$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: s8HGRJ1LLTTpQvD3bt06XcQsTAWT+lf91L64LWuAmPM= Subject key identifier: D2:12:10:68:3F:3D:9A:FE:63:E3:AB:A2:EA:FC:66:0E:63:96:2A:C1 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 01974A7A949D661554489E27CD9ECE1C39B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 15AF Signing time: Sat 07 Jun 2025 13:00:36 +0000 Manifest this update: Sat 07 Jun 2025 13:00:36 +0000 Manifest next update: Sun 08 Jun 2025 13:00:36 +0000 Files and hashes: 1: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 2: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 3: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: 2QQ3p//I+XpdrOsNWj4sHtCMKagSzTep+EQUYBmGPZ0=) 4: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 5: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 6: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 7: Ry99V7wdnB63QA0YiggryZhHU-U.roa (hash: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=) 8: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 9: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 10: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 11: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 12: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 13: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 14: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 15: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:7a:94:9d:66:15:54:48:9e:27:cd:9e:ce:1c:39:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jun 7 13:00:36 2025 GMT Not After : Jun 8 13:00:36 2025 GMT Subject: CN=d21210683f3d9afe63e3aba2eafc660e63962ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:bb:08:67:4e:68:91:f4:c1:f9:9e:0f:23: 54:f3:ef:99:3e:55:f1:d6:e5:d4:bb:ef:15:1e:14: 01:c5:d2:b5:17:a6:d4:53:ff:db:9f:3a:5e:f9:a4: c6:af:b2:91:61:13:20:a7:c2:a5:58:2c:22:0b:3c: 0f:ba:4f:8b:b0:9a:ad:19:5e:8a:0d:d1:21:a1:3f: 84:34:b6:d5:61:20:53:6f:ec:f7:a1:25:35:24:e1: 0d:70:c5:03:60:02:7b:6b:d6:a3:35:5a:20:88:49: c7:38:8e:98:26:81:53:41:0b:dd:be:20:9c:3f:62: 69:0d:b6:49:db:ca:75:ac:33:23:bd:d8:f7:9c:9b: 0d:21:3f:a4:c7:75:ea:0a:48:fa:d2:0e:47:fa:a8: 4c:bd:0c:59:56:e6:a0:c6:f1:7e:2a:ce:66:3c:13: 84:76:68:58:9e:8d:59:1c:9e:22:62:84:f6:1b:01: c7:4f:a1:c6:9c:70:27:5d:2c:3e:fa:0a:da:23:6b: 61:2e:47:12:ee:25:3b:6b:a7:c7:43:e9:fb:a1:2e: 47:40:e5:0f:4b:85:62:2d:a7:29:32:39:c3:7d:83: 7d:0d:6e:cb:ba:e2:85:f0:16:e3:c6:51:99:0a:ef: b8:97:7c:43:16:83:95:5b:df:b0:a5:ec:d9:48:46: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:12:10:68:3F:3D:9A:FE:63:E3:AB:A2:EA:FC:66:0E:63:96:2A:C1 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6a:2e:c2:d9:8d:14:d9:a0:45:19:b0:4d:7c:45:c9:af:c7: 33:05:8d:f0:67:c7:1f:7f:97:fd:67:5d:d3:fd:8f:0a:f9:d4: a7:20:1d:dd:4a:c4:c8:3c:c3:a4:36:92:0f:61:fa:f4:6e:2f: f7:2e:f7:12:83:14:c1:0b:e0:e1:74:a5:c1:69:eb:21:ec:a3: 66:6d:f4:fc:ab:55:06:0d:1e:bd:49:6c:b8:93:0a:38:4c:40: 0c:d0:f3:88:0a:69:2b:0f:49:8e:75:61:47:bb:77:d1:58:fa: 35:c1:c5:ca:47:80:42:3d:00:9a:e9:b5:4d:f2:44:c2:b1:21: cd:b5:9b:e2:28:e2:ef:ef:07:cf:99:1e:f1:2a:23:4c:3a:54: 1b:0e:c8:7d:0e:e3:81:63:77:49:b7:45:06:e7:af:9b:ed:e7: 83:9c:82:7b:2a:d5:fd:37:2d:9a:fd:87:ed:0f:af:e7:9a:91: b0:90:79:78:b5:c8:d3:9b:aa:66:c0:bf:91:e9:c8:a5:09:f7: c3:28:c0:13:a6:a7:65:63:f2:ba:ae:96:44:68:61:b7:12:b6: 66:88:4c:df:5e:6f:4a:68:97:a6:f1:8b:53:e8:33:b4:fa:cf: 15:42:ad:34:5b:90:a3:ea:52:18:4b:72:e3:57:ca:4f:c4:cc: 37:3a:27:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKepSdZhVUSJ4nzZ7OHDmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUwNjA3MTMwMDM2WhcNMjUwNjA4MTMwMDM2WjAzMTEwLwYDVQQD EyhkMjEyMTA2ODNmM2Q5YWZlNjNlM2FiYTJlYWZjNjYwZTYzOTYyYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKa7CGdOaJH0wfmeDyNU8++ZPlXx 1uXUu+8VHhQBxdK1F6bUU//bnzpe+aTGr7KRYRMgp8KlWCwiCzwPuk+LsJqtGV6K DdEhoT+ENLbVYSBTb+z3oSU1JOENcMUDYAJ7a9ajNVogiEnHOI6YJoFTQQvdviCc P2JpDbZJ28p1rDMjvdj3nJsNIT+kx3XqCkj60g5H+qhMvQxZVuagxvF+Ks5mPBOE dmhYno1ZHJ4iYoT2GwHHT6HGnHAnXSw++graI2thLkcS7iU7a6fHQ+n7oS5HQOUP S4ViLacpMjnDfYN9DW7LuuKF8BbjxlGZCu+4l3xDFoOVW9+wpezZSEbTAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNISEGg/PZr+Y+Orour8Zg5jlirBMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGouwtmN FNmgRRmwTXxFya/HMwWN8GfHH3+X/Wdd0/2PCvnUpyAd3UrEyDzDpDaSD2H69G4v 9y73EoMUwQvg4XSlwWnrIeyjZm30/KtVBg0evUlsuJMKOExADNDziAppKw9JjnVh R7t30Vj6NcHFykeAQj0Amum1TfJEwrEhzbWb4iji7+8Hz5ke8SojTDpUGw7IfQ7j gWN3SbdFBuevm+3ng5yCeyrV/Tctmv2H7Q+v55qRsJB5eLXI05uqZsC/kenIpQn3 wyjAE6anZWPyuq6WRGhhtxK2ZohM315vSmiXpvGLU+gztPrPFUKtNFuQo+pSGEty 41fKT8TMNzonNw== -----END CERTIFICATE-----Generated at Sat Jun 7 23:28:34 2025 by rpki-client