$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: 5rtXgt0sUGw0aremDFnX/r+79UiNlFfjWspho8aMt28= Subject key identifier: CC:23:30:93:02:B1:04:E5:9C:83:C6:CC:CA:94:57:0C:E4:C0:B3:B7 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 01984A78180B38F789D272F3940806C73965 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 160C Signing time: Sun 27 Jul 2025 06:00:41 +0000 Manifest this update: Sun 27 Jul 2025 06:00:41 +0000 Manifest next update: Mon 28 Jul 2025 06:00:41 +0000 Files and hashes: 1: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=) 2: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=) 3: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=) 4: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=) 5: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=) 6: XJb3trIMR2o2CfWTOuYiqHcFzws.roa (hash: BRkLNlJqve/L2aNsuMJ+5pqTXL5/kYQCmhET9weR1yA=) 7: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=) 8: Z48A1_I47mYSHVTo4XpKWd1w_wY.roa (hash: NvJ6V/CehduL5Zgko7xVcI92EacH0CBv0m1gyVIWLQM=) 9: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=) 10: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: pGxBlxrB36kjzWvIJ6GW/RdADWIZNvx04K9/GJ/fLBw=) 11: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=) 12: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=) 13: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=) 14: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=) 15: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=) 16: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=) 17: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:78:18:0b:38:f7:89:d2:72:f3:94:08:06:c7:39:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jul 27 06:00:41 2025 GMT Not After : Jul 28 06:00:41 2025 GMT Subject: CN=cc23309302b104e59c83c6ccca94570ce4c0b3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:f9:bc:4a:3a:66:e2:a7:11:62:cb:84:92: bb:0d:20:76:4b:f2:69:e5:f3:d7:20:33:7c:8a:3d: c7:ac:6b:d9:38:bb:26:cb:63:45:26:c9:69:b6:79: 5f:09:1b:d6:a0:bd:0b:d2:89:6f:f2:3d:c6:b6:e6: a3:22:e1:1d:88:be:93:4b:5d:4c:08:7e:2c:5b:60: 16:d0:58:df:a5:84:c4:94:07:91:91:d6:3d:84:bb: 63:a0:ca:24:bc:4d:4c:46:5d:47:63:c5:4a:31:75: f8:62:85:23:0d:89:23:b4:58:d5:06:37:9a:ef:19: f2:54:7d:4e:80:f3:37:b1:63:2b:3b:e0:26:a2:42: 0f:75:3b:73:6e:8d:cc:bf:75:06:2a:25:04:d9:8b: 75:e6:ef:e9:6d:a3:82:72:9e:04:9b:ff:22:46:88: e3:a4:6f:a1:c7:8a:85:49:14:fd:28:38:fb:4b:10: d7:b7:13:9b:94:e3:0c:a4:bc:3f:84:50:0f:2a:41: 69:20:c2:21:ef:df:05:05:08:57:d8:15:7e:26:35: 37:8d:a2:20:4f:61:f9:df:f7:2e:b2:1f:50:19:bc: 04:8c:6e:b2:2f:dd:72:17:be:52:b8:43:d6:69:d6: 45:41:42:cb:95:78:99:66:f1:81:f3:20:66:6c:cf: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:23:30:93:02:B1:04:E5:9C:83:C6:CC:CA:94:57:0C:E4:C0:B3:B7 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a4:9a:f6:f1:f3:86:80:ce:ef:e2:5e:2a:14:ca:1e:98:b6: 00:0d:b3:9d:21:57:11:a7:b8:6c:46:10:36:db:8a:1f:d1:ff: 20:66:77:ea:41:29:72:ae:ae:3d:bf:8a:60:19:11:28:01:7f: fa:34:70:9a:43:bc:fe:01:2e:e6:49:8f:4a:ff:66:3a:34:9e: 55:dc:4e:02:ef:62:df:ea:76:f2:65:1a:be:51:9f:7c:eb:ea: 9f:15:3b:8e:e4:a7:15:38:4e:b8:77:2f:f8:78:e0:71:b6:32: 91:30:be:15:a6:5a:47:77:8f:db:f2:3e:8a:32:11:e5:49:23: a8:42:80:71:0b:32:04:4f:ea:ec:6f:a5:85:46:c3:7d:17:1b: 3e:e8:f4:2f:24:03:34:bb:84:1e:99:af:ce:d3:a4:b4:3f:42: 30:e5:b0:71:e1:1e:35:55:08:28:46:3d:7e:2a:31:0e:50:7b: 2e:09:06:7a:3c:1b:57:d7:c7:98:aa:15:3b:df:99:fb:85:b4: 0d:c8:f4:12:49:de:30:ce:73:98:92:48:f0:50:15:5e:b9:be: b1:bd:56:9f:ed:99:51:6a:b6:39:3d:1c:d9:35:6b:82:ef:99: ab:e7:32:af:b0:4c:0d:ac:20:63:87:8c:f5:1a:2d:03:dc:13: be:48:a3:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKeBgLOPeJ0nLzlAgGxzllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjUwNzI3MDYwMDQxWhcNMjUwNzI4MDYwMDQxWjAzMTEwLwYDVQQD EyhjYzIzMzA5MzAyYjEwNGU1OWM4M2M2Y2NjYTk0NTcwY2U0YzBiM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfP5vEo6ZuKnEWLLhJK7DSB2S/Jp 5fPXIDN8ij3HrGvZOLsmy2NFJslptnlfCRvWoL0L0olv8j3GtuajIuEdiL6TS11M CH4sW2AW0FjfpYTElAeRkdY9hLtjoMokvE1MRl1HY8VKMXX4YoUjDYkjtFjVBjea 7xnyVH1OgPM3sWMrO+AmokIPdTtzbo3Mv3UGKiUE2Yt15u/pbaOCcp4Em/8iRojj pG+hx4qFSRT9KDj7SxDXtxOblOMMpLw/hFAPKkFpIMIh798FBQhX2BV+JjU3jaIg T2H53/cush9QGbwEjG6yL91yF75SuEPWadZFQULLlXiZZvGB8yBmbM/ZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwjMJMCsQTlnIPGzMqUVwzkwLO3MB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaSa9vHz hoDO7+JeKhTKHpi2AA2znSFXEae4bEYQNtuKH9H/IGZ36kEpcq6uPb+KYBkRKAF/ +jRwmkO8/gEu5kmPSv9mOjSeVdxOAu9i3+p28mUavlGffOvqnxU7juSnFThOuHcv +HjgcbYykTC+FaZaR3eP2/I+ijIR5UkjqEKAcQsyBE/q7G+lhUbDfRcbPuj0LyQD NLuEHpmvztOktD9CMOWwceEeNVUIKEY9fioxDlB7LgkGejwbV9fHmKoVO9+Z+4W0 Dcj0EkneMM5zmJJI8FAVXrm+sb1Wn+2ZUWq2OT0c2TVrgu+Zq+cyr7BMDawgY4eM 9RotA9wTvkijXw== -----END CERTIFICATE-----Generated at Sun Jul 27 12:55:07 2025 by rpki-client