$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: ctQnvysncaGdV1VwVSfsyEyklfAyWOGnrilLSHQjYL0= Subject key identifier: EA:67:BF:24:63:37:2B:92:FF:9C:94:4D:20:A1:6B:57:22:2D:48:A0 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019A134DA07C077040007AF599A3F8ED5D7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1252 Signing time: Thu 23 Oct 2025 23:00:45 +0000 Manifest this update: Thu 23 Oct 2025 23:00:45 +0000 Manifest next update: Fri 24 Oct 2025 23:00:45 +0000 Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=) 2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=) 3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=) 4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=) 5: P1aEjNsd0SJfPVikfoYHI7ubFMI.roa (hash: DuGgYnJ4n5Dj5BJqboFm/1FmaNs0vaXsoWw3QLn5rAo=) 6: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=) 7: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=) 8: _8MCzl0l1tQuihsF_I64BRSs2tc.roa (hash: hgK1WfvVvkljiSPw5yBzGlfOpy6Z+LRSv3D2IqqcYQ4=) 9: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: jkaj1ccw0vggg4HOL9qncI4cn7B/nMVRTUr6Q5Jt8Uc=) 10: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=) 11: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=) 12: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=) 13: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=) 14: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=) 15: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=) 16: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (hash: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=) 17: zaK7g2klAtwCGQFnfe_zrOgOJdA.roa (hash: tBmARlQQAzmv3v9ImSbiUoVw1kndaC1qx7ql+RM5QpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:4d:a0:7c:07:70:40:00:7a:f5:99:a3:f8:ed:5d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Oct 23 23:00:45 2025 GMT Not After : Oct 24 23:00:45 2025 GMT Subject: CN=ea67bf2463372b92ff9c944d20a16b57222d48a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9c:79:52:38:21:b2:33:c6:6b:66:a0:a9:ac: c5:8e:fd:1e:30:8f:f6:35:9b:8f:ae:9c:63:b3:08: a3:00:6f:4c:50:c9:f9:f7:72:90:52:73:d9:ae:68: 0f:da:7d:8a:d9:6d:19:17:4f:39:c0:ba:a3:f7:de: 4e:b5:0d:01:21:d0:94:c8:0c:91:7c:64:28:e7:05: ad:d3:d5:2d:d4:2b:d4:d0:22:c9:65:44:71:18:55: 76:10:f6:47:45:75:e1:e0:58:50:18:99:59:6f:f8: 79:f8:e4:08:7a:6f:50:c1:b0:a1:fd:29:3e:19:a5: 9b:d2:32:e3:4a:83:a8:31:23:d8:1b:0f:f5:23:c4: bb:8a:11:e9:d3:e4:12:0b:24:eb:41:f1:3e:0f:43: 0e:f8:73:83:6e:27:39:6d:54:45:54:a0:95:b0:e2: 41:be:e6:49:14:02:12:3b:f7:26:83:7a:ba:b2:08: 0d:ae:9e:ac:f6:e7:8c:c1:bd:96:86:91:7a:41:73: d0:b5:56:6a:48:1d:14:24:de:f6:00:6e:b8:4b:3e: 0d:8d:9a:a4:1e:c7:10:ea:fe:a9:ad:af:10:56:9f: dd:52:06:40:f4:e2:e2:c9:4c:b4:19:85:4c:58:27: a0:f7:42:2b:9e:99:7f:48:80:c1:95:59:52:b3:33: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:67:BF:24:63:37:2B:92:FF:9C:94:4D:20:A1:6B:57:22:2D:48:A0 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:09:30:6a:b1:e4:9e:a5:ec:72:21:36:f7:62:a0:62:e9:20: b8:2b:b8:7d:00:7b:8e:b6:b5:67:16:ae:49:04:d5:89:61:11: d6:81:51:65:98:ab:d7:06:87:43:de:23:cc:80:7d:fc:25:6e: 44:55:4f:1d:61:79:5a:a6:72:04:d3:f3:f5:01:8d:1b:9b:be: 59:ad:8a:66:74:60:ff:3d:2d:92:f5:13:8f:23:e7:7f:a6:f6: 40:43:04:3c:f8:fb:b0:f0:a5:89:3b:a0:5f:dd:ba:53:c9:b3: 8c:98:fa:13:a1:51:98:34:d4:98:05:79:b5:ec:2a:f3:cf:38: 1d:d2:d6:ad:24:92:15:98:e6:1e:f4:12:70:d6:b3:1a:db:a8: e4:37:5e:1b:fb:e9:35:51:8f:58:d1:3b:2b:04:65:ab:d5:65: 3e:c6:a8:37:45:bd:08:43:3c:99:9a:f7:62:19:66:02:51:d4: b5:75:d4:e9:09:eb:98:d9:4b:8f:ca:68:65:bf:3f:26:52:ff: 2f:39:d7:b9:21:00:18:52:9c:39:f8:42:30:7f:7e:f1:71:ef: ac:ff:70:2e:ab:e4:e8:cc:ea:eb:f3:94:5a:ec:fe:e9:94:ad: de:b7:34:20:c7:1f:73:5f:04:f7:66:5c:ce:57:f2:7f:e7:00: ce:76:c7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoTTaB8B3BAAHr1maP47V1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjUxMDIzMjMwMDQ1WhcNMjUxMDI0MjMwMDQ1WjAzMTEwLwYDVQQD EyhlYTY3YmYyNDYzMzcyYjkyZmY5Yzk0NGQyMGExNmI1NzIyMmQ0OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJx5UjghsjPGa2agqazFjv0eMI/2 NZuPrpxjswijAG9MUMn593KQUnPZrmgP2n2K2W0ZF085wLqj995OtQ0BIdCUyAyR fGQo5wWt09Ut1CvU0CLJZURxGFV2EPZHRXXh4FhQGJlZb/h5+OQIem9QwbCh/Sk+ GaWb0jLjSoOoMSPYGw/1I8S7ihHp0+QSCyTrQfE+D0MO+HODbic5bVRFVKCVsOJB vuZJFAISO/cmg3q6sggNrp6s9ueMwb2WhpF6QXPQtVZqSB0UJN72AG64Sz4NjZqk HscQ6v6pra8QVp/dUgZA9OLiyUy0GYVMWCeg90Irnpl/SIDBlVlSszMZPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpnvyRjNyuS/5yUTSCha1ciLUigMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwkwarHk nqXsciE292KgYukguCu4fQB7jra1ZxauSQTViWER1oFRZZir1waHQ94jzIB9/CVu RFVPHWF5WqZyBNPz9QGNG5u+Wa2KZnRg/z0tkvUTjyPnf6b2QEMEPPj7sPCliTug X926U8mzjJj6E6FRmDTUmAV5tewq8884HdLWrSSSFZjmHvQScNazGtuo5DdeG/vp NVGPWNE7KwRlq9VlPsaoN0W9CEM8mZr3YhlmAlHUtXXU6QnrmNlLj8poZb8/JlL/ LznXuSEAGFKcOfhCMH9+8XHvrP9wLqvk6Mzq6/OUWuz+6ZSt3rc0IMcfc18E92Zc zlfyf+cAznbHww== -----END CERTIFICATE-----Generated at Fri Oct 24 05:07:33 2025 by rpki-client