$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: NoYva/Al8KPUbpxMsCHr5ozb3OzlhgGBvoTdpnge25A= Subject key identifier: 17:B4:D1:23:AD:25:EE:40:77:D7:FB:10:26:AB:C0:52:ED:38:01:CE Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019835037A4ACA965E039A75A25F6EC9B285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1354 Signing time: Wed 23 Jul 2025 02:01:17 +0000 Manifest this update: Wed 23 Jul 2025 02:01:17 +0000 Manifest next update: Thu 24 Jul 2025 02:01:17 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: Iglz70EVzKdY+CMzJqc9jr2hAZiqIXzmY19v7W98dT8=) 5: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 6: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 7: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 8: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=) 9: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=) 10: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 11: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 12: fhv64bxzWcauBoH7qXIpIF6wjQo.roa (hash: XBOHExDlxcs7IJl8NBFZOTlEqiJsW6a5rBKOKZnQpcM=) 13: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 14: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 15: sOABMeqqwZ1G0D1ULMJHO8KxxxQ.roa (hash: aqn/2HV1SWgZFD22dyBslfrAfJPMn4unQ/xtd1gPhfA=) 16: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=) 17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 19: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:35:03:7a:4a:ca:96:5e:03:9a:75:a2:5f:6e:c9:b2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jul 23 02:01:17 2025 GMT Not After : Jul 24 02:01:17 2025 GMT Subject: CN=17b4d123ad25ee4077d7fb1026abc052ed3801ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fd:22:68:ea:3a:68:24:00:36:d5:d2:35:c2: c5:43:51:a9:16:93:e3:e4:ac:9c:d1:32:44:e5:04: 65:f8:51:62:58:50:d0:34:84:92:9e:75:64:84:5c: 0d:f6:76:7e:d9:e8:fe:de:59:47:fd:57:8d:6d:57: f2:6e:3f:c7:94:31:b7:76:eb:94:ac:c6:47:9b:57: 3a:71:c9:2a:48:0f:e9:df:8c:c7:a5:93:ac:a4:f7: b9:54:d4:6f:a0:d9:a1:11:88:95:de:3e:0e:ee:cd: 09:61:51:01:26:45:e3:2e:6a:84:18:63:19:fb:69: 7e:a1:6d:65:c9:30:c1:84:cd:ed:42:e0:2f:cc:0d: 87:16:7a:e9:0d:49:3c:c7:45:04:3f:c7:e9:c6:84: 69:cb:5c:82:b4:1a:d5:2e:8f:33:42:7d:f4:ba:01: 95:cb:ee:6d:12:48:39:20:e7:6c:34:bf:1b:75:c7: 2d:47:13:f7:9c:3a:4b:ff:7c:4f:79:93:9d:0f:a0: 18:05:af:5e:ea:74:e0:6d:d1:5f:a1:d6:5f:ff:6d: 94:11:3a:1e:c7:94:30:1b:50:4e:d7:72:0c:c1:1e: 37:70:ba:c4:1b:f2:fe:d3:d3:b2:24:12:8f:20:b7: a2:27:84:3e:cc:0f:b0:62:22:80:78:a9:ac:78:d4: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B4:D1:23:AD:25:EE:40:77:D7:FB:10:26:AB:C0:52:ED:38:01:CE X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:69:9a:8b:be:59:71:27:ae:ad:4b:80:3b:b7:ce:88:9f:14: 5b:b3:87:d1:fe:ad:5c:5a:59:1b:c7:15:0c:30:bd:13:59:d7: d0:80:18:e2:3c:10:8f:00:a9:6d:68:d5:a0:d5:64:b1:8c:26: d0:00:a5:bf:c1:c2:cd:2e:de:dc:8a:c5:b2:32:02:d6:85:2d: 4d:cb:f4:16:0d:ed:39:da:9d:ba:6c:90:77:c4:d1:ad:a8:2f: 89:58:ca:ae:2a:7a:e1:46:2d:c9:c1:53:8a:59:10:a1:f6:03: a1:e0:01:b5:85:5f:c7:cf:65:ba:74:59:1d:4a:5d:16:d7:54: 6d:48:b8:bd:0d:d7:26:0e:55:30:b9:0c:00:72:0b:90:f7:8d: c9:fa:87:c8:63:20:1a:2f:3e:97:5f:6b:6b:8d:ef:99:90:0d: 1e:4a:6d:e6:58:e0:02:32:8a:60:55:40:61:8a:1a:ca:f3:5f: 2e:11:e5:d0:7d:09:2d:b7:70:8f:8c:50:fe:ee:96:19:f4:bb: d1:43:d2:9d:84:91:72:e5:e6:ea:79:7e:74:ff:ae:07:e9:b8: 19:e4:0d:9f:98:8d:05:5f:da:c6:c6:a6:08:ee:00:92:86:87: f0:f4:6b:30:4b:6b:85:85:1e:84:fb:1b:3e:bc:0b:9b:ee:22: 19:54:c9:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg1A3pKypZeA5p1ol9uybKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUwNzIzMDIwMTE3WhcNMjUwNzI0MDIwMTE3WjAzMTEwLwYDVQQD EygxN2I0ZDEyM2FkMjVlZTQwNzdkN2ZiMTAyNmFiYzA1MmVkMzgwMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwv0iaOo6aCQANtXSNcLFQ1GpFpPj 5Kyc0TJE5QRl+FFiWFDQNISSnnVkhFwN9nZ+2ej+3llH/VeNbVfybj/HlDG3duuU rMZHm1c6cckqSA/p34zHpZOspPe5VNRvoNmhEYiV3j4O7s0JYVEBJkXjLmqEGGMZ +2l+oW1lyTDBhM3tQuAvzA2HFnrpDUk8x0UEP8fpxoRpy1yCtBrVLo8zQn30ugGV y+5tEkg5IOdsNL8bdcctRxP3nDpL/3xPeZOdD6AYBa9e6nTgbdFfodZf/22UEToe x5QwG1BO13IMwR43cLrEG/L+09OyJBKPILeiJ4Q+zA+wYiKAeKmseNTVAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe00SOtJe5Ad9f7ECarwFLtOAHOMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmmai75Z cSeurUuAO7fOiJ8UW7OH0f6tXFpZG8cVDDC9E1nX0IAY4jwQjwCpbWjVoNVksYwm 0AClv8HCzS7e3IrFsjIC1oUtTcv0Fg3tOdqdumyQd8TRragviVjKrip64UYtycFT ilkQofYDoeABtYVfx89lunRZHUpdFtdUbUi4vQ3XJg5VMLkMAHILkPeNyfqHyGMg Gi8+l19ra43vmZANHkpt5ljgAjKKYFVAYYoayvNfLhHl0H0JLbdwj4xQ/u6WGfS7 0UPSnYSRcuXm6nl+dP+uB+m4GeQNn5iNBV/axsamCO4AkoaH8PRrMEtrhYUehPsb PrwLm+4iGVTJgg== -----END CERTIFICATE-----Generated at Wed Jul 23 06:08:39 2025 by rpki-client