$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: 0aa7Sc17AiYXl20F3AxiiOjZ/KZlVujEuBNcqxKTGXE= Subject key identifier: 31:1B:3E:B1:E3:C8:30:5E:84:02:FF:AC:0E:17:9D:AF:60:9A:40:E9 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 01967454F197C3B2A50BF4A1CB87AA51ECBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1513 Signing time: Sat 26 Apr 2025 23:00:45 +0000 Manifest this update: Sat 26 Apr 2025 23:00:45 +0000 Manifest next update: Sun 27 Apr 2025 23:00:45 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: OErzf1+/vq4lwNZCg4C0a53xIxFooSb6go6Sr7Yyi+s=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:54:f1:97:c3:b2:a5:0b:f4:a1:cb:87:aa:51:ec:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Apr 26 23:00:45 2025 GMT Not After : Apr 27 23:00:45 2025 GMT Subject: CN=311b3eb1e3c8305e8402ffac0e179daf609a40e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:5b:b1:6b:88:7a:fd:70:85:4b:58:27:f7: 9a:b8:5b:b9:1b:2f:a0:9a:bc:4a:5b:45:f7:1b:d6: 0e:6d:2c:70:92:88:bf:f7:af:f9:f6:58:d4:39:b0: e3:19:d7:ea:fa:44:e5:62:dd:9b:52:42:b7:93:1b: d3:bf:20:e7:b3:38:58:2f:67:ab:50:dc:33:89:b3: 3d:88:46:5d:14:ce:1b:63:3c:1c:04:ea:0f:9e:5f: bf:8b:b7:20:51:d0:84:41:92:54:de:00:11:3e:a7: ed:bc:aa:bc:ba:f5:4a:b4:9d:f7:18:b6:68:a0:51: 37:03:75:a8:1a:8e:66:b5:cf:c3:e4:9e:ac:3a:4f: 8a:b6:30:63:4b:28:21:10:73:b2:c5:f6:24:06:02: e8:13:e5:b3:fc:47:bf:c4:97:8f:34:83:c5:a4:53: 59:e5:a8:ae:1b:29:1a:2a:16:1e:ee:f4:00:4d:6e: 8a:27:b9:9d:c9:2b:6b:47:68:98:96:8a:8f:51:23: db:66:88:99:cd:c0:b9:c7:62:71:5e:f5:fd:c2:62: 9b:a6:76:ea:e6:f2:19:c4:15:5f:1e:ea:c0:3e:9c: 7f:fd:2d:80:9a:9d:50:91:7a:c4:0e:a0:cb:ba:d4: 83:c3:99:33:04:e9:18:ca:10:40:f2:e5:81:6b:e4: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1B:3E:B1:E3:C8:30:5E:84:02:FF:AC:0E:17:9D:AF:60:9A:40:E9 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e9:96:d6:23:19:2e:7e:df:5f:10:b6:f2:05:78:42:ad:32: 35:db:9d:d4:23:4d:fb:23:1d:24:b7:c1:23:03:19:01:4d:01: 51:80:08:3e:de:56:d3:bb:0b:bc:75:45:db:57:5e:24:83:c3: dc:7a:54:37:3f:af:33:ae:16:77:3d:1b:64:02:94:2e:e4:88: 0f:77:c8:e1:5d:00:12:4c:bc:a2:95:c5:1c:f1:de:f6:ac:01: 21:76:30:ad:0e:92:58:04:22:d5:8d:f3:66:13:26:0a:c7:b9: 6c:c7:ef:6d:be:4e:81:7d:1b:90:f8:11:da:0d:7a:d0:17:f7: 7f:b0:3e:56:99:28:ce:84:55:7c:d7:67:06:f0:58:53:82:75: 45:21:2c:ae:cb:a1:14:11:3a:16:b2:2e:f2:37:5c:67:74:e5: 5c:11:67:35:1d:25:00:c2:90:18:cc:de:b0:8d:e9:43:d8:2c: 61:2a:00:9a:90:64:c0:04:e1:d6:7e:b7:04:59:44:c3:bb:03: c4:e3:4b:97:86:ef:b7:3e:15:d7:c2:3e:c8:d4:2b:e0:0f:8d: 18:80:a7:4c:bc:8e:22:42:b3:08:29:a8:8a:eb:19:99:ce:76: df:81:28:af:69:8b:91:bb:49:d5:9a:53:6e:a0:e4:91:8b:06: 84:7c:57:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0VPGXw7KlC/Shy4eqUey9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUwNDI2MjMwMDQ1WhcNMjUwNDI3MjMwMDQ1WjAzMTEwLwYDVQQD EygzMTFiM2ViMWUzYzgzMDVlODQwMmZmYWMwZTE3OWRhZjYwOWE0MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsBbsWuIev1whUtYJ/eauFu5Gy+g mrxKW0X3G9YObSxwkoi/96/59ljUObDjGdfq+kTlYt2bUkK3kxvTvyDnszhYL2er UNwzibM9iEZdFM4bYzwcBOoPnl+/i7cgUdCEQZJU3gARPqftvKq8uvVKtJ33GLZo oFE3A3WoGo5mtc/D5J6sOk+KtjBjSyghEHOyxfYkBgLoE+Wz/Ee/xJePNIPFpFNZ 5aiuGykaKhYe7vQATW6KJ7mdyStrR2iYloqPUSPbZoiZzcC5x2JxXvX9wmKbpnbq 5vIZxBVfHurAPpx//S2Amp1QkXrEDqDLutSDw5kzBOkYyhBA8uWBa+R/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEbPrHjyDBehAL/rA4Xna9gmkDpMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+mW1iMZ Ln7fXxC28gV4Qq0yNdud1CNN+yMdJLfBIwMZAU0BUYAIPt5W07sLvHVF21deJIPD 3HpUNz+vM64Wdz0bZAKULuSID3fI4V0AEky8opXFHPHe9qwBIXYwrQ6SWAQi1Y3z ZhMmCse5bMfvbb5OgX0bkPgR2g160Bf3f7A+VpkozoRVfNdnBvBYU4J1RSEsrsuh FBE6FrIu8jdcZ3TlXBFnNR0lAMKQGMzesI3pQ9gsYSoAmpBkwATh1n63BFlEw7sD xONLl4bvtz4V18I+yNQr4A+NGICnTLyOIkKzCCmoiusZmc5234Eor2mLkbtJ1ZpT bqDkkYsGhHxX5g== -----END CERTIFICATE-----Generated at Sun Apr 27 05:05:22 2025 by rpki-client