$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft File: bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft (raw, json) Hash identifier: /ip11QQkr20+45aEwfQtlNeR23ZtpOPwSNWI05wFqAI= Subject key identifier: 2A:3B:10:C8:80:19:44:2D:79:43:06:4D:B0:AE:FF:8F:79:0F:CB:D2 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 01983193EC52062E97C14C154D6C71362966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft Manifest number: 1155 Signing time: Tue 22 Jul 2025 10:00:34 +0000 Manifest this update: Tue 22 Jul 2025 10:00:34 +0000 Manifest next update: Wed 23 Jul 2025 10:00:34 +0000 Files and hashes: 1: 1EX4kZ9vddyT4h_B81EN_YFgV7M.roa (hash: XM8DAjgQJT+88mG4SiUCaToZg6wqMumNcSNAzJ/xTfU=) 2: 2h4PGwruYpyJt3BQWtPQcsgNRNk.roa (hash: QCNnPqGHtxqVOnwq21xOk8gMIvhO2BuPOm8i0r/ZWwk=) 3: 46hN06yXwIiaUyO4jQff6zZnhAU.roa (hash: aNYu8EAm8eWZcJVLr7QXmQ0E7qnSqrdLmLCvu9US7UI=) 4: 5QpzdlSScd9Ew1fh6FTpwRhQZk0.roa (hash: QIlE6EzABgcROdum8ieSMA+//rTSsLyPOKTXcb66KOc=) 5: CR0O9THgDf2yJ1WJ8M9CFBS09z8.roa (hash: W2U6i/eYQeAI+L7j5m9zsl4/fNZAaj//uliYO7ujUKE=) 6: FkEOeGCG6FOuT4U--JFdO1PewE8.roa (hash: eIbVZKlSGWPsJMIug3qSSnFjSdzCZQjxpUdDU4xeYbs=) 7: HlCBaMj51Dn2Tz2S41tW2Fk8xPQ.roa (hash: /7yi7Ya0XkfIBAe9xgobKAaFgeYKZaTXRYdjcvjut5s=) 8: P1aEjNsd0SJfPVikfoYHI7ubFMI.roa (hash: DuGgYnJ4n5Dj5BJqboFm/1FmaNs0vaXsoWw3QLn5rAo=) 9: QhcLfBQpvZVLuK1kQFtEojUEYy4.roa (hash: d6rYjnzoACatM0sRStTcbFttb/8qH18KD7SiX3xQlR0=) 10: TuomiXIIA_Slf-s3sJo41C4xKlc.roa (hash: jL4xji+yoW/Rc+QXuiNFGyHooM/D+TwXPAgsMfszkEg=) 11: bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl (hash: g5MY6uw9E1FBTsZT5T3ZTcaSEOe1/PmkpOPDgDW0ndk=) 12: bsUIrzQIuHVcgyRag4qzWRgQ3QM.roa (hash: ccvI3EVZLHJLDdOmxYI5tR3qVbEw0UPa6xBpgJ4IUPE=) 13: dvBxJJqlGtZryzY3toj8ouVTkLU.roa (hash: eVjQO6sO3g8AfAqbAH1xc3TZsx59WAMu1L2LYGKpeik=) 14: k66OCRPIZR5zEdB2C8V_xNYPA2c.roa (hash: DQm3txtdpgZl+FxF0wFfrDwgi6tEP8sTE/yOMS6wtAU=) 15: kiwWFz0NoDfmogGyzMi0YU9jRAA.roa (hash: gnYS4uF1s0u5dRaD7UkJnFNCx2ghQj+jdKnUfu0aqw0=) 16: lxXVuzzUPXL8bs7W6nNiOwOCTwY.roa (hash: 7u7enKytyDQUih6tJM5Hi2/pTgAISWsFOl93asd2vkI=) 17: mgOgIg5bfW5q9_kCSTPPN0f0HJ4.roa (hash: ORm5qRABgNl1N4KGsHAqufuM1fGQIyB3FsBRWB7Oy2E=) 18: qV7gADGH5m02cohaDbKPUvE_iB4.roa (hash: g+5qryL5LQOY23wBpKhkkhBO1JR+H4We3huShu8yiss=) 19: uWWiJZN9G8HWUjyGGooehV4-7Xc.roa (hash: q5Hz0ZtxkWEyQZrVgIAnq1hk7/hz+CptQc1gUmdbpnY=) 20: zTpSEZJ7Zo6QLPyILMfhBZAVObw.roa (hash: ul2hDy0YChIkvGSgsedzwCF9Dt/iHwVDwCvFZg7da8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:31:93:ec:52:06:2e:97:c1:4c:15:4d:6c:71:36:29:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jul 22 10:00:34 2025 GMT Not After : Jul 23 10:00:34 2025 GMT Subject: CN=2a3b10c88019442d7943064db0aeff8f790fcbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:03:28:70:18:5b:7d:52:ad:d5:ef:08:b7:4b: cf:79:6d:f5:71:d5:b3:92:d1:de:01:4f:af:2c:a2: f6:f9:13:5c:a9:d4:f9:0b:67:dc:0c:29:9d:40:14: 4d:a2:bd:30:be:59:5d:ef:35:84:44:ae:ac:9a:8b: f2:c0:d2:82:8b:19:bf:05:b6:20:d0:09:9d:ec:59: cb:75:a2:ea:2f:4a:3c:f0:d6:a6:ae:ea:6a:32:58: c6:a3:15:3e:b5:f3:35:0c:c1:92:6f:04:17:3b:27: 1a:0f:ee:d4:be:5d:63:53:4b:1c:07:ce:e7:5a:d0: 1d:b8:44:7d:79:74:28:bc:e8:cc:6b:e5:6b:ec:c7: 88:55:11:b3:9b:4e:a0:bd:72:4d:e9:5c:c4:f4:c2: ec:d4:9c:8f:91:4d:fa:46:11:2e:21:ab:98:d7:75: 0c:cc:7b:18:c5:b1:d8:26:2a:9d:9e:20:bb:98:f8: a8:84:5c:48:b7:4a:ed:1c:39:a5:6f:63:5d:14:3c: f5:a9:8c:c5:85:bf:b5:77:9f:32:e8:b4:ed:8e:e8: a7:d6:11:6a:68:48:6c:7f:fb:33:98:41:e4:c0:df: 21:25:51:0c:d0:9a:e2:6d:51:a0:c6:b0:ce:af:37: 7f:5f:b8:62:42:ba:9e:82:3d:b1:ed:7f:03:06:24: a7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:10:C8:80:19:44:2D:79:43:06:4D:B0:AE:FF:8F:79:0F:CB:D2 X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c5:eb:80:71:8f:71:f8:e3:46:ca:9b:b3:68:77:d9:14:0c: 29:38:2c:a3:1e:52:74:ce:2d:a0:69:2a:43:64:ce:52:99:33: af:a3:a9:d7:0d:70:79:7b:4c:89:a5:b0:f5:86:4b:b9:ee:67: fb:c7:40:eb:9c:20:3d:61:6d:5f:cc:98:82:0c:a5:e8:ec:02: f3:bf:01:25:9c:7b:97:e9:80:24:7a:d9:ea:30:51:5d:d7:fb: 34:d1:64:53:b2:d8:05:06:0c:19:35:2f:fc:e5:34:df:04:fa: 06:e6:72:ce:c4:eb:78:b2:40:9e:fd:9a:79:52:2a:3b:7e:10: 87:d0:74:87:b4:d2:23:93:12:97:8c:81:93:2a:38:db:70:b0: 4f:e4:6f:a5:a1:1f:69:a5:0d:e5:b5:ab:b8:55:4b:c7:e5:39: a2:ac:ba:8d:27:8a:fc:b9:b1:52:ac:35:b0:99:4e:53:3b:c3: b1:d4:a9:4c:63:7a:a3:d2:19:02:5b:bf:69:6c:7a:e8:58:c3: 6c:4c:33:bb:fd:5d:f0:b7:7a:09:3c:8d:3d:5f:21:4b:93:58: 50:6a:69:55:05:d2:32:7a:b2:c4:83:87:be:83:9d:85:e3:bb: 16:c3:d7:8b:b0:38:a2:be:08:6b:4d:46:83:c7:9f:80:00:13: b4:f1:a0:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgxk+xSBi6XwUwVTWxxNilmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjUwNzIyMTAwMDM0WhcNMjUwNzIzMTAwMDM0WjAzMTEwLwYDVQQD EygyYTNiMTBjODgwMTk0NDJkNzk0MzA2NGRiMGFlZmY4Zjc5MGZjYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAMocBhbfVKt1e8It0vPeW31cdWz ktHeAU+vLKL2+RNcqdT5C2fcDCmdQBRNor0wvlld7zWERK6smovywNKCixm/BbYg 0Amd7FnLdaLqL0o88NamrupqMljGoxU+tfM1DMGSbwQXOycaD+7Uvl1jU0scB87n WtAduER9eXQovOjMa+Vr7MeIVRGzm06gvXJN6VzE9MLs1JyPkU36RhEuIauY13UM zHsYxbHYJiqdniC7mPiohFxIt0rtHDmlb2NdFDz1qYzFhb+1d58y6LTtjuin1hFq aEhsf/szmEHkwN8hJVEM0JribVGgxrDOrzd/X7hiQrqegj2x7X8DBiSn+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo7EMiAGUQteUMGTbCu/495D8vSMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8XrgHGP cfjjRsqbs2h32RQMKTgsox5SdM4toGkqQ2TOUpkzr6Op1w1weXtMiaWw9YZLue5n +8dA65wgPWFtX8yYggyl6OwC878BJZx7l+mAJHrZ6jBRXdf7NNFkU7LYBQYMGTUv /OU03wT6BuZyzsTreLJAnv2aeVIqO34Qh9B0h7TSI5MSl4yBkyo423CwT+RvpaEf aaUN5bWruFVLx+U5oqy6jSeK/LmxUqw1sJlOUzvDsdSpTGN6o9IZAlu/aWx66FjD bEwzu/1d8Ld6CTyNPV8hS5NYUGppVQXSMnqyxIOHvoOdheO7FsPXi7A4or4Ia01G g8efgAATtPGgnQ== -----END CERTIFICATE-----Generated at Tue Jul 22 11:26:25 2025 by rpki-client