$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: s+coqUNff0UcESVVxJC364iTwLzIjbwEZDK9+jF4Iys= Subject key identifier: 72:8F:5B:75:6A:E6:22:03:51:70:04:F1:1F:52:9D:21:73:BA:3A:21 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 01974B56287F0F04F3A2850223D53D49CADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 12DB Signing time: Sat 07 Jun 2025 17:00:27 +0000 Manifest this update: Sat 07 Jun 2025 17:00:27 +0000 Manifest next update: Sun 08 Jun 2025 17:00:27 +0000 Files and hashes: 1: 0-hMkgwH1_6XuPQSyPu-ntwA8r0.roa (hash: 2JzzJnFd9ihkF6y1d6OVxipYN8O/eCmhylMPeyJxI+E=) 2: 0xc42d-LDEI-SgAKzo0kBGB10Dc.roa (hash: gb2q4Z8T0zA76PNBgJ68ndUVgrHcH6k39n959MJErWM=) 3: 1ilr6zYt5I52EZw1RBDC_QnucBI.roa (hash: 8aVTE2OR/NeC5XrRy2OHucb/MxvIRcv9F4MoSRLn0GY=) 4: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: MQMFrFrovVBO5HzqdQggwuy1brNIIfAsFuPFcffoAHE=) 5: BquKat6j82qOS2m8MoMszw9MXhs.roa (hash: U9XpBJ+r0RGAXVAtuptN2ZKIQXtNg60NKIPDHLY7cCk=) 6: CJcuaiMpQyoQn46xw-D6Thhavys.roa (hash: 37f0an+cXzNVOgfnUMDCZ1mYljjJ+Pt6QqAPWZ0deas=) 7: GJCWcatdPgXKoeROae-Qf22FK_w.roa (hash: k6sICJAet/cN+WLeSoIk4F2tb+lz85AYVDsOZ/R1kEk=) 8: KhmVgayahuq_FWEItXRbri4yLjQ.roa (hash: 28u9HZ9E3lxZpHt40G8WE88+hWCSc1oI4DUi9z94/vQ=) 9: Q9sEsE6z5GIibO-Hp9GTHh0HWPI.roa (hash: 9CRQgbCX8o+HtsLamnfC8peoHYzNHS3coeIlAetbEPU=) 10: QnLL_E3dngBvD7h0E4XLMypXvhg.roa (hash: QSFVe2PF4iSOwOmMgGkwLBrADT1zh8nSTUizWIPHjPg=) 11: b2ULSIdH23UusVKGAXuUmJR9P2U.roa (hash: K3WOXBiupreCnjzj2yIYkRDoA8J60T3smFT7czzRwzQ=) 12: fhv64bxzWcauBoH7qXIpIF6wjQo.roa (hash: XBOHExDlxcs7IJl8NBFZOTlEqiJsW6a5rBKOKZnQpcM=) 13: nz4iWaKhsnj0CBAx2kY6efcjWbI.roa (hash: 3iBcZ9G2X99Gsvoc2t0DW5tmz60vwwpyxEz2zwkXorM=) 14: qljIitXk1t3YFV0fw6MoKlVZXlE.roa (hash: ISyBHGAsDRPbjHKqPePZgCBP/vPkmLdOY+Zqx/l5qh4=) 15: sOABMeqqwZ1G0D1ULMJHO8KxxxQ.roa (hash: aqn/2HV1SWgZFD22dyBslfrAfJPMn4unQ/xtd1gPhfA=) 16: v0B2WJNbU72JzUwEtfsRU9EGr8A.roa (hash: bkZ7vvKmMRttjisw4wz3UjVly/FH8PJFyMj7pePFFkI=) 17: ygM2v3yxRCSTta-X-otHAEUh3WI.roa (hash: kk4ythPFf1BolITMKCGLolUQdyXP71slk/H1AY1m7jI=) 18: yvd7ROcqjdqfwbqgapXEb-7VUqU.roa (hash: 4MkoXbQ5fkY09pnUUjvZyOYE4o39h9GdJHrXjCu9bik=) 19: zY78a5ViA6-TOxTfbPiAJ9Inm_Y.roa (hash: og5b/BcFOY+IjLcDutjJV+OJ1zegWiBInLo9K8sBHic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:56:28:7f:0f:04:f3:a2:85:02:23:d5:3d:49:ca:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jun 7 17:00:27 2025 GMT Not After : Jun 8 17:00:27 2025 GMT Subject: CN=728f5b756ae62203517004f11f529d2173ba3a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:85:df:2c:c6:a1:e0:ea:4c:94:e0:ed:97:80: a5:99:87:f0:a9:a9:0c:71:fe:73:88:81:da:05:74: de:a8:b5:c5:33:34:ce:3c:53:8f:d2:e4:28:b7:15: 4f:45:ca:d9:bd:a9:c8:1d:a0:61:8e:f4:2c:f7:6d: 43:a1:95:14:7f:dc:05:ea:fc:82:e0:e0:b4:cf:6a: 88:dd:b1:be:36:5f:6f:66:b7:9d:4b:7d:38:52:7d: cb:79:81:07:d9:37:b4:43:d6:fb:b5:ab:30:e2:88: 15:3b:aa:3f:91:f9:de:63:b5:c0:7b:ef:bd:ed:57: ca:98:16:8b:02:69:db:45:e3:83:ca:86:bd:35:a2: 7f:02:99:e4:3d:6a:5f:d3:8f:ba:20:dc:37:64:cc: 2c:1c:f5:da:cf:3f:7b:e8:e1:28:be:75:99:ee:87: 1d:c0:ef:75:09:67:8e:1e:b7:a6:7d:b3:b4:87:a8: 73:bc:36:d8:be:8e:ee:e8:bf:e4:95:2c:0b:b7:5a: e8:3e:d4:ab:f8:8c:91:56:ca:fe:46:75:55:43:63: 9a:ab:f1:c2:f6:55:3e:6a:d6:50:15:05:39:89:6f: 60:cd:6e:86:79:c3:74:eb:7f:0d:9c:cb:ba:93:65: 6a:fc:0d:b8:b1:fb:ed:53:c2:f6:0d:b0:02:a4:ec: 36:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8F:5B:75:6A:E6:22:03:51:70:04:F1:1F:52:9D:21:73:BA:3A:21 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cf:16:b4:3a:07:eb:00:f2:3a:c7:d5:9f:02:ae:0b:7d:b8: 7d:99:c4:bc:e2:92:b8:09:56:0f:46:f1:7f:b0:fc:fe:0d:b7: cc:25:21:3f:c3:62:35:b2:f8:f6:48:f9:e9:9f:66:e3:a8:b6: 31:f6:8c:0e:48:33:3e:d4:8b:79:0f:06:9a:4f:aa:63:4f:06: 2e:d9:e5:4d:6f:4a:30:da:4f:76:0d:35:ec:a5:36:de:59:d0: 08:20:f0:bb:c0:5a:9a:31:9e:02:bc:d4:3a:a2:79:a7:ab:e4: 1f:c6:34:22:0c:3e:cf:e1:a0:94:c3:86:a9:a8:d5:84:9a:b8: 57:05:9d:1b:d1:d8:3a:96:e0:97:db:94:c8:bf:ab:62:e5:e9: cf:67:91:c3:c6:8d:1c:b8:54:a7:19:9b:cc:14:cd:49:1c:47: 42:0d:04:cb:6d:93:36:b2:40:22:7d:41:a6:ac:9f:a1:d6:a2: 64:a7:01:b4:e0:e1:b6:a3:27:1a:a0:3d:14:c2:46:4a:bd:10: 2b:fc:17:30:84:c5:37:c9:1e:d8:ba:0f:58:b0:f8:6a:62:5c: d7:e2:66:bc:d1:33:50:97:92:45:9e:ae:4f:cd:02:55:6b:0c: 88:29:d7:93:d0:f8:29:2f:72:e7:df:53:e4:6b:08:3d:c6:19: 2d:45:d4:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLVih/DwTzooUCI9U9ScrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjUwNjA3MTcwMDI3WhcNMjUwNjA4MTcwMDI3WjAzMTEwLwYDVQQD Eyg3MjhmNWI3NTZhZTYyMjAzNTE3MDA0ZjExZjUyOWQyMTczYmEzYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IXfLMah4OpMlODtl4ClmYfwqakM cf5ziIHaBXTeqLXFMzTOPFOP0uQotxVPRcrZvanIHaBhjvQs921DoZUUf9wF6vyC 4OC0z2qI3bG+Nl9vZredS304Un3LeYEH2Te0Q9b7tasw4ogVO6o/kfneY7XAe++9 7VfKmBaLAmnbReODyoa9NaJ/ApnkPWpf04+6INw3ZMwsHPXazz976OEovnWZ7ocd wO91CWeOHremfbO0h6hzvDbYvo7u6L/klSwLt1roPtSr+IyRVsr+RnVVQ2Oaq/HC 9lU+atZQFQU5iW9gzW6GecN0638NnMu6k2Vq/A24sfvtU8L2DbACpOw25wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKPW3Vq5iIDUXAE8R9SnSFzujohMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi88WtDoH 6wDyOsfVnwKuC324fZnEvOKSuAlWD0bxf7D8/g23zCUhP8NiNbL49kj56Z9m46i2 MfaMDkgzPtSLeQ8Gmk+qY08GLtnlTW9KMNpPdg017KU23lnQCCDwu8BamjGeArzU OqJ5p6vkH8Y0Igw+z+GglMOGqajVhJq4VwWdG9HYOpbgl9uUyL+rYuXpz2eRw8aN HLhUpxmbzBTNSRxHQg0Ey22TNrJAIn1BpqyfodaiZKcBtODhtqMnGqA9FMJGSr0Q K/wXMITFN8ke2LoPWLD4amJc1+JmvNEzUJeSRZ6uT80CVWsMiCnXk9D4KS9y599T 5GsIPcYZLUXUeA== -----END CERTIFICATE-----Generated at Sun Jun 8 00:45:44 2025 by rpki-client