$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: nzHCPsTqGgy5yMYgos5nQd5v2wx2pwDDTZb+Ynsk0gg= Subject key identifier: BD:A9:1E:DD:B5:8B:A5:FD:CC:F8:FC:F7:A9:14:9B:CD:B5:B4:4A:76 Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 01991F1DA29A17AD45FF4EDFD7A9DBAB80B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 0E7E Signing time: Sat 06 Sep 2025 13:00:59 +0000 Manifest this update: Sat 06 Sep 2025 13:00:59 +0000 Manifest next update: Sun 07 Sep 2025 13:00:59 +0000 Files and hashes: 1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=) 2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=) 3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: zs2QsGi5lx7MrK2VLI6TsHWHd1uQOv9TD9RAV+CtTx0=) 4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=) 5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=) 6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=) 7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=) 8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=) 9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=) 10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=) 11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=) 12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=) 13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=) 14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=) 15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 11:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1f:1d:a2:9a:17:ad:45:ff:4e:df:d7:a9:db:ab:80:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Sep 6 13:00:59 2025 GMT Not After : Sep 7 13:00:59 2025 GMT Subject: CN=bda91eddb58ba5fdccf8fcf7a9149bcdb5b44a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:24:e3:3d:dd:11:1b:de:40:c9:99:39:0a: 03:1c:77:4d:e4:8d:09:e5:c8:45:68:7b:90:d4:33: 1d:4b:19:93:bc:9b:23:66:8b:79:7c:aa:49:e0:4e: a4:f4:19:be:59:56:6e:72:f0:26:c2:b3:31:97:bf: b7:1f:18:20:9b:82:70:17:91:9d:36:21:2d:00:9d: c2:3d:99:a9:f2:ed:e7:41:b1:f1:bd:83:57:c7:78: 82:6a:43:7a:b9:87:b4:52:5f:29:d3:bf:05:7d:21: 79:5f:20:d3:f3:c3:cd:28:7a:07:6f:8a:2c:fc:13: dc:5f:7c:16:b4:ca:ee:1c:40:74:e6:2a:eb:ba:a8: af:00:30:6d:41:b1:74:ff:ce:23:ca:cf:17:8a:41: cc:8f:f6:9c:ba:8e:70:ae:d4:63:2a:ff:f3:dd:07: 1b:04:92:48:79:42:58:60:2d:86:e5:01:c2:44:d1: 11:a4:c4:e5:15:2f:d3:20:c9:c2:c8:6c:ce:ec:7e: d0:86:07:36:a4:56:4c:df:06:1d:fa:46:38:e7:c1: 5c:9d:9f:2c:99:2e:3c:bd:e6:53:1b:fc:6d:cc:c8: 49:0f:7e:bf:9b:fb:67:f8:51:1c:09:2a:10:c1:28: 1a:3b:9f:3f:79:84:18:d2:b7:4e:ba:13:3c:27:77: e7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A9:1E:DD:B5:8B:A5:FD:CC:F8:FC:F7:A9:14:9B:CD:B5:B4:4A:76 X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9f:bb:f7:1c:0b:c1:3b:a7:eb:b5:f3:c2:11:cd:9a:19:5e: 77:fb:82:5c:bc:e9:71:03:8c:84:19:cd:cf:a6:e6:62:25:d7: 9e:d7:5e:eb:65:0b:21:35:44:45:4c:50:5c:ee:f7:f5:b0:61: 6a:de:5f:86:5d:d2:44:d5:7f:53:20:13:20:fc:dc:bf:93:e9: d8:da:cd:c3:a1:fa:01:f2:e5:3f:3c:d7:8a:80:de:56:a1:92: a4:66:5c:0f:71:57:af:f4:57:ee:25:48:2d:37:44:f5:0e:99: 1a:95:b0:b9:52:b6:87:ab:88:5a:59:af:1b:ed:39:98:b7:a7: 2f:b0:a4:ac:c8:c0:4d:3f:a8:ae:67:c5:5d:83:e6:ca:59:be: dd:64:54:30:1e:83:ec:1b:1b:aa:10:49:f2:df:37:b0:f6:d2: 3b:03:37:52:b4:29:53:eb:49:17:fc:5a:30:e8:cd:ff:b7:31: 18:36:0a:46:5a:a7:53:33:99:30:63:9c:7e:5b:44:44:f3:33: 41:be:7f:35:40:c1:9b:c8:b0:67:38:8d:07:fa:25:82:51:5b: e9:1c:6e:a5:8b:8b:92:c6:55:7f:fa:d2:09:c1:dd:f8:25:5a: c1:30:c6:6d:55:b2:4b:ed:f8:75:a9:aa:e6:03:c5:44:2a:58: f6:54:ea:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkfHaKaF61F/07f16nbq4C1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjUwOTA2MTMwMDU5WhcNMjUwOTA3MTMwMDU5WjAzMTEwLwYDVQQD EyhiZGE5MWVkZGI1OGJhNWZkY2NmOGZjZjdhOTE0OWJjZGI1YjQ0YTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2gk4z3dERveQMmZOQoDHHdN5I0J 5chFaHuQ1DMdSxmTvJsjZot5fKpJ4E6k9Bm+WVZucvAmwrMxl7+3Hxggm4JwF5Gd NiEtAJ3CPZmp8u3nQbHxvYNXx3iCakN6uYe0Ul8p078FfSF5XyDT88PNKHoHb4os /BPcX3wWtMruHEB05irruqivADBtQbF0/84jys8XikHMj/acuo5wrtRjKv/z3Qcb BJJIeUJYYC2G5QHCRNERpMTlFS/TIMnCyGzO7H7Qhgc2pFZM3wYd+kY458FcnZ8s mS48veZTG/xtzMhJD36/m/tn+FEcCSoQwSgaO58/eYQY0rdOuhM8J3fnMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2pHt21i6X9zPj896kUm821tEp2MB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJ+79xwL wTun67XzwhHNmhled/uCXLzpcQOMhBnNz6bmYiXXntde62ULITVERUxQXO739bBh at5fhl3SRNV/UyATIPzcv5Pp2NrNw6H6AfLlPzzXioDeVqGSpGZcD3FXr/RX7iVI LTdE9Q6ZGpWwuVK2h6uIWlmvG+05mLenL7CkrMjATT+ormfFXYPmylm+3WRUMB6D 7BsbqhBJ8t83sPbSOwM3UrQpU+tJF/xaMOjN/7cxGDYKRlqnUzOZMGOcfltERPMz Qb5/NUDBm8iwZziNB/olglFb6RxupYuLksZVf/rSCcHd+CVawTDGbVWyS+34damq 5gPFRCpY9lTqkg== -----END CERTIFICATE-----Generated at Sat Sep 6 15:08:32 2025 by rpki-client