$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: VZ3XVRUZJC6toxuzkHHSBRPyK/TLeau0/TuW2DdC8/E= Subject key identifier: 36:96:50:04:05:16:C9:55:C7:ED:14:4F:FB:DD:84:6D:F3:86:F6:20 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019916BF49FA655A5DFD925160C4AED9A8E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 1774 Signing time: Thu 04 Sep 2025 22:00:59 +0000 Manifest this update: Thu 04 Sep 2025 22:00:59 +0000 Manifest next update: Fri 05 Sep 2025 22:00:59 +0000 Files and hashes: 1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=) 2: 0t-N62F11L22RXi8LFNfQS2TvDQ.roa (hash: fZ442BH/ml9qRqaBuzjKJulrHPDUDH1jI4JlwuQOcx8=) 3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=) 4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=) 5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=) 6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=) 7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: Ri8ljncyrFwliM9OfvBfuh84CXNubsG40wr0o8ca8G0=) 8: D8-tg2HFfaxtzWtLFVQ2_Tw33X4.roa (hash: W0yzlxsbtTJh4rdHCOnewjEeTldRIygMs+3n84CIFt0=) 9: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=) 10: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=) 11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=) 12: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=) 13: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=) 14: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=) 15: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Sep 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:16:bf:49:fa:65:5a:5d:fd:92:51:60:c4:ae:d9:a8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Sep 4 22:00:59 2025 GMT Not After : Sep 5 22:00:59 2025 GMT Subject: CN=369650040516c955c7ed144ffbdd846df386f620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e5:b4:a2:e3:88:fd:4a:de:73:42:15:83:56: 5f:1c:2c:40:d3:f6:8a:1a:bf:c1:7e:af:ba:3f:91: 78:f5:8a:34:a9:9e:ef:9d:d5:92:eb:ca:12:2d:49: bf:dd:4c:d9:c2:63:1c:ae:b9:47:47:8d:b5:44:a3: ca:06:54:4b:aa:4f:da:85:4c:08:9d:7d:34:93:53: 6e:ee:00:21:74:45:39:0d:ea:4c:1a:bc:7c:9b:1d: cf:17:14:3b:1c:f8:14:23:48:5c:16:81:41:ad:25: b3:80:29:fd:2f:7c:6e:6b:95:93:b3:93:c1:ca:41: 7f:84:5a:54:7e:07:5e:8f:ed:55:8f:1b:9d:f7:49: cd:7b:ac:1b:33:eb:02:de:b6:e6:3b:73:9c:28:1e: a5:c5:1c:b1:12:be:6c:ed:ca:29:94:9b:66:04:b9: 45:f4:d5:2e:61:11:e1:0f:f7:42:dd:dd:16:f8:dd: 2a:d8:17:23:6e:6f:11:da:c4:d0:31:37:80:b6:16: fb:c2:80:d9:3d:c9:0e:5c:fc:c2:55:19:9e:76:c5: fe:da:26:a1:4d:46:1d:d0:a0:19:a1:b3:37:84:f8: de:50:07:0e:c0:48:f5:4b:23:5f:24:b3:10:c3:ad: 37:ff:7f:c8:d1:32:2d:d6:d6:7f:2f:17:39:c7:6b: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:96:50:04:05:16:C9:55:C7:ED:14:4F:FB:DD:84:6D:F3:86:F6:20 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7a:fc:11:8a:94:7b:0a:0a:86:39:58:f2:37:08:85:ae:61: 57:47:fa:53:74:92:6c:bf:df:fd:70:ba:a1:16:c2:76:57:15: 7c:ea:03:8b:76:08:c9:6f:2f:2c:0f:49:0e:29:34:c8:54:66: be:fe:26:ea:31:61:60:ce:06:09:f3:fd:a6:ff:1d:19:ef:55: 17:2a:db:72:03:e8:ab:9e:74:10:d2:41:22:de:44:c1:34:1f: 2c:21:ed:3c:eb:8f:7d:2b:4f:69:1b:82:ae:2d:7f:b9:9e:4e: e6:90:b8:c4:07:4b:92:f1:d0:e3:92:10:70:ce:99:42:d0:89: 35:57:74:ba:59:e9:75:c5:a3:5f:0e:02:76:1a:79:af:96:17: f0:88:20:b3:55:66:f7:08:d3:b3:63:0e:02:43:a2:d7:40:bc: 5d:9b:d1:90:33:5b:df:f6:fc:18:12:bb:eb:74:8b:64:dd:55: f1:dd:29:96:9a:5d:c0:5c:17:de:04:1d:83:b0:06:67:12:e3: 96:97:67:d6:96:04:ed:d9:8e:84:11:39:0a:c2:e9:33:ed:87: bf:f7:19:8c:b8:f9:74:46:10:c2:82:98:58:63:68:44:3f:f8: 37:64:63:df:71:bb:fe:c4:e2:03:f9:73:95:49:3a:c3:5f:40: 11:5a:a5:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkWv0n6ZVpd/ZJRYMSu2ajlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjUwOTA0MjIwMDU5WhcNMjUwOTA1MjIwMDU5WjAzMTEwLwYDVQQD EygzNjk2NTAwNDA1MTZjOTU1YzdlZDE0NGZmYmRkODQ2ZGYzODZmNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+W0ouOI/Urec0IVg1ZfHCxA0/aK Gr/Bfq+6P5F49Yo0qZ7vndWS68oSLUm/3UzZwmMcrrlHR421RKPKBlRLqk/ahUwI nX00k1Nu7gAhdEU5DepMGrx8mx3PFxQ7HPgUI0hcFoFBrSWzgCn9L3xua5WTs5PB ykF/hFpUfgdej+1Vjxud90nNe6wbM+sC3rbmO3OcKB6lxRyxEr5s7coplJtmBLlF 9NUuYRHhD/dC3d0W+N0q2Bcjbm8R2sTQMTeAthb7woDZPckOXPzCVRmedsX+2iah TUYd0KAZobM3hPjeUAcOwEj1SyNfJLMQw603/3/I0TIt1tZ/Lxc5x2uwPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaWUAQFFslVx+0UT/vdhG3zhvYgMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHr8EYqU ewoKhjlY8jcIha5hV0f6U3SSbL/f/XC6oRbCdlcVfOoDi3YIyW8vLA9JDik0yFRm vv4m6jFhYM4GCfP9pv8dGe9VFyrbcgPoq550ENJBIt5EwTQfLCHtPOuPfStPaRuC ri1/uZ5O5pC4xAdLkvHQ45IQcM6ZQtCJNVd0ulnpdcWjXw4Cdhp5r5YX8Iggs1Vm 9wjTs2MOAkOi10C8XZvRkDNb3/b8GBK763SLZN1V8d0plppdwFwX3gQdg7AGZxLj lpdn1pYE7dmOhBE5CsLpM+2Hv/cZjLj5dEYQwoKYWGNoRD/4N2Rj33G7/sTiA/lz lUk6w19AEVqlEA== -----END CERTIFICATE-----Generated at Fri Sep 5 06:21:34 2025 by rpki-client