$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: BMbbWJPxqt/BCkbZ6mrHgdAochOMOt4oggq9+UG6pBo= Subject key identifier: 59:8C:D3:BE:60:06:41:8D:84:C0:99:BA:D4:1C:F7:DE:89:93:CF:4D Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 019A2A3E15F2BCB7D7E069162149D9B52612 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 1421 Signing time: Tue 28 Oct 2025 09:55:03 +0000 Manifest this update: Tue 28 Oct 2025 09:55:03 +0000 Manifest next update: Wed 29 Oct 2025 09:55:03 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: Jw4m82sA3KWPe8ip_nX3apuUEd8.roa (hash: N8RmuYjV1roPrnGHoDsbWbDHhJ/4UqiW+xW9KEZSt+I=) 6: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 7: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 8: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: LM6F88wgiQ1oTQcWJlbiA/DpVKufNsSLZYVaOm24p2I=) 9: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) 10: v8hBMDKY65zo2V6449UJSPRVSUE.roa (hash: 7bLL/W+lnh1+jDhX4cXB4UWGoYDQrNjyksVTGR4y1rE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Oct 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:2a:3e:15:f2:bc:b7:d7:e0:69:16:21:49:d9:b5:26:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Oct 28 09:55:03 2025 GMT Not After : Oct 29 09:55:03 2025 GMT Subject: CN=598cd3be6006418d84c099bad41cf7de8993cf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:cb:bd:c6:a0:1f:68:a1:8b:13:db:5b:a4: 31:4f:cb:9b:63:16:05:24:9c:85:4d:cb:7b:d7:2f: 44:16:02:91:d9:70:3b:3a:78:81:72:66:13:12:56: 2c:e2:91:91:7b:2d:a9:19:4a:34:ef:ac:e3:1e:ca: f9:90:8d:33:45:40:09:c3:12:a2:28:df:10:58:25: d5:0d:5f:8a:68:47:3f:a8:ff:c4:fc:e5:4a:db:8d: 77:49:c3:34:f6:c4:83:01:6f:22:af:fe:74:4c:bb: 18:22:a9:fc:01:7f:2d:15:99:36:f6:ac:6a:90:a1: 46:d0:4b:31:14:27:d4:af:b9:1d:c3:17:61:49:ac: 45:95:b5:18:e5:c8:4b:a1:69:30:5d:57:22:10:35: f5:4b:a4:07:d9:ac:cf:94:a6:4e:7b:30:e6:a5:53: f1:03:1c:07:d5:2b:88:97:f5:d0:9e:90:ff:d4:fc: 15:11:22:00:90:74:3d:4d:59:d5:b2:e0:6a:d6:20: 4a:6f:68:10:82:29:22:f4:a9:d8:76:fd:63:7e:eb: 8a:9b:7a:c3:17:64:b6:6e:ef:4b:5b:80:b1:19:ce: 8c:48:70:48:07:c9:62:35:00:60:59:ac:0a:63:bb: 92:00:b3:73:d5:78:a5:de:4c:02:d2:2a:a4:20:4a: 0d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8C:D3:BE:60:06:41:8D:84:C0:99:BA:D4:1C:F7:DE:89:93:CF:4D X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:63:b0:a3:cb:47:a5:45:c2:49:76:e6:5e:c2:87:e0:a0:3a: 05:f8:41:a5:c8:e1:91:1b:4b:c7:06:46:4e:cd:26:51:6c:1c: 7e:6f:72:a1:16:2e:7d:86:c9:d6:6a:04:7b:44:64:46:c1:5d: 16:90:6a:a7:79:e2:43:11:2e:05:67:50:59:c2:0c:92:be:df: 0e:a3:4e:a7:9f:fa:14:fd:c3:e9:73:fe:c5:41:66:7e:c6:fa: e9:f6:2a:8f:1e:f8:26:e8:c8:9e:fb:ab:94:da:56:43:a7:1d: fe:d5:06:d4:b2:1d:3f:00:7e:da:c8:ec:1f:96:84:ce:13:e9: ab:25:3d:04:09:1b:6b:3f:2f:bf:5f:ec:05:a6:a3:0c:e7:d0: b3:f5:dd:52:1c:9a:98:ff:5b:04:e3:2f:2e:c2:82:a3:3c:d2: 34:9f:9a:10:16:b1:7d:01:a3:58:75:68:24:c8:61:99:ba:52: 77:91:02:5d:f6:a7:e9:87:7d:92:40:21:09:19:25:67:39:b1: 74:ac:0b:6c:cd:ac:bd:4f:8a:73:2e:ae:de:40:82:ca:e9:11: d8:5a:00:ae:a7:c4:b3:75:9e:56:bd:d8:3f:e2:50:83:28:4c: 2e:eb:21:9b:09:f6:1c:09:aa:b9:eb:b0:ad:eb:ff:71:cd:8f: 23:b8:d6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoqPhXyvLfX4GkWIUnZtSYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUxMDI4MDk1NTAzWhcNMjUxMDI5MDk1NTAzWjAzMTEwLwYDVQQD Eyg1OThjZDNiZTYwMDY0MThkODRjMDk5YmFkNDFjZjdkZTg5OTNjZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LjLvcagH2ihixPbW6QxT8ubYxYF JJyFTct71y9EFgKR2XA7OniBcmYTElYs4pGRey2pGUo076zjHsr5kI0zRUAJwxKi KN8QWCXVDV+KaEc/qP/E/OVK2413ScM09sSDAW8ir/50TLsYIqn8AX8tFZk29qxq kKFG0EsxFCfUr7kdwxdhSaxFlbUY5chLoWkwXVciEDX1S6QH2azPlKZOezDmpVPx AxwH1SuIl/XQnpD/1PwVESIAkHQ9TVnVsuBq1iBKb2gQgiki9KnYdv1jfuuKm3rD F2S2bu9LW4CxGc6MSHBIB8liNQBgWawKY7uSALNz1Xil3kwC0iqkIEoNBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmM075gBkGNhMCZutQc996Jk89NMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWOwo8tH pUXCSXbmXsKH4KA6BfhBpcjhkRtLxwZGTs0mUWwcfm9yoRYufYbJ1moEe0RkRsFd FpBqp3niQxEuBWdQWcIMkr7fDqNOp5/6FP3D6XP+xUFmfsb66fYqjx74JujInvur lNpWQ6cd/tUG1LIdPwB+2sjsH5aEzhPpqyU9BAkbaz8vv1/sBaajDOfQs/XdUhya mP9bBOMvLsKCozzSNJ+aEBaxfQGjWHVoJMhhmbpSd5ECXfan6Yd9kkAhCRklZzmx dKwLbM2svU+Kcy6u3kCCyukR2FoArqfEs3WeVr3YP+JQgyhMLushmwn2HAmqueuw rev/cc2PI7jW4Q== -----END CERTIFICATE-----Generated at Tue Oct 28 14:17:55 2025 by rpki-client