$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: hVSmLBgE5nip1oUnlurmliCdMBq4e7bGdjjLbkmPdqI= Subject key identifier: 76:BD:5D:AF:8C:E5:CC:93:FE:07:D4:C2:23:D9:FD:2D:F5:1D:59:A0 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 01992668FD5C1510986D33A360B72AA75EBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 16A7 Signing time: Sun 07 Sep 2025 23:00:38 +0000 Manifest this update: Sun 07 Sep 2025 23:00:38 +0000 Manifest next update: Mon 08 Sep 2025 23:00:38 +0000 Files and hashes: 1: 0AYdj6RPn1eQ4OgEy6QCr1f5k2Q.roa (hash: L6DU942Jz6/lvfUIe3D2o0HomEkBYzu27lFzdIVqGEc=) 2: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 3: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 4: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: tk1kbASZcDl29aADzT84W31nnN8rdbRKm+BW4cZ9rIU=) 5: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 6: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 7: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 8: Ry99V7wdnB63QA0YiggryZhHU-U.roa (hash: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=) 9: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 10: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 11: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 12: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 13: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 14: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 15: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 16: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:68:fd:5c:15:10:98:6d:33:a3:60:b7:2a:a7:5e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Sep 7 23:00:38 2025 GMT Not After : Sep 8 23:00:38 2025 GMT Subject: CN=76bd5daf8ce5cc93fe07d4c223d9fd2df51d59a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:c8:47:f6:40:24:1f:b0:40:b2:72:2e:1d: 98:33:2e:ef:7a:8c:52:77:26:e9:c9:10:17:98:38: 35:ec:7e:5b:0e:97:de:ee:f4:ce:2e:c9:29:35:ff: da:49:74:55:7f:74:a3:db:4c:b3:1c:31:ba:98:b0: bd:06:99:27:81:e3:5d:90:23:64:96:2c:a1:dd:c1: 23:85:ff:5f:f7:87:12:c1:ce:62:c6:25:5a:6d:19: 37:ff:0e:5c:2d:43:23:3c:9f:95:42:a2:68:f2:e9: 55:7d:69:07:78:ef:3a:41:ed:3a:56:7a:7c:4f:fd: 2c:ca:3e:1e:0a:9c:ff:08:88:5b:0a:55:e8:f4:0c: a5:d6:bf:bf:23:48:ad:81:07:f3:c2:af:96:50:e3: 84:a1:b9:b1:8c:aa:87:9f:55:b7:1c:3f:b1:ef:52: ec:b5:fe:20:50:13:67:83:e0:30:0e:b8:2b:82:f4: 77:a1:fb:7a:79:74:06:da:19:49:12:ab:a6:d0:16: 5f:4f:0a:66:39:6b:0e:5f:71:33:bd:f3:bd:b2:8f: 60:51:19:cc:ac:7a:7f:1b:36:d3:10:a5:98:34:6a: 7e:eb:20:84:12:c7:c7:a8:44:17:55:15:ab:b2:d5: e5:45:9c:6b:cc:27:15:59:39:c5:b0:73:52:1e:a0: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BD:5D:AF:8C:E5:CC:93:FE:07:D4:C2:23:D9:FD:2D:F5:1D:59:A0 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:91:be:cd:e1:b0:93:f2:b6:b4:00:88:a2:5c:fb:5e:62:ee: 21:63:50:b0:7b:ce:58:04:d2:53:7a:e9:e5:45:26:4e:d6:3d: a0:8c:46:f3:ae:67:8d:0f:b4:46:fa:52:08:74:d8:9c:83:6e: f9:f7:c7:f0:88:4d:16:a1:1c:c4:6e:4d:fe:39:53:0a:89:79: 8d:78:de:27:34:86:75:44:92:fa:f5:86:48:2d:e0:f0:40:00: c1:cd:30:fb:74:da:c1:fc:c3:67:ae:d2:33:e3:be:ec:d9:13: 31:87:65:86:f0:a7:22:50:64:72:64:3b:36:9d:53:3d:7a:b3: 24:b1:25:32:23:80:4e:cb:18:f9:92:9a:48:e1:94:01:bf:9f: 91:5b:8a:2d:ca:e5:6a:b5:ac:14:3c:2a:1c:2f:ec:e4:b6:f9: 20:b7:1b:87:93:9a:65:e4:f6:fc:19:e6:27:50:7f:4b:fd:c4: a4:f9:d5:39:9f:fc:84:60:1a:4b:21:b0:a3:b4:5b:c1:2d:3f: 9c:95:cc:5d:77:35:59:6e:28:0f:60:12:6a:55:e7:e9:00:6f: d9:00:98:be:ca:81:97:a1:0f:70:c5:16:94:b2:35:94:12:88: a6:37:aa:ed:59:d9:2b:eb:2f:ae:e3:26:0e:42:e3:2a:8f:b6: e1:e1:e8:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkmaP1cFRCYbTOjYLcqp166MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUwOTA3MjMwMDM4WhcNMjUwOTA4MjMwMDM4WjAzMTEwLwYDVQQD Eyg3NmJkNWRhZjhjZTVjYzkzZmUwN2Q0YzIyM2Q5ZmQyZGY1MWQ1OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqzIR/ZAJB+wQLJyLh2YMy7veoxS dybpyRAXmDg17H5bDpfe7vTOLskpNf/aSXRVf3Sj20yzHDG6mLC9BpkngeNdkCNk liyh3cEjhf9f94cSwc5ixiVabRk3/w5cLUMjPJ+VQqJo8ulVfWkHeO86Qe06Vnp8 T/0syj4eCpz/CIhbClXo9Ayl1r+/I0itgQfzwq+WUOOEobmxjKqHn1W3HD+x71Ls tf4gUBNng+AwDrgrgvR3oft6eXQG2hlJEqum0BZfTwpmOWsOX3EzvfO9so9gURnM rHp/GzbTEKWYNGp+6yCEEsfHqEQXVRWrstXlRZxrzCcVWTnFsHNSHqAkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHa9Xa+M5cyT/gfUwiPZ/S31HVmgMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5G+zeGw k/K2tACIolz7XmLuIWNQsHvOWATSU3rp5UUmTtY9oIxG865njQ+0RvpSCHTYnINu +ffH8IhNFqEcxG5N/jlTCol5jXjeJzSGdUSS+vWGSC3g8EAAwc0w+3TawfzDZ67S M+O+7NkTMYdlhvCnIlBkcmQ7Np1TPXqzJLElMiOATssY+ZKaSOGUAb+fkVuKLcrl arWsFDwqHC/s5Lb5ILcbh5OaZeT2/BnmJ1B/S/3EpPnVOZ/8hGAaSyGwo7RbwS0/ nJXMXXc1WW4oD2ASalXn6QBv2QCYvsqBl6EPcMUWlLI1lBKIpjeq7VnZK+svruMm DkLjKo+24eHoZg== -----END CERTIFICATE-----Generated at Mon Sep 8 08:15:20 2025 by rpki-client