$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: iDgIlUtA1cvzBS3H3h9SiRT+cLATFU0PYSr72/8Edl8= Subject key identifier: 35:8E:CE:21:45:58:32:E9:A6:F1:5C:F2:51:30:84:D7:11:E1:AB:D8 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 01974E8E08083565FB1932380E33BF5D3080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 12A2 Signing time: Sun 08 Jun 2025 08:00:20 +0000 Manifest this update: Sun 08 Jun 2025 08:00:20 +0000 Manifest next update: Mon 09 Jun 2025 08:00:20 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: vkrNK73Jn4/HaB/Cokvp4GC+s/lMtEDHxuQRyC/pCxk=) 9: e0hrDVtPTcuVIZ0bybivCyarPdY.roa (hash: S6a+ooiK7Lly9jfvdFW0/62kq3Ycr4hiGyo5OfldcA4=) 10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4e:8e:08:08:35:65:fb:19:32:38:0e:33:bf:5d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Jun 8 08:00:20 2025 GMT Not After : Jun 9 08:00:20 2025 GMT Subject: CN=358ece21455832e9a6f15cf2513084d711e1abd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:af:41:1d:70:3c:f8:52:4d:59:24:5b:cf: cb:22:4b:28:be:8b:cc:1e:99:b1:3b:5b:cf:21:d7: 0a:6c:28:33:dd:70:e2:0f:a0:a9:f7:dc:36:09:02: 2a:47:95:2b:34:cc:79:00:93:e6:4f:93:db:2e:6b: 97:aa:89:de:da:02:62:4b:fe:fb:ee:e4:ba:43:6f: e9:cc:d9:b8:f1:60:7b:89:55:85:4e:15:81:ad:f3: d4:e7:f8:6b:29:12:0c:8b:94:6b:c0:7d:8f:c8:32: a1:2c:32:c7:ab:f9:4b:d2:ae:1a:1a:2e:77:8e:08: 2c:e6:dc:47:1e:9b:6c:9c:e2:40:6b:3a:06:8b:d9: e4:3c:2c:e5:e9:56:06:94:df:da:c3:f8:c4:15:b1: 17:71:d6:f7:5e:06:4d:38:ee:76:33:a0:f1:4f:49: 66:cc:cc:5f:0f:fe:3b:06:83:a6:68:ae:09:db:38: be:ca:fd:d5:a0:1f:ef:86:f1:91:bc:00:05:06:63: 8a:1e:ec:27:25:9e:e5:0f:87:c6:47:d2:1e:a1:cd: e6:fc:01:bd:a8:fa:37:29:43:5d:79:a6:89:94:8b: 3c:ce:fa:49:1b:dc:f0:7e:83:60:fc:a5:b3:b9:05: 57:08:78:a1:d8:64:11:f4:cb:fa:03:dd:4b:d0:66: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8E:CE:21:45:58:32:E9:A6:F1:5C:F2:51:30:84:D7:11:E1:AB:D8 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:71:25:3f:41:a3:5d:62:5a:d3:85:dc:f6:c2:f5:8c:ef:2e: ee:a7:4b:dc:82:d0:32:5c:09:4c:17:dd:53:a9:eb:39:d3:b7: 25:1f:63:fa:1b:a7:6a:d0:fb:11:fd:bb:15:89:d7:28:d2:54: 1d:a8:6e:ad:d6:41:17:cb:b5:6a:3d:d6:97:44:e7:04:81:50: e9:b0:ef:6a:b8:a4:b2:c8:b8:28:4b:87:31:d2:e4:43:fa:90: 67:f5:0b:ed:f0:8b:ed:b6:7a:14:21:2a:15:14:2c:43:e8:ee: 1f:0a:a4:ed:67:24:16:33:c4:da:ed:0d:f3:73:20:92:c9:cd: b2:e9:f6:8d:64:eb:b5:58:9d:f9:bf:93:8a:04:f4:27:ec:93: 20:ac:60:34:ee:b6:4b:48:5f:4e:d3:42:d9:e8:b2:8d:31:ea: 50:39:71:6b:00:b4:96:8c:6b:cf:79:74:c9:6c:05:a1:65:15: 8a:a5:66:8b:1c:6d:de:3a:b9:f6:c7:bc:e1:44:5c:f5:47:60: 73:25:2e:81:58:af:fd:af:81:23:11:6e:4a:43:36:8a:55:e6: 76:7c:4f:dd:e9:cb:b9:11:a6:e0:9c:d3:59:c3:07:45:c6:0b: 98:a6:30:d3:27:e7:24:6e:23:43:13:19:9d:fe:82:87:44:d4: 9a:69:9c:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdOjggINWX7GTI4DjO/XTCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUwNjA4MDgwMDIwWhcNMjUwNjA5MDgwMDIwWjAzMTEwLwYDVQQD EygzNThlY2UyMTQ1NTgzMmU5YTZmMTVjZjI1MTMwODRkNzExZTFhYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg2vQR1wPPhSTVkkW8/LIksovovM HpmxO1vPIdcKbCgz3XDiD6Cp99w2CQIqR5UrNMx5AJPmT5PbLmuXqone2gJiS/77 7uS6Q2/pzNm48WB7iVWFThWBrfPU5/hrKRIMi5RrwH2PyDKhLDLHq/lL0q4aGi53 jggs5txHHptsnOJAazoGi9nkPCzl6VYGlN/aw/jEFbEXcdb3XgZNOO52M6DxT0lm zMxfD/47BoOmaK4J2zi+yv3VoB/vhvGRvAAFBmOKHuwnJZ7lD4fGR9Ieoc3m/AG9 qPo3KUNdeaaJlIs8zvpJG9zwfoNg/KWzuQVXCHih2GQR9Mv6A91L0Gar/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWOziFFWDLppvFc8lEwhNcR4avYMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXElP0Gj XWJa04Xc9sL1jO8u7qdL3ILQMlwJTBfdU6nrOdO3JR9j+hunatD7Ef27FYnXKNJU HahurdZBF8u1aj3Wl0TnBIFQ6bDvarikssi4KEuHMdLkQ/qQZ/UL7fCL7bZ6FCEq FRQsQ+juHwqk7WckFjPE2u0N83MgksnNsun2jWTrtVid+b+TigT0J+yTIKxgNO62 S0hfTtNC2eiyjTHqUDlxawC0loxrz3l0yWwFoWUViqVmixxt3jq59se84URc9Udg cyUugViv/a+BIxFuSkM2ilXmdnxP3enLuRGm4JzTWcMHRcYLmKYw0yfnJG4jQxMZ nf6Ch0TUmmmcoQ== -----END CERTIFICATE-----Generated at Sun Jun 8 11:05:09 2025 by rpki-client