$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json) Hash identifier: 3jlNAbIhMfQso1WJ7HniPlSxfbySA5TvEW8hvTpHQ0Q= Subject key identifier: 77:7C:8D:63:8E:88:DD:EF:0C:87:1E:B5:84:14:50:EB:90:F1:57:44 Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b Certificate serial: 019855A06E08E7FB47B779C58119AB4B3906 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft Manifest number: 08DC Signing time: Tue 29 Jul 2025 10:00:33 +0000 Manifest this update: Tue 29 Jul 2025 10:00:33 +0000 Manifest next update: Wed 30 Jul 2025 10:00:33 +0000 Files and hashes: 1: 6m4iBU1uV9OjtT-yI0kHDyi4gLg.roa (hash: N5jGzrk7sta0axX9QvqTjHgaFwV4arIObuPbt2KJNnM=) 2: 7tTZk2wCmakp5M5T1YuiU8TuWxw.roa (hash: 8JeqZuwRL8gNhmaq+aEKdQ907Eg7DEpF3/RheOxRpLQ=) 3: 84TrX0qs1Y4yZ95W-q51Grc9rH0.roa (hash: sAIYXtIgwoe7qa6SiMh9Mq7V0vDYEf6NPqM5EjqisbM=) 4: 9N_ApyIrHnOJ1sAuU5vrDFUkehY.roa (hash: 7PsPqLU9l7HSHfDbzxlgdJJnRAxwqv4NAwmeNc6LN48=) 5: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: CkTBzCISJEhyVYxinmtyM0JGmdiPmgiPUalg4MEjIUw=) 6: DH2KmHptf0XCrxVYDl8SWJ6n_OU.roa (hash: 1p3/Uw0Hzg9UQAF7EIOu+m40aaRU5MBeT7UYxTAJl5M=) 7: I0lZ-wnGmJHIeWk4JSccdYLGI-0.roa (hash: LnR75ICh/pu9YTgE61/TkYN/sNwF0ls7eWnRXUdZNeI=) 8: Qgkw5GtNRcsOFSShf-z0xF_tI6I.roa (hash: mZ0NWqp/jNCXFtNZo5WbQ6xy8wKTYFTecNdM8OwQcds=) 9: _6aivCsAWH-kqctPZhR5amDxfsA.roa (hash: nWAJSN6GSWrgvbg0VuNNKDg0OVs+juuAy8NmC7uqE34=) 10: acXjyXZbDzNfFna5ZWRHDz6K5YE.roa (hash: sm9lkJZIavBC2tJvS1A50JKwZEAycxeog0lweVtHcXM=) 11: e31KG_8dad-8ny4PFtbT297H7Sw.roa (hash: GQmunQnH91NAJBx06ug5Vq/w7qs39J3e7sMnlc2OutE=) 12: ej-rBCJmnu-miAXBE5PIqlt8TFo.roa (hash: Z10wztRjBSEGOvVc7tXz4TILdxZp89J4+J08gFrTvVU=) 13: gcpaoxI47uAbfYR_M1Dl9LctMNk.roa (hash: hG0WyItsQE7UjKos3HOIuobdbMTAqgbbv6pzl/cN/6g=) 14: pSbX-PyBbCbb6sLnIu1jAWYX5ak.roa (hash: GoC5K97gl9mRDyYEwiwyowaJojmTfgrX+bjBIRbHQpg=) 15: xe-KS40JXwA4DSnnilL2aYekU18.roa (hash: trUq9aYHMLBwRD59FTvYVzHcchsIZi2f2vJplQh7+rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Jul 2025 08:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:55:a0:6e:08:e7:fb:47:b7:79:c5:81:19:ab:4b:39:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b Validity Not Before: Jul 29 10:00:33 2025 GMT Not After : Jul 30 10:00:33 2025 GMT Subject: CN=777c8d638e88ddef0c871eb5841450eb90f15744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b0:e5:d3:3c:3d:36:b9:6a:76:76:2c:be:1d: ea:b4:97:ab:7c:e1:f7:fe:d8:b2:5b:bc:35:ad:ef: 1f:26:d9:96:16:a5:6e:44:34:a3:06:31:72:ff:d6: f3:2d:85:5e:cc:80:41:5a:e4:52:c6:c1:25:a7:75: 18:6b:83:4d:dc:c2:a9:54:fe:2e:c7:b7:36:45:cb: bb:ff:fb:10:30:6f:9b:5b:4a:cf:a0:d3:20:95:97: c0:95:18:6e:99:08:5b:c0:b5:9a:ba:76:6f:66:20: 3e:e3:6d:13:f6:17:ca:20:c9:69:3f:84:c7:ca:39: ec:5a:1f:24:d8:8a:65:a5:40:c1:68:4b:32:2e:21: db:e0:d6:3b:9b:0a:b4:da:cd:b2:d4:1c:82:2b:56: 1b:94:a7:80:df:9e:97:8f:e0:60:b6:0f:ee:41:70: db:35:70:6a:6b:99:73:3e:17:4f:42:9b:cf:d8:99: 4d:ec:aa:da:30:d5:bd:39:fb:0b:92:0a:7f:b5:79: f7:4c:c2:6e:ee:7c:1e:0f:26:69:01:cb:e0:ea:c9: 6a:e2:24:54:c7:a9:b2:a0:5f:fa:9c:6a:30:ff:09: 6e:49:04:de:ad:66:b7:e5:f1:e2:e2:ca:d4:87:99: 94:a1:a0:33:f4:63:6c:f9:8a:71:51:37:82:fd:8d: f5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7C:8D:63:8E:88:DD:EF:0C:87:1E:B5:84:14:50:EB:90:F1:57:44 X509v3 Authority Key Identifier: keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bd:c2:3f:29:54:0c:a0:f2:1c:33:a0:87:f3:be:7a:bb:cf: 07:fc:44:a7:f7:a8:98:17:92:26:ef:65:99:8f:a2:8e:01:73: 57:fc:5f:95:da:7c:1e:87:49:1d:04:b0:cb:69:51:0c:fc:e8: 9f:47:86:ba:ea:5c:5f:a0:19:99:eb:54:74:3e:95:82:d6:f4: 97:bd:cc:04:fb:55:4c:7f:03:38:b8:73:c5:e2:42:84:ce:e3: 64:63:6a:7d:80:47:7b:e2:bf:86:82:11:2a:28:d3:55:ab:20: ff:1a:fa:5b:a7:c4:f1:c2:4f:d8:ab:e7:8f:52:4f:ae:d9:e6: e0:cc:3f:61:ab:78:c4:c5:fa:bc:59:c0:fb:74:98:e5:39:6f: c5:49:2d:c4:8f:9d:4a:75:5b:5c:eb:52:ad:3b:d8:4f:1c:d9: 7b:fd:00:3c:58:7f:4b:36:12:b3:a6:d5:d5:c6:eb:e3:c4:60: e9:2c:51:26:48:3f:73:36:d9:f3:d3:07:94:d5:88:92:9d:79: b3:2d:e9:f1:0c:27:22:e5:7e:1d:10:1d:94:c9:73:5d:33:c4: 58:3f:bd:94:6b:ef:30:68:fd:1c:d0:45:bd:a7:dd:67:d8:d7: 13:3d:8f:7f:2f:00:2c:ce:ac:c6:bc:dc:ea:6c:30:22:56:b3: e2:48:0a:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhVoG4I5/tHt3nFgRmrSzkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3 Y2ZmOWIwHhcNMjUwNzI5MTAwMDMzWhcNMjUwNzMwMTAwMDMzWjAzMTEwLwYDVQQD Eyg3NzdjOGQ2MzhlODhkZGVmMGM4NzFlYjU4NDE0NTBlYjkwZjE1NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rDl0zw9NrlqdnYsvh3qtJerfOH3 /tiyW7w1re8fJtmWFqVuRDSjBjFy/9bzLYVezIBBWuRSxsElp3UYa4NN3MKpVP4u x7c2Rcu7//sQMG+bW0rPoNMglZfAlRhumQhbwLWaunZvZiA+420T9hfKIMlpP4TH yjnsWh8k2IplpUDBaEsyLiHb4NY7mwq02s2y1ByCK1YblKeA356Xj+Bgtg/uQXDb NXBqa5lzPhdPQpvP2JlN7KraMNW9OfsLkgp/tXn3TMJu7nweDyZpAcvg6slq4iRU x6myoF/6nGow/wluSQTerWa35fHi4srUh5mUoaAz9GNs+YpxUTeC/Y31dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHd8jWOOiN3vDIcetYQUUOuQ8VdEMB8GA1UdIwQY MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdr3CPylU DKDyHDOgh/O+ervPB/xEp/eomBeSJu9lmY+ijgFzV/xfldp8HodJHQSwy2lRDPzo n0eGuupcX6AZmetUdD6Vgtb0l73MBPtVTH8DOLhzxeJChM7jZGNqfYBHe+K/hoIR KijTVasg/xr6W6fE8cJP2Kvnj1JPrtnm4Mw/Yat4xMX6vFnA+3SY5TlvxUktxI+d SnVbXOtSrTvYTxzZe/0APFh/SzYSs6bV1cbr48Rg6SxRJkg/czbZ89MHlNWIkp15 sy3p8QwnIuV+HRAdlMlzXTPEWD+9lGvvMGj9HNBFvafdZ9jXEz2Pfy8ALM6sxrzc 6mwwIlaz4kgKNQ== -----END CERTIFICATE-----Generated at Tue Jul 29 12:10:31 2025 by rpki-client