$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: DtHfuWOihN5hdjNhoNaB2EhzSsfo0fsr+5mCO1TKsss= Subject key identifier: 3D:3F:2E:3D:7F:B3:BF:B3:E8:88:71:9D:2A:35:8C:73:E1:81:CA:C7 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019A522C1519B90918702F47A625F9D03536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 1298 Signing time: Wed 05 Nov 2025 04:00:11 +0000 Manifest this update: Wed 05 Nov 2025 04:00:11 +0000 Manifest next update: Thu 06 Nov 2025 04:00:11 +0000 Files and hashes: 1: 1-vMQpoPzRNRomoOOMlQ_RFieN5E.roa (hash: jxr1drUW5D4B447tGRDp4ctx0qJ8sRRfploxS6UI7zo=) 2: 4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa (hash: uWN9nsMDOn0xfjEWkhhvUgtWX2KzO1qJYjAx6fiUPH0=) 3: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 4: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 5: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: KrQn7is8uSVmyMflGtHF2qW6C3JHBLxUkJ91j+Brlnk=) 6: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=) 7: Pk-166nBqp2AnHZRjt3naSPZm_A.roa (hash: vCXEEXcMS38HEhXquUN+5uxP1rLIYunBHbDrNhQYfIs=) 8: QKNvv00ZlqMXMRIZptoslASj0bE.roa (hash: GCNTvlpScKsutE7ubWhols6pMlrIypRQhNYXcPhW2f8=) 9: UCRoAwNB78ZsHZE9I6YfwoLSqGs.roa (hash: nIZEj/cfzbmC6p9w7qeSsW3ljF7MVCpSzyawtrQnMMk=) 10: VHDpAdR3NVqsO0e_r0e6tavcLhw.roa (hash: YhgbecYr8tRf7lmpu+uKj0OPPDbutngJmi5z3NyL5Eg=) 11: VeeNClDLNSBXwoOlfyEjqAWuiQw.roa (hash: yd4aenCh5ZWCl1Q5aoSLX4H4ErUS1Rn+3aW0AQzb0jo=) 12: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 13: bzqXpokQZM1aGs9ewZRks0hYHI4.roa (hash: hgSOUwN94Q7p6oexHTJXl0V0Ta0qXPc09UvqCMBYuIs=) 14: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 15: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 16: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=) 17: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=) 18: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 19: i61yJhWlIpiU3IaDDJOUzTLy3CI.roa (hash: 1EGI7WgAJYqPotcGFTR+YSEC2Cd3Jis75UUmneXHYjQ=) 20: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 21: njLjgeQ0uFXD3GoQgpxIGpOItOU.roa (hash: SL5Tx/ccbFlpT7rOMkpOBUpCnf72ayQttme74djPUEc=) 22: waAUG9dHQxPuvbNDnM7McvKZrks.roa (hash: KM+Hqim19Y1GbtIM/SkitOgtiJ9ypF9fqby6ZM5bUSw=) 23: wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa (hash: 5N2lY2rir++DNkU0rNQwk4o3De67eUBe63z0gVaBPpI=) 24: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:2c:15:19:b9:09:18:70:2f:47:a6:25:f9:d0:35:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Nov 5 04:00:11 2025 GMT Not After : Nov 6 04:00:11 2025 GMT Subject: CN=3d3f2e3d7fb3bfb3e888719d2a358c73e181cac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:9b:b6:ea:96:2a:28:a6:c3:7b:7f:8b:ed: ed:01:54:8f:c7:78:c0:21:e8:fb:ef:d6:09:12:14: 71:3d:4c:99:2b:41:41:46:82:62:3b:5d:4c:98:f0: 2c:34:b7:7e:8b:4e:62:2d:ee:de:36:26:b0:93:52: c0:17:3a:2c:c1:35:de:8a:08:41:76:30:64:8c:28: 86:8b:88:f0:08:35:5e:1f:2b:d8:4f:71:af:51:f9: e6:0b:2b:0d:da:c6:3a:1e:07:8f:93:de:43:37:7b: f7:8c:89:89:fa:10:e0:50:5e:a4:c6:6c:3e:c3:d9: a4:e9:f2:66:f5:e1:97:08:5b:28:8d:86:b4:3a:04: 41:b2:7d:4d:0b:70:25:42:c1:51:71:c3:c7:50:eb: 7e:50:43:e5:3c:a7:bf:3c:70:11:53:b4:13:55:52: 96:c0:62:fc:4a:c4:2d:ec:4c:f8:b2:32:60:0e:2a: 17:18:89:9b:3a:9a:58:49:04:10:c5:13:af:9d:ef: 83:e2:69:a9:22:54:a3:94:4a:5e:ea:74:5a:45:4f: e1:bc:f9:02:03:27:01:5d:20:39:e1:51:a3:4d:70: 11:6b:e5:84:2a:57:ee:86:4c:c1:cd:61:6e:5d:d8: 00:00:10:54:b6:69:7d:7e:b3:f8:7a:fb:6a:ba:f3: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3F:2E:3D:7F:B3:BF:B3:E8:88:71:9D:2A:35:8C:73:E1:81:CA:C7 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:74:e8:53:33:82:d1:b8:5d:45:88:30:34:88:8f:25:92:ff: be:a8:af:57:53:29:3c:c0:c3:71:c3:80:a1:2c:d7:e2:43:6c: 3f:6e:8d:22:9e:86:9a:92:01:e1:4f:98:bd:91:15:72:9f:a4: 6b:79:81:52:3c:76:5a:a7:db:de:d5:4f:21:ee:e9:4c:70:4e: b3:e4:20:ed:bf:d6:7c:ae:b1:8a:82:4e:e4:b4:d2:89:60:5e: 6b:87:19:0e:9a:ee:05:1c:69:50:72:a5:0d:2c:6a:9e:9f:f9: 71:c5:8a:74:f7:f1:02:01:a3:84:64:52:33:a2:e9:08:23:1a: c9:32:45:b7:4c:46:2f:db:2c:b5:89:62:79:db:91:21:7d:72: 3d:36:96:14:3f:cb:96:f8:cd:19:75:0e:8f:81:dc:99:de:15: 9f:40:8c:1d:be:97:ee:d0:76:96:9a:67:2f:eb:aa:a8:0c:6f: ae:72:ba:04:dd:30:88:9e:51:73:c6:8c:b6:4e:46:2f:6d:86: 6c:b6:b7:14:b6:b4:d4:f3:6f:5b:94:13:d6:1b:52:8d:70:6c: 7d:d5:9e:33:6d:07:a6:c6:d1:80:6b:b0:a5:22:59:cd:3c:41: 4e:8c:86:12:38:82:aa:6b:2c:b4:82:d2:40:31:ec:29:4a:4a: 1f:19:6f:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpSLBUZuQkYcC9HpiX50DU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMTA1MDQwMDExWhcNMjUxMTA2MDQwMDExWjAzMTEwLwYDVQQD EygzZDNmMmUzZDdmYjNiZmIzZTg4ODcxOWQyYTM1OGM3M2UxODFjYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwmbtuqWKiimw3t/i+3tAVSPx3jA Iej779YJEhRxPUyZK0FBRoJiO11MmPAsNLd+i05iLe7eNiawk1LAFzoswTXeighB djBkjCiGi4jwCDVeHyvYT3GvUfnmCysN2sY6HgePk95DN3v3jImJ+hDgUF6kxmw+ w9mk6fJm9eGXCFsojYa0OgRBsn1NC3AlQsFRccPHUOt+UEPlPKe/PHARU7QTVVKW wGL8SsQt7Ez4sjJgDioXGImbOppYSQQQxROvne+D4mmpIlSjlEpe6nRaRU/hvPkC AycBXSA54VGjTXARa+WEKlfuhkzBzWFuXdgAABBUtml9frP4evtquvOOSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0/Lj1/s7+z6IhxnSo1jHPhgcrHMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnToUzOC 0bhdRYgwNIiPJZL/vqivV1MpPMDDccOAoSzX4kNsP26NIp6GmpIB4U+YvZEVcp+k a3mBUjx2Wqfb3tVPIe7pTHBOs+Qg7b/WfK6xioJO5LTSiWBea4cZDpruBRxpUHKl DSxqnp/5ccWKdPfxAgGjhGRSM6LpCCMayTJFt0xGL9sstYlieduRIX1yPTaWFD/L lvjNGXUOj4Hcmd4Vn0CMHb6X7tB2lppnL+uqqAxvrnK6BN0wiJ5Rc8aMtk5GL22G bLa3FLa01PNvW5QT1htSjXBsfdWeM20HpsbRgGuwpSJZzTxBToyGEjiCqmsstILS QDHsKUpKHxlvwA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:19:26 2025 by rpki-client