$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: zr/sBNFep4UFmbGNvB2wusNgnlLX67HMXdsdw+ojGqE= Subject key identifier: 5B:A0:26:84:FB:A2:D6:85:C9:57:F8:DF:EC:3F:80:FE:85:5E:0B:E6 Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019921B1BB8203F9771F96F256C751C51644 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 09CA Signing time: Sun 07 Sep 2025 01:01:59 +0000 Manifest this update: Sun 07 Sep 2025 01:01:59 +0000 Manifest next update: Mon 08 Sep 2025 01:01:59 +0000 Files and hashes: 1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=) 2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=) 3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=) 4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=) 5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=) 6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=) 7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=) 8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=) 9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=) 10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=) 11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=) 12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: 2ZVNneXQSqX2mwdDRlRygoT1WoJHLfgZHkF2IRd0Dk4=) 13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=) 14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=) 15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=) 16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=) 17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=) 18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=) 19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=) 20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=) 21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:21:b1:bb:82:03:f9:77:1f:96:f2:56:c7:51:c5:16:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Sep 7 01:01:59 2025 GMT Not After : Sep 8 01:01:59 2025 GMT Subject: CN=5ba02684fba2d685c957f8dfec3f80fe855e0be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:78:15:39:ec:62:8c:6a:38:3b:40:03:45: 48:ca:f4:2c:ab:70:e5:6e:30:68:ec:dd:c2:13:e7: 57:1a:7d:b8:47:a2:d4:e4:ba:12:fc:0b:55:b9:c2: d4:28:1c:f7:d7:48:7f:21:06:d3:75:be:05:cf:e2: 71:50:b0:35:4e:d3:4a:43:d9:df:28:de:0a:c0:9a: 2f:b2:f4:af:16:9c:2b:d7:97:3b:f6:d5:f6:74:68: 1c:02:74:6a:df:20:2c:2d:a7:ae:ed:67:07:43:a9: e7:8d:c5:d7:cd:ca:a0:19:e2:c0:f2:7a:29:a1:b2: 5d:51:59:c8:e6:48:c5:58:51:74:7e:0d:32:f5:e4: 05:4b:19:5f:2e:bc:9b:c7:e8:e1:a2:8d:e1:53:da: 4c:e6:67:8a:c8:7e:09:d9:e5:61:c8:d5:03:1b:86: 46:dc:a4:d7:78:d8:f5:7d:37:a4:ce:fb:1d:f1:35: 1e:ba:12:0f:68:c7:37:ad:09:7f:fc:46:82:1e:9c: d2:bc:cb:9a:58:f6:0c:6b:c6:39:56:18:99:07:08: 1a:92:14:63:04:b7:e9:a9:55:3b:8c:66:84:2c:0f: 40:09:29:71:91:b4:2c:54:4d:23:0c:ad:1f:62:61: e2:68:d6:ca:22:6d:93:5b:a6:e4:48:54:10:f2:ca: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A0:26:84:FB:A2:D6:85:C9:57:F8:DF:EC:3F:80:FE:85:5E:0B:E6 X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5d:15:31:bb:fc:36:3a:06:c8:6e:8e:b0:9b:0b:91:5f:6f: ce:03:24:95:89:78:48:57:35:20:f5:13:b5:0f:42:c2:f2:83: 8a:3b:16:40:89:d4:f7:5d:ee:cb:b3:e7:31:42:87:df:27:8a: 24:a3:09:6e:78:fd:57:cb:50:14:45:44:24:cf:57:54:87:2f: 17:0c:44:10:db:43:cb:82:c8:ee:cb:00:f0:66:7f:40:c2:f5: 78:b1:ee:83:17:ea:a3:32:7c:bd:d4:88:dc:5e:f7:09:67:bb: a1:1d:fa:03:0c:ca:1e:e1:28:4a:66:18:a3:19:0f:41:90:56: 7a:e1:fa:b9:2e:4a:7d:ea:0f:12:40:f9:fd:2b:0f:e4:ee:c6: fb:de:37:cd:10:cb:1e:2b:51:94:66:0f:b8:d6:0d:ea:0d:07: 19:c8:74:0f:ea:99:89:f5:a4:58:35:40:9b:45:7a:5a:9b:e7: 5f:a9:e1:c6:17:54:97:ae:34:81:e4:a5:24:3d:90:f2:d9:16: 91:b3:48:4f:80:25:04:ef:2c:e7:58:71:38:73:ce:ae:1d:f1: ff:ad:ca:20:5e:ac:ba:00:c2:de:e4:0b:37:4b:f9:df:95:3e: 81:45:17:00:a2:d0:f9:9c:98:8b:76:82:21:c4:cf:bb:d8:aa: 49:83:c9:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkhsbuCA/l3H5byVsdRxRZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjUwOTA3MDEwMTU5WhcNMjUwOTA4MDEwMTU5WjAzMTEwLwYDVQQD Eyg1YmEwMjY4NGZiYTJkNjg1Yzk1N2Y4ZGZlYzNmODBmZTg1NWUwYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySF4FTnsYoxqODtAA0VIyvQsq3Dl bjBo7N3CE+dXGn24R6LU5LoS/AtVucLUKBz310h/IQbTdb4Fz+JxULA1TtNKQ9nf KN4KwJovsvSvFpwr15c79tX2dGgcAnRq3yAsLaeu7WcHQ6nnjcXXzcqgGeLA8nop obJdUVnI5kjFWFF0fg0y9eQFSxlfLrybx+jhoo3hU9pM5meKyH4J2eVhyNUDG4ZG 3KTXeNj1fTekzvsd8TUeuhIPaMc3rQl//EaCHpzSvMuaWPYMa8Y5VhiZBwgakhRj BLfpqVU7jGaELA9ACSlxkbQsVE0jDK0fYmHiaNbKIm2TW6bkSFQQ8sq2HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFugJoT7otaFyVf43+w/gP6FXgvmMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl0VMbv8 NjoGyG6OsJsLkV9vzgMklYl4SFc1IPUTtQ9CwvKDijsWQInU913uy7PnMUKH3yeK JKMJbnj9V8tQFEVEJM9XVIcvFwxEENtDy4LI7ssA8GZ/QML1eLHugxfqozJ8vdSI 3F73CWe7oR36AwzKHuEoSmYYoxkPQZBWeuH6uS5KfeoPEkD5/SsP5O7G+943zRDL HitRlGYPuNYN6g0HGch0D+qZifWkWDVAm0V6WpvnX6nhxhdUl640geSlJD2Q8tkW kbNIT4AlBO8s51hxOHPOrh3x/63KIF6sugDC3uQLN0v535U+gUUXAKLQ+ZyYi3aC IcTPu9iqSYPJ/Q== -----END CERTIFICATE-----Generated at Sun Sep 7 11:25:34 2025 by rpki-client