$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft File: BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json) Hash identifier: Y6oygU/klMhErxlYGVlZIFWVSiC+InG9BUY3gKeIb3Q= Subject key identifier: 2D:37:F7:DB:E9:B5:81:03:39:02:5D:8F:AD:FA:07:43:DC:3B:5C:67 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019A05C8C7D878B5F337F79A5FEBF09A18DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft Manifest number: 02F5 Signing time: Tue 21 Oct 2025 08:00:35 +0000 Manifest this update: Tue 21 Oct 2025 08:00:35 +0000 Manifest next update: Wed 22 Oct 2025 08:00:35 +0000 Files and hashes: 1: 1OPAOSK7XI2PXkMWLZC__kR6e7o.roa (hash: zgqjLOdmhIKV08eKyZe0XmQH3UqGhIzXdKtUIZFpvvE=) 2: 6SPF9wUKHrZ6dX8XvKxjnVR5gSs.roa (hash: fkqYDZXkVkcORjtoFgL9LCKCeNFqQJ4NJn9PSDeEfBQ=) 3: 8-yw9B2nPkCfG0ri-05wxbzK95I.roa (hash: D9ViM4Gvio4pjQlbZ1UG+yr83bOB/c4pGt/sWMwpAIo=) 4: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (hash: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=) 5: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: ANGjn2w272MCi685G/0HiY6KciZyfzA8aGV1Bc7aYMQ=) 6: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (hash: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=) 7: CNtM8zejZ349bsOx94QsI819vZU.roa (hash: xxnS1MVGHtYdDD2abmYeFD2yf6kRsOETWylSJhltDEE=) 8: ExusXckLrxsZNqKlfCaNi76wyn8.roa (hash: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=) 9: KBH5_k1ABLmKeJO7l-34IXPXqRs.roa (hash: P/JtMtW3yU+sxA5fXStKTboD+4DMtOGbsll537HWOk4=) 10: O88pJYUrrqVOidkJjEP-5_wS7ww.roa (hash: cvcdBAMQsvb0r0SAZ093g5qXRau0yzmBdmsOPLmPc+M=) 11: OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa (hash: PbCMLXyHRgfKX4P/i6p6IrPplONleRWnbtsOIMdtbRA=) 12: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (hash: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=) 13: T-WQUbMA2opCoWmz9iIpBVDop7w.roa (hash: LxZzYTsPv2oZVsXtK1M9TpzKZjJLXQwZ4LXrHPlJD7Y=) 14: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (hash: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=) 15: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (hash: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=) 16: bfi17XKfoQv_Pklhy_iWS-yvXWo.roa (hash: 05HfZ+6uBWn/eosoqV+13/r9i72s/MRFf2Ny+SGpO7c=) 17: bkj_9Heh0C9FpUqLrf65_9tMX1o.roa (hash: bkX0VT2UTOwEY8RRSJ6fL2Rs1tekiUyjrTzbnadeNds=) 18: boJmz216E2pVUR2unuNVUplfhyM.roa (hash: i+zLjdL9F/qjZdj6l1k7yZCeKyy95BgZFZ1ZAYbGuBs=) 19: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (hash: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=) 20: gicegBW5Q1xikkf_SLe1-6lH06U.roa (hash: pqN+I3n4dBN3SZnpQPA/6vzrG5l7HojgVKb3SXvaH9M=) 21: iuwR3gymafKwUArlmGbUUJNbSa8.roa (hash: EtXzdV3cLqZcZzSgtMiBpL5x/7d8YbZUcgnJOjOuNu0=) 22: kNKW14Dxh4X2xbIOHRvhO-4tzcE.roa (hash: ENDHKI6G3Ef3eUled5c74JZlLpucyibX5X1QKlCy8/E=) 23: kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa (hash: +NDOnTtKyng4Xa7G5fvhPU29tORd7PYP5BmWYtRjBxk=) 24: mN1SF0jqXFbA77Cv4kSAFM7eMrI.roa (hash: bd+gRbyeXkhCADuawPp6Y7Zl70oz5JVqv5T2uQOkFmM=) 25: nE08znyGEROzN-ZPpvH871B_YXc.roa (hash: rvo0J7csjKxABmc7ZJ4UjX/IGGVkIizjnr+3tXbkjRg=) 26: uSds6b4A3ugi6DIsYb_3dWNiNEs.roa (hash: yRT8HJyCOSty+M33PAxjUyOR0ZiSFhtIqLi0qhNHK+g=) 27: vZmH2bvHl1nSGW5nMPLYnxBlkRU.roa (hash: JOoXAeAAIZEiWY0Rg+/OZMN4l51Mdx07GGAUcyh78VU=) 28: x_kmwuaD2Uv2HFLODCKAcngkZmI.roa (hash: YzInZ8+3078RATQFSI7n9ucYtfrzyFiROEAN+YuWwao=) 29: yA3UMDG2NorD0yXtnnE6FrjVIhg.roa (hash: JySOvmeafpb1h5Z9vGr3Dw7i3K7yP3Q/urfaVB0miMw=) 30: zwse5TQa1KwU7PqLUxa1Kne0wLw.roa (hash: vR4GdsgcZFcL1UVu/nRbrE6/e6gF9I3sc1PWMJywHGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:05:c8:c7:d8:78:b5:f3:37:f7:9a:5f:eb:f0:9a:18:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Oct 21 08:00:35 2025 GMT Not After : Oct 22 08:00:35 2025 GMT Subject: CN=2d37f7dbe9b5810339025d8fadfa0743dc3b5c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:e2:f7:12:4e:ca:e4:80:35:8e:ce:1b:04: 4e:df:c1:8c:66:f2:60:ec:38:08:59:ac:48:6a:fa: 50:2e:85:4b:ac:94:82:51:c5:8f:26:1c:ee:e0:db: c5:60:0b:db:25:a6:97:de:b8:a3:7b:7e:e5:dc:76: cb:59:d6:2d:e9:83:25:68:ba:fc:de:87:0b:b4:e3: 59:83:b0:71:35:6f:15:c3:55:be:3b:e9:a4:33:d2: f2:ae:8b:2e:ee:32:b3:1f:c6:33:23:2d:f8:7c:fc: 06:87:d1:07:3e:22:ab:2e:6f:19:c9:24:7a:83:19: c1:85:07:43:c1:b9:d4:b1:52:c2:da:60:56:04:a2: 9f:03:c8:1b:51:9c:3c:06:d5:6f:6f:61:be:c5:88: 08:8e:c5:7f:43:e5:d2:c4:49:f9:7e:b9:cc:8c:13: 5a:2a:52:1b:d8:df:fb:7a:7d:48:0d:01:40:7f:40: 52:d9:e6:96:ee:ba:09:5b:1c:26:e1:48:34:49:ee: 05:53:bd:f0:97:45:1b:31:67:55:d4:ae:6a:08:0b: f9:3e:8a:1c:04:42:52:e8:e5:61:67:df:31:7e:00: fd:b3:90:86:7c:22:32:7c:df:9c:61:de:8c:d1:74: c8:b2:6b:12:6f:d9:d9:ce:a3:8d:aa:fb:2d:27:22: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:37:F7:DB:E9:B5:81:03:39:02:5D:8F:AD:FA:07:43:DC:3B:5C:67 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:16:e8:df:b4:ac:41:1d:ed:38:9f:f3:2f:cf:e6:d9:d1:a9: 01:e8:98:8b:12:a3:a3:a2:ae:bc:e2:c7:14:5d:8e:63:66:09: 55:dc:b5:44:49:90:cf:66:ae:f7:32:46:31:3b:8c:30:5f:38: 53:ff:a1:67:d2:0c:51:c8:96:80:72:64:58:3d:4b:06:d7:75: 29:9d:fd:ed:32:20:e0:22:94:b8:cc:69:c8:93:25:3d:d3:85: 93:6b:b0:58:39:81:16:c0:ca:2a:91:33:b5:07:d3:3e:4f:e6: b1:43:2c:08:e2:4c:c2:28:9b:f3:96:a1:43:76:05:c6:d4:c1: 2d:75:92:ef:ca:c5:82:61:3f:aa:66:eb:8b:95:08:af:d5:6a: 66:bb:f2:c5:2f:0b:81:f0:43:c8:90:49:0e:6b:cc:42:36:ef: 75:fa:07:14:0b:37:8a:ca:4b:07:f4:c2:fa:45:9c:66:d5:66: 03:aa:8f:ea:2c:48:25:0c:b3:89:dc:4a:8d:ea:71:12:44:7a: b9:89:18:2a:5e:d2:2c:1c:ab:f1:fd:3b:7f:be:4b:d8:f1:9f: 42:93:3f:36:56:e2:38:ee:6e:20:43:ab:66:28:ca:24:1c:76: fa:6e:62:a0:ef:c8:2d:6d:be:47:35:4a:70:6a:7f:92:f7:5d: a7:bf:a6:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoFyMfYeLXzN/eaX+vwmhjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMDIxMDgwMDM1WhcNMjUxMDIyMDgwMDM1WjAzMTEwLwYDVQQD EygyZDM3ZjdkYmU5YjU4MTAzMzkwMjVkOGZhZGZhMDc0M2RjM2I1YzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjHi9xJOyuSANY7OGwRO38GMZvJg 7DgIWaxIavpQLoVLrJSCUcWPJhzu4NvFYAvbJaaX3rije37l3HbLWdYt6YMlaLr8 3ocLtONZg7BxNW8Vw1W+O+mkM9Lyrosu7jKzH8YzIy34fPwGh9EHPiKrLm8ZySR6 gxnBhQdDwbnUsVLC2mBWBKKfA8gbUZw8BtVvb2G+xYgIjsV/Q+XSxEn5frnMjBNa KlIb2N/7en1IDQFAf0BS2eaW7roJWxwm4Ug0Se4FU73wl0UbMWdV1K5qCAv5Pooc BEJS6OVhZ98xfgD9s5CGfCIyfN+cYd6M0XTIsmsSb9nZzqONqvstJyL0wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0399vptYEDOQJdj636B0PcO1xnMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRbo37Ss QR3tOJ/zL8/m2dGpAeiYixKjo6KuvOLHFF2OY2YJVdy1REmQz2au9zJGMTuMMF84 U/+hZ9IMUciWgHJkWD1LBtd1KZ397TIg4CKUuMxpyJMlPdOFk2uwWDmBFsDKKpEz tQfTPk/msUMsCOJMwiib85ahQ3YFxtTBLXWS78rFgmE/qmbri5UIr9VqZrvyxS8L gfBDyJBJDmvMQjbvdfoHFAs3ispLB/TC+kWcZtVmA6qP6ixIJQyzidxKjepxEkR6 uYkYKl7SLByr8f07f75L2PGfQpM/NlbiOO5uIEOrZijKJBx2+m5ioO/ILW2+RzVK cGp/kvddp7+mZA== -----END CERTIFICATE-----Generated at Tue Oct 21 13:25:01 2025 by rpki-client