$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: KFVj7k5sqj14UNwXctdfFmq+IXqkywYbvCYBR++bryc= Subject key identifier: 53:64:90:57:5F:D8:21:06:D7:14:52:8B:8F:24:72:CF:C4:6E:7B:43 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019A71EECD0FC43A7DDFC351B86781FA4B8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1724 Signing time: Tue 11 Nov 2025 08:01:06 +0000 Manifest this update: Tue 11 Nov 2025 08:01:06 +0000 Manifest next update: Wed 12 Nov 2025 08:01:06 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: zmlChvwUSp+yjfmR/+UFSShbcUDBDdRKEvd2f+s89bE=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 12 Nov 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:ee:cd:0f:c4:3a:7d:df:c3:51:b8:67:81:fa:4b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Nov 11 08:01:06 2025 GMT Not After : Nov 12 08:01:06 2025 GMT Subject: CN=536490575fd82106d714528b8f2472cfc46e7b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:73:53:e2:08:5e:d4:91:f6:ad:58:6b:c5: 66:0b:1b:70:58:28:c9:13:36:4a:f1:83:fb:e0:6d: b9:56:a5:84:21:d7:51:a3:81:3a:5f:0d:c7:7a:20: 4e:f6:c8:31:a4:63:2f:0a:03:cd:67:70:f4:4c:68: 29:f9:2b:c5:18:dc:c4:02:5d:69:01:be:eb:e3:26: 01:b8:f9:44:d8:ca:1d:db:27:4f:c2:65:88:09:6a: 6e:92:b0:02:e0:c2:b9:0c:e5:70:e0:05:36:34:fd: 4d:81:91:67:b8:70:5f:86:f1:99:1b:04:d0:e3:5e: db:dc:d0:c0:b5:92:d7:cf:bd:70:6e:00:4b:50:a3: fe:8f:e5:f0:9d:ac:0e:3e:92:fe:03:a3:6a:4f:20: 9c:3b:8c:af:30:64:4c:df:d1:0c:d6:19:f1:a3:53: 0d:f5:96:35:2a:cf:6a:fa:a5:2b:01:40:66:06:6c: 95:de:d1:84:27:d2:5a:fd:9f:8d:ee:fc:72:45:ce: 3d:43:68:10:25:6c:86:b9:df:4a:61:02:a4:a5:d8: d9:50:1a:02:fc:ad:29:5f:0c:95:f3:83:eb:52:aa: 39:e8:cb:db:dd:eb:fc:cf:4a:22:f4:9a:e4:a7:fa: a1:8f:3b:70:f2:38:c1:bb:67:df:e3:0e:9d:24:c6: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:64:90:57:5F:D8:21:06:D7:14:52:8B:8F:24:72:CF:C4:6E:7B:43 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dd:32:99:72:d2:10:43:f1:4a:33:a3:2e:8e:dc:88:0c:c7: 36:51:67:e8:33:97:0f:c3:5d:28:7e:e8:25:96:7b:a0:91:eb: d4:39:0f:75:55:d7:38:a2:de:18:6b:02:07:63:72:c0:73:f6: d1:e4:3c:20:8e:a6:f3:92:4b:67:c9:e4:0c:c5:db:6b:1f:ba: 5f:1f:55:46:f3:84:d5:08:c8:ab:34:29:a9:f0:e4:1d:2e:6c: da:09:c6:bf:19:1b:f6:42:0d:97:06:b9:aa:ee:c9:71:fc:6a: fa:0e:a4:e2:a2:07:8b:2d:7e:4e:14:e1:61:e4:d8:9b:77:b6: f1:34:5e:47:53:10:7a:06:84:5e:2c:c2:52:3c:f1:43:f9:7a: 5d:66:5b:d6:75:33:fa:64:e1:32:c3:41:e8:57:88:a5:a7:b7: 72:58:b5:af:bb:ce:35:2e:b8:d7:cf:13:ed:2b:36:e1:bf:9d: d3:a5:7f:02:b7:78:f6:c6:e2:56:09:69:81:24:46:25:f5:f3: d6:48:ed:2c:0c:69:93:86:e8:79:17:27:e9:0f:ea:2e:c6:e5: d7:2f:22:e0:4e:bf:f5:9b:a6:10:3d:59:6f:36:fd:fd:64:47: a6:6b:61:b7:c6:fb:dc:e3:ff:4f:89:3c:ff:c5:a0:ba:d7:b9: c7:ed:86:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpx7s0PxDp938NRuGeB+kuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUxMTExMDgwMTA2WhcNMjUxMTEyMDgwMTA2WjAzMTEwLwYDVQQD Eyg1MzY0OTA1NzVmZDgyMTA2ZDcxNDUyOGI4ZjI0NzJjZmM0NmU3YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJVzU+IIXtSR9q1Ya8VmCxtwWCjJ EzZK8YP74G25VqWEIddRo4E6Xw3HeiBO9sgxpGMvCgPNZ3D0TGgp+SvFGNzEAl1p Ab7r4yYBuPlE2Mod2ydPwmWICWpukrAC4MK5DOVw4AU2NP1NgZFnuHBfhvGZGwTQ 417b3NDAtZLXz71wbgBLUKP+j+XwnawOPpL+A6NqTyCcO4yvMGRM39EM1hnxo1MN 9ZY1Ks9q+qUrAUBmBmyV3tGEJ9Ja/Z+N7vxyRc49Q2gQJWyGud9KYQKkpdjZUBoC /K0pXwyV84PrUqo56Mvb3ev8z0oi9Jrkp/qhjztw8jjBu2ff4w6dJMbW3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNkkFdf2CEG1xRSi48kcs/EbntDMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe90ymXLS EEPxSjOjLo7ciAzHNlFn6DOXD8NdKH7oJZZ7oJHr1DkPdVXXOKLeGGsCB2NywHP2 0eQ8II6m85JLZ8nkDMXbax+6Xx9VRvOE1QjIqzQpqfDkHS5s2gnGvxkb9kINlwa5 qu7Jcfxq+g6k4qIHiy1+ThThYeTYm3e28TReR1MQegaEXizCUjzxQ/l6XWZb1nUz +mThMsNB6FeIpae3cli1r7vONS64188T7Ss24b+d06V/Ard49sbiVglpgSRGJfXz 1kjtLAxpk4boeRcn6Q/qLsbl1y8i4E6/9ZumED1Zbzb9/WRHpmtht8b73OP/T4k8 /8Wgute5x+2GEg== -----END CERTIFICATE-----Generated at Tue Nov 11 13:16:56 2025 by rpki-client