$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: +Be9WOAmA4lFZiuAhqyGmYampAJ7URKP4KYiSkQn3dU= Subject key identifier: F5:BB:0A:D5:E1:96:82:C8:05:1E:A1:16:F4:05:83:49:7A:06:F7:7A Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 01983E3C71076FA05D2FF14A53AE205DCBC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0902 Signing time: Thu 24 Jul 2025 21:00:05 +0000 Manifest this update: Thu 24 Jul 2025 21:00:05 +0000 Manifest next update: Fri 25 Jul 2025 21:00:05 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: 0xRWiCu2rRu5zo6pkhsnvhh+ypI413C8f6IzuuDWaRo=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 21:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3e:3c:71:07:6f:a0:5d:2f:f1:4a:53:ae:20:5d:cb:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jul 24 21:00:05 2025 GMT Not After : Jul 25 21:00:05 2025 GMT Subject: CN=f5bb0ad5e19682c8051ea116f40583497a06f77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:43:ec:aa:fb:2b:59:a9:93:31:c8:b9:b8:c0: c8:8a:3e:c4:f8:51:29:84:d4:4c:a4:40:34:27:2a: d2:f5:de:f8:a3:45:2b:b5:cf:6b:f1:cf:7e:0d:66: b9:cb:4d:80:4a:c0:fe:31:96:0a:6b:0d:90:e6:ef: 92:b7:34:69:9a:b3:9d:f0:4a:5d:0f:ea:af:ca:7a: 42:5d:1a:0b:33:30:39:66:91:06:fc:da:3d:16:aa: 72:0b:e0:33:79:c8:51:2d:6c:32:cb:fe:3d:6b:76: 4b:bb:31:6e:18:e4:42:00:35:14:2c:a2:57:47:7c: 55:9c:48:f8:52:fa:64:25:6a:9e:a7:78:b7:ae:4e: 00:4c:8c:c9:2f:29:94:2e:ad:39:44:36:68:83:e4: 74:cc:f9:48:46:a5:b7:91:77:29:7c:f7:4f:c5:be: 65:61:5d:a3:d3:20:cc:dd:2a:e7:97:97:ed:c1:98: 5b:8b:46:9b:44:23:5a:58:e0:81:7b:09:68:e0:64: 74:07:2b:68:7f:ca:fc:d3:4d:31:f5:43:bc:c9:c0: a9:b6:2c:45:79:41:a4:4b:7e:c1:94:b4:25:a3:3c: 52:2f:7c:6f:7f:72:2d:b5:de:d7:b2:e6:13:f5:e7: 85:3f:a6:52:f7:1e:86:fa:61:a8:84:c3:9a:30:98: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BB:0A:D5:E1:96:82:C8:05:1E:A1:16:F4:05:83:49:7A:06:F7:7A X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9e:65:8e:9c:22:50:f7:99:3b:c8:98:b8:8a:26:50:69:31: 51:63:63:30:1f:ed:29:40:c6:7c:d6:10:c5:53:c5:df:5f:a5: 44:59:af:ae:f0:3c:60:80:0a:e2:7b:82:a2:6a:78:b8:4f:0e: 21:f8:6a:b5:c1:b8:32:7f:de:76:78:2c:8c:1d:ae:0f:72:ca: 5b:41:c2:b9:2a:04:d6:a9:23:5e:ac:d1:bf:7f:53:0f:5d:97: 68:16:3e:71:a3:91:78:6f:0a:ea:b9:37:bb:8d:6e:1d:af:c9: 52:6b:4a:98:40:3b:e5:c0:ab:c6:b8:04:2a:0e:6a:05:79:66: 45:14:a9:9a:03:68:5a:8c:30:99:b3:32:f4:a5:5b:1a:a4:1a: 74:32:07:34:88:64:e5:4b:4e:dc:cc:8c:ce:68:9e:0a:80:14: a5:7d:43:f9:f7:8a:82:92:b4:a8:55:b9:7d:08:e2:19:26:26: 20:18:28:9e:72:bd:c0:54:7d:18:8f:22:5f:a1:80:85:4e:6f: 3d:55:a8:b5:00:c5:a2:a1:7c:ab:ad:10:9b:4c:ef:77:9e:3e: 3c:76:3a:ab:9e:97:0c:f9:7b:9d:b8:27:db:60:40:98:cd:31: 6d:0f:b5:fd:10:b5:b0:81:4b:97:96:3c:48:e0:7d:b4:05:75: 0b:8d:91:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg+PHEHb6BdL/FKU64gXcvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwNzI0MjEwMDA1WhcNMjUwNzI1MjEwMDA1WjAzMTEwLwYDVQQD EyhmNWJiMGFkNWUxOTY4MmM4MDUxZWExMTZmNDA1ODM0OTdhMDZmNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEPsqvsrWamTMci5uMDIij7E+FEp hNRMpEA0JyrS9d74o0Urtc9r8c9+DWa5y02ASsD+MZYKaw2Q5u+StzRpmrOd8Epd D+qvynpCXRoLMzA5ZpEG/No9FqpyC+AzechRLWwyy/49a3ZLuzFuGORCADUULKJX R3xVnEj4UvpkJWqep3i3rk4ATIzJLymULq05RDZog+R0zPlIRqW3kXcpfPdPxb5l YV2j0yDM3Srnl5ftwZhbi0abRCNaWOCBewlo4GR0Bytof8r8000x9UO8ycCptixF eUGkS37BlLQlozxSL3xvf3Ittd7XsuYT9eeFP6ZS9x6G+mGohMOaMJjYvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW7CtXhloLIBR6hFvQFg0l6Bvd6MB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJ5ljpwi UPeZO8iYuIomUGkxUWNjMB/tKUDGfNYQxVPF31+lRFmvrvA8YIAK4nuComp4uE8O IfhqtcG4Mn/edngsjB2uD3LKW0HCuSoE1qkjXqzRv39TD12XaBY+caOReG8K6rk3 u41uHa/JUmtKmEA75cCrxrgEKg5qBXlmRRSpmgNoWowwmbMy9KVbGqQadDIHNIhk 5UtO3MyMzmieCoAUpX1D+feKgpK0qFW5fQjiGSYmIBgonnK9wFR9GI8iX6GAhU5v PVWotQDFoqF8q60Qm0zvd54+PHY6q56XDPl7nbgn22BAmM0xbQ+1/RC1sIFLl5Y8 SOB9tAV1C42RyQ== -----END CERTIFICATE-----Generated at Fri Jul 25 06:16:25 2025 by rpki-client