$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: Cn5nXQLpxgxQsBolc7dwXYEbYuxVg/aP7A8IWQo38Yg= Subject key identifier: F2:CC:D7:7D:F5:84:EF:DF:C2:38:DB:58:2A:1A:A6:1E:4A:08:5F:EC Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019846D24D60B11CE35DECB85D3994D564FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1681 Signing time: Sat 26 Jul 2025 13:00:43 +0000 Manifest this update: Sat 26 Jul 2025 13:00:43 +0000 Manifest next update: Sun 27 Jul 2025 13:00:43 +0000 Files and hashes: 1: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=) 2: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=) 3: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=) 4: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=) 5: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (hash: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=) 6: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=) 7: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: d2FNEbMBASMdM5/LtDCpq+f4ur0E1dg0Xx5bRsEmkzw=) 8: gp93L_YQvuGEaCDSOxiRg-T-4UM.roa (hash: cOL7dP+BUiqZrZ0lZLE/dQN9GFbGifb1tHwfI+S3noI=) 9: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=) 10: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=) 11: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (hash: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:46:d2:4d:60:b1:1c:e3:5d:ec:b8:5d:39:94:d5:64:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jul 26 13:00:43 2025 GMT Not After : Jul 27 13:00:43 2025 GMT Subject: CN=f2ccd77df584efdfc238db582a1aa61e4a085fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:07:ba:f7:5a:e3:ab:c1:8e:aa:7a:80:32: 4e:b3:7b:98:fc:dd:bc:7a:d8:65:0b:16:16:d3:06: af:8c:71:34:6c:01:af:3d:3a:87:b9:cd:b6:85:af: 9e:a1:30:b3:d3:3e:30:89:93:c8:7b:9a:e1:da:a8: 52:86:65:d1:e1:86:16:41:04:4d:e5:8d:f8:e6:0e: d0:dd:3f:b0:76:3d:cb:da:b8:40:f3:b4:10:64:ca: cd:1d:d9:d7:9d:04:03:94:90:be:2c:ca:d5:ca:38: 86:fd:c4:32:65:ca:a9:21:ab:93:1f:e6:44:ce:28: b1:4c:61:0c:aa:a0:d2:97:4b:f6:d2:4a:24:3e:fc: 4a:3d:f0:c9:00:81:c3:d6:9a:c6:a4:9b:5d:7c:ff: cc:89:9f:fe:8e:93:e7:2d:2a:d9:af:11:f3:0d:e0: 02:12:45:76:6e:0a:d3:4d:bf:f8:d4:e0:ff:af:cb: 3f:e0:35:79:43:1e:46:7c:38:58:6f:fb:df:9e:ae: b2:26:90:15:18:9d:5d:d4:44:fa:37:b7:24:7f:14: 43:c1:bf:ef:b1:d7:2a:81:a6:0d:04:1e:84:c8:24: 76:33:c0:53:6e:ef:1d:19:5b:d4:5c:95:1a:94:8e: 87:e2:fc:73:43:19:f5:3a:38:25:8a:e4:99:c6:b9: ce:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CC:D7:7D:F5:84:EF:DF:C2:38:DB:58:2A:1A:A6:1E:4A:08:5F:EC X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:21:16:52:66:78:95:dd:78:73:01:c5:2b:6f:0e:b2:44:07: eb:36:52:3f:cb:60:7a:92:51:34:6a:83:88:35:f4:dd:00:c7: be:ba:69:e1:a6:f0:68:8f:95:aa:6b:5e:e5:2e:80:9f:dd:52: 94:29:b2:9f:d0:80:7a:73:71:75:e4:81:5e:74:be:db:6c:67: fa:15:c5:e1:65:9e:a5:46:4b:8d:9c:45:51:cd:c6:7e:7f:72: 4b:d5:86:97:80:0f:14:84:a5:eb:1c:41:67:20:2f:2f:83:cf: eb:d8:01:b1:d0:c1:ff:02:6a:47:34:c4:a3:72:1c:cc:75:da: 4b:9c:01:06:82:9c:2b:91:b6:61:7a:4e:f4:28:17:ef:2e:1f: 73:53:8b:8d:46:10:c0:74:c6:27:d1:5b:a4:78:dc:cc:ee:f7: c3:79:90:72:8b:42:03:23:cb:d4:f7:a0:ca:85:a7:ec:d4:58: 2f:99:39:27:86:5f:ac:96:4f:22:58:6c:28:05:f8:72:25:93: be:e9:7b:01:78:ee:7e:99:75:de:8e:05:6c:81:3a:7a:54:b2: 8b:83:3e:3b:b6:0f:a4:47:98:ca:0c:af:e4:8c:f3:62:77:13: 05:cc:15:20:97:28:10:95:48:99:92:b7:4e:45:9c:26:fd:ba: 87:06:07:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhG0k1gsRzjXey4XTmU1WT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjUwNzI2MTMwMDQzWhcNMjUwNzI3MTMwMDQzWjAzMTEwLwYDVQQD EyhmMmNjZDc3ZGY1ODRlZmRmYzIzOGRiNTgyYTFhYTYxZTRhMDg1ZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokUHuvda46vBjqp6gDJOs3uY/N28 ethlCxYW0wavjHE0bAGvPTqHuc22ha+eoTCz0z4wiZPIe5rh2qhShmXR4YYWQQRN 5Y345g7Q3T+wdj3L2rhA87QQZMrNHdnXnQQDlJC+LMrVyjiG/cQyZcqpIauTH+ZE ziixTGEMqqDSl0v20kokPvxKPfDJAIHD1prGpJtdfP/MiZ/+jpPnLSrZrxHzDeAC EkV2bgrTTb/41OD/r8s/4DV5Qx5GfDhYb/vfnq6yJpAVGJ1d1ET6N7ckfxRDwb/v sdcqgaYNBB6EyCR2M8BTbu8dGVvUXJUalI6H4vxzQxn1OjgliuSZxrnOhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLM1331hO/fwjjbWCoaph5KCF/sMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCEWUmZ4 ld14cwHFK28OskQH6zZSP8tgepJRNGqDiDX03QDHvrpp4abwaI+Vqmte5S6An91S lCmyn9CAenNxdeSBXnS+22xn+hXF4WWepUZLjZxFUc3Gfn9yS9WGl4APFISl6xxB ZyAvL4PP69gBsdDB/wJqRzTEo3IczHXaS5wBBoKcK5G2YXpO9CgX7y4fc1OLjUYQ wHTGJ9FbpHjczO73w3mQcotCAyPL1PegyoWn7NRYL5k5J4ZfrJZPIlhsKAX4ciWT vul7AXjufpl13o4FbIE6elSyi4M+O7YPpEeYygyv5IzzYncTBcwVIJcoEJVImZK3 TkWcJv26hwYHLA== -----END CERTIFICATE-----Generated at Sat Jul 26 14:20:59 2025 by rpki-client