$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: xmmQSLfEKkFeMpH1HfIY4M07oCpP+MpIFByW4hgBw8E= Subject key identifier: 94:E9:D7:15:1B:1B:41:F4:A3:08:43:8F:B8:AC:E3:DB:41:9F:DA:31 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 01977564D4D31568465D74A463B0A82F65BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0896 Signing time: Sun 15 Jun 2025 21:00:31 +0000 Manifest this update: Sun 15 Jun 2025 21:00:31 +0000 Manifest next update: Mon 16 Jun 2025 21:00:31 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: KqvBRZnA+sThi+nDcKY9mI8uSRfULFrexArmzJaPlTc=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 15: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 16: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 20:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:75:64:d4:d3:15:68:46:5d:74:a4:63:b0:a8:2f:65:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jun 15 21:00:31 2025 GMT Not After : Jun 16 21:00:31 2025 GMT Subject: CN=94e9d7151b1b41f4a308438fb8ace3db419fda31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:f6:40:ca:81:67:07:7b:f5:8b:20:e7:30: 2f:12:c9:e7:51:25:6a:67:84:9c:c2:27:1c:42:b2: a8:93:d7:59:a9:72:93:d2:1d:6c:8c:bc:73:16:e6: 96:8b:a0:84:fb:86:1d:c5:c7:8e:45:b6:0e:30:ce: 23:82:07:3e:c6:3b:51:ff:9c:8d:be:a8:1d:77:02: 72:a7:a0:e9:81:7b:01:42:77:8a:3a:2c:71:5e:bb: 71:18:08:f8:c1:d0:5a:71:ef:55:60:0b:2c:f2:ae: 4d:e5:fa:6e:b2:55:6f:5a:77:b5:12:f8:12:59:d3: 7d:b0:ce:65:48:14:83:db:56:51:a7:54:2d:bf:90: 65:98:8e:f3:95:47:51:4c:cd:d6:f8:70:06:0f:4e: 2e:24:84:e4:49:f9:b4:6a:04:6a:1e:c0:d9:c4:b6: 92:8d:bd:2e:8b:0e:7d:f6:9e:d4:c2:7d:2d:be:ae: a6:cc:ad:0e:01:37:6b:a1:a9:fe:d7:40:ae:39:bd: f3:c9:3f:31:dc:24:6d:a6:93:77:37:da:58:6d:c2: a5:e8:fc:eb:65:0f:c9:30:68:08:20:29:bd:da:2c: bf:c8:ae:c2:33:88:9a:a1:49:7d:6b:86:21:ec:86: 09:50:a6:7c:9b:e9:69:6f:f0:b8:4b:ef:78:99:34: 63:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E9:D7:15:1B:1B:41:F4:A3:08:43:8F:B8:AC:E3:DB:41:9F:DA:31 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:07:14:9e:f8:8f:d0:03:cb:ce:fb:74:e6:ec:d0:34:35:09: 0c:3a:64:a9:bb:87:ef:38:a1:36:29:43:6b:7a:cb:ee:82:4b: 08:15:b3:8b:01:6c:ab:f9:ec:fa:60:ba:05:87:6d:14:66:0d: 38:38:11:4c:39:d4:65:1b:a9:be:96:00:d7:f7:8e:ed:02:54: 72:fd:3b:4d:00:4c:ee:f0:df:11:88:b7:10:d9:6c:66:5e:9a: 7e:3d:08:59:e1:a1:76:fd:18:11:b1:ad:84:61:81:fd:bb:bb: 62:fa:6f:ac:4e:61:7b:9d:fc:09:5c:4a:d4:9d:44:4a:b0:8b: 1b:6d:c5:9d:9b:57:7e:95:ce:b6:55:a2:66:c4:ee:a8:52:44: 6c:c4:1d:42:8e:0a:8e:fe:fc:b7:c6:16:f0:d5:d0:f9:f4:fc: 31:d1:00:4b:d5:05:72:4e:ad:45:87:c9:24:75:04:4b:fe:15: e8:2f:be:45:af:d0:d9:75:3d:42:15:fc:3d:6d:67:1a:1e:e5: a1:b9:20:05:8e:d4:eb:f0:55:6f:9c:7f:7a:c3:f6:48:4d:0a: 1d:e1:ce:de:01:3f:11:0c:88:87:dc:f5:b9:58:16:89:ab:a9: f4:3a:32:23:21:03:a4:b2:e9:eb:94:69:af:f5:42:fb:4b:a2: 88:e7:a9:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd1ZNTTFWhGXXSkY7CoL2W+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwNjE1MjEwMDMxWhcNMjUwNjE2MjEwMDMxWjAzMTEwLwYDVQQD Eyg5NGU5ZDcxNTFiMWI0MWY0YTMwODQzOGZiOGFjZTNkYjQxOWZkYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRv2QMqBZwd79Ysg5zAvEsnnUSVq Z4ScwiccQrKok9dZqXKT0h1sjLxzFuaWi6CE+4YdxceORbYOMM4jggc+xjtR/5yN vqgddwJyp6DpgXsBQneKOixxXrtxGAj4wdBace9VYAss8q5N5fpuslVvWne1EvgS WdN9sM5lSBSD21ZRp1Qtv5BlmI7zlUdRTM3W+HAGD04uJITkSfm0agRqHsDZxLaS jb0uiw599p7Uwn0tvq6mzK0OATdroan+10CuOb3zyT8x3CRtppN3N9pYbcKl6Pzr ZQ/JMGgIICm92iy/yK7CM4iaoUl9a4Yh7IYJUKZ8m+lpb/C4S+94mTRjCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTp1xUbG0H0owhDj7is49tBn9oxMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwcUnviP 0APLzvt05uzQNDUJDDpkqbuH7zihNilDa3rL7oJLCBWziwFsq/ns+mC6BYdtFGYN ODgRTDnUZRupvpYA1/eO7QJUcv07TQBM7vDfEYi3ENlsZl6afj0IWeGhdv0YEbGt hGGB/bu7YvpvrE5he538CVxK1J1ESrCLG23FnZtXfpXOtlWiZsTuqFJEbMQdQo4K jv78t8YW8NXQ+fT8MdEAS9UFck6tRYfJJHUES/4V6C++Ra/Q2XU9QhX8PW1nGh7l obkgBY7U6/BVb5x/esP2SE0KHeHO3gE/EQyIh9z1uVgWiaup9DoyIyEDpLLp65Rp r/VC+0uiiOepug== -----END CERTIFICATE-----Generated at Mon Jun 16 01:20:38 2025 by rpki-client