$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: dj2AKQ9WT6b8DHE6SIn07N4212n8ZOPfRxkdIIzvaQ8= Subject key identifier: F0:94:94:3E:31:CE:F6:95:BC:43:04:98:C5:AF:55:C1:65:12:42:20 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 01976B85FF162ACF4AFF3F8D1629B80D4C40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 10DE Signing time: Fri 13 Jun 2025 23:00:32 +0000 Manifest this update: Fri 13 Jun 2025 23:00:32 +0000 Manifest next update: Sat 14 Jun 2025 23:00:32 +0000 Files and hashes: 1: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (hash: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=) 2: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 3: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: EurerDQTOLk2SdEq5Ay3S8LxoALjydJKGlnyRhpgBYc=) 5: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=) 6: K_EJriKArevlzfQZbolNDBtx8oo.roa (hash: 6w0sGv73nByWKd1Uamo+uAderKU68u5gHX69ydcFrwY=) 7: LkOZl9li4KDCN9mXJJRsYlntJ7g.roa (hash: OaOnLY2HwNroM0V5LxxCi2+4Ez/WFZNIjE+vrYRqqVI=) 8: MZC0ct0Xstv22HLBnvUeWGBv83E.roa (hash: htp3HHZJT8KbtGdttjdWwv8CIeJ5zxP/H9XYr6UcMA8=) 9: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 10: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 11: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 12: eSlIjU--zzeljHxDb7Lmc0oTcr0.roa (hash: 29lnhAvQJG6lXbXS0KcxL34Q9L1+10qH6WOklcnahZ4=) 13: gLTyoT53I5lI2-lkOJJIfUKtbTI.roa (hash: 12uR9b0I8gzTcAnLqYhZOre02X+/fR86aQPixtWQtWI=) 14: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 15: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 16: jnx5aKNnolcZ3DRs--XxMnF1C9s.roa (hash: BNfQ4G4yEHNGvATZ14nkcpQc9VpIfzviDY17CZ0qkzo=) 17: kWgcOnHE4loB2SO1RafMA_sfxyo.roa (hash: qhX4ZFqSLA0ZjpIXxZoMeER1s51JEQ2ukADkC9RRayQ=) 18: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6b:85:ff:16:2a:cf:4a:ff:3f:8d:16:29:b8:0d:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jun 13 23:00:32 2025 GMT Not After : Jun 14 23:00:32 2025 GMT Subject: CN=f094943e31cef695bc430498c5af55c165124220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1e:73:57:f7:cb:53:f4:49:2f:c9:23:2e:79: fd:d1:c1:91:0e:8b:61:43:93:cf:9c:eb:68:5b:70: 0f:60:2c:a8:11:ed:f6:0f:a7:a7:c1:0d:e9:c7:86: 82:a7:c5:59:f3:bb:b7:30:5d:ea:64:aa:b1:a8:c0: c8:62:71:d7:b5:13:06:bb:12:c3:ab:19:a3:d0:c6: f3:f9:83:ae:a9:c9:02:b3:d6:13:e6:57:b5:2a:a3: 07:ff:0d:10:9f:66:3b:48:cd:1a:93:c1:ac:b3:9b: e0:ec:2f:71:da:c5:3e:69:ee:a7:f2:cf:de:05:11: 0f:a7:ff:3f:ee:ae:a7:ae:06:b0:d4:18:53:d0:47: a6:5f:2a:26:e7:ae:9a:78:a6:76:19:f8:43:9d:31: 1b:27:d0:e2:38:46:32:1d:a9:d8:8f:c2:61:73:37: 69:a6:be:11:89:81:03:9d:19:00:52:75:5b:c2:0b: 2b:ac:28:23:8e:30:72:a0:49:38:d4:d1:b1:57:c9: 44:92:95:a0:3a:d5:c7:93:7c:4e:17:d6:58:8f:71: 16:13:76:e6:94:df:f1:c2:cd:06:fb:a9:a4:da:b5: 78:0c:7e:85:60:31:db:c0:8b:4d:91:e1:d2:96:82: 9e:81:26:ed:bd:52:9c:75:b1:62:10:7b:e4:44:d9: 45:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:94:94:3E:31:CE:F6:95:BC:43:04:98:C5:AF:55:C1:65:12:42:20 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d3:b6:6c:3a:26:80:ea:b0:08:13:0f:52:19:41:37:ab:f5: 41:47:9b:ab:99:ad:70:71:96:ac:12:58:cc:cd:45:5c:b4:d2: 86:cc:1b:7c:9e:b0:36:72:cb:b6:6e:f4:2c:64:86:89:ae:a6: 34:07:8a:ce:3e:2a:c4:bf:0a:cc:80:c8:1a:4c:a2:94:1c:91: 78:59:26:19:b1:81:40:0c:67:9b:db:b1:b3:69:90:e8:d6:64: d1:e8:1a:0f:af:f5:d4:61:ed:b7:7f:6e:1c:7d:ce:79:08:42: 32:25:db:ac:3b:30:8c:ac:76:ed:38:b3:24:02:f2:e3:5e:52: f7:1d:43:9a:c6:e6:8f:f8:43:ad:94:8d:ed:86:1d:e9:d9:fa: 22:5a:9f:3e:58:44:51:92:8d:8c:22:e1:d8:94:29:62:ee:16: e7:69:25:ec:51:0d:2c:0a:24:14:4b:e0:03:86:76:51:20:2d: ef:4d:f0:e8:99:80:6b:9c:2b:0d:cd:81:99:3c:04:a4:f8:3e: 69:d3:bd:2c:4c:51:0a:d4:d9:94:a9:47:23:63:aa:10:e6:3e: a8:16:a1:48:d7:93:c8:45:46:35:38:64:92:48:cd:ee:ba:28: 10:c5:3d:15:2d:d1:87:ac:65:2d:06:9b:ae:19:21:0e:96:ce: 47:1f:11:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdrhf8WKs9K/z+NFim4DUxAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUwNjEzMjMwMDMyWhcNMjUwNjE0MjMwMDMyWjAzMTEwLwYDVQQD EyhmMDk0OTQzZTMxY2VmNjk1YmM0MzA0OThjNWFmNTVjMTY1MTI0MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x5zV/fLU/RJL8kjLnn90cGRDoth Q5PPnOtoW3APYCyoEe32D6enwQ3px4aCp8VZ87u3MF3qZKqxqMDIYnHXtRMGuxLD qxmj0Mbz+YOuqckCs9YT5le1KqMH/w0Qn2Y7SM0ak8Gss5vg7C9x2sU+ae6n8s/e BREPp/8/7q6nrgaw1BhT0EemXyom566aeKZ2GfhDnTEbJ9DiOEYyHanYj8Jhczdp pr4RiYEDnRkAUnVbwgsrrCgjjjByoEk41NGxV8lEkpWgOtXHk3xOF9ZYj3EWE3bm lN/xws0G+6mk2rV4DH6FYDHbwItNkeHSloKegSbtvVKcdbFiEHvkRNlFIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCUlD4xzvaVvEMEmMWvVcFlEkIgMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtO2bDom gOqwCBMPUhlBN6v1QUebq5mtcHGWrBJYzM1FXLTShswbfJ6wNnLLtm70LGSGia6m NAeKzj4qxL8KzIDIGkyilByReFkmGbGBQAxnm9uxs2mQ6NZk0egaD6/11GHtt39u HH3OeQhCMiXbrDswjKx27TizJALy415S9x1Dmsbmj/hDrZSN7YYd6dn6IlqfPlhE UZKNjCLh2JQpYu4W52kl7FENLAokFEvgA4Z2USAt703w6JmAa5wrDc2BmTwEpPg+ adO9LExRCtTZlKlHI2OqEOY+qBahSNeTyEVGNThkkkjN7rooEMU9FS3Rh6xlLQab rhkhDpbORx8RBg== -----END CERTIFICATE-----Generated at Sat Jun 14 09:14:48 2025 by rpki-client