$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: lg5/YlHoaXR0rv85u/jkIqW1SdGf2s+WSC/J7YDqghs= Subject key identifier: 37:03:3C:DD:5F:C2:82:40:67:C2:0D:BB:55:B5:B6:A2:0C:BB:0E:41 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019926D6D9ED7A34B28CA64FDF9C75AAD723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 13D3 Signing time: Mon 08 Sep 2025 01:00:38 +0000 Manifest this update: Mon 08 Sep 2025 01:00:38 +0000 Manifest next update: Tue 09 Sep 2025 01:00:38 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: 7UUAA6-rfwajvaAr2mkA9OmXfI4.roa (hash: CBN8ziM89MxVzMewBkXc6YlRG7fSrYHSwUHDuf97QWE=) 5: 9xV6VM7xSpJvhZz3wJWNWBeL10k.roa (hash: 6ww/vl8MNj9BtICfJmSYBaO923KLClJNIhoHyGGOV2w=) 6: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: KHyysj++5rObm1jSDGjHQdw1QUzEIqdasQQoXC7lY+8=) 7: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 8: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 9: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 10: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=) 11: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=) 12: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 13: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 14: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 15: pyfX2Wde-4YhzoDQWRc-_kW4ahs.roa (hash: DMnr5t8FYa3ZmawzVDuxQN95Av7e1Q0YztBCmOoG1UM=) 16: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 17: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=) 18: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 19: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 20: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:26:d6:d9:ed:7a:34:b2:8c:a6:4f:df:9c:75:aa:d7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Sep 8 01:00:38 2025 GMT Not After : Sep 9 01:00:38 2025 GMT Subject: CN=37033cdd5fc2824067c20dbb55b5b6a20cbb0e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:17:08:44:0f:3b:11:25:d2:fe:03:9b:0d: a2:67:0d:aa:d3:37:fb:1e:52:49:b3:f3:ea:c8:62: df:68:4a:ce:9e:2f:3e:94:3e:6a:63:49:9d:2e:13: 23:ca:72:4a:a9:93:c3:78:07:5a:9c:d2:46:1a:63: f4:ad:f7:c6:e4:d0:99:e2:25:3c:4a:32:d8:d2:2b: 4f:3e:d4:b4:98:60:3c:11:e3:13:77:e0:bb:97:07: 4a:ef:c2:88:66:4a:85:4b:e0:cb:9d:1a:c6:e4:26: f1:65:a9:7e:72:dd:f6:6d:d3:51:87:79:73:a9:d8: 3a:9f:95:14:6f:42:62:0d:dc:a5:25:d0:69:89:8a: 7c:1b:4a:8c:12:4d:88:23:f4:b1:12:f4:5a:6e:60: 5b:ba:8d:fd:da:b8:5a:4f:a2:51:aa:a2:f7:6c:e3: c6:c5:d6:81:7a:1b:30:d8:0f:cd:86:2c:b4:bc:f5: d9:1c:c2:6d:09:96:d5:d3:21:a3:6a:9a:8f:ef:0c: 2e:2a:7e:f1:14:c6:6d:a6:d2:0b:be:16:7c:a1:c9: dd:f2:8a:96:c6:ed:dc:08:c3:90:a6:9c:78:11:a7: 06:e8:4b:37:9e:5f:a4:9b:9f:61:fc:fb:2f:9f:a5: 9b:7c:95:77:00:da:09:6d:3e:ee:79:5e:28:e8:00: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:03:3C:DD:5F:C2:82:40:67:C2:0D:BB:55:B5:B6:A2:0C:BB:0E:41 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:29:c4:85:6f:0a:a7:91:bf:ae:36:ec:16:e7:ab:b4:9a:7e: c8:0a:8c:b9:14:65:44:50:2f:b1:7c:83:df:eb:b6:6e:c4:b7: ea:d4:7b:55:43:42:d0:e2:71:bc:d5:b6:e9:ac:be:26:68:f6: de:b4:5a:f7:1a:84:7f:bc:28:c4:29:28:28:64:e3:43:8a:4c: a0:4b:9b:df:f3:2d:b1:78:65:bf:d5:82:73:8f:12:3e:05:22: 9d:ce:81:84:56:f4:f8:69:96:0e:79:10:06:43:18:37:d1:e7: bc:e4:8d:80:33:76:e9:e2:44:d8:17:48:37:27:b8:c0:63:40: d5:35:c9:92:19:26:d7:81:88:a6:7c:9c:ee:5c:ea:29:87:1b: 13:ee:d5:b5:ef:a6:37:74:b4:75:1a:90:3b:cb:f7:90:24:72: ac:e6:aa:64:ac:91:f2:32:28:94:0b:86:61:79:c3:f7:81:d5: b8:d3:8f:81:db:bb:51:28:21:38:f9:a2:57:22:a2:18:9b:5a: 0d:43:bb:49:f6:99:3d:8c:73:e4:de:3d:ff:0e:f0:0a:dc:60: ae:4a:ad:05:d9:bc:88:ca:16:fd:85:81:7f:48:29:f1:d9:3d: fe:41:e0:93:02:c7:46:19:45:96:b2:fb:c0:b4:09:fd:71:23: 28:97:86:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkm1tntejSyjKZP35x1qtcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUwOTA4MDEwMDM4WhcNMjUwOTA5MDEwMDM4WjAzMTEwLwYDVQQD EygzNzAzM2NkZDVmYzI4MjQwNjdjMjBkYmI1NWI1YjZhMjBjYmIwZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuisXCEQPOxEl0v4Dmw2iZw2q0zf7 HlJJs/PqyGLfaErOni8+lD5qY0mdLhMjynJKqZPDeAdanNJGGmP0rffG5NCZ4iU8 SjLY0itPPtS0mGA8EeMTd+C7lwdK78KIZkqFS+DLnRrG5CbxZal+ct32bdNRh3lz qdg6n5UUb0JiDdylJdBpiYp8G0qMEk2II/SxEvRabmBbuo392rhaT6JRqqL3bOPG xdaBehsw2A/Nhiy0vPXZHMJtCZbV0yGjapqP7wwuKn7xFMZtptILvhZ8ocnd8oqW xu3cCMOQppx4EacG6Es3nl+km59h/Psvn6WbfJV3ANoJbT7ueV4o6ABRwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcDPN1fwoJAZ8INu1W1tqIMuw5BMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANynEhW8K p5G/rjbsFuertJp+yAqMuRRlRFAvsXyD3+u2bsS36tR7VUNC0OJxvNW26ay+Jmj2 3rRa9xqEf7woxCkoKGTjQ4pMoEub3/MtsXhlv9WCc48SPgUinc6BhFb0+GmWDnkQ BkMYN9HnvOSNgDN26eJE2BdINye4wGNA1TXJkhkm14GIpnyc7lzqKYcbE+7Vte+m N3S0dRqQO8v3kCRyrOaqZKyR8jIolAuGYXnD94HVuNOPgdu7USghOPmiVyKiGJta DUO7SfaZPYxz5N49/w7wCtxgrkqtBdm8iMoW/YWBf0gp8dk9/kHgkwLHRhlFlrL7 wLQJ/XEjKJeGxw== -----END CERTIFICATE-----Generated at Mon Sep 8 08:41:01 2025 by rpki-client