$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: 8dv8Ghm+pdL7z+V7bOc3Ux7Wzuw9GZTFIuPlTAINnyo= Subject key identifier: 86:0C:60:B3:28:60:42:B1:AC:C0:B8:87:EA:C0:57:01:5D:6E:44:BE Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 01983683B75BD847127CB469AF097B13BB43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 1442 Signing time: Wed 23 Jul 2025 09:00:58 +0000 Manifest this update: Wed 23 Jul 2025 09:00:58 +0000 Manifest next update: Thu 24 Jul 2025 09:00:58 +0000 Files and hashes: 1: 1-9kyTG57lW5pauShjAbSgqx7ELA.roa (hash: yqYBQ/TJzQNk1+uZ7N56AeKifi1WJfBnexFUg+0LLyM=) 2: 2yA59QtsMWk9pMkqZsRhCUNRv5s.roa (hash: 3lhj+8t7WakD0taOb/n8+n5eS8DbEqnleZ93py5eK2o=) 3: 3g3144t54HGRa28h02Xw83J7Clc.roa (hash: XX+LOOOsUzF/wHBB2Iscv3ZSGgGpMaFj5N2D9xm/JPo=) 4: 5Mam-Pg9a629tSWFczaVxFg4D58.roa (hash: uI87FyR3KvBIESOCI6aSMEI2WoHQnyL7wu0aXhj5lC4=) 5: 5QprB05ll1uYCquytR4n1W116WM.roa (hash: kOFqQKS/OdPIqYk3rxYLUDVI5uzIqTlMZr9WxgzKLwM=) 6: 6sSkl7UX1wQmJbbfGMATKxJXY54.roa (hash: IeSF56cYT3VKQor9+nTqChrxam+t4/ky7I5rJ/pHZBg=) 7: B0TfHkEyVnbd2N0e6k2tgOD6_wI.roa (hash: Urqkg7JIHNdsGel84r9NTaWTAKTT4SDTb2BONLXGY8w=) 8: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: J5mECBquDe/WDGBJ8vMBqxXeVeh7UeyLtBkgaLjhJlI=) 9: DbZqiucLKtXg_tnHgCLsTj7slY8.roa (hash: Y3nl2lYy9DUM+ulrcRJHTjNNQpfHThzYB54J4kpUdvc=) 10: HWormeP5NTMFg9cNiU120qWb8MM.roa (hash: 3Vx0k4vPLIVcmX2N61XugSe2WGxKb/dBPzzUHtK6wl4=) 11: KV367d6Zsc-zqT-odrHl0DYDJsM.roa (hash: FKc2KZrRBCocDmqxqhbBguDKolkUjxKD7WOeyPk9toM=) 12: KffqQYj4gMaNvn0q5SyjiNhf6Vo.roa (hash: 9crEtv8/iEFdMiq2HyzvvG51KyitSfa/U/shMlHv5/k=) 13: VrEU9PE5EfCqbrb7nZMyqxga0y4.roa (hash: pCI3583YgOq3CB+JSxU25k69djgvqQV7uPOrhj4rCz8=) 14: aTytGUXYEIGxtGOF3WUFFC8JcwQ.roa (hash: Vs+sK7xqct09FIQXh0SoHFV8Yu6CjDQxZx7xtJlTgNE=) 15: ek3EtDyVxedBXi4kaK3trrMaJmg.roa (hash: /bg27e+bXjbGnL2ey015MY0hFpRmcorpPjjRaoCBolE=) 16: exNBWzsJdV3aicSdEIBpUGacx74.roa (hash: 6hKpyXwmjMPvF2uI11MjVhC+6m0ZJvy5FnDNsSRaDUA=) 17: fNC7ZXZ-1ULFrWkO8J5UybYfGTI.roa (hash: JakG1+wEwBj7MRAmGKQKU//mA0wgIrSo6KrQr/NJN9Q=) 18: fuKyxGw_5UKeL4AWKKV3APO-jXs.roa (hash: 1i6kDmcAC1XA98X8VCsAJMMtYyeOaBwcuGwbyAjYXgY=) 19: j84LLRjxqovhQ1f-Vo1W8Ggomrg.roa (hash: lE8VSDD6OngPZMSO0N6X5XYw09YDfgl2syZ7P/y5Ujc=) 20: lnfSRPIjJ_rnv2rA9LFnWqyasxU.roa (hash: 6y5/RH+pWSVtrPaN0CjFr8pkFmjDA1Ymsw/HEzVgX0w=) 21: lydOFdT2ZB4VXyRnspFs-1TL_6A.roa (hash: 8itP19agssSYawEYfpGuFEww3nKwbJHsZKc1MH8kG3s=) 22: nsOvbjb1TNSx2u7BUmQra8F8iNU.roa (hash: y2lXY8swYsJj5FkjF0M5Xak7JQxiOHB7809PchjSzjM=) 23: q9EzhRak9A-maSvUjMGlPsmVdWk.roa (hash: fhhhD7VzymISsohMui+Cyx0H2ETVK9ly9iR82236g+Q=) 24: qLO5cj38BRyYdeH-rfctS6n9M7U.roa (hash: aMShn4FXdnTufUpyHOP7ThkTMbndZL+QIAZz0lq4l0Y=) 25: vMuPv15czUN3TyQjsF6vfToUN84.roa (hash: z4fYQjlVjkuFyievVhhGkwXvN23Mi1wn1+WiCtl5UkU=) 26: xJs9bo-w5TvWpljc1sQfqueBbtQ.roa (hash: TAtPCmil9M2Rr0khwcHfGhF81jVdFJvO7+4kHsp/Iv8=) 27: yikB75qCLmOR70Lyl75i3suSq54.roa (hash: 6RAQHbYTc4wjn8qsz3QMR9klg79Q+jkBfTxmlxzlVAA=) 28: zMJTAmcHfhPygeRGw0akn5BVjiE.roa (hash: 64YD3oejRwoQqSEq4heIfb2pYf1YBqxtvQb2DS8JHbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:83:b7:5b:d8:47:12:7c:b4:69:af:09:7b:13:bb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jul 23 09:00:58 2025 GMT Not After : Jul 24 09:00:58 2025 GMT Subject: CN=860c60b3286042b1acc0b887eac057015d6e44be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:a2:82:32:b6:80:67:fc:ae:f7:26:a7:a7: 88:aa:3a:de:7f:b7:79:20:3b:b1:ac:65:83:0c:97: fd:24:3c:e4:8c:87:05:b3:a0:bb:20:8a:d5:4e:03: a1:d8:7d:d3:e5:46:06:12:35:0d:c5:0b:25:e4:17: 01:18:f4:24:cd:d5:f6:3d:b3:cc:e6:98:e5:89:5f: 56:7a:28:cf:7d:59:42:e1:42:f2:bb:17:3c:d9:fb: 81:1f:e9:20:94:c0:66:2a:65:ee:62:9d:d1:8d:29: 9a:9c:3b:14:b6:19:4f:d2:d5:24:57:06:f5:39:af: 63:f5:c0:25:d3:b8:a0:ad:99:bf:46:53:72:92:b7: df:16:18:cd:9f:f7:bd:dd:d3:62:4a:6e:f2:29:cc: bf:85:99:7f:a3:5b:80:b7:8b:60:db:dc:9d:b6:15: 2d:70:3e:26:7d:10:99:d7:ae:94:e5:de:21:67:da: 5b:9c:7a:ff:b6:30:2f:9b:cf:5d:14:96:7c:15:3b: 0a:e0:95:de:e3:ce:20:2b:cd:f9:6f:09:c2:e6:4c: 93:6d:a0:75:d8:7e:50:61:38:b1:2b:81:16:9e:a3: af:71:4e:5e:c8:07:df:65:b8:e8:6c:a1:e4:35:3c: 93:dc:43:b9:ed:49:e2:d4:c5:fd:48:5d:66:5a:0f: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:60:B3:28:60:42:B1:AC:C0:B8:87:EA:C0:57:01:5D:6E:44:BE X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:43:a1:7d:b4:0b:51:79:5b:c5:bf:83:3b:f2:04:ac:72:c3: a8:a7:5d:2a:b8:7e:a9:aa:a6:37:25:ed:9c:9a:80:4e:49:6b: 43:bf:7e:7e:53:19:27:94:ee:da:a2:98:6c:bd:60:f2:64:60: 06:19:60:77:cd:b6:1e:f3:b8:4c:20:68:ac:d3:4e:e5:e0:fc: ba:60:88:7e:81:33:52:55:85:c5:06:30:9d:eb:65:a5:61:61: 52:5c:98:ce:dd:fd:86:8f:33:b3:38:76:e9:a1:3b:b4:4f:f4: 37:a4:24:75:6f:30:be:c8:a8:2a:d8:e5:95:e8:c0:bd:94:c8: f1:e5:f3:f9:5b:1a:c3:01:21:ef:b5:57:af:5e:ec:92:a4:33: eb:aa:03:36:06:10:a8:ff:5d:48:aa:da:96:e1:f7:4f:bf:e6: fc:fa:95:ed:75:b7:cb:b5:46:48:8e:f4:97:21:1b:46:63:05: d9:76:5f:79:a5:a7:41:85:d8:65:39:e3:c2:6b:f3:5c:58:b8: 1f:54:2e:96:8d:7c:44:b8:b2:56:b9:2c:af:54:80:69:f4:27: 9b:15:85:00:7f:5b:8d:7f:71:e0:df:f3:4d:3a:bb:72:37:62: 91:13:4f:cb:ce:b0:ee:a4:7a:14:34:62:55:8c:14:c2:93:c5: 33:84:3d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2g7db2EcSfLRprwl7E7tDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjUwNzIzMDkwMDU4WhcNMjUwNzI0MDkwMDU4WjAzMTEwLwYDVQQD Eyg4NjBjNjBiMzI4NjA0MmIxYWNjMGI4ODdlYWMwNTcwMTVkNmU0NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWSigjK2gGf8rvcmp6eIqjref7d5 IDuxrGWDDJf9JDzkjIcFs6C7IIrVTgOh2H3T5UYGEjUNxQsl5BcBGPQkzdX2PbPM 5pjliV9WeijPfVlC4ULyuxc82fuBH+kglMBmKmXuYp3RjSmanDsUthlP0tUkVwb1 Oa9j9cAl07igrZm/RlNykrffFhjNn/e93dNiSm7yKcy/hZl/o1uAt4tg29ydthUt cD4mfRCZ166U5d4hZ9pbnHr/tjAvm89dFJZ8FTsK4JXe484gK835bwnC5kyTbaB1 2H5QYTixK4EWnqOvcU5eyAffZbjobKHkNTyT3EO57Uni1MX9SF1mWg+oPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYMYLMoYEKxrMC4h+rAVwFdbkS+MB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0OhfbQL UXlbxb+DO/IErHLDqKddKrh+qaqmNyXtnJqATklrQ79+flMZJ5Tu2qKYbL1g8mRg Bhlgd822HvO4TCBorNNO5eD8umCIfoEzUlWFxQYwnetlpWFhUlyYzt39ho8zszh2 6aE7tE/0N6QkdW8wvsioKtjllejAvZTI8eXz+VsawwEh77VXr17skqQz66oDNgYQ qP9dSKraluH3T7/m/PqV7XW3y7VGSI70lyEbRmMF2XZfeaWnQYXYZTnjwmvzXFi4 H1Qulo18RLiyVrksr1SAafQnmxWFAH9bjX9x4N/zTTq7cjdikRNPy86w7qR6FDRi VYwUwpPFM4Q9Qw== -----END CERTIFICATE-----Generated at Wed Jul 23 11:59:30 2025 by rpki-client