$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft File: bocQSk20xGNxp_i2pEH8MOzf4g8.mft (raw, json) Hash identifier: /DYUF60JTmi6r1A8g4ri7B9P7zJpKFnwPhs2+E/IgQk= Subject key identifier: E7:9C:A4:65:6C:9D:F5:84:81:83:52:C6:C5:8A:CD:AF:29:D5:6F:FA Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 01987B78788E60A8ED23F08A236FC280C6F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft Manifest number: 0607 Signing time: Tue 05 Aug 2025 18:22:29 +0000 Manifest this update: Tue 05 Aug 2025 18:22:29 +0000 Manifest next update: Wed 06 Aug 2025 18:22:29 +0000 Files and hashes: 1: 1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa (hash: cGP1padkbbQVYWoE/e/vrGnkmIgEvHGkoKHwvNi2i1Y=) 2: 3BtMqXJycGGvfjNPXXTPm6tK57g.roa (hash: jPysS0bfydTK8RBC0P3rH2Kj76tPYYDoeG+8kJZDQRc=) 3: 3I5gldML-uQbyv9CkIBz-mgvWWk.roa (hash: eQaCI89QTy4mD37K4tNIxvLzbLgt03MOpzY9mO0sl3s=) 4: 3StlQJLBcPu1qxdEZ3JJOhm1Udg.roa (hash: iujEO2PTtn9nL8OTjRi898AzV+a2An7SXBq6YG65KaI=) 5: 52FAWMjukwSClkWfxKSDo4XBBoo.roa (hash: ypKj+SswxrhtvLkdDH0jGSwTM/p8FbWFW1TsPUqiZDY=) 6: 53-6v4txkTBlrr4mQ9BEOoOITGQ.roa (hash: /V7dlEX/iodJqJllmpCrS8JubIsPMm3gyCbsrYPAXNQ=) 7: DZEVG3s_YbDQv7uyGTLk5eEnBEc.roa (hash: vmmNG9wBUVs1bjs4kQtuxT15lN0hpOkAyVIAzMJ8j60=) 8: EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa (hash: Qthm1o1lZVCkgyrZ5XiBtPb86SGLq9HwTrkWvzHtL+4=) 9: JUWcBBikgmbqMXwsOXAyZ2CWc4Y.roa (hash: M7E6ywtCcvNZ1OSJ2u9/DqjHMTLCOhLEuB3bum1kBz0=) 10: LztToIfHj5MPHP69zf_0q_SimrU.roa (hash: 0JPoHmLHmn9stIi7tg5FnXzBytZDbUKqcPQHQVNsAoU=) 11: Wz7uvxRJjmNbpMHXqyc5XIPjHYg.roa (hash: hYhipTaQ14gbpmM2CsGVDCplldw8XWpgCwk8ecMo+1k=) 12: Z0FuRe_3oJ_yWcDW6-1F-dZGvm8.roa (hash: xch+qAPR9QzGm1NgKYI8gVA4Qr0GtidJo5DTI17Jweo=) 13: ZbHp2Q0SQCE3MMYBAQ4MOMTgPEM.roa (hash: TQP4ZxqijWk9XzygHeIy2mb/KtPqcpn8/1/3cIo31Ss=) 14: _TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa (hash: rOZR+3np3EA3AflU2r578HJgACioxVlkiKkqQOW791k=) 15: bocQSk20xGNxp_i2pEH8MOzf4g8.crl (hash: XSSiSARY3CdxIHBXl1DdAi/KccvCmycGwIsiizfdN+s=) 16: ckz8rqoc5X4WUxyhv3Kxg8VkWsk.roa (hash: 7S83sUKQXBMZe7VPFJaJQ8ERQa/kJSmK47Sjp9MOUBA=) 17: f017PzkxNN7Z5ETh0qCvv8t0lNo.roa (hash: RBBJWOHQn7zT4E3wUOt8OhgmQHDecS8xI1YeXa1Jnyc=) 18: hu0DNVNBS-52vImMrFag5xmRonA.roa (hash: S+JBIuGEFQfqRFNizmiIiEzsKVPxb9FoL2Uoi+rMdKU=) 19: kVb7Jw3eFm0rH_2hI_sFxpUe654.roa (hash: DhV0642v9bLRlCfdgD3Msa05srzFpUmzNDU1xI+EO2k=) 20: lkA5Va7IYiwu51AaeP4GUMUh7UE.roa (hash: /Zu4enZk5+JQNDPl22NC+bTj0qnkZzWb8K6ssL0z1co=) 21: pTFWP5ts7dNfHyhFc9nDm9T7Shk.roa (hash: KrXatMakUf7FEk5x5p0WIjNpbDIla1OfAVog24ZN1j0=) 22: pTWEmcxxbUcq7hN8YLy4UKx8H5o.roa (hash: NIjS07+RdWb042ouJdf2t90kSuPSNm0zpB6M3O7x/pg=) 23: rGOYtq_Thi1bHxPEPh_-1162hwE.roa (hash: sMSgNyPNu+dXEEK26rDJLJvw6klu2nxdHF72XJN9xsY=) 24: sYcIUF9JZUL8nalnP6guQpiQpFo.roa (hash: O15muEWAoO/BLk3AT82wezr5i9pcEWqA91vts9pFe9Q=) 25: sb2r06lxfTTfMKPVTEx0vt1r-0g.roa (hash: 5dDyMJ189GNvtSXAZ+TZwVb2T1qx9G0K1HzclsMu1P4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 14:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:78:78:8e:60:a8:ed:23:f0:8a:23:6f:c2:80:c6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Aug 5 18:22:29 2025 GMT Not After : Aug 6 18:22:29 2025 GMT Subject: CN=e79ca4656c9df584818352c6c58acdaf29d56ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c4:25:9b:27:cf:a9:9d:63:c8:31:4f:21:cd: 21:43:a2:45:8c:57:aa:c1:30:77:cc:72:01:2d:68: 89:0e:b1:ca:dc:00:8f:fb:77:af:a7:82:88:d5:fb: 06:af:08:47:00:fa:6f:5c:71:b3:8d:28:64:36:59: 98:d5:72:06:28:90:e4:ec:e9:72:3b:95:f9:6c:1c: f1:22:92:84:a6:1f:b5:f5:b6:89:3a:6d:9e:7a:a7: 3b:5d:a6:fd:84:d0:bd:d4:41:a7:ff:9e:20:4d:74: 14:83:db:77:7c:38:1c:03:cd:76:35:b3:4f:cb:9e: 00:c7:51:e4:5a:d8:79:d9:2c:62:c4:ab:5a:bf:5a: 0b:82:5b:e4:32:cf:ce:e0:3a:5c:44:4c:24:a7:29: 35:65:81:d7:d9:5a:7f:85:bc:99:f4:38:04:46:57: d3:14:50:51:cd:7d:b3:3d:31:f4:18:ab:44:e7:c3: d4:fd:0c:d2:eb:eb:89:63:0e:db:8a:b9:06:a1:38: c3:8a:f5:7b:66:f7:ba:19:3d:26:7f:4f:14:76:9b: 93:3d:30:04:e8:3b:8e:1b:75:79:02:6c:71:4b:15: a3:cc:09:5b:3c:b5:8b:93:69:ad:f6:e6:80:58:3a: 0c:4a:f3:06:eb:3f:03:00:03:ce:c8:96:6e:9c:4c: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9C:A4:65:6C:9D:F5:84:81:83:52:C6:C5:8A:CD:AF:29:D5:6F:FA X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c1:70:41:dd:8a:44:e7:30:c5:6a:86:8e:13:19:88:84:14: 88:19:c0:82:d7:86:16:ad:2d:d5:56:c0:65:45:62:51:25:c4: 60:2e:90:e5:b5:d6:e2:05:07:f0:7c:9a:3d:a4:c7:8f:b1:93: 37:75:aa:bf:c9:49:ae:0e:9a:ee:b6:6d:37:69:4c:a4:a0:33: 40:12:ec:3a:2e:1c:ee:3d:5c:96:d9:bc:2e:f0:cd:41:44:7e: c9:03:4e:6d:cf:76:93:2e:6d:e5:b0:a4:e2:41:d9:f7:ef:24: bd:24:02:71:2f:90:5d:d1:7a:31:2e:a2:f8:19:2e:de:00:3c: 3c:e3:1f:4c:20:39:5d:45:c2:17:6a:52:4e:18:c4:5e:5e:bd: 2f:f8:c4:a8:c0:a2:32:de:11:a4:f0:f0:8f:7a:69:83:99:13: d4:70:28:7d:cc:0c:6b:dc:98:62:e7:74:a2:dc:8f:0f:a7:8c: 9d:84:80:41:85:4d:08:88:a0:d8:e9:a6:61:95:f0:ba:88:b6: 0b:bb:18:06:b1:eb:68:f0:de:2b:64:0a:d6:20:2e:23:64:f5: 29:7d:f8:d1:3f:01:ac:4f:5c:cb:2e:34:ed:67:19:93:7e:5a: 6d:28:7e:da:8b:dc:ad:9e:32:bf:9a:fd:8d:32:4b:2b:19:6f: 8e:53:95:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh7eHiOYKjtI/CKI2/CgMbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUwODA1MTgyMjI5WhcNMjUwODA2MTgyMjI5WjAzMTEwLwYDVQQD EyhlNzljYTQ2NTZjOWRmNTg0ODE4MzUyYzZjNThhY2RhZjI5ZDU2ZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMQlmyfPqZ1jyDFPIc0hQ6JFjFeq wTB3zHIBLWiJDrHK3ACP+3evp4KI1fsGrwhHAPpvXHGzjShkNlmY1XIGKJDk7Oly O5X5bBzxIpKEph+19baJOm2eeqc7Xab9hNC91EGn/54gTXQUg9t3fDgcA812NbNP y54Ax1HkWth52SxixKtav1oLglvkMs/O4DpcREwkpyk1ZYHX2Vp/hbyZ9DgERlfT FFBRzX2zPTH0GKtE58PU/QzS6+uJYw7birkGoTjDivV7Zve6GT0mf08UdpuTPTAE 6DuOG3V5AmxxSxWjzAlbPLWLk2mt9uaAWDoMSvMG6z8DAAPOyJZunEyKBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOecpGVsnfWEgYNSxsWKza8p1W/6MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMFwQd2K ROcwxWqGjhMZiIQUiBnAgteGFq0t1VbAZUViUSXEYC6Q5bXW4gUH8HyaPaTHj7GT N3Wqv8lJrg6a7rZtN2lMpKAzQBLsOi4c7j1cltm8LvDNQUR+yQNObc92ky5t5bCk 4kHZ9+8kvSQCcS+QXdF6MS6i+Bku3gA8POMfTCA5XUXCF2pSThjEXl69L/jEqMCi Mt4RpPDwj3ppg5kT1HAofcwMa9yYYud0otyPD6eMnYSAQYVNCIig2OmmYZXwuoi2 C7sYBrHraPDeK2QK1iAuI2T1KX340T8BrE9cyy407WcZk35abSh+2ovcrZ4yv5r9 jTJLKxlvjlOVOg== -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:43 2025 by rpki-client