$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: fImpt6po+Gw6byiuRWyNcNYyXMi9/Bfh8F6ZzqM4hSs= Subject key identifier: 0C:E5:1D:46:F6:DB:6B:54:4B:BC:4E:17:E7:BA:F7:8D:12:EF:5C:84 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 01983A60207B64C483E1567AE2625E00C0FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0900 Signing time: Thu 24 Jul 2025 03:00:35 +0000 Manifest this update: Thu 24 Jul 2025 03:00:35 +0000 Manifest next update: Fri 25 Jul 2025 03:00:35 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: jdejNtJv7I4KqouUk+Z9gAFkYwJbywhgHN4tEj0YFAI=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Jul 2025 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:3a:60:20:7b:64:c4:83:e1:56:7a:e2:62:5e:00:c0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jul 24 03:00:35 2025 GMT Not After : Jul 25 03:00:35 2025 GMT Subject: CN=0ce51d46f6db6b544bbc4e17e7baf78d12ef5c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:2e:9b:f8:54:6e:da:0c:9a:d3:c8:1a:6e: 2a:9e:d5:25:89:e1:b6:11:2e:47:53:87:20:d2:65: 9c:88:7c:2a:bf:e9:87:77:da:29:64:d7:70:e0:c4: b0:73:88:9c:ab:19:d4:3c:ae:81:8d:d8:a0:a3:e5: 0b:91:12:10:58:e1:bb:04:48:03:fd:c2:f6:04:e5: 0c:10:ea:e6:1b:72:df:61:90:13:a9:88:e4:1c:81: 06:c4:f0:a4:45:c7:3f:a1:cc:2b:cf:6f:17:fc:03: 30:f5:ac:e1:83:92:41:4e:e1:0c:5d:60:ee:47:e4: 17:ff:ca:b6:d6:9e:7e:33:55:fa:4a:d3:de:95:67: c3:36:0d:16:07:bf:0f:50:84:76:14:a6:06:f7:7a: 19:fb:90:74:52:7f:4a:7b:49:99:18:d4:eb:63:ab: e1:dd:b8:fd:88:06:b8:5e:53:cd:89:ea:86:46:f0: 79:e7:04:b4:26:04:0b:83:19:84:a9:3c:fd:e8:e0: 6f:ab:fd:41:3e:69:77:a7:47:93:e3:99:ed:b2:52: c1:d2:6b:6a:e3:81:3c:e6:ea:11:99:14:42:9a:b7: 11:f5:39:83:35:34:a3:d8:62:b8:69:d4:ce:b0:4f: 79:e0:03:22:0c:07:a8:b0:56:da:e8:47:35:e1:54: 08:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E5:1D:46:F6:DB:6B:54:4B:BC:4E:17:E7:BA:F7:8D:12:EF:5C:84 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c3:83:3f:0b:81:8c:2e:fd:d2:b6:97:f1:c2:9e:e6:01:61: 5f:06:64:b5:be:7b:e6:6e:6e:15:f5:ac:96:e3:54:74:47:d2: e0:cf:5a:fe:eb:c9:f1:69:2a:58:9d:bf:37:b7:19:4b:32:8f: fa:38:f6:87:4d:7e:cc:c8:77:9d:7f:9b:18:df:6e:57:4c:36: 28:95:cc:9a:36:df:d3:b1:b7:24:a9:cc:59:19:72:fc:1b:bb: b1:11:7d:96:4a:4f:39:ab:8f:b7:f7:c7:dd:88:b6:be:4f:66: da:f0:ef:ee:13:8b:fd:4f:7d:b9:61:5c:3d:03:c5:62:75:87: 3d:fc:03:3e:00:6f:f5:94:a8:8f:c1:06:93:f5:60:b9:e6:ee: 35:20:74:56:9d:29:e0:72:3b:cb:9a:c2:03:21:56:d9:71:ce: 5e:78:53:24:46:a9:69:e5:3a:c5:30:c0:d8:ff:2a:d2:8d:98: d2:44:af:ec:87:01:c7:b7:4a:3b:84:75:29:64:94:b2:24:83: 81:31:ec:05:a4:c3:8d:59:a4:45:8b:2f:56:d6:bb:1f:bc:27: 77:13:6d:cd:fd:58:c5:a1:e0:ea:87:ee:09:cb:f2:5a:d1:0c: e2:9c:6c:f2:78:45:39:f3:62:29:45:36:38:96:e0:47:d3:a5: 36:53:3b:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg6YCB7ZMSD4VZ64mJeAMD9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwNzI0MDMwMDM1WhcNMjUwNzI1MDMwMDM1WjAzMTEwLwYDVQQD EygwY2U1MWQ0NmY2ZGI2YjU0NGJiYzRlMTdlN2JhZjc4ZDEyZWY1Yzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfoum/hUbtoMmtPIGm4qntUlieG2 ES5HU4cg0mWciHwqv+mHd9opZNdw4MSwc4icqxnUPK6Bjdigo+ULkRIQWOG7BEgD /cL2BOUMEOrmG3LfYZATqYjkHIEGxPCkRcc/ocwrz28X/AMw9azhg5JBTuEMXWDu R+QX/8q21p5+M1X6StPelWfDNg0WB78PUIR2FKYG93oZ+5B0Un9Ke0mZGNTrY6vh 3bj9iAa4XlPNieqGRvB55wS0JgQLgxmEqTz96OBvq/1BPml3p0eT45ntslLB0mtq 44E85uoRmRRCmrcR9TmDNTSj2GK4adTOsE954AMiDAeosFba6Ec14VQIcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzlHUb222tUS7xOF+e6940S71yEMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesODPwuB jC790raX8cKe5gFhXwZktb575m5uFfWsluNUdEfS4M9a/uvJ8WkqWJ2/N7cZSzKP +jj2h01+zMh3nX+bGN9uV0w2KJXMmjbf07G3JKnMWRly/Bu7sRF9lkpPOauPt/fH 3Yi2vk9m2vDv7hOL/U99uWFcPQPFYnWHPfwDPgBv9ZSoj8EGk/VguebuNSB0Vp0p 4HI7y5rCAyFW2XHOXnhTJEapaeU6xTDA2P8q0o2Y0kSv7IcBx7dKO4R1KWSUsiSD gTHsBaTDjVmkRYsvVta7H7wndxNtzf1YxaHg6ofuCcvyWtEM4pxs8nhFOfNiKUU2 OJbgR9OlNlM7bg== -----END CERTIFICATE-----Generated at Thu Jul 24 11:54:46 2025 by rpki-client