$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: LXZ62T1NL/saaZrqIoIAMd0VELyfpitFM5/P+TtCgPY= Subject key identifier: BE:D1:73:C2:0B:B1:5D:F8:26:62:05:95:D8:62:6C:5C:56:47:F3:AA Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 0198266B64D4BE35AE16AFD9C70A72ABD5D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 114B Signing time: Sun 20 Jul 2025 06:00:29 +0000 Manifest this update: Sun 20 Jul 2025 06:00:29 +0000 Manifest next update: Mon 21 Jul 2025 06:00:29 +0000 Files and hashes: 1: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (hash: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=) 2: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 3: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: MZceENBHeF1ZdWn6xDWI3fGAFaTiTNvDLhLhBLeowPU=) 5: FKfpXlklu-w0UnrhkTOoss8rNJI.roa (hash: rpXmd4bsDkUdxce7+QWIHh2UliURkTxLOg/dAC0t8qY=) 6: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=) 7: VsEc5daaJmy8OJ4pZ8S-usa9zlo.roa (hash: amZYPVVWihv5JeymXC/hm0CI0v2XFAyE3R7vmcHdxNw=) 8: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 9: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 10: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 11: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=) 12: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=) 13: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 14: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 15: j23rxrd-Lsv5i-XlSgQQvzbmNH4.roa (hash: AOwdW+Sra4IA2tk75pjPupKPHVlPdSlV6DBy+ee+RBw=) 16: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 04:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:6b:64:d4:be:35:ae:16:af:d9:c7:0a:72:ab:d5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jul 20 06:00:29 2025 GMT Not After : Jul 21 06:00:29 2025 GMT Subject: CN=bed173c20bb15df826620595d8626c5c5647f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:c6:79:f0:f0:fd:3a:05:49:fa:7f:20:86: 08:fb:f4:42:b8:15:d5:77:ee:f5:e4:40:55:ca:f4: 85:08:31:12:a2:e2:cd:1a:16:2c:de:a5:3a:5e:6b: 68:aa:76:55:7c:c0:5f:d1:d3:fd:a7:66:d3:ff:ca: a5:c7:7d:dc:2d:82:e1:48:83:79:eb:a5:d3:5b:ff: 90:e5:aa:e3:02:8a:c6:30:67:2d:48:c2:8f:46:70: 9f:19:2f:da:88:e9:33:a8:d7:3b:4f:2a:0b:ce:9a: 97:1d:86:09:ae:ea:6d:9b:69:a9:61:33:67:a0:6f: 69:b6:b7:49:b5:de:96:86:cf:a1:e3:e0:3f:a5:af: 38:33:65:a7:cb:f7:b0:a3:dc:8b:44:44:16:fc:fd: 5f:5f:f4:53:74:ee:4c:49:ff:9f:6a:33:e1:27:97: 8d:12:f2:53:10:85:99:5c:0d:43:2a:79:44:2a:b2: b6:bf:21:d6:16:ec:95:a0:95:09:bd:6e:f7:1d:f1: 8e:51:8a:32:d6:74:09:90:ed:98:72:a5:54:71:e1: 72:97:79:a5:5f:8b:80:56:39:e2:a2:49:23:b9:de: 70:66:df:cb:7a:04:36:a0:b2:d6:24:63:23:af:5b: 30:9d:b0:22:a6:84:0a:40:f8:6a:a6:1b:8e:45:23: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D1:73:C2:0B:B1:5D:F8:26:62:05:95:D8:62:6C:5C:56:47:F3:AA X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4d:77:7a:5a:a2:ca:03:27:d6:2c:54:4d:1a:16:a2:4b:4e: b0:5c:c3:aa:33:0e:dd:5a:1e:5b:29:c1:76:c3:4d:e9:39:8d: a2:1e:db:6f:e3:79:88:41:78:3d:34:7f:e7:95:1a:4d:98:d1: 72:5b:38:fa:b1:f3:72:c0:83:ff:41:3f:8a:d8:89:46:df:65: 85:f4:bf:85:ba:c1:86:2c:a7:7e:e1:5c:d7:7a:c8:be:eb:5c: aa:12:4e:32:4c:fd:22:32:90:9b:72:22:90:6c:71:ea:e5:34: 6b:48:48:87:ef:da:7f:b2:c9:d2:f5:2d:f6:20:96:69:cd:96: 07:27:e7:fd:ea:f8:ea:2b:00:d9:74:e3:60:19:2a:60:34:54: 23:75:19:96:2b:3e:81:77:e7:5e:33:cf:6f:be:28:6b:e2:eb: 0e:4b:e0:c3:78:cf:f0:a6:70:49:52:ab:2c:1e:7e:7c:9e:4a: 75:e4:bf:f9:e1:65:1e:76:b7:07:61:7a:6f:ac:43:28:b3:28: 0a:84:f0:54:ff:c6:2f:1e:d9:b2:06:7b:bd:e0:77:2a:36:b7: 72:80:d6:8f:19:ec:c2:ed:a3:3f:41:b9:a9:11:60:6e:b0:53: 72:26:e8:c1:ee:e9:5f:ab:d1:2d:a4:d6:b2:6b:cd:3c:a8:b1: a3:5f:a0:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgma2TUvjWuFq/Zxwpyq9XRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUwNzIwMDYwMDI5WhcNMjUwNzIxMDYwMDI5WjAzMTEwLwYDVQQD EyhiZWQxNzNjMjBiYjE1ZGY4MjY2MjA1OTVkODYyNmM1YzU2NDdmM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGLGefDw/ToFSfp/IIYI+/RCuBXV d+715EBVyvSFCDESouLNGhYs3qU6XmtoqnZVfMBf0dP9p2bT/8qlx33cLYLhSIN5 66XTW/+Q5arjAorGMGctSMKPRnCfGS/aiOkzqNc7TyoLzpqXHYYJruptm2mpYTNn oG9ptrdJtd6Whs+h4+A/pa84M2Wny/ewo9yLREQW/P1fX/RTdO5MSf+fajPhJ5eN EvJTEIWZXA1DKnlEKrK2vyHWFuyVoJUJvW73HfGOUYoy1nQJkO2YcqVUceFyl3ml X4uAVjniokkjud5wZt/LegQ2oLLWJGMjr1swnbAipoQKQPhqphuORSPQtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7Rc8ILsV34JmIFldhibFxWR/OqMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANU13elqi ygMn1ixUTRoWoktOsFzDqjMO3VoeWynBdsNN6TmNoh7bb+N5iEF4PTR/55UaTZjR cls4+rHzcsCD/0E/itiJRt9lhfS/hbrBhiynfuFc13rIvutcqhJOMkz9IjKQm3Ii kGxx6uU0a0hIh+/af7LJ0vUt9iCWac2WByfn/er46isA2XTjYBkqYDRUI3UZlis+ gXfnXjPPb74oa+LrDkvgw3jP8KZwSVKrLB5+fJ5KdeS/+eFlHna3B2F6b6xDKLMo CoTwVP/GLx7ZsgZ7veB3Kja3coDWjxnswu2jP0G5qRFgbrBTcibowe7pX6vRLaTW smvNPKixo1+g6w== -----END CERTIFICATE-----Generated at Sun Jul 20 14:07:51 2025 by rpki-client