$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: hCspBxc3q3ptcQ2+pmpgI5e4ei2WZFi4yZJhEjvI7do= Subject key identifier: B9:B5:20:1C:D9:7B:4F:41:20:97:50:AB:81:32:33:01:82:01:7A:20 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 01995040797FC329AB96AAAFB657D798C202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 168E Signing time: Tue 16 Sep 2025 02:00:26 +0000 Manifest this update: Tue 16 Sep 2025 02:00:26 +0000 Manifest next update: Wed 17 Sep 2025 02:00:26 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: higc6D7hq1Pd/CEo7qITRal3LLYTczMiENe6eZ9JmJs=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 22:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:50:40:79:7f:c3:29:ab:96:aa:af:b6:57:d7:98:c2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Sep 16 02:00:26 2025 GMT Not After : Sep 17 02:00:26 2025 GMT Subject: CN=b9b5201cd97b4f41209750ab8132330182017a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:df:40:8a:9f:23:e7:39:75:d7:d9:3e:c4: 44:8b:8a:0d:ff:95:74:59:cf:1c:d3:e7:96:1e:f3: b7:57:33:6d:b4:17:36:88:49:44:ab:c7:8e:b5:fa: be:96:58:fc:5c:38:a3:19:fc:ba:eb:35:f8:29:7f: 0c:02:88:8f:ab:45:ae:fb:b6:39:c4:83:5b:d5:02: 8a:66:8c:62:db:9b:5b:35:3f:e1:41:40:5a:7c:0c: 8a:1f:a6:b5:75:5c:8d:5d:ba:dc:ea:58:b3:86:68: 7c:fe:96:7b:de:e2:ac:90:61:d8:dc:71:a8:57:ed: 89:ea:87:6c:67:5f:c3:1e:44:73:e4:2a:b3:ab:60: 20:de:86:65:fa:95:f2:e6:94:4b:e4:eb:43:b6:fc: d2:f1:ce:05:c2:5d:f5:b8:9a:07:26:9a:41:04:73: 9e:6e:ef:21:98:09:af:15:60:58:47:3a:97:e7:10: 67:f7:fa:40:b6:cf:51:17:5f:97:ce:42:a9:ed:18: d4:3f:31:39:8e:a2:e3:00:ee:29:a5:57:03:e7:71: 2f:65:5e:7f:de:63:db:32:78:af:62:e9:0c:3a:8e: c5:76:d2:ff:8f:cd:ce:23:79:f8:b0:11:8c:d2:9e: c8:7c:c6:2d:1e:4e:f9:5c:57:a1:fe:42:b2:2e:de: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B5:20:1C:D9:7B:4F:41:20:97:50:AB:81:32:33:01:82:01:7A:20 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9b:a4:58:be:b4:65:63:99:b8:ef:29:75:29:c2:ea:b8:56: 6e:d9:02:b1:bd:24:96:7f:67:14:82:9d:bb:e8:5a:ec:0f:e1: c9:f1:1b:92:89:73:ca:d8:70:ba:76:d1:56:72:cf:da:98:2b: f5:22:dc:bf:fc:46:00:66:87:cc:85:f5:fc:55:14:c8:01:f8: 4b:42:f1:95:59:78:d8:04:12:64:be:c3:7a:58:e7:4d:de:2c: 73:ce:37:1a:bf:34:16:37:af:a2:af:84:31:e3:c9:55:6f:d6: 1d:da:be:bf:a8:3d:d6:aa:1e:87:75:c4:c8:18:98:f7:e2:73: 58:2c:eb:5d:d5:e4:ca:17:3c:fa:75:1b:74:d3:cd:aa:e4:cc: cf:b3:73:cd:19:a0:25:26:ca:d3:7f:5e:25:bd:f9:c5:39:30: 47:55:ac:20:25:3f:7b:d0:43:f4:68:98:0f:c1:25:ad:31:25: 45:89:64:4a:43:bb:7a:91:13:c2:83:4b:c2:23:a5:cf:12:e2: 82:db:1a:bf:3a:66:ba:d4:41:88:27:f2:1c:b7:13:73:b1:52: 98:86:9f:13:b3:cf:4d:5b:31:bd:6a:c8:0f:95:71:a9:98:36: 5b:b0:d5:36:ca:36:9e:2f:d7:b0:87:80:59:43:a4:87:15:15: 49:86:04:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlQQHl/wymrlqqvtlfXmMICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUwOTE2MDIwMDI2WhcNMjUwOTE3MDIwMDI2WjAzMTEwLwYDVQQD EyhiOWI1MjAxY2Q5N2I0ZjQxMjA5NzUwYWI4MTMyMzMwMTgyMDE3YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwzfQIqfI+c5ddfZPsREi4oN/5V0 Wc8c0+eWHvO3VzNttBc2iElEq8eOtfq+llj8XDijGfy66zX4KX8MAoiPq0Wu+7Y5 xINb1QKKZoxi25tbNT/hQUBafAyKH6a1dVyNXbrc6lizhmh8/pZ73uKskGHY3HGo V+2J6odsZ1/DHkRz5Cqzq2Ag3oZl+pXy5pRL5OtDtvzS8c4Fwl31uJoHJppBBHOe bu8hmAmvFWBYRzqX5xBn9/pAts9RF1+XzkKp7RjUPzE5jqLjAO4ppVcD53EvZV5/ 3mPbMnivYukMOo7FdtL/j83OI3n4sBGM0p7IfMYtHk75XFeh/kKyLt7a+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLm1IBzZe09BIJdQq4EyMwGCAXogMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5ukWL60 ZWOZuO8pdSnC6rhWbtkCsb0kln9nFIKdu+ha7A/hyfEbkolzythwunbRVnLP2pgr 9SLcv/xGAGaHzIX1/FUUyAH4S0LxlVl42AQSZL7DeljnTd4sc843Gr80Fjevoq+E MePJVW/WHdq+v6g91qoeh3XEyBiY9+JzWCzrXdXkyhc8+nUbdNPNquTMz7NzzRmg JSbK039eJb35xTkwR1WsICU/e9BD9GiYD8ElrTElRYlkSkO7epETwoNLwiOlzxLi gtsavzpmutRBiCfyHLcTc7FSmIafE7PPTVsxvWrID5VxqZg2W7DVNso2ni/XsIeA WUOkhxUVSYYESg== -----END CERTIFICATE-----Generated at Tue Sep 16 07:14:18 2025 by rpki-client