$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: anYyuQXRuxFNRh0+Ysswi4pDR8MS8Ost91MnCdaiDY4= Subject key identifier: 61:17:2E:B3:4E:D7:C7:0C:3F:87:50:01:44:11:8C:5E:09:50:B9:C2 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 0198D515BF235C4530D3E2BD9274E0EC4DBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 11AC Signing time: Sat 23 Aug 2025 04:00:28 +0000 Manifest this update: Sat 23 Aug 2025 04:00:28 +0000 Manifest next update: Sun 24 Aug 2025 04:00:28 +0000 Files and hashes: 1: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (hash: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=) 2: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 3: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: 9YM+Ena7jyi+OGeQaNX1c8yr2jLTAdLVs2gBTUl9P10=) 5: FKfpXlklu-w0UnrhkTOoss8rNJI.roa (hash: rpXmd4bsDkUdxce7+QWIHh2UliURkTxLOg/dAC0t8qY=) 6: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=) 7: J3yqUr2LpvB6WFh7TvGZOeYfpso.roa (hash: v0gPZA7CDzEw5MPA2cL+IcJnMRQREOoJVNSSNxMF/mI=) 8: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 9: _171H9Sm2ep0k1F8xWMaAxZEl2I.roa (hash: /dkzcei49nxixDHTcMEG9JbROZxQxr4pzlGL3IHAVmE=) 10: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 11: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 12: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=) 13: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=) 14: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 15: iPyY19uHgkMYGAWAMDHBLbfMjZA.roa (hash: wGwPKPeKSnk3qEUiBNJ9xLHjl7O1N6ugdMFUPFqcS6w=) 16: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 17: kVQqA1kzlrD80xwNPEReRSZK8AQ.roa (hash: v08Ady1NycxvU4HcsYkFdVpLDaMY8LHBzEHvgLrf5BI=) 18: kls5OSuDaQSvlKWT8KaUrYaDLsY.roa (hash: 6jtOQG1FuGfQC8VoFUzxkEujdSE+uSlsF4KuIbeBfy4=) 19: u1-qZRpyHBzPIqnj2aBIyztznf4.roa (hash: nGzZ2EMlcssZII4nWCfOjaFqb562AeCP+DfoESx10B8=) 20: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:bf:23:5c:45:30:d3:e2:bd:92:74:e0:ec:4d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Aug 23 04:00:28 2025 GMT Not After : Aug 24 04:00:28 2025 GMT Subject: CN=61172eb34ed7c70c3f87500144118c5e0950b9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:d4:c4:72:79:56:46:16:d7:b4:50:3b:b2: f6:5b:6a:f2:ca:25:bb:7f:96:6b:0f:04:dc:66:09: c0:ea:95:78:cd:60:5e:69:e4:95:e6:e9:33:01:c8: 78:63:ae:03:8e:f6:13:5e:a1:ee:43:cd:96:94:76: 23:4e:ed:02:3e:ef:a0:21:8e:df:a2:9d:cb:1a:c8: 2b:11:88:24:88:4b:4c:16:c0:98:1a:7c:68:0c:2b: 9e:db:51:be:83:75:01:54:f0:e4:74:ae:1c:68:90: 29:58:82:df:17:2c:70:43:51:8f:ce:ca:e4:e2:e5: 4a:16:9c:bb:9f:7c:c8:a6:1b:19:aa:83:6b:67:6b: 1d:d9:1e:61:3c:b2:bf:69:f3:5a:40:12:ff:7d:ca: 04:9b:c8:0c:21:b2:fc:2f:ba:39:21:09:8f:9a:ce: 98:49:f8:ec:2d:d0:3b:c5:ea:2f:e8:61:d1:ba:45: 0a:80:99:c8:db:22:51:5b:05:a6:a0:79:40:4b:e4: 20:b2:82:17:e0:c9:50:4d:19:e1:f7:0d:fb:77:0e: d7:5c:47:1b:df:e5:63:d2:da:68:bf:6a:f4:40:19: 27:a9:a9:3b:48:82:9b:14:67:1c:49:45:96:19:4a: 0c:7a:22:45:32:15:ff:d0:76:89:e1:ac:48:3b:31: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:17:2E:B3:4E:D7:C7:0C:3F:87:50:01:44:11:8C:5E:09:50:B9:C2 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:55:f5:51:9c:85:a6:1b:91:c4:09:e0:e2:66:c9:b0:88: db:bf:75:ef:e2:18:94:b6:6d:92:54:31:be:e0:55:9a:1d:7c: 31:bc:2f:7e:62:ca:ae:41:4f:9a:6c:7f:21:6d:25:a3:cf:6b: 0b:7a:28:4f:fa:3f:96:98:24:1a:10:2e:bf:17:00:60:99:ce: ec:e5:85:6e:25:7a:6e:fe:cb:2e:5b:5a:7d:52:2f:56:c2:0a: 3f:59:a5:72:32:0d:f8:2b:95:a4:a6:4a:e7:d4:cb:68:11:c0: b0:c8:a7:56:e1:fc:73:c8:a8:74:5a:2d:36:d6:a4:7d:bd:15: 9d:d2:c2:58:0a:16:3b:8c:0e:c1:5a:be:81:02:b2:73:c6:cf: 58:42:67:98:b0:a5:29:c6:0c:74:24:dc:c3:39:ed:4d:1c:b3: 4c:b8:8a:98:7b:2e:39:68:c2:f4:7c:dd:c5:3a:f1:f0:3a:ef: 17:a8:75:11:b4:7f:ba:89:41:65:c8:2b:1e:0d:ca:72:78:f3: cf:ca:e3:44:b4:3b:f7:f6:b1:4d:70:ad:5e:38:0c:e7:05:65: f8:70:3d:2f:0f:7b:31:0c:c4:91:b2:6b:b8:d6:36:05:ac:ca: 6e:88:d8:9f:ad:46:22:51:99:3a:40:cb:38:fb:22:40:43:c8: b0:d3:77:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFb8jXEUw0+K9knTg7E2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUwODIzMDQwMDI4WhcNMjUwODI0MDQwMDI4WjAzMTEwLwYDVQQD Eyg2MTE3MmViMzRlZDdjNzBjM2Y4NzUwMDE0NDExOGM1ZTA5NTBiOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0rUxHJ5VkYW17RQO7L2W2ryyiW7 f5ZrDwTcZgnA6pV4zWBeaeSV5ukzAch4Y64DjvYTXqHuQ82WlHYjTu0CPu+gIY7f op3LGsgrEYgkiEtMFsCYGnxoDCue21G+g3UBVPDkdK4caJApWILfFyxwQ1GPzsrk 4uVKFpy7n3zIphsZqoNrZ2sd2R5hPLK/afNaQBL/fcoEm8gMIbL8L7o5IQmPms6Y SfjsLdA7xeov6GHRukUKgJnI2yJRWwWmoHlAS+QgsoIX4MlQTRnh9w37dw7XXEcb 3+Vj0tpov2r0QBknqak7SIKbFGccSUWWGUoMeiJFMhX/0HaJ4axIOzEqSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEXLrNO18cMP4dQAUQRjF4JULnCMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrRV9VGc haYbkcQJ4OJmybCI27917+IYlLZtklQxvuBVmh18MbwvfmLKrkFPmmx/IW0lo89r C3ooT/o/lpgkGhAuvxcAYJnO7OWFbiV6bv7LLltafVIvVsIKP1mlcjIN+CuVpKZK 59TLaBHAsMinVuH8c8iodFotNtakfb0VndLCWAoWO4wOwVq+gQKyc8bPWEJnmLCl KcYMdCTcwzntTRyzTLiKmHsuOWjC9HzdxTrx8DrvF6h1EbR/uolBZcgrHg3Kcnjz z8rjRLQ79/axTXCtXjgM5wVl+HA9Lw97MQzEkbJruNY2BazKbojYn61GIlGZOkDL OPsiQEPIsNN3RQ== -----END CERTIFICATE-----Generated at Sat Aug 23 09:49:24 2025 by rpki-client