$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: vXh8wvO0Rq41HDda7BtXcEgHcFAJnsbRXeMJgOZ0tIE= Subject key identifier: AC:97:A9:57:F9:56:D1:B4:B8:BD:A8:E3:F6:A9:41:B5:D5:6E:2E:84 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019847AD91ADA275D759C13CBCCBEB99FDE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 1323 Signing time: Sat 26 Jul 2025 17:00:13 +0000 Manifest this update: Sat 26 Jul 2025 17:00:13 +0000 Manifest next update: Sun 27 Jul 2025 17:00:13 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: wAxAJCm0aC1vFfotG9PRWxAXfFnNevxtZAy8Ooj5MXc=) 9: e0hrDVtPTcuVIZ0bybivCyarPdY.roa (hash: S6a+ooiK7Lly9jfvdFW0/62kq3Ycr4hiGyo5OfldcA4=) 10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:47:ad:91:ad:a2:75:d7:59:c1:3c:bc:cb:eb:99:fd:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jul 26 17:00:13 2025 GMT Not After : Jul 27 17:00:13 2025 GMT Subject: CN=ac97a957f956d1b4b8bda8e3f6a941b5d56e2e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f7:c0:39:dd:57:2b:87:fb:31:50:6a:01:47: cd:6a:f8:0c:25:02:ec:bd:d3:98:98:4f:67:87:c1: 7e:eb:c4:38:ff:8d:3b:a9:09:33:ef:e9:ac:36:0f: e1:65:5e:68:fb:92:19:06:8a:f2:a6:6d:bb:da:5b: d3:00:53:86:d6:15:5a:8a:9c:00:45:c9:ba:94:5d: bb:9e:64:5b:35:51:2d:9d:01:df:f7:9f:52:bb:dc: 42:b7:60:87:d6:0d:d6:7e:bc:d6:95:94:70:c9:db: 74:0d:df:07:d8:d6:59:1c:dc:4b:ad:38:a8:3e:4b: 04:1d:2c:e7:d2:bf:bd:d0:0c:56:32:22:86:b4:b0: 82:7f:29:c8:6d:eb:f8:88:52:d4:12:c8:f2:6b:71: db:94:b0:1f:a2:48:ef:ef:65:d6:00:23:cd:8a:15: b1:1c:2e:3a:a7:49:bf:19:95:ae:b8:91:3c:bf:0f: 19:96:4b:6f:a8:79:f6:c8:59:ae:b9:7a:a1:9c:1c: 0b:3a:f3:69:a7:e9:25:42:2e:79:38:e3:86:de:63: d0:93:72:b5:87:0c:e0:9d:c5:d7:aa:c4:fd:4e:05: da:85:f4:23:60:6d:4f:50:c7:0e:8b:b1:96:b5:ca: 7e:3e:be:16:cb:53:c6:5e:8e:45:63:8c:15:62:3f: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:97:A9:57:F9:56:D1:B4:B8:BD:A8:E3:F6:A9:41:B5:D5:6E:2E:84 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:59:5c:27:e9:99:1a:33:f2:6a:43:ce:bd:6d:49:84:69:b0: ae:67:0b:07:76:ae:71:de:1e:23:9a:e3:92:16:40:23:42:18: 54:da:b0:d1:a1:e6:cf:d2:6d:e1:de:62:b0:b8:cf:4d:89:15: 56:a2:1c:59:45:66:3a:31:81:99:df:d0:11:9d:22:e4:c3:cf: 1b:c2:a4:3e:35:0e:78:b2:3b:bf:6d:19:57:4f:a3:5c:42:d9: 68:bb:69:ca:4f:55:76:9d:d5:e5:d7:19:7e:15:7a:0b:7f:00: ae:78:ca:81:f6:e2:ae:67:85:d8:eb:21:b6:c5:a2:84:e6:2c: 33:26:2c:da:f8:d8:c1:02:ab:6a:26:7f:84:cd:ba:47:f5:72: 4b:53:11:cb:6f:c5:ac:be:77:94:e5:0e:ee:1e:ff:5c:cc:2b: 3d:b3:72:9e:ae:a4:0f:f4:a0:e8:47:b8:af:a0:9c:53:f6:89: b0:af:53:89:0a:30:5e:eb:a9:de:aa:07:d0:06:84:96:6b:5d: e8:39:8a:f6:40:5c:4a:68:31:59:6e:c2:09:fe:8b:35:1c:06: 29:98:9f:4d:70:67:3f:ef:fa:bd:87:7c:bc:42:d6:9a:5b:76: cd:23:08:8c:5e:46:b4:aa:95:38:5c:af:b3:36:b6:47:8e:00: a0:ee:46:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhHrZGtonXXWcE8vMvrmf3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUwNzI2MTcwMDEzWhcNMjUwNzI3MTcwMDEzWjAzMTEwLwYDVQQD EyhhYzk3YTk1N2Y5NTZkMWI0YjhiZGE4ZTNmNmE5NDFiNWQ1NmUyZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsffAOd1XK4f7MVBqAUfNavgMJQLs vdOYmE9nh8F+68Q4/407qQkz7+msNg/hZV5o+5IZBorypm272lvTAFOG1hVaipwA Rcm6lF27nmRbNVEtnQHf959Su9xCt2CH1g3WfrzWlZRwydt0Dd8H2NZZHNxLrTio PksEHSzn0r+90AxWMiKGtLCCfynIbev4iFLUEsjya3HblLAfokjv72XWACPNihWx HC46p0m/GZWuuJE8vw8ZlktvqHn2yFmuuXqhnBwLOvNpp+klQi55OOOG3mPQk3K1 hwzgncXXqsT9TgXahfQjYG1PUMcOi7GWtcp+Pr4Wy1PGXo5FY4wVYj/jawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyXqVf5VtG0uL2o4/apQbXVbi6EMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1lcJ+mZ GjPyakPOvW1JhGmwrmcLB3aucd4eI5rjkhZAI0IYVNqw0aHmz9Jt4d5isLjPTYkV VqIcWUVmOjGBmd/QEZ0i5MPPG8KkPjUOeLI7v20ZV0+jXELZaLtpyk9Vdp3V5dcZ fhV6C38ArnjKgfbirmeF2OshtsWihOYsMyYs2vjYwQKraiZ/hM26R/VyS1MRy2/F rL53lOUO7h7/XMwrPbNynq6kD/Sg6Ee4r6CcU/aJsK9TiQowXuup3qoH0AaElmtd 6DmK9kBcSmgxWW7CCf6LNRwGKZifTXBnP+/6vYd8vELWmlt2zSMIjF5GtKqVOFyv sza2R44AoO5Gkg== -----END CERTIFICATE-----Generated at Sat Jul 26 20:16:38 2025 by rpki-client