$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: gqTtdkO7kFE1sKo5HTVJuFzRRU8MODHeQXQnSoD2Lb4= Subject key identifier: 20:1E:B5:AA:6F:38:5A:C0:B2:4F:1D:42:8D:5F:B9:F9:88:50:02:D4 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 01987DC1350EEFFB6649131DEED86785B5E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1180 Signing time: Wed 06 Aug 2025 05:01:10 +0000 Manifest this update: Wed 06 Aug 2025 05:01:10 +0000 Manifest next update: Thu 07 Aug 2025 05:01:10 +0000 Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=) 2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=) 3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=) 4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=) 5: P1aEjNsd0SJfPVikfoYHI7ubFMI.roa (hash: DuGgYnJ4n5Dj5BJqboFm/1FmaNs0vaXsoWw3QLn5rAo=) 6: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=) 7: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=) 8: _8MCzl0l1tQuihsF_I64BRSs2tc.roa (hash: hgK1WfvVvkljiSPw5yBzGlfOpy6Z+LRSv3D2IqqcYQ4=) 9: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: RawAvpzjHUD5p7nT6eHz1bzRW5yuDaehJ4vopanBdDo=) 10: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=) 11: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=) 12: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=) 13: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=) 14: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=) 15: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=) 16: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (hash: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=) 17: zaK7g2klAtwCGQFnfe_zrOgOJdA.roa (hash: tBmARlQQAzmv3v9ImSbiUoVw1kndaC1qx7ql+RM5QpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 23:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7d:c1:35:0e:ef:fb:66:49:13:1d:ee:d8:67:85:b5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Aug 6 05:01:10 2025 GMT Not After : Aug 7 05:01:10 2025 GMT Subject: CN=201eb5aa6f385ac0b24f1d428d5fb9f9885002d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:c1:5c:59:a1:6e:b9:e1:87:c8:d6:7d:59: 72:64:f8:45:09:3e:2c:c6:54:1e:a4:3d:c2:dd:4c: df:9d:39:dc:91:cd:09:d2:05:90:c1:c5:71:00:28: b9:cf:67:b7:4d:4a:f7:03:da:57:95:51:b5:98:9a: 4a:ff:f6:6d:bf:46:77:c0:18:f5:ee:be:78:e9:6b: 54:dc:10:a7:f5:1c:d4:3c:4d:f0:25:dc:01:59:ca: 9a:8e:cf:22:6f:01:6f:5d:a1:e4:ff:f1:aa:b4:8e: 25:85:13:c3:26:b3:bc:58:2f:6a:fd:67:91:2f:be: ee:a4:e6:c8:f9:0c:3c:03:40:eb:15:8d:f2:4e:f1: 58:f7:41:eb:c4:3f:08:01:aa:93:f6:0e:cf:25:f7: 0e:79:cd:d5:46:9c:2a:10:b2:d3:ac:88:9f:0e:f4: 46:1a:dc:86:ad:0d:37:00:1f:f6:a8:05:5e:c2:0c: e9:93:a4:f0:53:65:09:48:26:06:b3:89:5c:a1:37: 14:be:f2:05:67:6c:e9:55:c0:a6:55:7a:d9:86:3e: 55:7d:5f:bf:78:6c:29:a4:e2:7e:38:6b:0e:ef:1c: df:15:14:a3:0c:61:a4:57:6b:22:6c:d3:b9:44:01: d2:35:1f:58:1d:2b:24:61:0e:85:5c:c3:d9:b9:77: 17:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1E:B5:AA:6F:38:5A:C0:B2:4F:1D:42:8D:5F:B9:F9:88:50:02:D4 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:39:37:c5:62:62:c3:bf:a2:3b:e4:e1:d7:d1:42:85:6b:25: e1:4f:5a:f7:ea:f8:9f:38:60:54:c6:70:68:8e:fa:8c:c8:3c: 6f:7e:a4:5a:c7:a1:5d:66:ea:38:d2:0a:33:b9:73:c2:b9:b9: fb:4b:ce:4f:c1:d9:e0:bf:16:c4:20:03:ec:e9:d7:c8:52:fd: 7b:28:fc:74:69:e1:e9:ef:8d:21:06:18:ba:34:16:4c:2d:7c: 7b:e1:18:40:b3:5a:f5:ab:ff:2a:57:8e:50:55:9f:f5:4c:ef: ba:68:86:4d:b3:1d:56:2f:b2:bd:21:3c:1e:f6:26:9a:9b:36: 2d:dc:11:f3:83:3d:c5:66:67:b5:b6:d6:56:d2:e4:cb:62:d8: 44:8e:9b:e6:b9:84:8f:4f:65:12:8c:29:93:64:d7:ec:e9:88: 9d:7e:8e:bb:0b:f0:dc:70:61:7e:09:bf:b5:9c:04:5a:38:2f: 56:a5:68:4e:d0:5d:cd:5a:9a:ef:22:95:08:fd:8a:90:dd:5c: 0f:2d:41:a3:e1:22:be:8d:43:66:a0:a5:90:39:3c:13:a4:00: ba:67:ee:05:9b:39:7d:28:c3:6d:c7:00:ec:9f:68:e1:d7:85: fa:70:39:56:a3:d8:85:41:cf:bd:c1:1a:86:9f:c7:89:cc:d5: 2a:a6:22:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh9wTUO7/tmSRMd7thnhbXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjUwODA2MDUwMTEwWhcNMjUwODA3MDUwMTEwWjAzMTEwLwYDVQQD EygyMDFlYjVhYTZmMzg1YWMwYjI0ZjFkNDI4ZDVmYjlmOTg4NTAwMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY3BXFmhbrnhh8jWfVlyZPhFCT4s xlQepD3C3UzfnTnckc0J0gWQwcVxACi5z2e3TUr3A9pXlVG1mJpK//Ztv0Z3wBj1 7r546WtU3BCn9RzUPE3wJdwBWcqajs8ibwFvXaHk//GqtI4lhRPDJrO8WC9q/WeR L77upObI+Qw8A0DrFY3yTvFY90HrxD8IAaqT9g7PJfcOec3VRpwqELLTrIifDvRG GtyGrQ03AB/2qAVewgzpk6TwU2UJSCYGs4lcoTcUvvIFZ2zpVcCmVXrZhj5VfV+/ eGwppOJ+OGsO7xzfFRSjDGGkV2sibNO5RAHSNR9YHSskYQ6FXMPZuXcXdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAetapvOFrAsk8dQo1fufmIUALUMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTk3xWJi w7+iO+Th19FChWsl4U9a9+r4nzhgVMZwaI76jMg8b36kWsehXWbqONIKM7lzwrm5 +0vOT8HZ4L8WxCAD7OnXyFL9eyj8dGnh6e+NIQYYujQWTC18e+EYQLNa9av/KleO UFWf9UzvumiGTbMdVi+yvSE8HvYmmps2LdwR84M9xWZntbbWVtLky2LYRI6b5rmE j09lEowpk2TX7OmInX6Ouwvw3HBhfgm/tZwEWjgvVqVoTtBdzVqa7yKVCP2KkN1c Dy1Bo+Eivo1DZqClkDk8E6QAumfuBZs5fSjDbccA7J9o4deF+nA5VqPYhUHPvcEa hp/HiczVKqYiaA== -----END CERTIFICATE-----Generated at Wed Aug 6 07:52:14 2025 by rpki-client