$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json) Hash identifier: 9Ay2HobTgpMG7I4m93I/TzN1r1EplZtE6MADrdrOyv0= Subject key identifier: 2E:D7:E0:E0:F1:56:D6:61:22:CA:66:0F:8D:C9:CA:D2:2C:88:C9:61 Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b Certificate serial: 019889741CDD2AC6DE6CCD70D8AE53F4C2FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft Manifest number: 08F7 Signing time: Fri 08 Aug 2025 11:32:24 +0000 Manifest this update: Fri 08 Aug 2025 11:32:24 +0000 Manifest next update: Sat 09 Aug 2025 11:32:24 +0000 Files and hashes: 1: 6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa (hash: N5jGzrk7sta0axX9QvqTjHgaFwV4arIObuPbt2KJNnM=) 2: 7tTZk2wCmakp5M5T1YuiU8TuWxw.roa (hash: 8JeqZuwRL8gNhmaq+aEKdQ907Eg7DEpF3/RheOxRpLQ=) 3: 84TrX0qs1Y4yZ95W-q51Grc9rH0.roa (hash: sAIYXtIgwoe7qa6SiMh9Mq7V0vDYEf6NPqM5EjqisbM=) 4: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: ZuKUEQYGMrE2TQtuoXL8SkZz2qbahpLR2ovoz3TM27g=) 5: DH2KmHptf0XCrxVYDl8SWJ6n_OU.roa (hash: 1p3/Uw0Hzg9UQAF7EIOu+m40aaRU5MBeT7UYxTAJl5M=) 6: I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa (hash: LnR75ICh/pu9YTgE61/TkYN/sNwF0ls7eWnRXUdZNeI=) 7: Qgkw5GtNRcsOFSShf-z0xF_tI6I.roa (hash: mZ0NWqp/jNCXFtNZo5WbQ6xy8wKTYFTecNdM8OwQcds=) 8: _6aivCsAWH-kqctPZhR5amDxfsA.roa (hash: nWAJSN6GSWrgvbg0VuNNKDg0OVs+juuAy8NmC7uqE34=) 9: acXjyXZbDzNfFna5ZWRHDz6K5YE.roa (hash: sm9lkJZIavBC2tJvS1A50JKwZEAycxeog0lweVtHcXM=) 10: e31KG_8dad-8ny4PFtbT297H7Sw.roa (hash: GQmunQnH91NAJBx06ug5Vq/w7qs39J3e7sMnlc2OutE=) 11: ej-rBCJmnu-miAXBE5PIqlt8TFo.roa (hash: Z10wztRjBSEGOvVc7tXz4TILdxZp89J4+J08gFrTvVU=) 12: gcpaoxI47uAbfYR_M1Dl9LctMNk.roa (hash: hG0WyItsQE7UjKos3HOIuobdbMTAqgbbv6pzl/cN/6g=) 13: jPEbV29AVPRLdeYTd5NK5RftzFM.roa (hash: sUDk/69Fhag5DgMfms+BUdOEIJtgYgyLdUbZg0QYAF8=) 14: pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa (hash: GoC5K97gl9mRDyYEwiwyowaJojmTfgrX+bjBIRbHQpg=) 15: xe-KS40JXwA4DSnnilL2aYekU18.roa (hash: trUq9aYHMLBwRD59FTvYVzHcchsIZi2f2vJplQh7+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:89:74:1c:dd:2a:c6:de:6c:cd:70:d8:ae:53:f4:c2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b Validity Not Before: Aug 8 11:32:24 2025 GMT Not After : Aug 9 11:32:24 2025 GMT Subject: CN=2ed7e0e0f156d66122ca660f8dc9cad22c88c961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:16:70:6b:18:48:51:2f:0c:ef:5d:3a:18: cb:fc:e6:90:10:d9:6f:28:e1:0e:36:cf:eb:1a:dc: 5e:23:27:3f:30:50:4c:3a:db:97:c2:d6:cb:11:84: 79:d8:b9:e1:55:e5:d7:4f:63:08:59:2a:f9:7d:6d: c6:86:4f:ca:8b:55:92:97:c4:7b:8c:14:f8:d1:7e: 88:b5:ff:68:c5:12:8c:04:8d:96:83:f2:a5:91:e3: 98:1a:59:6e:dc:f3:0b:59:53:12:3f:b6:ed:a8:a1: 91:d6:34:f1:8b:99:7a:67:7f:eb:24:0f:be:68:73: 55:3c:76:14:d1:45:6e:bf:ad:b5:17:f4:7e:8a:34: d1:65:38:9b:4b:15:11:21:a3:d9:65:19:fc:24:48: d3:78:14:c8:06:66:3c:d7:e0:3f:64:a6:de:58:01: 6e:e8:a9:4b:9e:c8:3e:ae:e7:b5:39:ca:2a:f5:3b: 67:fd:b5:a9:d5:21:db:cc:38:ba:dc:98:4b:ef:4f: 45:57:a1:6a:82:43:e5:f9:50:16:eb:47:19:7b:be: 76:1a:6d:6e:4e:4c:a8:40:e4:07:06:f6:f4:84:8b: a4:fd:32:50:9d:73:98:41:44:ac:c1:8c:af:4d:0f: 17:a8:55:ef:18:15:6b:d3:6d:ea:e9:c2:0f:87:69: 76:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D7:E0:E0:F1:56:D6:61:22:CA:66:0F:8D:C9:CA:D2:2C:88:C9:61 X509v3 Authority Key Identifier: keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:65:26:5b:d8:3e:d7:f0:29:67:49:29:cd:87:75:ac:3f:54: 7b:d6:c5:cb:d7:a5:47:9b:f8:ea:4b:4c:28:fa:3a:03:c0:05: 10:4a:4d:ae:7e:3c:fd:db:fc:d7:6d:27:92:91:1d:e1:b6:c4: 66:33:ef:23:bb:25:4c:d8:85:b9:05:9e:5e:37:c2:84:2c:3d: ef:5d:4c:5c:92:a1:0c:b7:fa:d2:91:53:aa:fc:9b:7f:d8:8c: 4b:b5:26:55:e7:c2:0e:c3:74:c7:b6:49:3d:08:a7:f1:39:29: d4:09:3f:12:8e:a0:6d:06:18:c4:b6:c5:cb:8f:50:48:1a:c7: f7:f1:df:a8:0c:3e:15:5a:e5:2a:cc:d0:52:2b:90:69:1d:b2: 69:fb:65:f7:18:65:23:ad:5f:93:ae:c3:3d:b2:c0:0a:66:f5: 00:de:84:2f:7b:8f:a9:c6:52:fd:de:02:2f:54:d3:72:ec:d2: ed:0d:21:58:55:83:87:17:c9:e4:79:a3:ad:0b:cc:46:9e:65: 1b:02:c0:20:9b:43:dd:19:f9:bb:77:2c:2f:13:ea:94:d3:5c: 80:2f:7c:d7:4f:92:5e:3e:cf:79:80:de:f8:4b:bd:b2:c6:95: a8:c0:42:81:26:8d:40:c0:cb:3a:e8:3c:2e:b6:a1:9d:92:19: 29:d5:a1:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiJdBzdKsbebM1w2K5T9ML+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3 Y2ZmOWIwHhcNMjUwODA4MTEzMjI0WhcNMjUwODA5MTEzMjI0WjAzMTEwLwYDVQQD EygyZWQ3ZTBlMGYxNTZkNjYxMjJjYTY2MGY4ZGM5Y2FkMjJjODhjOTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YEWcGsYSFEvDO9dOhjL/OaQENlv KOEONs/rGtxeIyc/MFBMOtuXwtbLEYR52LnhVeXXT2MIWSr5fW3Ghk/Ki1WSl8R7 jBT40X6Itf9oxRKMBI2Wg/KlkeOYGllu3PMLWVMSP7btqKGR1jTxi5l6Z3/rJA++ aHNVPHYU0UVuv621F/R+ijTRZTibSxURIaPZZRn8JEjTeBTIBmY81+A/ZKbeWAFu 6KlLnsg+rue1Ocoq9Ttn/bWp1SHbzDi63JhL709FV6FqgkPl+VAW60cZe752Gm1u TkyoQOQHBvb0hIuk/TJQnXOYQUSswYyvTQ8XqFXvGBVr023q6cIPh2l2LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7X4ODxVtZhIspmD43JytIsiMlhMB8GA1UdIwQY MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWUmW9g+ 1/ApZ0kpzYd1rD9Ue9bFy9elR5v46ktMKPo6A8AFEEpNrn48/dv8120nkpEd4bbE ZjPvI7slTNiFuQWeXjfChCw9711MXJKhDLf60pFTqvybf9iMS7UmVefCDsN0x7ZJ PQin8Tkp1Ak/Eo6gbQYYxLbFy49QSBrH9/HfqAw+FVrlKszQUiuQaR2yaftl9xhl I61fk67DPbLACmb1AN6EL3uPqcZS/d4CL1TTcuzS7Q0hWFWDhxfJ5HmjrQvMRp5l GwLAIJtD3Rn5u3csLxPqlNNcgC9810+SXj7PeYDe+Eu9ssaVqMBCgSaNQMDLOug8 LrahnZIZKdWhxA== -----END CERTIFICATE-----Generated at Fri Aug 8 20:48:10 2025 by rpki-client