$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: QqbzTBxEru3Mmcloldhgw7IN/q5rLo20IvUt4OPoeLw= Subject key identifier: 7C:49:A5:EC:88:D5:41:63:50:F0:D5:C9:B6:06:CD:B7:8A:A7:BA:57 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 01991E0AEF82E09B6D63BB7746F2E6DC65AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 11D3 Signing time: Sat 06 Sep 2025 08:00:57 +0000 Manifest this update: Sat 06 Sep 2025 08:00:57 +0000 Manifest next update: Sun 07 Sep 2025 08:00:57 +0000 Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=) 2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=) 3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=) 4: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=) 5: P1aEjNsd0SJfPVikfoYHI7ubFMI.roa (hash: DuGgYnJ4n5Dj5BJqboFm/1FmaNs0vaXsoWw3QLn5rAo=) 6: PdmkiIr6IQZ3ECxIk-0ePUpgPiI.roa (hash: AJLw7PX9vrmJ9MfsvtzIEbi8E6wrzfkj3Y9s547jzYg=) 7: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=) 8: _8MCzl0l1tQuihsF_I64BRSs2tc.roa (hash: hgK1WfvVvkljiSPw5yBzGlfOpy6Z+LRSv3D2IqqcYQ4=) 9: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: 9ELupcp2asdpZIii1Fl3sYzI1WxyO8CMdUy4frBRF7w=) 10: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=) 11: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=) 12: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=) 13: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=) 14: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=) 15: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=) 16: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (hash: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=) 17: zaK7g2klAtwCGQFnfe_zrOgOJdA.roa (hash: tBmARlQQAzmv3v9ImSbiUoVw1kndaC1qx7ql+RM5QpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:0a:ef:82:e0:9b:6d:63:bb:77:46:f2:e6:dc:65:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Sep 6 08:00:57 2025 GMT Not After : Sep 7 08:00:57 2025 GMT Subject: CN=7c49a5ec88d5416350f0d5c9b606cdb78aa7ba57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:d9:07:1e:73:3e:f2:92:67:eb:47:98:cf: ba:06:41:73:7a:01:43:39:25:7e:01:a5:a1:84:81: 3f:1a:72:6d:03:82:9f:01:b1:e8:b2:eb:3d:1c:d4: 60:d1:32:3d:0b:bb:be:51:91:0b:90:23:f8:83:99: ef:b5:39:79:43:f5:0a:63:39:77:73:9f:42:28:7d: 0b:ad:20:e2:fe:ec:94:95:27:fa:d8:ad:be:36:5b: b7:47:85:a3:d9:5f:c9:af:d6:20:10:70:88:05:5e: fe:a8:1e:02:0c:bd:81:ba:98:ed:59:86:5b:49:f2: 41:9f:17:c5:3a:d9:fa:2f:46:86:de:f0:10:84:30: 60:9e:98:5d:60:78:dc:13:e2:ce:68:e0:43:db:48: a4:c8:b9:23:62:c9:65:f2:00:1a:c4:0b:df:c9:1c: ab:f4:b1:91:6a:d2:a4:21:0c:71:6a:0e:20:25:2b: 65:c2:a3:b5:62:bf:06:73:a6:ef:e2:6b:4d:b0:85: cd:45:22:6b:01:b0:d0:2f:98:a3:bf:40:e2:d3:7c: 96:74:61:fc:5b:dc:61:92:9a:ec:25:3c:17:2b:5f: aa:1a:b8:46:ee:08:1b:b1:78:96:4d:06:d8:79:8d: 59:4a:46:e0:de:b8:2f:9a:82:7c:1d:dd:29:1b:c5: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:49:A5:EC:88:D5:41:63:50:F0:D5:C9:B6:06:CD:B7:8A:A7:BA:57 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b0:9e:f9:e4:c7:f4:6b:6e:ce:2e:5c:6a:01:e2:cf:3d:7f: c2:51:ae:70:86:bc:7f:56:42:96:d8:4a:86:ef:39:4d:5d:25: 5b:c4:c1:93:50:56:c1:2a:c9:8e:ae:23:66:c6:89:5b:a7:2d: 5d:b3:d5:8a:03:20:3c:06:1a:0f:a7:22:cf:f9:0b:e4:b8:32: 59:8a:8b:f8:a9:2b:56:5e:5f:77:22:dd:35:59:dc:07:4c:e9: 5a:6e:48:38:b4:6c:5c:87:45:1b:5a:23:41:b0:1a:c8:37:ce: 99:32:b2:34:e2:6a:9b:35:53:dd:d9:ba:f8:1b:4a:61:23:1e: 65:12:35:e7:35:3c:04:2a:0f:2b:e4:20:84:ca:ad:ae:d8:58: 72:e2:ea:d2:65:e5:d2:ba:7f:19:b8:52:b6:ca:3d:11:cc:98: a3:f9:00:53:a1:97:0d:a8:8e:9f:e1:26:1e:74:fb:17:32:dc: 54:dd:7c:99:83:66:48:3b:86:19:73:27:5c:2e:62:9d:39:6a: bf:e6:c3:91:8b:7c:bc:13:d8:bd:0a:7f:3e:81:6a:e8:1f:1c: b9:d9:5b:d7:86:a3:8c:95:e7:58:69:3b:c4:1d:8b:75:1a:93: 76:47:6d:80:35:ba:f4:86:eb:e5:62:34:57:4a:f4:53:39:44: 9a:80:fd:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeCu+C4JttY7t3RvLm3GWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjUwOTA2MDgwMDU3WhcNMjUwOTA3MDgwMDU3WjAzMTEwLwYDVQQD Eyg3YzQ5YTVlYzg4ZDU0MTYzNTBmMGQ1YzliNjA2Y2RiNzhhYTdiYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy/ZBx5zPvKSZ+tHmM+6BkFzegFD OSV+AaWhhIE/GnJtA4KfAbHosus9HNRg0TI9C7u+UZELkCP4g5nvtTl5Q/UKYzl3 c59CKH0LrSDi/uyUlSf62K2+Nlu3R4Wj2V/Jr9YgEHCIBV7+qB4CDL2BupjtWYZb SfJBnxfFOtn6L0aG3vAQhDBgnphdYHjcE+LOaOBD20ikyLkjYsll8gAaxAvfyRyr 9LGRatKkIQxxag4gJStlwqO1Yr8Gc6bv4mtNsIXNRSJrAbDQL5ijv0Di03yWdGH8 W9xhkprsJTwXK1+qGrhG7ggbsXiWTQbYeY1ZSkbg3rgvmoJ8Hd0pG8VImwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxJpeyI1UFjUPDVybYGzbeKp7pXMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrCe+eTH 9Gtuzi5cagHizz1/wlGucIa8f1ZClthKhu85TV0lW8TBk1BWwSrJjq4jZsaJW6ct XbPVigMgPAYaD6ciz/kL5LgyWYqL+KkrVl5fdyLdNVncB0zpWm5IOLRsXIdFG1oj QbAayDfOmTKyNOJqmzVT3dm6+BtKYSMeZRI15zU8BCoPK+QghMqtrthYcuLq0mXl 0rp/GbhStso9EcyYo/kAU6GXDaiOn+EmHnT7FzLcVN18mYNmSDuGGXMnXC5inTlq v+bDkYt8vBPYvQp/PoFq6B8cudlb14ajjJXnWGk7xB2LdRqTdkdtgDW69Ibr5WI0 V0r0UzlEmoD9+g== -----END CERTIFICATE-----Generated at Sat Sep 6 13:45:53 2025 by rpki-client