$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: 46gyLvs0Z5SY3csrYsw6WtKcvR0eE+wQ4U4yYV2QvG4= Subject key identifier: 41:E8:3F:B6:DD:D7:12:65:34:37:DD:1B:82:7B:C7:94:A5:46:94:08 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019A15A9E910DB9DE099E19147215D5E222A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1451 Signing time: Fri 24 Oct 2025 10:00:48 +0000 Manifest this update: Fri 24 Oct 2025 10:00:48 +0000 Manifest next update: Sat 25 Oct 2025 10:00:48 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: 7UUAA6-rfwajvaAr2mkA9OmXfI4.roa (hash: CBN8ziM89MxVzMewBkXc6YlRG7fSrYHSwUHDuf97QWE=) 5: 9xV6VM7xSpJvhZz3wJWNWBeL10k.roa (hash: 6ww/vl8MNj9BtICfJmSYBaO923KLClJNIhoHyGGOV2w=) 6: BHwETxfxAG-FlW-2gR2swtW8f54.roa (hash: OSmpGtbSXpdE0u69iRKj0bOd9vpUc8AgFIuei1hFfpM=) 7: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: sOq6E57qb+sedrs1XO15AmLLhOhYjmaK6gjT5+3+2jY=) 8: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 9: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 10: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 11: I1g6JGBc_MuJczCMQ8_G_2Vo12E.roa (hash: yhGATvC9gpwxKIKN67R79qmS2M3ypkmjHOCyPAuC254=) 12: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 13: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 14: cfz44yOSQ_0AbF1P2cnaJJgavzc.roa (hash: sb2SGQACNoFJRrfeB1oCMEyMZn4+rl9PS1uiW9uDl/M=) 15: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 16: pyfX2Wde-4YhzoDQWRc-_kW4ahs.roa (hash: DMnr5t8FYa3ZmawzVDuxQN95Av7e1Q0YztBCmOoG1UM=) 17: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 18: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 19: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:15:a9:e9:10:db:9d:e0:99:e1:91:47:21:5d:5e:22:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Oct 24 10:00:48 2025 GMT Not After : Oct 25 10:00:48 2025 GMT Subject: CN=41e83fb6ddd712653437dd1b827bc794a5469408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c8:e5:cc:59:be:cf:52:42:c9:9c:38:b6:80: e1:6d:20:e0:79:c6:21:0c:0e:06:f0:d3:41:fa:fc: 9a:6e:6c:8b:67:90:a8:38:6c:20:eb:c9:b8:26:73: 53:5b:f1:31:d3:d4:2a:95:84:65:48:72:cf:54:a9: a0:f6:64:b6:59:37:a8:22:a6:db:3e:a4:6d:8e:fa: e7:f9:db:f6:d8:77:ee:cf:cb:6c:ed:bc:31:06:e7: 6a:36:4f:1f:47:6e:49:d8:1e:a2:b6:42:b5:e7:60: 2d:44:8f:7e:b0:ac:c1:cb:12:74:9b:07:af:67:d4: 7d:cc:b2:ab:54:85:cd:8c:07:bb:76:fe:82:c9:b3: d4:d6:19:ac:ed:91:7d:24:c9:59:82:78:4b:30:ee: 5e:2c:4d:a0:8b:9b:f4:ff:35:7e:54:32:51:27:ab: f7:93:f1:65:70:17:fd:9e:e7:5d:3b:dd:3a:37:5f: 73:ae:6a:85:f9:6a:9f:a5:b3:95:20:d8:38:97:10: 05:f0:13:0d:45:64:87:e9:e5:20:6b:7d:de:2a:ac: 2e:47:a2:46:1a:b7:be:37:c0:15:f1:2a:46:32:d7: d8:ab:bf:e4:0f:b2:a3:af:bf:5c:71:f8:3b:28:4c: bf:d6:e8:ca:af:48:7f:c7:84:a3:b6:76:82:71:8e: 01:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E8:3F:B6:DD:D7:12:65:34:37:DD:1B:82:7B:C7:94:A5:46:94:08 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9a:79:11:08:5a:c1:f5:e4:e3:09:58:70:07:4f:f4:cd:16: e0:7e:d1:c6:a0:5f:bc:91:05:70:5a:9d:55:33:3d:86:94:55: e8:03:08:61:c8:12:d8:44:f2:4e:bf:85:4c:38:9b:b4:33:1d: 5b:1b:37:62:ca:22:8a:fa:d0:f9:e0:7f:1a:d8:5b:31:74:d4: f9:4e:57:3d:2b:c9:8e:63:02:ee:f8:7d:ca:89:1a:c2:c0:43: c7:16:ea:4a:aa:09:fe:77:de:94:13:51:73:d9:c4:40:11:43: c0:d5:9a:b4:41:4e:6c:66:3d:62:92:5c:6c:04:b1:76:85:6c: 9c:ad:d3:14:13:d8:d5:22:15:7c:f0:9a:1e:b1:dd:d5:0b:cd: 85:fc:2b:71:f8:d5:82:72:aa:26:57:e7:8d:e6:94:3f:bc:2d: da:44:aa:43:6e:cb:4a:fd:86:f6:04:fc:99:03:7c:6d:ed:c7: 6c:65:e4:63:b5:12:11:e2:38:4e:4d:37:d1:b5:fa:f6:56:0f: 02:45:c3:33:68:80:9f:f9:93:3b:05:df:25:30:d7:29:7b:c0: 1e:a7:c1:43:a7:e6:ca:ae:dc:b4:42:49:ad:51:e8:c2:cb:70: 06:07:bc:16:08:43:a9:70:d5:27:af:be:e4:e1:5f:c7:89:33: 73:6d:ab:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoVqekQ253gmeGRRyFdXiIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUxMDI0MTAwMDQ4WhcNMjUxMDI1MTAwMDQ4WjAzMTEwLwYDVQQD Eyg0MWU4M2ZiNmRkZDcxMjY1MzQzN2RkMWI4MjdiYzc5NGE1NDY5NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MjlzFm+z1JCyZw4toDhbSDgecYh DA4G8NNB+vyabmyLZ5CoOGwg68m4JnNTW/Ex09QqlYRlSHLPVKmg9mS2WTeoIqbb PqRtjvrn+dv22Hfuz8ts7bwxBudqNk8fR25J2B6itkK152AtRI9+sKzByxJ0mwev Z9R9zLKrVIXNjAe7dv6CybPU1hms7ZF9JMlZgnhLMO5eLE2gi5v0/zV+VDJRJ6v3 k/FlcBf9nuddO906N19zrmqF+WqfpbOVINg4lxAF8BMNRWSH6eUga33eKqwuR6JG Gre+N8AV8SpGMtfYq7/kD7Kjr79ccfg7KEy/1ujKr0h/x4SjtnaCcY4BGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHoP7bd1xJlNDfdG4J7x5SlRpQIMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5p5EQha wfXk4wlYcAdP9M0W4H7RxqBfvJEFcFqdVTM9hpRV6AMIYcgS2ETyTr+FTDibtDMd Wxs3YsoiivrQ+eB/GthbMXTU+U5XPSvJjmMC7vh9yokawsBDxxbqSqoJ/nfelBNR c9nEQBFDwNWatEFObGY9YpJcbASxdoVsnK3TFBPY1SIVfPCaHrHd1QvNhfwrcfjV gnKqJlfnjeaUP7wt2kSqQ27LSv2G9gT8mQN8be3HbGXkY7USEeI4Tk030bX69lYP AkXDM2iAn/mTOwXfJTDXKXvAHqfBQ6fmyq7ctEJJrVHowstwBge8FghDqXDVJ6++ 5OFfx4kzc22rEA== -----END CERTIFICATE-----Generated at Fri Oct 24 18:49:08 2025 by rpki-client