$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: Z2+pBYExYQnwzvkW6kjrxSRuGUwIPryLYj71dQtMxyE= Subject key identifier: BD:80:BE:3E:42:3B:08:00:E7:F3:1B:5A:F6:F0:2E:E4:E8:28:20:F7 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019A1D62EDE8DB33328E74DD8454EC696B92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 1728 Signing time: Sat 25 Oct 2025 22:00:13 +0000 Manifest this update: Sat 25 Oct 2025 22:00:13 +0000 Manifest next update: Sun 26 Oct 2025 22:00:13 +0000 Files and hashes: 1: 0AYdj6RPn1eQ4OgEy6QCr1f5k2Q.roa (hash: L6DU942Jz6/lvfUIe3D2o0HomEkBYzu27lFzdIVqGEc=) 2: 307iKAUzLWom9Ha-ofR0ylvczFw.roa (hash: tNoP4RY6NW/fnNmLHHbOVFp0gAT4ca7e3JnJBbCaYGs=) 3: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 4: 64AcovQBhaEtt5KkzSGDTWBNY6M.roa (hash: zvgdvOo5eLLAm5kw5CQHBXY87LfFoqQWzB5IN3bgaik=) 5: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 6: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: USS5tyAzFsFIv/H6hCnCgh6Kw5rU4uFM8LKZZ11KV0w=) 7: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 8: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 9: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 10: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 11: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 12: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 13: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 14: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 15: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 16: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 17: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 20:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1d:62:ed:e8:db:33:32:8e:74:dd:84:54:ec:69:6b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Oct 25 22:00:13 2025 GMT Not After : Oct 26 22:00:13 2025 GMT Subject: CN=bd80be3e423b0800e7f31b5af6f02ee4e82820f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:96:98:46:08:cc:92:51:14:3f:e8:44:06: 3f:2b:c4:4e:db:09:83:51:15:55:76:fc:83:e8:d4: 27:d7:2b:c5:2c:f3:fd:60:44:bb:0c:16:ce:69:32: bf:2a:a4:73:32:aa:b0:24:88:ce:60:20:69:10:71: 64:0b:91:c5:86:d1:f8:1d:cf:f0:a2:b5:f2:2e:2f: f7:81:80:d4:56:c0:1f:ce:94:00:40:a6:f2:97:01: 2d:2c:c4:e4:31:d2:c5:0a:a1:33:7b:1c:09:87:84: 0c:dc:c1:7d:3e:34:2a:c8:10:90:58:0a:e9:ed:73: 7f:85:89:72:af:fd:01:4f:21:4e:b0:6f:d6:35:52: 1f:50:2c:43:20:4d:fc:3d:d3:d0:c0:87:c5:83:f1: 0f:c5:50:e9:1d:b8:50:96:3e:f5:a6:31:9c:ae:c2: c8:c6:e8:8b:2b:77:49:e0:a2:37:c7:b1:91:a8:94: 79:3b:61:21:35:f9:6b:ca:d1:80:18:3f:67:7e:67: b9:e3:15:9f:b9:e7:c1:60:3f:0d:09:a0:fd:7f:51: 77:c4:6b:5b:c1:c6:19:eb:74:48:7f:5f:a6:f6:3f: 72:45:94:4d:6f:cb:fc:c7:bf:71:3d:22:02:47:ad: bc:70:a2:be:14:3c:bd:e0:cc:25:5a:f2:3d:55:69: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:80:BE:3E:42:3B:08:00:E7:F3:1B:5A:F6:F0:2E:E4:E8:28:20:F7 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:49:fb:3c:2f:4c:a7:5f:07:da:0a:63:fb:42:9e:50:ce:f8: 99:13:e9:cc:6d:1b:5e:a3:49:58:bc:22:0b:85:0e:49:6b:bc: 89:a6:97:e6:c6:90:55:6e:a0:95:da:3f:cd:e9:18:66:d3:ab: 18:bd:a5:0d:3b:6d:a0:62:67:43:62:27:1d:a2:72:7c:f9:3c: 98:68:27:97:9e:a0:15:5f:b4:26:ad:d4:9a:c0:d8:27:25:e0: 85:df:f8:db:e0:85:b8:cf:6b:2e:6f:a4:0d:84:2f:0d:0e:2b: ce:69:12:74:69:2a:73:3e:80:4d:c5:5c:ca:ad:9b:5e:2f:46: e0:ab:ec:34:d6:e1:4b:db:bc:66:3f:1b:75:38:71:81:ff:f7: 72:56:10:9f:58:47:7a:1e:0b:a3:c4:27:b9:33:fe:06:c8:46: cd:00:63:94:28:3b:ea:39:fd:5d:c6:d3:ab:c9:89:17:51:04: 9e:e9:3a:ea:a4:16:46:85:d8:ee:c9:1e:27:89:83:2b:59:9a: 52:ab:b5:d6:b1:c8:14:b6:33:3d:40:51:53:b7:45:c9:9c:7e: a1:0e:84:b4:61:67:29:9e:40:30:94:5e:ad:3a:2a:b2:73:92: 83:72:d4:07:30:ca:b4:4d:70:f0:73:b1:39:94:21:47:57:f0: 8e:35:cd:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZodYu3o2zMyjnTdhFTsaWuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUxMDI1MjIwMDEzWhcNMjUxMDI2MjIwMDEzWjAzMTEwLwYDVQQD EyhiZDgwYmUzZTQyM2IwODAwZTdmMzFiNWFmNmYwMmVlNGU4MjgyMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14yWmEYIzJJRFD/oRAY/K8RO2wmD URVVdvyD6NQn1yvFLPP9YES7DBbOaTK/KqRzMqqwJIjOYCBpEHFkC5HFhtH4Hc/w orXyLi/3gYDUVsAfzpQAQKbylwEtLMTkMdLFCqEzexwJh4QM3MF9PjQqyBCQWArp 7XN/hYlyr/0BTyFOsG/WNVIfUCxDIE38PdPQwIfFg/EPxVDpHbhQlj71pjGcrsLI xuiLK3dJ4KI3x7GRqJR5O2EhNflrytGAGD9nfme54xWfuefBYD8NCaD9f1F3xGtb wcYZ63RIf1+m9j9yRZRNb8v8x79xPSICR628cKK+FDy94MwlWvI9VWmFdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2Avj5COwgA5/MbWvbwLuToKCD3MB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUn7PC9M p18H2gpj+0KeUM74mRPpzG0bXqNJWLwiC4UOSWu8iaaX5saQVW6gldo/zekYZtOr GL2lDTttoGJnQ2InHaJyfPk8mGgnl56gFV+0Jq3UmsDYJyXghd/42+CFuM9rLm+k DYQvDQ4rzmkSdGkqcz6ATcVcyq2bXi9G4KvsNNbhS9u8Zj8bdThxgf/3clYQn1hH eh4Lo8QnuTP+BshGzQBjlCg76jn9XcbTq8mJF1EEnuk66qQWRoXY7skeJ4mDK1ma Uqu11rHIFLYzPUBRU7dFyZx+oQ6EtGFnKZ5AMJRerToqsnOSg3LUBzDKtE1w8HOx OZQhR1fwjjXNbA== -----END CERTIFICATE-----Generated at Sun Oct 26 06:18:11 2025 by rpki-client