$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: pekG0nz7J+neohZzGYYANutHCmWHXOOC2SRv7SjMcJ0= Subject key identifier: 8D:E0:F7:B6:41:C2:07:9E:52:FB:90:A8:DF:E8:77:EB:CC:FA:EE:C2 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 01963EE6DDE3DA29A00E9B45336BFB5A5153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 1250 Signing time: Wed 16 Apr 2025 14:00:39 +0000 Manifest this update: Wed 16 Apr 2025 14:00:39 +0000 Manifest next update: Thu 17 Apr 2025 14:00:39 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: Yd2cJyXH4TuxTbIgB9wZUK3XNmwegHGeS+1nlJesz/k=) 5: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 6: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 7: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 8: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=) 9: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=) 10: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 11: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 12: fhv64bxzWcauBoH7qXIpIF6wjQo.roa (hash: XBOHExDlxcs7IJl8NBFZOTlEqiJsW6a5rBKOKZnQpcM=) 13: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 14: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 15: sOABMeqqwZ1G0D1ULMJHO8KxxxQ.roa (hash: aqn/2HV1SWgZFD22dyBslfrAfJPMn4unQ/xtd1gPhfA=) 16: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=) 17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 19: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 13:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3e:e6:dd:e3:da:29:a0:0e:9b:45:33:6b:fb:5a:51:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Apr 16 14:00:39 2025 GMT Not After : Apr 17 14:00:39 2025 GMT Subject: CN=8de0f7b641c2079e52fb90a8dfe877ebccfaeec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:e6:50:39:7a:1a:14:66:dd:ef:0e:1e:12: a1:e6:19:10:59:e8:93:08:c4:b1:4e:b9:88:6a:cc: 6a:1a:80:e5:3e:b1:41:70:d7:6d:e7:c8:d9:e1:cc: 11:b6:1d:9d:73:a3:75:f8:3e:16:f2:d5:90:57:4d: 31:2f:ed:cd:2b:40:4b:96:c4:18:af:54:84:c1:97: 52:94:66:98:c8:c6:a3:fb:5a:e1:6a:f9:17:91:51: a6:ff:ad:a9:cd:9d:8b:d5:1b:d7:27:b5:1d:1b:a5: ca:8e:9c:ac:49:f2:5f:c0:5a:14:90:da:c0:32:f7: 38:84:41:51:67:56:ec:81:45:69:54:c8:25:9c:fa: 7c:aa:89:ce:77:87:37:8d:07:28:6c:b9:be:35:47: 50:30:53:48:67:6b:32:d5:4e:91:2f:2e:af:03:d2: 21:5c:ff:bb:39:0f:85:1a:26:42:87:e9:52:c5:be: 50:b8:67:c9:9e:51:c0:0e:e5:58:b3:f9:9b:fe:8c: 9f:db:b5:01:e1:b6:aa:7a:74:fa:55:ed:f1:8b:5f: 02:27:e3:95:51:61:bf:4f:12:36:d0:0c:bc:c3:34: 22:af:0d:36:e4:85:f4:72:cf:ea:5a:06:2b:bb:ac: 7b:4d:95:c8:dd:e6:90:e5:de:5f:fd:23:ab:30:07: 62:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E0:F7:B6:41:C2:07:9E:52:FB:90:A8:DF:E8:77:EB:CC:FA:EE:C2 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b1:f9:ca:ec:80:c2:7e:67:53:32:4a:15:62:d8:8d:c6:38: 5e:e2:15:be:75:8c:1c:48:d0:c6:a4:9e:59:3a:cf:18:ba:a8: a4:fa:76:96:17:c0:af:a1:6b:2b:33:3d:23:c8:bb:ec:70:42: 61:76:12:21:43:9f:31:40:8d:db:3d:4a:83:87:c0:a6:e4:4b: 11:f3:f5:58:21:11:4f:f8:f1:d8:eb:e0:67:5a:15:15:f9:93: 99:60:b6:a0:80:2b:ef:ff:d4:d8:84:a8:58:4b:14:40:7f:8d: 32:c9:0c:3b:5e:fa:2d:f4:13:e8:15:ad:b4:aa:22:b7:ca:dc: a4:88:fe:4f:e3:04:50:91:e0:38:e5:ee:e2:dc:39:93:6e:3c: c0:79:bd:88:11:bf:83:02:9a:c9:e1:1d:ed:70:7f:94:f1:7f: 0a:7f:95:3a:d9:94:54:93:d3:ea:9d:80:76:94:2d:06:7c:71: e8:f9:a7:f4:f6:19:0e:31:74:45:b0:90:26:89:27:91:8b:5a: 36:85:b2:b6:23:f1:19:23:d3:93:a8:77:7d:a9:f8:c4:4a:11: 55:80:26:47:66:34:a1:28:3d:37:0e:3d:7e:2e:76:4b:5a:2b: c2:d6:19:75:42:6d:40:2a:a1:ba:d4:44:41:d0:f5:cf:71:e0: 3d:dc:7a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY+5t3j2imgDptFM2v7WlFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUwNDE2MTQwMDM5WhcNMjUwNDE3MTQwMDM5WjAzMTEwLwYDVQQD Eyg4ZGUwZjdiNjQxYzIwNzllNTJmYjkwYThkZmU4NzdlYmNjZmFlZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/HmUDl6GhRm3e8OHhKh5hkQWeiT CMSxTrmIasxqGoDlPrFBcNdt58jZ4cwRth2dc6N1+D4W8tWQV00xL+3NK0BLlsQY r1SEwZdSlGaYyMaj+1rhavkXkVGm/62pzZ2L1RvXJ7UdG6XKjpysSfJfwFoUkNrA Mvc4hEFRZ1bsgUVpVMglnPp8qonOd4c3jQcobLm+NUdQMFNIZ2sy1U6RLy6vA9Ih XP+7OQ+FGiZCh+lSxb5QuGfJnlHADuVYs/mb/oyf27UB4baqenT6Ve3xi18CJ+OV UWG/TxI20Ay8wzQirw025IX0cs/qWgYru6x7TZXI3eaQ5d5f/SOrMAdiDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3g97ZBwgeeUvuQqN/od+vM+u7CMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrH5yuyA wn5nUzJKFWLYjcY4XuIVvnWMHEjQxqSeWTrPGLqopPp2lhfAr6FrKzM9I8i77HBC YXYSIUOfMUCN2z1Kg4fApuRLEfP1WCERT/jx2OvgZ1oVFfmTmWC2oIAr7//U2ISo WEsUQH+NMskMO176LfQT6BWttKoit8rcpIj+T+MEUJHgOOXu4tw5k248wHm9iBG/ gwKayeEd7XB/lPF/Cn+VOtmUVJPT6p2AdpQtBnxx6Pmn9PYZDjF0RbCQJoknkYta NoWytiPxGSPTk6h3fan4xEoRVYAmR2Y0oSg9Nw49fi52S1orwtYZdUJtQCqhutRE QdD1z3HgPdx6LQ== -----END CERTIFICATE-----Generated at Wed Apr 16 17:33:31 2025 by rpki-client