$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: ml0S+o1YsLZQt8eN+Q+jhwuLetkQcgfhVRO3Yc1ymI8= Subject key identifier: CE:99:F8:C9:D9:66:B4:B9:ED:6A:5C:56:43:62:11:73:74:A4:E8:31 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 01991DD4AD35B881F059B3C654934A5FE6B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 132D Signing time: Sat 06 Sep 2025 07:01:41 +0000 Manifest this update: Sat 06 Sep 2025 07:01:41 +0000 Manifest next update: Sun 07 Sep 2025 07:01:41 +0000 Files and hashes: 1: 0_mR_q2PRjMrC6KY1_UxRD8g8so.roa (hash: y/csCabR2wm0syOrpZHF70QEhjDWUBWGFQAkqx7SNyk=) 2: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=) 3: 7X_plhmrvkux1oibBja4OB7LETs.roa (hash: gnMgxFgUS9IL4J+87g7lZ1R3Q2jpCUYTvtTDs50/e2w=) 4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=) 5: ITMiKn1RDRzuhbzYC8Zgfi0OQ-k.roa (hash: MF4B+TSZE3aY5ZF370Am+bJNupyNzZsvjNgb8A6jshQ=) 6: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=) 7: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=) 8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: ZfTRr95EOM0RuP32E+xfIYUsaYLSEg9XbG2rcOiw6DU=) 10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=) 11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=) 12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1d:d4:ad:35:b8:81:f0:59:b3:c6:54:93:4a:5f:e6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Sep 6 07:01:41 2025 GMT Not After : Sep 7 07:01:41 2025 GMT Subject: CN=ce99f8c9d966b4b9ed6a5c564362117374a4e831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:b5:7f:8c:aa:ca:2b:eb:b7:bf:8c:e7:38: 80:64:2c:7c:83:95:37:59:1b:2f:ab:75:55:55:3c: 91:63:d7:5c:35:f9:a6:52:98:69:66:5c:08:e4:45: ce:16:13:58:1a:73:d3:a1:b2:c4:1d:85:b7:ec:d7: 1d:8a:c4:82:13:87:e8:5e:0f:2a:a3:1a:a4:4c:c3: d2:c3:22:e8:c0:1c:6f:3d:1d:00:f3:48:3b:75:4a: ea:7b:6e:36:d4:e7:fb:09:94:3f:23:87:8d:33:26: a5:85:78:91:0d:6a:92:12:1c:71:e7:c2:e1:dd:08: 24:58:4a:c5:64:0c:0f:5c:8a:a1:68:7f:9a:b8:7b: 9b:41:b7:51:41:37:14:0f:1d:53:de:03:33:a6:50: 50:54:8d:ef:2b:91:a0:41:2d:d9:9f:3c:13:4b:cb: fa:98:31:01:2d:47:87:21:c1:50:df:58:ad:67:17: 0c:4e:9a:b8:cd:64:07:e5:f8:97:c5:16:b4:86:1d: 28:44:34:05:22:c6:84:b1:d4:30:76:7d:d9:b8:27: a3:ff:4d:8e:cc:7f:10:8f:7f:84:a0:07:1e:86:90: 1b:03:e0:a4:50:e6:df:f5:1f:d3:af:17:06:af:7c: ad:60:c7:42:ae:e2:c2:43:64:6b:25:c6:57:9b:b6: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:99:F8:C9:D9:66:B4:B9:ED:6A:5C:56:43:62:11:73:74:A4:E8:31 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:3f:5d:ee:aa:07:7d:cd:07:33:98:9a:c4:5c:32:5c:23:9f: ab:ac:a1:6d:71:0c:1c:3d:6e:54:6e:03:7d:be:eb:8c:33:70: 8f:53:22:29:77:72:46:b8:c2:a5:b0:d8:b7:fb:85:4d:3b:7c: ae:e8:e6:8b:82:d9:17:3d:e5:5d:75:20:d5:ba:95:f1:7d:b4: 7c:90:e5:f9:fc:2a:9f:da:00:c6:92:d5:86:5f:d0:90:24:20: b8:de:ca:14:e5:03:36:93:bf:c9:ad:4e:a3:a1:09:e3:e4:f3: 62:20:a4:18:a5:72:19:6b:83:a4:d7:1a:1d:79:5b:8c:90:3a: 01:b8:16:9b:1d:d4:90:40:43:6a:f1:cd:81:e7:07:68:b4:bf: fc:12:c8:12:db:54:5c:5a:48:3d:a0:bd:75:3b:99:31:8c:9a: 70:a6:f9:cb:b6:19:57:c1:13:92:e9:6f:f5:b0:57:5d:e5:5e: be:da:30:e2:60:0a:f2:2d:79:d7:79:b9:49:16:80:92:2a:6f: 01:83:9c:42:53:15:e3:6b:a0:f0:e6:00:3d:b9:f4:53:f6:48: b8:f0:2f:df:c6:30:ca:bf:37:c3:34:0a:c2:96:b0:de:bd:1d: f9:37:7e:10:16:2c:d0:b1:1a:32:7a:31:9b:81:3a:d3:7a:2e: 43:ac:fd:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkd1K01uIHwWbPGVJNKX+axMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjUwOTA2MDcwMTQxWhcNMjUwOTA3MDcwMTQxWjAzMTEwLwYDVQQD EyhjZTk5ZjhjOWQ5NjZiNGI5ZWQ2YTVjNTY0MzYyMTE3Mzc0YTRlODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtym1f4yqyivrt7+M5ziAZCx8g5U3 WRsvq3VVVTyRY9dcNfmmUphpZlwI5EXOFhNYGnPTobLEHYW37NcdisSCE4foXg8q oxqkTMPSwyLowBxvPR0A80g7dUrqe2421Of7CZQ/I4eNMyalhXiRDWqSEhxx58Lh 3QgkWErFZAwPXIqhaH+auHubQbdRQTcUDx1T3gMzplBQVI3vK5GgQS3ZnzwTS8v6 mDEBLUeHIcFQ31itZxcMTpq4zWQH5fiXxRa0hh0oRDQFIsaEsdQwdn3ZuCej/02O zH8Qj3+EoAcehpAbA+CkUObf9R/TrxcGr3ytYMdCruLCQ2RrJcZXm7YUKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6Z+MnZZrS57WpcVkNiEXN0pOgxMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApD9d7qoH fc0HM5iaxFwyXCOfq6yhbXEMHD1uVG4Dfb7rjDNwj1MiKXdyRrjCpbDYt/uFTTt8 rujmi4LZFz3lXXUg1bqV8X20fJDl+fwqn9oAxpLVhl/QkCQguN7KFOUDNpO/ya1O o6EJ4+TzYiCkGKVyGWuDpNcaHXlbjJA6AbgWmx3UkEBDavHNgecHaLS//BLIEttU XFpIPaC9dTuZMYyacKb5y7YZV8ETkulv9bBXXeVevtow4mAK8i1513m5SRaAkipv AYOcQlMV42ug8OYAPbn0U/ZIuPAv38Ywyr83wzQKwpaw3r0d+Td+EBYs0LEaMnox m4E603ouQ6z9ew== -----END CERTIFICATE-----Generated at Sat Sep 6 16:02:06 2025 by rpki-client