$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: 0lI5OC14Dc8PdWA8yGMd5Idahh/zfLE/X+MrKbM4x5Q= Subject key identifier: 66:A6:A5:09:84:0C:0B:17:E1:48:43:56:1D:46:F5:0B:EA:D7:A8:47 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 01987A1AC9B22FF67E8C5E660A1DDD2FF5AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0921 Signing time: Tue 05 Aug 2025 12:00:32 +0000 Manifest this update: Tue 05 Aug 2025 12:00:32 +0000 Manifest next update: Wed 06 Aug 2025 12:00:32 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: Ob/iUhTSRV94660QjiUf+zC7jzgZJc8czTBQCMOPq6Q=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7a:1a:c9:b2:2f:f6:7e:8c:5e:66:0a:1d:dd:2f:f5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Aug 5 12:00:32 2025 GMT Not After : Aug 6 12:00:32 2025 GMT Subject: CN=66a6a509840c0b17e14843561d46f50bead7a847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:90:78:0f:04:99:56:8e:80:e9:ee:61:aa: 12:7a:35:5e:4a:80:35:d2:da:fe:e6:0c:2f:64:0f: 1e:8d:f6:7b:6f:33:75:6b:ed:ed:47:cf:fa:cc:30: 07:8c:e3:59:43:f0:b3:a6:62:a6:21:ba:ab:9d:7a: 9e:a6:d1:5a:c6:28:0d:de:25:78:ff:cd:68:bd:20: 97:4e:bd:0d:30:8b:03:46:f7:69:dc:e7:06:e1:c1: 51:45:e6:72:e0:b4:b8:fc:07:99:af:e4:d5:fc:b3: b7:af:a4:91:3b:f4:74:1f:ea:c0:60:20:79:41:aa: 48:40:2f:58:34:1b:d9:4c:af:da:09:c6:33:5c:16: ad:5c:51:e8:a3:44:7a:b7:14:3f:dd:ad:3f:92:da: 42:e8:fe:79:de:7d:19:cd:4b:d0:77:23:f5:b1:f6: af:32:41:38:af:a6:d5:fe:2f:b0:44:b1:d4:a9:da: 4a:60:5e:4e:6f:91:ac:0c:ed:5b:06:3e:b5:3e:21: 1f:fb:11:32:73:69:3d:41:be:9c:44:bb:94:08:b1: 80:db:65:1a:8a:0d:ed:87:37:fe:b8:55:88:f8:1e: f2:c3:bd:f5:8a:57:ea:cf:6e:a4:b9:fd:f6:df:ea: a9:b8:49:02:be:4f:21:3b:c4:52:a7:b1:a2:33:85: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A6:A5:09:84:0C:0B:17:E1:48:43:56:1D:46:F5:0B:EA:D7:A8:47 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ff:7e:07:9f:ba:19:9d:d0:47:6e:22:d1:f6:99:4f:9a:74: 28:14:fa:64:0b:4f:d2:53:d6:21:9c:ad:d4:4c:ed:cd:ae:f9: de:f5:d4:e9:ea:0b:87:5c:9f:c4:28:bf:d9:a5:9c:18:aa:8d: d2:5e:6d:19:e2:7a:2a:83:7a:57:63:2e:4f:0a:43:29:f8:88: a9:8e:bd:45:59:fc:ac:82:13:ce:23:54:51:27:e1:1e:96:9b: 41:d0:2d:93:ec:2e:82:b7:d1:3d:c6:43:d0:ab:ad:de:d9:72: 2f:23:eb:95:6d:29:f5:01:06:03:80:af:f3:14:60:27:9c:0b: b2:77:32:de:e0:ba:08:89:16:e6:4f:44:8b:11:1c:bb:db:f3: 4f:26:21:af:8f:7a:94:6f:02:52:d2:bb:35:48:07:3f:44:52: 5d:84:ff:1a:55:75:77:9e:83:e1:f4:97:ca:df:32:44:bb:29: 5d:d4:65:3f:17:6f:29:98:71:e8:36:c4:07:06:f7:00:68:75: 96:39:58:65:b8:ee:7f:40:7c:94:68:70:24:f8:9b:ab:c8:8a: ed:bf:7f:69:ba:fb:36:87:f5:2a:4e:b5:80:57:cd:1b:8e:48: e5:ca:1b:83:58:08:dd:38:d9:54:ec:49:50:5d:c3:72:1b:03: 89:e5:1f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh6GsmyL/Z+jF5mCh3dL/WvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwODA1MTIwMDMyWhcNMjUwODA2MTIwMDMyWjAzMTEwLwYDVQQD Eyg2NmE2YTUwOTg0MGMwYjE3ZTE0ODQzNTYxZDQ2ZjUwYmVhZDdhODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwCQeA8EmVaOgOnuYaoSejVeSoA1 0tr+5gwvZA8ejfZ7bzN1a+3tR8/6zDAHjONZQ/CzpmKmIbqrnXqeptFaxigN3iV4 /81ovSCXTr0NMIsDRvdp3OcG4cFRReZy4LS4/AeZr+TV/LO3r6SRO/R0H+rAYCB5 QapIQC9YNBvZTK/aCcYzXBatXFHoo0R6txQ/3a0/ktpC6P553n0ZzUvQdyP1sfav MkE4r6bV/i+wRLHUqdpKYF5Ob5GsDO1bBj61PiEf+xEyc2k9Qb6cRLuUCLGA22Ua ig3thzf+uFWI+B7yw731ilfqz26kuf323+qpuEkCvk8hO8RSp7GiM4VOoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGampQmEDAsX4UhDVh1G9Qvq16hHMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP9+B5+6 GZ3QR24i0faZT5p0KBT6ZAtP0lPWIZyt1Eztza753vXU6eoLh1yfxCi/2aWcGKqN 0l5tGeJ6KoN6V2MuTwpDKfiIqY69RVn8rIITziNUUSfhHpabQdAtk+wugrfRPcZD 0Kut3tlyLyPrlW0p9QEGA4Cv8xRgJ5wLsncy3uC6CIkW5k9EixEcu9vzTyYhr496 lG8CUtK7NUgHP0RSXYT/GlV1d56D4fSXyt8yRLspXdRlPxdvKZhx6DbEBwb3AGh1 ljlYZbjuf0B8lGhwJPibq8iK7b9/abr7Nof1Kk61gFfNG45I5cobg1gI3TjZVOxJ UF3DchsDieUf0Q== -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:01 2025 by rpki-client