gldML-uQbyv9CkIBz-mgvWWk.roa (hash: eQaCI89QTy4mD37K4tNIxvLzbLgt03MOpzY9mO0sl3s=) 3: 52FAWMjukwSClkWfxKSDo4XBBoo.roa (hash: ypKj+SswxrhtvLkdDH0jGSwTM/p8FbWFW1TsPUqiZDY=) 4: 53-6v4txkTBlrr4mQ9BEOoOITGQ.roa (hash: /V7dlEX/iodJqJllmpCrS8JubIsPMm3gyCbsrYPAXNQ=) 5: DZEVG3s_YbDQv7uyGTLk5eEnBEc.roa (hash: vmmNG9wBUVs1bjs4kQtuxT15lN0hpOkAyVIAzMJ8j60=) 6: EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa (hash: Qthm1o1lZVCkgyrZ5XiBtPb86SGLq9HwTrkWvzHtL+4=) 7: JUWcBBikgmbqMXwsOXAyZ2CWc4Y.roa (hash: M7E6ywtCcvNZ1OSJ2u9/DqjHMTLCOhLEuB3bum1kBz0=) 8: LztToIfHj5MPHP69zf_0q_SimrU.roa (hash: 0JPoHmLHmn9stIi7tg5FnXzBytZDbUKqcPQHQVNsAoU=) 9: NFWjygI2rAHaMJj7Z6tY8LI6RSU.roa (hash: Wf17fZC0UTpOrO8FEQkt8WIw3AidHqnd2AFjCzBPkXI=) 10: VdUi8kYGrm_j8LW6wY5Y-TS-oSg.roa (hash: A5/xnDtO7Cvp3FOYXZe+v2uK5OKl2IbWmtNBu5aaRm8=) 11: XYYDIXiK6DLY6uUmH1bLSCpurpI.roa (hash: 2nb9BodFkoof3d5aJD3mP2QX8Y82jT6IwRaoI0HoLFA=) 12: Z0FuRe_3oJ_yWcDW6-1F-dZGvm8.roa (hash: xch+qAPR9QzGm1NgKYI8gVA4Qr0GtidJo5DTI17Jweo=) 13: ZbHp2Q0SQCE3MMYBAQ4MOMTgPEM.roa (hash: TQP4ZxqijWk9XzygHeIy2mb/KtPqcpn8/1/3cIo31Ss=) 14: _TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa (hash: rOZR+3np3EA3AflU2r578HJgACioxVlkiKkqQOW791k=) 15: bocQSk20xGNxp_i2pEH8MOzf4g8.crl (hash: /bHNOHLyw1/YMPbQKWs2+sJN0W6aiY+PG3imP/5pXts=) 16: f017PzkxNN7Z5ETh0qCvv8t0lNo.roa (hash: RBBJWOHQn7zT4E3wUOt8OhgmQHDecS8xI1YeXa1Jnyc=) 17: gRSUAeGZmoq0uxogH9vgjoBqg5U.roa (hash: ZEwY9dNRJzoA31bf3Tl7KfrkElIYmP+CNn1vT2+KFJQ=) 18: hu0DNVNBS-52vImMrFag5xmRonA.roa (hash: S+JBIuGEFQfqRFNizmiIiEzsKVPxb9FoL2Uoi+rMdKU=) 19: kVb7Jw3eFm0rH_2hI_sFxpUe654.roa (hash: DhV0642v9bLRlCfdgD3Msa05srzFpUmzNDU1xI+EO2k=) 20: pTFWP5ts7dNfHyhFc9nDm9T7Shk.roa (hash: KrXatMakUf7FEk5x5p0WIjNpbDIla1OfAVog24ZN1j0=) 21: qEE8SDYU5JIB-O7Trc1We8cjPEs.roa (hash: XHzHtADLaVp1ioqOh7kQak2u8fbeDr9tEqrlOIWlYXY=) 22: rGOYtq_Thi1bHxPEPh_-1162hwE.roa (hash: sMSgNyPNu+dXEEK26rDJLJvw6klu2nxdHF72XJN9xsY=) 23: sYcIUF9JZUL8nalnP6guQpiQpFo.roa (hash: O15muEWAoO/BLk3AT82wezr5i9pcEWqA91vts9pFe9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Jun 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:bb:8f:f5:e1:36:a6:e5:5d:e4:d3:58:ea:4a:d1:b2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jun 29 12:01:03 2025 GMT Not After : Jun 30 12:01:03 2025 GMT Subject: CN=204ee7366b7ec01f281ee8bea4f0ca9c385cedf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:2a:09:8a:60:af:53:9c:15:42:64:a7:01: be:d9:6a:49:12:2d:bf:14:eb:96:8b:22:a3:44:b7: 88:8a:1a:32:d6:22:94:68:73:bf:4b:87:4c:9f:85: aa:01:8c:dd:78:63:b2:5e:ab:6d:5e:65:83:8a:11: 80:15:78:5e:2e:ad:ac:19:e2:b1:16:d0:9c:bd:7d: 9d:54:20:e3:8f:ee:4b:39:b4:db:b9:11:9e:4d:19: 04:61:45:77:db:8e:91:5b:b5:2d:5a:a8:e3:19:3a: 1d:e7:06:a6:91:af:32:4b:0d:66:89:5c:91:a3:a6: 5a:01:de:2f:10:f7:78:af:06:29:d1:e8:78:3a:a3: 6c:c5:33:87:16:76:a9:4a:65:07:07:a0:e5:b1:38: 79:be:37:67:62:72:cb:01:8d:32:65:ca:98:07:75: ee:15:bd:9e:99:16:07:fd:ee:4f:15:69:e7:56:94: 2d:1d:f3:eb:2e:18:71:d4:56:f8:fb:82:bd:c9:8f: 52:4b:99:49:02:cd:60:4b:36:cb:c3:39:0c:84:b2: 76:45:ae:54:aa:2a:f7:86:52:df:0a:17:da:2a:0b: d2:74:36:53:45:0f:be:ec:5a:0a:39:40:2f:f2:ce: 93:13:b9:d3:05:50:d0:81:52:87:7c:d5:e7:f7:5d: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4E:E7:36:6B:7E:C0:1F:28:1E:E8:BE:A4:F0:CA:9C:38:5C:ED:F0 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:58:9d:71:27:99:2a:a7:e1:6d:63:ed:93:e0:c4:9b:70:ad: 02:95:f7:2c:4d:6c:a1:d1:ee:0d:34:87:5d:2d:33:00:07:62: aa:d9:4f:e5:3a:f9:24:4e:e5:37:09:1b:66:de:8c:8b:92:44: 04:fb:be:fa:ae:53:87:9d:62:bc:23:e9:88:08:c1:b6:5d:86: 2a:80:20:b6:90:e1:a2:21:b4:00:fe:2d:e8:1c:cc:78:76:92: 1f:b1:6b:62:1c:21:c4:83:d4:30:60:e3:72:20:62:fd:3c:db: ac:9a:e4:61:76:62:52:b9:65:8b:00:90:44:9e:42:1c:3e:a5: 84:08:6b:13:82:63:e6:87:cd:e5:04:d4:d3:3b:31:19:98:42: 83:90:24:97:c6:ea:db:53:e6:15:5e:53:17:d8:5f:a1:0c:15: d7:77:50:84:8c:cd:a3:00:4b:7a:f4:82:9e:d5:91:f6:86:26: e0:9e:cc:e5:41:21:a3:80:50:76:8a:3a:89:c3:5b:04:2d:21: 38:1e:d6:01:96:07:3c:ac:95:1b:8b:81:77:05:14:ff:a8:e5: 65:da:7b:d1:8b:db:9a:ed:c4:06:77:a1:55:83:f8:d9:90:5a: 83:80:45:a2:26:9d:6a:9f:3b:b7:fd:bc:8b:1a:a3:64:cd:1b: 2f:57:0b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe7j/XhNqblXeTTWOpK0bIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUwNjI5MTIwMTAzWhcNMjUwNjMwMTIwMTAzWjAzMTEwLwYDVQQD EygyMDRlZTczNjZiN2VjMDFmMjgxZWU4YmVhNGYwY2E5YzM4NWNlZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5QqCYpgr1OcFUJkpwG+2WpJEi2/ FOuWiyKjRLeIihoy1iKUaHO/S4dMn4WqAYzdeGOyXqttXmWDihGAFXheLq2sGeKx FtCcvX2dVCDjj+5LObTbuRGeTRkEYUV3246RW7UtWqjjGTod5wamka8ySw1miVyR o6ZaAd4vEPd4rwYp0eh4OqNsxTOHFnapSmUHB6DlsTh5vjdnYnLLAY0yZcqYB3Xu Fb2emRYH/e5PFWnnVpQtHfPrLhhx1Fb4+4K9yY9SS5lJAs1gSzbLwzkMhLJ2Ra5U qir3hlLfChfaKgvSdDZTRQ++7FoKOUAv8s6TE7nTBVDQgVKHfNXn911O6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBO5zZrfsAfKB7ovqTwypw4XO3wMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVidcSeZ KqfhbWPtk+DEm3CtApX3LE1sodHuDTSHXS0zAAdiqtlP5Tr5JE7lNwkbZt6Mi5JE BPu++q5Th51ivCPpiAjBtl2GKoAgtpDhoiG0AP4t6BzMeHaSH7FrYhwhxIPUMGDj ciBi/TzbrJrkYXZiUrlliwCQRJ5CHD6lhAhrE4Jj5ofN5QTU0zsxGZhCg5Akl8bq 21PmFV5TF9hfoQwV13dQhIzNowBLevSCntWR9oYm4J7M5UEho4BQdoo6icNbBC0h OB7WAZYHPKyVG4uBdwUU/6jlZdp70Yvbmu3EBnehVYP42ZBag4BFoiadap87t/28 ixqjZM0bL1cLlA== -----END CERTIFICATE-----Generated at Sun Jun 29 14:32:23 2025 by rpki-client