$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: 6wwFYzQBTx7HGaInrr+18jiVJcdobqwmB5QEE6eg+Pw= Subject key identifier: B0:19:F0:9E:59:08:31:13:D6:F9:49:21:C7:40:72:4F:5A:E5:D4:E5 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 01988FFE0C611271B98FE83FBAC598C97D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 1630 Signing time: Sat 09 Aug 2025 18:00:47 +0000 Manifest this update: Sat 09 Aug 2025 18:00:47 +0000 Manifest next update: Sun 10 Aug 2025 18:00:47 +0000 Files and hashes: 1: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=) 2: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=) 3: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=) 4: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=) 5: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=) 6: XJb3trIMR2o2CfWTOuYiqHcFzws.roa (hash: BRkLNlJqve/L2aNsuMJ+5pqTXL5/kYQCmhET9weR1yA=) 7: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=) 8: Z48A1_I47mYSHVTo4XpKWd1w_wY.roa (hash: NvJ6V/CehduL5Zgko7xVcI92EacH0CBv0m1gyVIWLQM=) 9: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=) 10: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: rbhOAwJ/S/5l0zecvPIa6Ns9+xCki/TiWcKED4dOrt8=) 11: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=) 12: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=) 13: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=) 14: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=) 15: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=) 16: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=) 17: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8f:fe:0c:61:12:71:b9:8f:e8:3f:ba:c5:98:c9:7d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Aug 9 18:00:47 2025 GMT Not After : Aug 10 18:00:47 2025 GMT Subject: CN=b019f09e59083113d6f94921c740724f5ae5d4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:d8:8f:d4:16:06:45:22:ce:78:a3:8c:86: 5e:f3:a0:b9:e9:ad:c0:97:06:cb:9f:68:5f:58:7b: f1:dd:f9:ac:12:9f:4f:f7:57:be:15:f9:b0:0b:d4: b8:e8:6d:fa:0f:9a:af:1f:2d:0c:29:a8:10:bc:78: f3:17:4f:07:30:ba:e0:41:91:12:74:64:40:d5:dc: e1:e8:6f:a3:e0:8e:62:97:b8:4c:29:62:c6:b4:6d: 6a:b1:29:3c:f8:02:25:39:6f:46:9f:d8:dc:17:f5: da:96:90:50:ae:2f:f7:ff:6e:a4:e3:1f:fb:f5:56: 12:b0:08:0f:fe:b5:fc:cf:64:be:7e:47:13:82:bc: 4a:6f:98:32:ef:2a:52:30:17:a4:08:f8:69:a7:a3: 86:95:1c:07:d8:0f:19:af:a0:4a:06:39:0a:1d:ee: bb:8c:b4:dc:c9:aa:9c:65:74:c5:21:e0:1a:59:e9: d7:ad:3b:4e:87:66:6a:ce:7f:5c:a8:1e:80:cb:a7: 36:48:eb:19:7d:87:f2:ed:9c:52:c2:0a:e5:64:d9: c8:41:0e:8c:89:e0:cb:40:19:81:6e:10:3c:74:9c: 77:09:0b:2b:1b:06:0b:fa:ad:bd:4e:d0:69:13:72: 07:52:7f:4a:5d:94:2c:53:41:7f:9f:47:ac:9a:33: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:19:F0:9E:59:08:31:13:D6:F9:49:21:C7:40:72:4F:5A:E5:D4:E5 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:59:69:d4:b2:6c:41:c5:3e:a5:4d:b2:d1:e6:f3:5c:54:26: bb:de:5b:03:19:ab:44:82:e1:ba:14:e1:63:6f:5a:6f:eb:e1: 22:44:2f:a8:33:16:c6:a6:eb:07:11:b8:22:b7:d1:3d:96:03: ba:2f:d3:92:90:4d:36:02:77:e5:a4:11:2c:87:bc:a7:7c:58: 44:97:0d:3e:ac:a2:0d:c8:02:07:02:45:7f:64:f8:0b:62:71: 5b:ed:e4:0e:7c:3e:c2:e1:be:fd:1c:3f:32:95:24:98:8f:4c: f9:0f:56:6e:5e:5b:f5:6e:ad:a9:69:09:4a:f4:ef:93:52:47: 47:c0:f8:da:4f:d0:d8:70:d0:52:e1:d7:2b:b2:d7:64:a2:3f: 8f:5c:eb:8d:cc:d3:1e:85:53:3a:dc:8d:a9:06:61:fb:03:fe: f2:52:9d:d7:aa:a4:6f:d5:d6:07:f0:46:e2:1e:af:86:ff:9b: 08:90:a3:d0:08:50:f5:cb:fc:91:b2:7b:3a:af:55:29:5f:3f: d1:7d:51:21:04:28:50:36:60:2b:b6:dc:5d:7e:7b:16:9e:6d: aa:13:a4:03:77:eb:87:04:ee:d7:31:a6:e5:74:2a:ae:ff:a4: 44:89:92:ff:8c:25:ba:c6:ef:ad:38:cf:88:02:f1:74:07:e0: ca:0e:c9:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiP/gxhEnG5j+g/usWYyX0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjUwODA5MTgwMDQ3WhcNMjUwODEwMTgwMDQ3WjAzMTEwLwYDVQQD EyhiMDE5ZjA5ZTU5MDgzMTEzZDZmOTQ5MjFjNzQwNzI0ZjVhZTVkNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HYj9QWBkUiznijjIZe86C56a3A lwbLn2hfWHvx3fmsEp9P91e+FfmwC9S46G36D5qvHy0MKagQvHjzF08HMLrgQZES dGRA1dzh6G+j4I5il7hMKWLGtG1qsSk8+AIlOW9Gn9jcF/XalpBQri/3/26k4x/7 9VYSsAgP/rX8z2S+fkcTgrxKb5gy7ypSMBekCPhpp6OGlRwH2A8Zr6BKBjkKHe67 jLTcyaqcZXTFIeAaWenXrTtOh2Zqzn9cqB6Ay6c2SOsZfYfy7ZxSwgrlZNnIQQ6M ieDLQBmBbhA8dJx3CQsrGwYL+q29TtBpE3IHUn9KXZQsU0F/n0esmjMyhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAZ8J5ZCDET1vlJIcdAck9a5dTlMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVlp1LJs QcU+pU2y0ebzXFQmu95bAxmrRILhuhThY29ab+vhIkQvqDMWxqbrBxG4IrfRPZYD ui/TkpBNNgJ35aQRLIe8p3xYRJcNPqyiDcgCBwJFf2T4C2JxW+3kDnw+wuG+/Rw/ MpUkmI9M+Q9Wbl5b9W6tqWkJSvTvk1JHR8D42k/Q2HDQUuHXK7LXZKI/j1zrjczT HoVTOtyNqQZh+wP+8lKd16qkb9XWB/BG4h6vhv+bCJCj0AhQ9cv8kbJ7Oq9VKV8/ 0X1RIQQoUDZgK7bcXX57Fp5tqhOkA3frhwTu1zGm5XQqrv+kRImS/4wlusbvrTjP iALxdAfgyg7JGQ== -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:11 2025 by rpki-client