$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: bVk2jV9BDbEVVKo081xd25Zgttf1qCD1kCac70HuoY8= Subject key identifier: 87:D4:5D:BD:17:04:39:12:EA:AE:05:D7:EE:6C:F3:1F:4D:86:ED:00 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 0199315ABE9C83AED4E660F6EC9A9F3B1F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 139C Signing time: Wed 10 Sep 2025 02:00:54 +0000 Manifest this update: Wed 10 Sep 2025 02:00:54 +0000 Manifest next update: Thu 11 Sep 2025 02:00:54 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: ygz28z/nzHL1loudvx+YGEx8H4iDgVPJnqoeCORaWuw=) 9: e0hrDVtPTcuVIZ0bybivCyarPdY.roa (hash: S6a+ooiK7Lly9jfvdFW0/62kq3Ycr4hiGyo5OfldcA4=) 10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:5a:be:9c:83:ae:d4:e6:60:f6:ec:9a:9f:3b:1f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Sep 10 02:00:54 2025 GMT Not After : Sep 11 02:00:54 2025 GMT Subject: CN=87d45dbd17043912eaae05d7ee6cf31f4d86ed00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:f9:85:4a:11:08:15:58:03:95:72:32:9c: 56:35:d5:ef:6a:6a:e7:ae:36:f2:d9:a5:e0:02:9d: e6:9b:d6:5d:1a:0c:52:ae:d8:f3:a9:3a:3b:ea:38: 9f:d3:64:17:ab:cc:e1:e8:b1:46:f3:bf:07:6e:da: 68:e1:70:41:5d:81:cb:73:cd:d8:bd:1b:1a:b2:f3: cc:c7:bc:38:57:23:89:97:f9:14:ce:46:98:e8:25: b5:ea:a9:ce:53:86:d7:6d:24:23:ef:08:c2:03:1a: ad:5b:46:bd:af:1b:b7:71:e3:b8:9c:eb:d7:d2:a1: 46:29:8a:69:7d:02:67:bc:aa:72:89:ab:d7:30:a6: 2e:b6:be:e5:2d:17:76:87:57:24:05:92:a4:86:08: eb:db:f1:5e:5e:64:c5:28:50:e5:7a:74:d5:16:3b: 58:86:70:00:19:05:d8:ec:da:c1:e8:f7:0e:56:ac: 82:63:64:16:2f:41:3d:8d:8b:34:aa:5e:90:c7:fa: 8d:b8:2a:12:cf:39:8b:82:42:f4:d7:f7:40:1e:ea: c6:8e:aa:49:74:6d:ab:38:2d:4c:1e:42:ad:12:ba: 22:11:e0:90:86:85:2d:a4:fb:e6:bf:95:0b:b7:1b: d7:44:1b:27:1e:0a:cc:c3:22:37:96:7d:93:86:4d: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D4:5D:BD:17:04:39:12:EA:AE:05:D7:EE:6C:F3:1F:4D:86:ED:00 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f7:f5:1e:c3:e0:4e:3a:ad:b8:a4:32:1b:57:54:64:ff:88: 42:fd:59:90:df:4b:32:78:73:0e:9c:18:1c:5f:6a:c3:a9:de: fa:5e:f6:65:b1:47:02:f1:27:6e:de:2d:75:38:0e:7d:f1:3f: 12:e4:f9:ca:aa:6a:76:a9:91:ea:8a:0b:9f:d5:a4:4b:a3:29: 76:7c:6d:2f:1b:30:0f:9c:e6:a4:47:e5:a8:ca:d5:12:58:45: 17:4c:cd:ac:65:ab:75:b8:6c:94:11:4f:05:ad:23:ab:89:da: 25:2f:ca:57:29:13:10:ba:e2:95:45:af:b9:24:67:3c:29:24: 14:af:39:92:c5:10:89:76:2b:59:c2:d8:d1:6d:19:45:ad:3f: 9c:22:e5:2f:be:ee:a5:4a:86:65:3f:e3:cd:19:d2:32:38:af: 71:5d:93:3f:8b:9e:38:64:ce:9c:4e:b6:93:8b:03:04:a1:1d: da:11:91:f8:1e:f6:28:e1:3d:56:e5:20:89:f4:91:e9:bc:19: 9f:9b:4a:53:11:f8:55:f2:57:e8:cb:a3:63:b2:0d:35:54:61: b4:46:7d:e1:1f:c8:28:c0:48:e6:55:df:08:75:eb:11:31:f7: 1a:e1:6b:ea:fc:50:2a:1c:3c:a8:24:86:12:29:4b:e7:47:1b: f6:92:f0:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkxWr6cg67U5mD27JqfOx9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUwOTEwMDIwMDU0WhcNMjUwOTExMDIwMDU0WjAzMTEwLwYDVQQD Eyg4N2Q0NWRiZDE3MDQzOTEyZWFhZTA1ZDdlZTZjZjMxZjRkODZlZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN75hUoRCBVYA5VyMpxWNdXvamrn rjby2aXgAp3mm9ZdGgxSrtjzqTo76jif02QXq8zh6LFG878Hbtpo4XBBXYHLc83Y vRsasvPMx7w4VyOJl/kUzkaY6CW16qnOU4bXbSQj7wjCAxqtW0a9rxu3ceO4nOvX 0qFGKYppfQJnvKpyiavXMKYutr7lLRd2h1ckBZKkhgjr2/FeXmTFKFDlenTVFjtY hnAAGQXY7NrB6PcOVqyCY2QWL0E9jYs0ql6Qx/qNuCoSzzmLgkL01/dAHurGjqpJ dG2rOC1MHkKtEroiEeCQhoUtpPvmv5ULtxvXRBsnHgrMwyI3ln2Thk34gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfUXb0XBDkS6q4F1+5s8x9Nhu0AMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/f1HsPg TjqtuKQyG1dUZP+IQv1ZkN9LMnhzDpwYHF9qw6ne+l72ZbFHAvEnbt4tdTgOffE/ EuT5yqpqdqmR6ooLn9WkS6MpdnxtLxswD5zmpEflqMrVElhFF0zNrGWrdbhslBFP Ba0jq4naJS/KVykTELrilUWvuSRnPCkkFK85ksUQiXYrWcLY0W0ZRa0/nCLlL77u pUqGZT/jzRnSMjivcV2TP4ueOGTOnE62k4sDBKEd2hGR+B72KOE9VuUgifSR6bwZ n5tKUxH4VfJX6MujY7INNVRhtEZ94R/IKMBI5lXfCHXrETH3GuFr6vxQKhw8qCSG EilL50cb9pLwow== -----END CERTIFICATE-----Generated at Wed Sep 10 03:36:53 2025 by rpki-client