$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: 39Vbsth3wDRfZMFkcbDoK9aEELtW7bPfsLxkBfmbSCc= Subject key identifier: 59:1D:86:F0:54:57:7B:D0:65:13:C9:26:A5:E8:E3:C2:8E:A7:69:C3 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019A08253043AD6B672397D2ED204E88ADE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 17F1 Signing time: Tue 21 Oct 2025 19:00:46 +0000 Manifest this update: Tue 21 Oct 2025 19:00:46 +0000 Manifest next update: Wed 22 Oct 2025 19:00:46 +0000 Files and hashes: 1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=) 2: 0t-N62F11L22RXi8LFNfQS2TvDQ.roa (hash: fZ442BH/ml9qRqaBuzjKJulrHPDUDH1jI4JlwuQOcx8=) 3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=) 4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=) 5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=) 6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=) 7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: ZcahiHhHJ9rwAOsPdpBFjytES5ih3iReKIrgxsKvkSo=) 8: D8-tg2HFfaxtzWtLFVQ2_Tw33X4.roa (hash: W0yzlxsbtTJh4rdHCOnewjEeTldRIygMs+3n84CIFt0=) 9: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=) 10: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=) 11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=) 12: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=) 13: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=) 14: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=) 15: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:08:25:30:43:ad:6b:67:23:97:d2:ed:20:4e:88:ad:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Oct 21 19:00:46 2025 GMT Not After : Oct 22 19:00:46 2025 GMT Subject: CN=591d86f054577bd06513c926a5e8e3c28ea769c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:30:bf:a2:70:4e:93:0e:1f:e5:ff:9f:7f: ea:d8:f3:6c:f1:39:74:f8:4d:59:21:8f:23:cf:67: 51:e8:1d:48:ea:63:ae:0f:3d:c2:f5:ac:93:f5:b6: 53:19:81:ed:a0:07:9b:51:83:bf:2c:06:ec:42:b6: f6:c6:81:54:96:01:1f:ae:d4:53:68:6a:3f:ed:9c: de:cf:1d:b8:dd:29:af:7b:d6:bd:58:0c:4f:7b:72: e9:f9:ad:d7:72:d9:1c:c4:f7:68:4e:07:cd:3e:c0: 33:d9:b6:26:1b:15:16:53:3f:da:65:0a:d2:cc:8e: 7c:cc:19:76:00:a9:5c:02:e2:84:4d:f7:a7:42:dc: 79:db:a1:86:7b:c9:b5:d1:b0:98:7f:dc:11:d2:4c: f3:3a:a7:5f:c6:86:93:0f:4e:ff:67:82:a8:1d:2b: 32:7b:d2:0a:f0:7d:f6:25:8f:38:92:11:1a:f1:79: 09:d5:96:f2:8b:e0:e4:21:fd:ee:35:4a:1f:4e:b7: 69:08:92:67:fe:ea:96:18:fd:00:b2:86:e5:42:48: b1:03:85:f8:07:e9:22:e5:d7:97:5c:ce:61:43:bd: ba:bc:3a:ae:3d:f3:fb:bf:bd:e5:46:79:de:2a:00: 7d:89:07:9d:cc:9c:9d:cb:74:d5:54:dd:e5:0a:eb: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1D:86:F0:54:57:7B:D0:65:13:C9:26:A5:E8:E3:C2:8E:A7:69:C3 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5f:72:65:ea:fa:9e:8f:cf:90:8f:e7:6d:76:3e:34:42:a3: 8d:a8:40:92:fc:9f:08:92:3f:ed:d6:e3:54:15:e3:f0:69:77: e4:1c:e7:c1:8e:c9:21:d3:00:35:f3:6a:dd:87:0a:33:a6:8d: 0a:72:89:ce:06:25:cf:32:f1:91:ad:6d:6c:a8:72:27:d5:9b: 4a:72:70:bf:d6:64:92:bb:a8:3f:89:75:b4:fd:ca:1a:95:cd: 8e:d8:93:41:90:8b:e0:6a:5e:12:46:6d:1c:e3:17:83:eb:87: 22:d8:a3:97:e6:5b:ff:ba:9e:e0:3b:c5:7e:55:5d:e1:fd:e5: 75:11:8a:43:b3:e4:21:f7:b8:62:93:b5:54:bc:c7:b4:7b:4a: bb:b6:f7:35:22:77:1f:55:c3:92:a4:02:41:24:99:01:3e:bb: a6:f6:34:37:f3:a1:0c:e9:26:25:81:cf:2d:be:2c:d7:2a:bf: 48:27:16:74:8d:07:e3:42:65:b5:f8:07:45:9c:53:69:a1:34: be:98:5f:5d:cb:b3:4e:16:af:ee:4d:9f:cf:92:4f:55:b0:e3: 25:6f:e5:fb:9b:92:88:6a:46:b6:2f:10:74:9a:51:e8:ae:78: 17:ab:4f:c7:ac:aa:9a:ed:04:30:c8:eb:ac:82:7e:38:63:df: 6c:c5:ac:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoIJTBDrWtnI5fS7SBOiK3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjUxMDIxMTkwMDQ2WhcNMjUxMDIyMTkwMDQ2WjAzMTEwLwYDVQQD Eyg1OTFkODZmMDU0NTc3YmQwNjUxM2M5MjZhNWU4ZTNjMjhlYTc2OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVQwv6JwTpMOH+X/n3/q2PNs8Tl0 +E1ZIY8jz2dR6B1I6mOuDz3C9ayT9bZTGYHtoAebUYO/LAbsQrb2xoFUlgEfrtRT aGo/7Zzezx243Smve9a9WAxPe3Lp+a3XctkcxPdoTgfNPsAz2bYmGxUWUz/aZQrS zI58zBl2AKlcAuKETfenQtx526GGe8m10bCYf9wR0kzzOqdfxoaTD07/Z4KoHSsy e9IK8H32JY84khEa8XkJ1Zbyi+DkIf3uNUofTrdpCJJn/uqWGP0AsoblQkixA4X4 B+ki5deXXM5hQ726vDquPfP7v73lRnneKgB9iQedzJydy3TVVN3lCus+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkdhvBUV3vQZRPJJqXo48KOp2nDMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll9yZer6 no/PkI/nbXY+NEKjjahAkvyfCJI/7dbjVBXj8Gl35BznwY7JIdMANfNq3YcKM6aN CnKJzgYlzzLxka1tbKhyJ9WbSnJwv9ZkkruoP4l1tP3KGpXNjtiTQZCL4GpeEkZt HOMXg+uHItijl+Zb/7qe4DvFflVd4f3ldRGKQ7PkIfe4YpO1VLzHtHtKu7b3NSJ3 H1XDkqQCQSSZAT67pvY0N/OhDOkmJYHPLb4s1yq/SCcWdI0H40JltfgHRZxTaaE0 vphfXcuzThav7k2fz5JPVbDjJW/l+5uSiGpGti8QdJpR6K54F6tPx6yqmu0EMMjr rIJ+OGPfbMWsuw== -----END CERTIFICATE-----Generated at Tue Oct 21 23:38:00 2025 by rpki-client