$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: ZJr/k6OoRCgWIWrf3dsIpReb5ZdacqpIgtRUl+NBPd4= Subject key identifier: 4F:90:60:56:7C:62:C9:94:1A:6A:53:02:50:28:1D:BC:84:C0:C6:92 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019A503DAC60E18AB5C093F09D8DC512FFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 1297 Signing time: Tue 04 Nov 2025 19:00:10 +0000 Manifest this update: Tue 04 Nov 2025 19:00:10 +0000 Manifest next update: Wed 05 Nov 2025 19:00:10 +0000 Files and hashes: 1: 1-vMQpoPzRNRomoOOMlQ_RFieN5E.roa (hash: jxr1drUW5D4B447tGRDp4ctx0qJ8sRRfploxS6UI7zo=) 2: 4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa (hash: uWN9nsMDOn0xfjEWkhhvUgtWX2KzO1qJYjAx6fiUPH0=) 3: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 4: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 5: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: bz8oLjxib9HfratTbKLpxu99EPf35NDqldAQU7yhJdY=) 6: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=) 7: Pk-166nBqp2AnHZRjt3naSPZm_A.roa (hash: vCXEEXcMS38HEhXquUN+5uxP1rLIYunBHbDrNhQYfIs=) 8: QKNvv00ZlqMXMRIZptoslASj0bE.roa (hash: GCNTvlpScKsutE7ubWhols6pMlrIypRQhNYXcPhW2f8=) 9: UCRoAwNB78ZsHZE9I6YfwoLSqGs.roa (hash: nIZEj/cfzbmC6p9w7qeSsW3ljF7MVCpSzyawtrQnMMk=) 10: VHDpAdR3NVqsO0e_r0e6tavcLhw.roa (hash: YhgbecYr8tRf7lmpu+uKj0OPPDbutngJmi5z3NyL5Eg=) 11: VeeNClDLNSBXwoOlfyEjqAWuiQw.roa (hash: yd4aenCh5ZWCl1Q5aoSLX4H4ErUS1Rn+3aW0AQzb0jo=) 12: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 13: bzqXpokQZM1aGs9ewZRks0hYHI4.roa (hash: hgSOUwN94Q7p6oexHTJXl0V0Ta0qXPc09UvqCMBYuIs=) 14: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 15: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 16: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=) 17: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=) 18: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 19: i61yJhWlIpiU3IaDDJOUzTLy3CI.roa (hash: 1EGI7WgAJYqPotcGFTR+YSEC2Cd3Jis75UUmneXHYjQ=) 20: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 21: njLjgeQ0uFXD3GoQgpxIGpOItOU.roa (hash: SL5Tx/ccbFlpT7rOMkpOBUpCnf72ayQttme74djPUEc=) 22: waAUG9dHQxPuvbNDnM7McvKZrks.roa (hash: KM+Hqim19Y1GbtIM/SkitOgtiJ9ypF9fqby6ZM5bUSw=) 23: wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa (hash: 5N2lY2rir++DNkU0rNQwk4o3De67eUBe63z0gVaBPpI=) 24: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3d:ac:60:e1:8a:b5:c0:93:f0:9d:8d:c5:12:ff:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Nov 4 19:00:10 2025 GMT Not After : Nov 5 19:00:10 2025 GMT Subject: CN=4f9060567c62c9941a6a530250281dbc84c0c692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:74:53:9e:89:02:b6:a9:a7:6c:a2:0f:6f: f5:35:0e:24:c9:aa:e1:13:22:a9:0e:dd:e4:a8:a5: 06:4f:30:de:d1:ba:60:cd:b3:d8:59:6c:25:4a:fd: 27:0f:f6:54:3b:7b:1c:d1:67:fb:79:c0:7d:b4:ff: 22:a8:c8:55:13:b1:43:16:7f:27:d6:7b:d4:8b:11: 68:e5:7f:da:8f:d0:67:d2:59:db:84:2d:ad:9d:0e: 47:5e:d7:b9:1e:b9:c4:8b:f2:78:e1:3e:7e:51:5b: 7c:d6:3b:e4:67:97:58:ab:52:d1:1a:3e:c0:6c:b7: a7:c4:47:be:dc:f6:ed:3f:e0:9b:12:a9:19:69:0d: af:7f:73:a1:60:a0:d3:67:ec:88:d5:bb:22:ad:32: 16:ca:ad:6e:0d:3e:a3:23:db:39:21:5f:c9:8a:b5: 1d:8a:c1:24:59:82:49:62:87:f1:8e:06:3a:d4:99: a9:56:5c:87:89:81:6c:15:6b:c9:b5:c2:f1:f5:62: 5a:7a:99:4a:1e:f9:06:b5:36:53:09:39:00:7a:74: 3c:83:e6:c0:50:e8:6a:fa:f1:c2:b8:ac:3e:74:2e: 77:07:a2:1c:af:b5:8a:38:27:26:63:62:3b:0d:ae: ba:7e:d7:a8:79:f6:c6:5f:47:a4:59:a6:27:fb:72: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:60:56:7C:62:C9:94:1A:6A:53:02:50:28:1D:BC:84:C0:C6:92 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:e6:00:45:39:68:4c:ec:f6:e2:15:3d:1d:71:46:06:01:aa: 9d:aa:70:e6:00:94:f2:62:3b:42:21:15:f7:a3:4f:71:e6:70: 70:c7:6f:f7:79:f4:f0:bb:f6:46:99:43:2b:0a:28:38:97:36: 0a:52:ab:0d:4c:97:b0:0e:f1:f3:c1:46:83:61:9b:c7:ff:c7: 3f:a4:9e:27:07:00:b8:3b:77:67:c2:31:75:61:a7:b7:dc:1e: ae:1d:43:f0:e8:db:43:46:5a:9e:58:81:33:fb:44:9e:b2:81: 8d:af:05:4a:a0:a9:33:87:ee:d1:82:89:9f:5d:58:9b:0d:ce: 8c:fb:20:c6:e9:52:53:67:7d:ff:98:66:30:ee:88:e8:a3:ad: 48:f8:27:e4:51:53:91:04:df:b8:2c:a9:5f:af:3b:f9:c9:87: 2b:8c:6c:29:97:04:02:65:4f:29:af:2b:24:e5:40:a2:3b:81: d6:de:99:3f:e0:92:fc:7c:91:cc:04:d5:53:6b:a5:7d:ae:ae: 46:eb:87:e0:a6:80:cf:1c:50:ce:94:19:1e:8f:ca:e8:d7:4d: 1a:1c:0f:fc:cd:a7:a7:4c:36:66:fa:7b:54:ee:22:b9:9a:a5: f8:90:01:fb:86:29:77:33:e1:8d:5b:14:f2:53:9f:95:5f:ec: 9b:28:3d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPaxg4Yq1wJPwnY3FEv/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMTA0MTkwMDEwWhcNMjUxMTA1MTkwMDEwWjAzMTEwLwYDVQQD Eyg0ZjkwNjA1NjdjNjJjOTk0MWE2YTUzMDI1MDI4MWRiYzg0YzBjNjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveR0U56JArapp2yiD2/1NQ4kyarh EyKpDt3kqKUGTzDe0bpgzbPYWWwlSv0nD/ZUO3sc0Wf7ecB9tP8iqMhVE7FDFn8n 1nvUixFo5X/aj9Bn0lnbhC2tnQ5HXte5HrnEi/J44T5+UVt81jvkZ5dYq1LRGj7A bLenxEe+3PbtP+CbEqkZaQ2vf3OhYKDTZ+yI1bsirTIWyq1uDT6jI9s5IV/JirUd isEkWYJJYofxjgY61JmpVlyHiYFsFWvJtcLx9WJaeplKHvkGtTZTCTkAenQ8g+bA UOhq+vHCuKw+dC53B6Icr7WKOCcmY2I7Da66fteoefbGX0ekWaYn+3IPUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+QYFZ8YsmUGmpTAlAoHbyEwMaSMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+YARTlo TOz24hU9HXFGBgGqnapw5gCU8mI7QiEV96NPceZwcMdv93n08Lv2RplDKwooOJc2 ClKrDUyXsA7x88FGg2Gbx//HP6SeJwcAuDt3Z8IxdWGnt9werh1D8OjbQ0ZanliB M/tEnrKBja8FSqCpM4fu0YKJn11Ymw3OjPsgxulSU2d9/5hmMO6I6KOtSPgn5FFT kQTfuCypX687+cmHK4xsKZcEAmVPKa8rJOVAojuB1t6ZP+CS/HyRzATVU2ulfa6u RuuH4KaAzxxQzpQZHo/K6NdNGhwP/M2np0w2Zvp7VO4iuZql+JAB+4YpdzPhjVsU 8lOflV/smyg9qA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:54 2025 by rpki-client