$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json) Hash identifier: i0IvuiXVtO3rq0CiVCA5RkyuRM4RqN+MDiCfIX7yxfI= Subject key identifier: C4:78:84:FF:7A:06:F0:88:06:9E:97:EA:D4:73:41:1F:D7:A9:BA:93 Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b Certificate serial: 019A50071C5B694B5065856938356EDC9528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft Manifest number: 09E4 Signing time: Tue 04 Nov 2025 18:00:34 +0000 Manifest this update: Tue 04 Nov 2025 18:00:34 +0000 Manifest next update: Wed 05 Nov 2025 18:00:34 +0000 Files and hashes: 1: 6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa (hash: N5jGzrk7sta0axX9QvqTjHgaFwV4arIObuPbt2KJNnM=) 2: 7tTZk2wCmakp5M5T1YuiU8TuWxw.roa (hash: 8JeqZuwRL8gNhmaq+aEKdQ907Eg7DEpF3/RheOxRpLQ=) 3: 84TrX0qs1Y4yZ95W-q51Grc9rH0.roa (hash: sAIYXtIgwoe7qa6SiMh9Mq7V0vDYEf6NPqM5EjqisbM=) 4: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: naJsmPcAbUUA5ag4VW7onaZ8xTdUXAAnJfqce/Q5KXo=) 5: DH2KmHptf0XCrxVYDl8SWJ6n_OU.roa (hash: 1p3/Uw0Hzg9UQAF7EIOu+m40aaRU5MBeT7UYxTAJl5M=) 6: I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa (hash: LnR75ICh/pu9YTgE61/TkYN/sNwF0ls7eWnRXUdZNeI=) 7: Qgkw5GtNRcsOFSShf-z0xF_tI6I.roa (hash: mZ0NWqp/jNCXFtNZo5WbQ6xy8wKTYFTecNdM8OwQcds=) 8: ZuApx1lJ6PZTaa1PSofxEZnETW8.roa (hash: i6ZjtL8jp8h1GWVt1Wew7Qku5Nc6QBUB0tBwDCSGXU8=) 9: _6aivCsAWH-kqctPZhR5amDxfsA.roa (hash: nWAJSN6GSWrgvbg0VuNNKDg0OVs+juuAy8NmC7uqE34=) 10: acXjyXZbDzNfFna5ZWRHDz6K5YE.roa (hash: sm9lkJZIavBC2tJvS1A50JKwZEAycxeog0lweVtHcXM=) 11: e31KG_8dad-8ny4PFtbT297H7Sw.roa (hash: GQmunQnH91NAJBx06ug5Vq/w7qs39J3e7sMnlc2OutE=) 12: ej-rBCJmnu-miAXBE5PIqlt8TFo.roa (hash: Z10wztRjBSEGOvVc7tXz4TILdxZp89J4+J08gFrTvVU=) 13: gcpaoxI47uAbfYR_M1Dl9LctMNk.roa (hash: hG0WyItsQE7UjKos3HOIuobdbMTAqgbbv6pzl/cN/6g=) 14: pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa (hash: GoC5K97gl9mRDyYEwiwyowaJojmTfgrX+bjBIRbHQpg=) 15: xe-KS40JXwA4DSnnilL2aYekU18.roa (hash: trUq9aYHMLBwRD59FTvYVzHcchsIZi2f2vJplQh7+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:07:1c:5b:69:4b:50:65:85:69:38:35:6e:dc:95:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b Validity Not Before: Nov 4 18:00:34 2025 GMT Not After : Nov 5 18:00:34 2025 GMT Subject: CN=c47884ff7a06f088069e97ead473411fd7a9ba93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:b8:43:d3:02:29:97:2b:bf:eb:2a:b1:ae: 47:68:6e:8b:6e:3a:03:cd:d3:f0:4e:90:c8:05:ea: 86:f2:15:68:b6:e4:f4:21:f7:17:0a:53:0f:52:bd: af:0f:02:88:9e:5f:57:72:d4:85:f0:1f:f2:77:09: a2:1a:db:a4:7d:2c:62:c8:bf:72:97:bf:4e:1c:ca: 72:ab:68:b6:18:8b:ce:7c:b6:80:b3:19:81:5f:53: dc:bb:c8:3e:80:26:98:82:03:18:66:71:5b:0b:73: 96:4c:16:32:ac:cc:d8:dd:e4:8f:55:52:eb:43:4c: de:69:4f:17:95:50:6c:21:38:b4:89:b1:d1:74:43: 39:4f:18:63:f2:ec:51:fe:ee:ba:2b:4a:98:77:ee: 9c:67:f0:e6:76:0e:ff:fa:a2:62:51:b3:f8:d7:46: 34:62:d7:2c:47:11:7c:16:d9:dc:25:f3:e8:16:66: 62:5a:48:bc:d5:4d:f6:07:20:cd:3b:85:f2:99:3c: 73:be:11:c5:11:45:71:70:73:1b:7b:d6:d9:40:e6: 85:c6:0f:45:f4:be:a7:17:7d:5d:da:ea:b0:a6:a4: 5d:4f:cc:2e:45:01:87:d1:ea:ed:8f:5f:8a:1f:92: aa:b4:e6:1a:11:49:b4:13:fd:21:e7:8c:74:5f:d3: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:84:FF:7A:06:F0:88:06:9E:97:EA:D4:73:41:1F:D7:A9:BA:93 X509v3 Authority Key Identifier: keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:50:a8:fc:26:08:53:c0:b4:2c:a8:9a:11:30:ea:23:92:84: 5c:0d:2f:b3:de:31:73:36:10:c1:d1:ef:7f:ce:66:1b:ce:3e: 3d:06:ea:50:80:aa:f0:77:b1:26:28:ef:06:00:3e:b6:a3:c7: a5:fb:4e:e7:a1:d9:0d:86:b0:cb:09:3b:18:ca:34:c4:ca:4b: 49:5b:8f:29:9c:26:a6:e1:01:57:af:24:6f:79:2e:07:6e:33: b1:fd:05:26:a3:82:ae:c9:59:c9:82:df:da:83:a6:fb:98:fb: 00:ac:c0:99:b6:59:12:9b:6d:4e:3b:53:1e:4b:33:fa:c7:d8: 06:6b:73:d2:d1:db:f0:06:65:66:66:63:bc:37:18:54:8b:0b: 51:80:33:dd:02:5a:6a:f9:c7:95:e5:22:a7:2f:1a:47:cb:fe: 8c:21:b0:fa:f1:26:a6:d3:ef:1e:ca:bd:04:b4:20:10:6b:5c: a9:44:2c:a3:e4:f8:a3:db:34:5a:73:be:4b:81:a1:d4:86:f9: a8:67:e1:8f:55:b8:05:d8:42:e5:ae:0d:39:e5:d3:87:33:f2: 78:a9:8f:1a:96:1c:fe:d2:4b:1d:de:a6:0a:f5:ea:97:f6:b0: 34:63:3b:75:c8:5c:62:f1:d5:10:b6:48:b2:9f:8b:f1:3e:86: 6c:e9:a6:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQBxxbaUtQZYVpODVu3JUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3 Y2ZmOWIwHhcNMjUxMTA0MTgwMDM0WhcNMjUxMTA1MTgwMDM0WjAzMTEwLwYDVQQD EyhjNDc4ODRmZjdhMDZmMDg4MDY5ZTk3ZWFkNDczNDExZmQ3YTliYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg+4Q9MCKZcrv+sqsa5HaG6LbjoD zdPwTpDIBeqG8hVotuT0IfcXClMPUr2vDwKInl9XctSF8B/ydwmiGtukfSxiyL9y l79OHMpyq2i2GIvOfLaAsxmBX1Pcu8g+gCaYggMYZnFbC3OWTBYyrMzY3eSPVVLr Q0zeaU8XlVBsITi0ibHRdEM5Txhj8uxR/u66K0qYd+6cZ/Dmdg7/+qJiUbP410Y0 YtcsRxF8FtncJfPoFmZiWki81U32ByDNO4XymTxzvhHFEUVxcHMbe9bZQOaFxg9F 9L6nF31d2uqwpqRdT8wuRQGH0ertj1+KH5KqtOYaEUm0E/0h54x0X9PTVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR4hP96BvCIBp6X6tRzQR/XqbqTMB8GA1UdIwQY MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelCo/CYI U8C0LKiaETDqI5KEXA0vs94xczYQwdHvf85mG84+PQbqUICq8HexJijvBgA+tqPH pftO56HZDYawywk7GMo0xMpLSVuPKZwmpuEBV68kb3kuB24zsf0FJqOCrslZyYLf 2oOm+5j7AKzAmbZZEpttTjtTHksz+sfYBmtz0tHb8AZlZmZjvDcYVIsLUYAz3QJa avnHleUipy8aR8v+jCGw+vEmptPvHsq9BLQgEGtcqUQso+T4o9s0WnO+S4Gh1Ib5 qGfhj1W4BdhC5a4NOeXThzPyeKmPGpYc/tJLHd6mCvXql/awNGM7dchcYvHVELZI sp+L8T6GbOmmyQ== -----END CERTIFICATE-----Generated at Tue Nov 4 20:22:41 2025 by rpki-client