$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: EUt+uJPqwWkn+1pJl0vgPfRGHF+JhfSvBtoRuM4PxoQ= Subject key identifier: 96:79:54:05:4E:05:22:FB:FC:A2:13:6E:7E:E1:70:2C:AB:A8:67:82 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 01983495308A7F5C098DD2E92FA4527433BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 08FD Signing time: Wed 23 Jul 2025 00:00:49 +0000 Manifest this update: Wed 23 Jul 2025 00:00:49 +0000 Manifest next update: Thu 24 Jul 2025 00:00:49 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: jiRNvw74aeEYe6pfkZJShHwJ26o+caH9R6vHtITeP00=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 22:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:34:95:30:8a:7f:5c:09:8d:d2:e9:2f:a4:52:74:33:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jul 23 00:00:49 2025 GMT Not After : Jul 24 00:00:49 2025 GMT Subject: CN=967954054e0522fbfca2136e7ee1702caba86782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:e0:71:a1:c4:90:b4:00:55:83:a6:2e:55: 81:22:0d:5d:51:69:72:8e:82:d3:ac:a7:d9:fe:fe: 9c:a4:28:13:30:49:c9:46:36:8b:25:25:87:26:a3: 10:7a:50:01:a9:94:e0:f2:1f:56:74:16:87:b0:8a: 99:e6:dd:22:0b:f4:24:0c:ac:d2:9d:6e:36:ee:de: 0c:5a:a6:86:fd:a3:97:84:82:88:07:d7:e1:40:50: 9b:be:6c:6c:6b:25:8c:b7:d1:15:cc:ad:ce:ef:6f: d6:94:43:74:b1:2b:b4:d6:c6:86:d4:00:63:35:b5: 71:5f:7c:e4:a8:a1:9e:77:0b:26:ea:87:c6:da:a6: d6:01:cb:4c:5a:0e:8e:c2:7a:a3:e9:ea:23:ad:43: bc:92:f8:bb:78:67:4b:1a:fe:81:20:25:26:34:d4: ef:e5:5f:d6:e6:96:3a:39:98:63:0f:ae:24:51:a8: 6d:f6:76:eb:16:3b:97:00:70:11:ed:96:e6:b5:82: 33:d9:eb:f3:d7:0d:ef:a5:a1:9f:12:2f:2e:b7:cc: 36:6e:4f:6d:f7:7a:6a:08:78:d4:57:45:4f:c1:36: 7d:21:af:4f:6b:da:be:09:92:e8:8e:d1:d4:5f:96: f7:11:ba:46:22:c0:71:27:90:ae:92:a1:de:39:ed: 6b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:79:54:05:4E:05:22:FB:FC:A2:13:6E:7E:E1:70:2C:AB:A8:67:82 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6c:f7:0a:c6:d4:78:58:1f:51:4b:6c:82:8a:a2:61:29:c2: 88:c0:67:23:1c:a8:80:bd:a0:7f:0d:df:83:24:ba:96:3a:98: 98:23:eb:9d:e4:05:f6:3e:52:25:31:92:60:32:95:2c:4d:75: 32:23:03:5c:ce:e9:ed:5d:87:84:39:0d:9c:2c:28:d6:25:ad: 7b:49:f6:88:6f:4a:39:af:94:42:84:a8:a6:26:1a:b1:ed:ef: 48:7d:4e:41:47:e6:78:05:e5:d5:30:81:72:c3:8b:e7:44:63: 59:68:74:a0:6e:38:60:5f:19:96:56:ef:33:9c:ed:e9:b7:8e: 7d:3e:0f:b7:0b:cf:0c:b1:be:6d:01:06:90:ce:98:69:04:39: b1:94:39:2f:ea:a7:7b:4e:33:9b:7a:d3:17:62:88:26:a9:8b: f1:b8:95:04:c5:8a:68:6e:f1:2d:64:c8:9d:a2:af:92:67:58: da:56:b2:24:0c:86:73:8b:a6:9d:6e:1a:2f:1b:23:e5:a8:a9: b1:f1:ff:59:83:fc:41:3a:6d:02:09:96:ff:8d:20:63:85:5f: 26:18:02:9b:b3:2e:18:2c:ed:8f:dc:bd:ab:a6:14:7d:e1:a9: 4f:af:ab:ef:7e:22:9e:a3:9a:16:b7:d7:2a:09:b3:46:64:08: 3f:44:0d:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg0lTCKf1wJjdLpL6RSdDO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwNzIzMDAwMDQ5WhcNMjUwNzI0MDAwMDQ5WjAzMTEwLwYDVQQD Eyg5Njc5NTQwNTRlMDUyMmZiZmNhMjEzNmU3ZWUxNzAyY2FiYTg2NzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpPgcaHEkLQAVYOmLlWBIg1dUWly joLTrKfZ/v6cpCgTMEnJRjaLJSWHJqMQelABqZTg8h9WdBaHsIqZ5t0iC/QkDKzS nW427t4MWqaG/aOXhIKIB9fhQFCbvmxsayWMt9EVzK3O72/WlEN0sSu01saG1ABj NbVxX3zkqKGedwsm6ofG2qbWActMWg6Ownqj6eojrUO8kvi7eGdLGv6BICUmNNTv 5V/W5pY6OZhjD64kUaht9nbrFjuXAHAR7ZbmtYIz2evz1w3vpaGfEi8ut8w2bk9t 93pqCHjUV0VPwTZ9Ia9Pa9q+CZLojtHUX5b3EbpGIsBxJ5CukqHeOe1rnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZ5VAVOBSL7/KITbn7hcCyrqGeCMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2z3CsbU eFgfUUtsgoqiYSnCiMBnIxyogL2gfw3fgyS6ljqYmCPrneQF9j5SJTGSYDKVLE11 MiMDXM7p7V2HhDkNnCwo1iWte0n2iG9KOa+UQoSopiYase3vSH1OQUfmeAXl1TCB csOL50RjWWh0oG44YF8ZllbvM5zt6beOfT4PtwvPDLG+bQEGkM6YaQQ5sZQ5L+qn e04zm3rTF2KIJqmL8biVBMWKaG7xLWTInaKvkmdY2layJAyGc4umnW4aLxsj5aip sfH/WYP8QTptAgmW/40gY4VfJhgCm7MuGCztj9y9q6YUfeGpT6+r734inqOaFrfX KgmzRmQIP0QNPg== -----END CERTIFICATE-----Generated at Wed Jul 23 01:40:55 2025 by rpki-client