$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: tyrnIVDw2w4MJ2ekkJKC9sYAHMeJpA/QLap1BFgrQro= Subject key identifier: F0:4C:67:59:F4:0F:EF:6F:91:E3:8B:3C:8B:67:54:A3:45:71:5F:ED Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 01992C6B5A8BF1BC1AEB4FFC127725F31CA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0981 Signing time: Tue 09 Sep 2025 03:00:57 +0000 Manifest this update: Tue 09 Sep 2025 03:00:57 +0000 Manifest next update: Wed 10 Sep 2025 03:00:57 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: FH5Q9q8W97sT8KI6dnVLsWRFSWI.roa (hash: cG5saZlMgIPtVR/sqZPiRHaKVKsi9yK/Kza4DxhSY5I=) 4: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 5: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 6: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 7: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 8: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 9: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 10: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 11: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: Uz/0EQUz0JmcpI+eJus+Rl53qiDcfz6H7HGz0fDr/Vk=) 12: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 13: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 14: q5jXlLRnj1O9XNEsXWJiZvFix4Q.roa (hash: fY9qxhHv3XqDW4QnA8I34U/oM+UJ7gy//X5if4F4mCk=) 15: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 16: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 17: xSgK9fLOFfBtEQ1GwOtLlJ5fFSc.roa (hash: 21NNCvjDiYlOHMOd6bhzk9x3nNYhc0a1y7zhHVR1Jbg=) 18: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2c:6b:5a:8b:f1:bc:1a:eb:4f:fc:12:77:25:f3:1c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Sep 9 03:00:57 2025 GMT Not After : Sep 10 03:00:57 2025 GMT Subject: CN=f04c6759f40fef6f91e38b3c8b6754a345715fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:89:36:62:c7:02:79:0b:1a:09:f3:ee:74: 8b:48:87:17:6e:73:78:1f:8a:2b:e2:f2:97:6d:08: 3f:89:c7:78:6d:3a:d1:6c:cf:f3:10:95:12:7e:55: 6a:b5:3d:f8:60:31:b7:7e:95:0d:c4:68:67:cc:30: 18:78:7e:cd:4f:53:4e:27:dd:1b:84:1f:6b:6b:aa: e4:fb:3c:ee:a9:13:89:5b:89:85:2a:1e:0a:a0:17: 55:40:e9:f8:00:c3:95:da:42:55:94:cc:a3:fc:93: d4:c4:89:73:e0:b8:32:f7:1a:2b:49:e8:1a:4c:14: db:5a:4a:d2:f2:6a:5d:48:63:36:ec:fb:80:f6:f3: 7c:38:15:71:22:16:88:a4:f1:6d:c0:aa:32:e3:f8: 16:75:0b:b4:bc:89:05:a6:0e:7c:3d:9c:82:ad:4e: 4e:17:ca:c0:84:98:5f:6b:e6:65:97:4c:ec:86:92: 71:9c:80:71:c0:d7:82:ba:82:9a:1e:3f:66:2b:e5: be:5a:86:6d:86:32:02:dd:b6:4f:b3:5d:82:27:70: 4b:11:28:52:9d:db:77:a4:d0:ad:22:78:dc:fd:ae: e5:a4:0c:b7:dc:06:cf:47:dd:00:79:9a:cb:e8:ba: 7f:91:60:9e:66:f0:09:cd:0a:6a:97:be:28:7d:a7: 6f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4C:67:59:F4:0F:EF:6F:91:E3:8B:3C:8B:67:54:A3:45:71:5F:ED X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8e:f7:ba:84:ee:9f:2e:c7:8e:11:bf:f8:94:df:85:af:43: 3b:66:d9:42:7c:83:14:5f:37:ea:e0:d1:8d:ad:3c:7a:01:1c: c5:ce:f6:fc:1e:43:4e:04:96:e4:a4:3d:19:47:a8:8d:a7:01: 04:84:61:92:a7:5f:18:55:a2:fd:55:4b:70:c8:bb:ac:c5:bf: 24:9a:49:78:d8:ec:a1:19:4f:d0:e5:df:a6:0d:30:dd:34:ae: a7:1a:b0:a7:81:2a:48:af:08:5c:71:4e:4a:c9:97:10:67:0e: 13:97:d7:26:20:c4:b2:e8:6b:ab:a9:10:98:aa:2a:77:c3:a7: cc:b0:56:d5:ea:0e:1e:22:17:df:a5:5a:34:14:a8:a3:13:ce: 21:e7:20:5a:3a:de:67:d0:52:2c:b6:1a:71:c6:4c:f3:a4:3f: 35:62:93:de:be:f7:79:d4:95:eb:f3:ee:a2:bc:34:24:e3:ed: fc:c1:37:db:84:db:ee:5c:a4:3a:89:99:38:b8:26:ab:36:5e: 2a:10:b5:8a:d4:76:67:57:9a:c4:16:18:dc:c5:a5:3a:23:31: d7:8a:a9:1e:ee:da:cb:44:77:5b:e6:9e:23:46:33:10:4a:13: 9c:d4:bc:8e:cb:ba:27:af:80:ab:02:51:d7:19:af:7d:1f:9f: 91:00:b0:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZksa1qL8bwa60/8Encl8xyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwOTA5MDMwMDU3WhcNMjUwOTEwMDMwMDU3WjAzMTEwLwYDVQQD EyhmMDRjNjc1OWY0MGZlZjZmOTFlMzhiM2M4YjY3NTRhMzQ1NzE1ZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbeJNmLHAnkLGgnz7nSLSIcXbnN4 H4or4vKXbQg/icd4bTrRbM/zEJUSflVqtT34YDG3fpUNxGhnzDAYeH7NT1NOJ90b hB9ra6rk+zzuqROJW4mFKh4KoBdVQOn4AMOV2kJVlMyj/JPUxIlz4Lgy9xorSega TBTbWkrS8mpdSGM27PuA9vN8OBVxIhaIpPFtwKoy4/gWdQu0vIkFpg58PZyCrU5O F8rAhJhfa+Zll0zshpJxnIBxwNeCuoKaHj9mK+W+WoZthjIC3bZPs12CJ3BLEShS ndt3pNCtInjc/a7lpAy33AbPR90AeZrL6Lp/kWCeZvAJzQpql74ofadv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBMZ1n0D+9vkeOLPItnVKNFcV/tMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY73uoTu ny7HjhG/+JTfha9DO2bZQnyDFF836uDRja08egEcxc72/B5DTgSW5KQ9GUeojacB BIRhkqdfGFWi/VVLcMi7rMW/JJpJeNjsoRlP0OXfpg0w3TSupxqwp4EqSK8IXHFO SsmXEGcOE5fXJiDEsuhrq6kQmKoqd8OnzLBW1eoOHiIX36VaNBSooxPOIecgWjre Z9BSLLYaccZM86Q/NWKT3r73edSV6/Puorw0JOPt/ME324Tb7lykOomZOLgmqzZe KhC1itR2Z1eaxBYY3MWlOiMx14qpHu7ay0R3W+aeI0YzEEoTnNS8jsu6J6+AqwJR 1xmvfR+fkQCw/w== -----END CERTIFICATE-----Generated at Tue Sep 9 08:13:57 2025 by rpki-client