$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: YSblmHOQrIHgz81D7RUhkOSLVwM2uNc+69V9KS8gfoM= Subject key identifier: D6:F6:E0:B8:D3:D2:95:A8:5E:25:12:D4:60:94:A1:BB:0C:6C:70:6B Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019875626FCF771270A5F642738A2075E296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 12BB Signing time: Mon 04 Aug 2025 14:00:41 +0000 Manifest this update: Mon 04 Aug 2025 14:00:41 +0000 Manifest next update: Tue 05 Aug 2025 14:00:41 +0000 Files and hashes: 1: 1-DCahpulJuiQi8zdfIBNVSBP_a0.roa (hash: nTSeDU5/i/b0oztZzrG2CtOkwm9ZNipV4GkBR8TKl3w=) 2: 2e62pyAhQt2DxyPFxqODWQtQycw.roa (hash: 6QUHL09wvOyNqPTs2cgB2RoIpq+Ebpdxb1aI/fz0Ah0=) 3: 4HUEzjvO1URr-UPygZ4Bs6_KT9Q.roa (hash: 8gqeOkmM8zl20dUfCC3W3gzkl4K07sQTxtiB6AnAR2Q=) 4: 4V9UnV1Yi4lf1STc1xhZ4bIgUvA.roa (hash: OKQzkBUD42iLo7oYo0ouIYvBAPZ/5GAsgIcFR+QH2YU=) 5: 4xHSFz_h8RDTEizlLHiNqDZdB8k.roa (hash: k0/n97wXnLuKC+5MEW+78XWyuksvPTuMv3V0hsYhTuY=) 6: 6QviIP7RKjJfXyJHP71i3FDYWL4.roa (hash: QwitosOHcwHPVpSg5VFkyXo/VZmtnyWUke/Nxvg71U0=) 7: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=) 8: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (hash: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=) 9: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=) 10: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=) 11: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=) 12: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=) 13: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=) 14: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=) 15: PKjMMvZfZGO6d3QofJpMp8mLoEg.roa (hash: PLZzvSg9ShprS72UhVRcTHvYPm2OE+eVMBgJ7lsQMMA=) 16: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=) 17: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=) 18: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=) 19: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=) 20: W5sU-ZO6WBhRXGkiRRiQQs5_9rk.roa (hash: buoQ3JOzvBjf3H+zLixOxcXYRqSn97Vev1LEOeeiEno=) 21: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (hash: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=) 22: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=) 23: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=) 24: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=) 25: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=) 26: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=) 27: m7lMiWju66nWi4ie7Vt74icILpg.roa (hash: x3s/oVaZakSkOMeloqbQaRy3FaKUq2eo4wHClY5zjYc=) 28: pWKwCP_lM1lV6k1_8iA6jNpjHqg.roa (hash: RStEnKPVfL8STTUgjI+bGS1TABSbUFHPohIVOs18xGk=) 29: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=) 30: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: QU2XaNM8OxstQh0iYveaYDuaLQL/YJKdhUGhEvlYrIw=) 31: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=) 32: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:62:6f:cf:77:12:70:a5:f6:42:73:8a:20:75:e2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Aug 4 14:00:41 2025 GMT Not After : Aug 5 14:00:41 2025 GMT Subject: CN=d6f6e0b8d3d295a85e2512d46094a1bb0c6c706b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:98:71:79:53:fa:d5:32:c4:66:72:fe:f8: be:33:e0:5e:b6:82:cf:f4:27:33:bd:47:c2:78:1d: 0b:21:97:0e:1f:89:82:81:58:ec:69:0f:9d:7a:1c: 1a:b3:b7:e8:12:9a:7e:8a:9d:86:8f:5c:b2:77:70: 22:45:2f:07:50:76:2a:e0:ae:b3:fb:b0:a5:2c:c0: 7e:97:cc:57:5d:82:98:da:fa:9e:e6:e7:30:a7:a7: 33:cd:57:d4:4f:3a:5e:77:85:0f:5e:cf:27:ed:8e: 4c:56:90:fa:b5:e8:c8:03:56:a0:c3:51:43:8d:51: 3f:7f:f5:ae:02:3f:84:88:23:60:0d:a7:ef:1e:41: 43:10:14:0d:ae:41:94:79:1c:ae:c6:2a:a1:95:eb: f2:6d:40:24:83:5e:52:5e:e3:b4:83:a2:0c:e1:c6: 93:43:59:4f:06:20:af:fd:8d:93:bc:eb:b3:c0:48: 25:f3:49:8e:5d:f3:93:ad:3a:e3:96:71:b4:bc:f2: f8:b0:17:a9:60:d0:6c:5d:0c:32:f3:81:1f:4f:ff: 08:bf:70:8c:00:41:92:05:e8:5c:d2:54:23:d2:fa: e2:4e:24:92:99:a8:77:d4:8a:3f:34:b9:dc:ca:3c: df:da:fc:42:33:70:30:ea:d9:dd:1a:ba:3d:67:51: 2f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F6:E0:B8:D3:D2:95:A8:5E:25:12:D4:60:94:A1:BB:0C:6C:70:6B X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7d:3a:f3:85:f8:08:86:b2:f7:f7:73:b4:25:17:e6:d2:14: 0a:81:7e:fc:4f:ab:17:c9:91:c2:75:24:46:7d:15:c9:9e:2e: 90:a1:1f:6d:ed:15:24:6a:1b:e1:2b:6f:a1:6c:20:d8:2c:a0: b2:90:f5:ce:3e:44:79:55:35:31:92:f9:f6:6c:f9:47:de:9c: 5d:86:75:ce:2f:45:81:f7:95:f1:88:c3:79:e1:0e:fb:62:0d: f9:88:33:5f:48:7e:77:63:24:2a:eb:4d:4b:b9:29:7c:11:cf: 0c:f7:ce:d8:8f:93:3a:64:3f:c5:04:b9:9d:72:33:78:a8:da: 7f:a9:4e:ee:94:77:39:60:fd:d0:62:83:98:5b:3d:e6:64:33: 67:f1:4e:ed:3f:fc:58:46:49:52:fc:90:c0:56:bf:85:dd:4c: 78:93:16:87:db:ab:8c:8e:9d:78:d1:67:52:2f:85:db:85:9f: fd:43:28:5b:14:df:19:cf:43:cc:c6:77:32:35:ca:fc:4c:60: df:02:a2:80:07:e1:6c:9a:a2:f0:65:0a:91:af:c3:8a:84:3d: 9d:b2:bb:cf:54:2b:9f:4b:c1:af:61:ca:18:ec:99:ab:2b:e3: 9f:8b:08:7f:dd:c5:08:15:e8:1e:00:16:df:b5:5b:cb:45:ac: 2d:46:ce:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh1Ym/PdxJwpfZCc4ogdeKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUwODA0MTQwMDQxWhcNMjUwODA1MTQwMDQxWjAzMTEwLwYDVQQD EyhkNmY2ZTBiOGQzZDI5NWE4NWUyNTEyZDQ2MDk0YTFiYjBjNmM3MDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHyYcXlT+tUyxGZy/vi+M+BetoLP 9CczvUfCeB0LIZcOH4mCgVjsaQ+dehwas7foEpp+ip2Gj1yyd3AiRS8HUHYq4K6z +7ClLMB+l8xXXYKY2vqe5ucwp6czzVfUTzped4UPXs8n7Y5MVpD6tejIA1agw1FD jVE/f/WuAj+EiCNgDafvHkFDEBQNrkGUeRyuxiqhlevybUAkg15SXuO0g6IM4caT Q1lPBiCv/Y2TvOuzwEgl80mOXfOTrTrjlnG0vPL4sBepYNBsXQwy84EfT/8Iv3CM AEGSBehc0lQj0vriTiSSmah31Io/NLncyjzf2vxCM3Aw6tndGro9Z1EvZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb24LjT0pWoXiUS1GCUobsMbHBrMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAen0684X4 CIay9/dztCUX5tIUCoF+/E+rF8mRwnUkRn0VyZ4ukKEfbe0VJGob4StvoWwg2Cyg spD1zj5EeVU1MZL59mz5R96cXYZ1zi9FgfeV8YjDeeEO+2IN+YgzX0h+d2MkKutN S7kpfBHPDPfO2I+TOmQ/xQS5nXIzeKjaf6lO7pR3OWD90GKDmFs95mQzZ/FO7T/8 WEZJUvyQwFa/hd1MeJMWh9urjI6deNFnUi+F24Wf/UMoWxTfGc9DzMZ3MjXK/Exg 3wKigAfhbJqi8GUKka/DioQ9nbK7z1Qrn0vBr2HKGOyZqyvjn4sIf93FCBXoHgAW 37Vby0WsLUbOMw== -----END CERTIFICATE-----Generated at Mon Aug 4 19:02:59 2025 by rpki-client