$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: MU0c1bklGv2OUa1BpEXTVT15mQ3cDZ2GGjSeN/Wd1/g= Subject key identifier: 3F:5F:C7:C0:31:48:D2:6F:15:AB:EC:D9:99:14:17:04:9B:B0:A4:DC Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 01987B9C9DEFA9D4B19C88527BDE7D18B89B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 164D Signing time: Tue 05 Aug 2025 19:01:58 +0000 Manifest this update: Tue 05 Aug 2025 19:01:58 +0000 Manifest next update: Wed 06 Aug 2025 19:01:58 +0000 Files and hashes: 1: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 2: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 3: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: gA9ZSbCck7S9AAPQXHg0RlqPqtbdqIi9J8G526vEn6A=) 4: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 5: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 6: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 7: Ry99V7wdnB63QA0YiggryZhHU-U.roa (hash: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=) 8: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 9: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 10: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 11: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 12: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 13: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 14: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 15: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 19:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:9c:9d:ef:a9:d4:b1:9c:88:52:7b:de:7d:18:b8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Aug 5 19:01:58 2025 GMT Not After : Aug 6 19:01:58 2025 GMT Subject: CN=3f5fc7c03148d26f15abecd9991417049bb0a4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:52:74:7b:61:de:0d:f4:36:ca:f6:0a:aa: 3f:0e:95:4a:d7:d8:2a:e1:d1:b5:f3:8b:df:7d:44: e2:16:1f:52:fe:ce:c2:64:a2:ec:a4:91:4a:d7:5b: 82:09:fc:4e:ee:d7:5f:f7:d8:cb:80:5e:27:ad:2c: 85:46:05:94:2b:10:8a:b3:a7:fb:fe:6a:92:56:17: 34:b6:1e:e0:14:00:b3:8a:a4:f9:ac:fd:49:c4:7a: 99:99:a6:ff:df:8b:de:fd:fc:0d:ff:2b:88:ee:68: 82:69:57:29:da:9d:5b:ab:cb:68:95:53:17:b7:61: f7:a5:cb:40:a4:62:66:97:01:fe:96:c4:ad:e7:84: 86:d1:16:b0:3d:16:53:f0:54:a4:ef:b0:d0:db:73: ec:7e:8f:1f:7f:bd:ff:39:05:e7:42:b9:95:77:7c: 89:f6:20:c5:9e:ce:fd:87:ed:49:4c:63:5f:08:b0: 7d:6d:a8:32:66:6e:a6:e4:4f:98:99:67:e6:83:13: f1:4f:5b:45:a0:d7:99:62:c9:42:1c:61:c3:e4:84: be:71:d3:b8:99:b2:3b:40:ff:e6:e5:aa:13:ae:c1: 0d:da:d8:9a:5b:37:cd:d2:4b:36:48:45:7a:69:65: ed:d2:7d:dd:04:97:2e:c1:5f:ca:ee:00:f0:c2:be: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5F:C7:C0:31:48:D2:6F:15:AB:EC:D9:99:14:17:04:9B:B0:A4:DC X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:57:7f:89:36:a4:76:dc:21:db:07:8d:ee:f1:b1:6d:f4:bc: 0d:b6:23:dc:d9:9e:9a:0c:d6:2d:fc:12:46:4b:6b:ef:03:f1: 98:50:17:b7:d3:67:47:e9:63:46:44:77:2c:a2:a5:d1:5b:90: 29:87:8f:cf:d7:24:c3:ae:36:1b:94:6a:87:73:07:64:86:b0: 19:44:5f:b1:51:be:09:39:c3:e6:65:6a:fe:d2:4b:88:7d:35: f3:28:39:07:1c:1c:e7:b3:ce:f8:e1:9b:c1:5e:68:bc:72:a8: 3d:0c:fe:bd:fd:9c:07:99:73:a2:d0:49:2d:56:5d:39:57:73: b7:96:94:cb:82:f9:dc:56:6c:a0:f2:da:af:68:7b:ee:0b:7a: c9:dc:13:a6:ba:0d:14:e4:f1:92:dc:34:a1:49:9f:25:31:23: 15:1d:82:53:2d:29:a8:8f:d4:66:e0:b2:d4:e6:bc:b9:72:ac: 02:65:f5:cb:5a:e0:40:05:2c:26:53:6f:06:cd:23:d6:95:cc: 82:ff:58:3b:89:e5:37:8e:7e:32:95:96:4d:9d:ea:68:a2:88: ba:05:03:0b:40:2c:c1:3f:ec:f5:98:9a:54:ff:32:95:3a:f0: 29:ef:aa:37:54:f2:b6:c7:fd:ef:01:06:ef:f8:7f:1b:c2:ff: 75:dc:04:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh7nJ3vqdSxnIhSe959GLibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUwODA1MTkwMTU4WhcNMjUwODA2MTkwMTU4WjAzMTEwLwYDVQQD EygzZjVmYzdjMDMxNDhkMjZmMTVhYmVjZDk5OTE0MTcwNDliYjBhNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ZSdHth3g30Nsr2Cqo/DpVK19gq 4dG184vffUTiFh9S/s7CZKLspJFK11uCCfxO7tdf99jLgF4nrSyFRgWUKxCKs6f7 /mqSVhc0th7gFACziqT5rP1JxHqZmab/34ve/fwN/yuI7miCaVcp2p1bq8tolVMX t2H3pctApGJmlwH+lsSt54SG0RawPRZT8FSk77DQ23Psfo8ff73/OQXnQrmVd3yJ 9iDFns79h+1JTGNfCLB9bagyZm6m5E+YmWfmgxPxT1tFoNeZYslCHGHD5IS+cdO4 mbI7QP/m5aoTrsEN2tiaWzfN0ks2SEV6aWXt0n3dBJcuwV/K7gDwwr6ZqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9fx8AxSNJvFavs2ZkUFwSbsKTcMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFd/iTak dtwh2weN7vGxbfS8DbYj3NmemgzWLfwSRktr7wPxmFAXt9NnR+ljRkR3LKKl0VuQ KYePz9ckw642G5Rqh3MHZIawGURfsVG+CTnD5mVq/tJLiH018yg5Bxwc57PO+OGb wV5ovHKoPQz+vf2cB5lzotBJLVZdOVdzt5aUy4L53FZsoPLar2h77gt6ydwTproN FOTxktw0oUmfJTEjFR2CUy0pqI/UZuCy1Oa8uXKsAmX1y1rgQAUsJlNvBs0j1pXM gv9YO4nlN45+MpWWTZ3qaKKIugUDC0AswT/s9ZiaVP8ylTrwKe+qN1Tytsf97wEG 7/h/G8L/ddwEBQ== -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:42 2025 by rpki-client