$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: nDk8h47OOi0Yo05u8eI0ymXtdf8CP8CI3NkRBYDCh0M= Subject key identifier: 43:29:ED:D1:2B:E6:CF:89:74:F0:BE:CA:D9:CF:D8:30:B5:CB:B9:16 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019767A94C6EA36656289ACD6AC707697003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1591 Signing time: Fri 13 Jun 2025 05:00:37 +0000 Manifest this update: Fri 13 Jun 2025 05:00:37 +0000 Manifest next update: Sat 14 Jun 2025 05:00:37 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: CRaMyZX8mW5OemEAbWXgunGLUKtqDJncVZxhSfmKjAk=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:67:a9:4c:6e:a3:66:56:28:9a:cd:6a:c7:07:69:70:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jun 13 05:00:37 2025 GMT Not After : Jun 14 05:00:37 2025 GMT Subject: CN=4329edd12be6cf8974f0becad9cfd830b5cbb916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:5f:27:9d:f6:47:34:dd:9e:d9:38:aa:a1: 93:80:ac:2f:7d:ad:42:70:90:da:da:08:fe:47:c7: cc:3b:82:31:8a:97:09:de:0e:54:79:76:7a:ea:9a: 85:98:df:a3:1b:26:5a:2a:11:4e:7f:4d:82:3b:20: da:56:08:67:a3:8b:c9:9d:ad:e7:00:f8:89:73:db: 3b:2e:46:89:d5:1c:29:eb:db:04:53:ea:86:66:0a: 7f:df:2c:46:56:61:66:34:c5:81:83:59:00:f7:b0: 4e:ec:db:bc:d6:79:56:65:08:bd:78:fb:45:da:3e: c9:e2:c8:49:d4:05:c5:66:0b:0b:5a:20:73:d5:6b: 00:00:d8:c0:6b:74:af:1d:de:4b:f5:c3:78:4f:06: 44:dd:62:b3:02:38:cb:f7:71:49:70:0e:00:8d:0b: f6:46:6c:68:2c:a3:84:9c:1a:1d:04:a3:6f:f0:32: 09:14:42:3b:fc:79:bf:05:e7:7f:e0:ac:91:d2:a7: b3:28:15:ca:1a:34:55:87:5a:25:77:56:f1:ea:65: cb:39:52:94:af:a1:11:75:d4:bc:8a:f7:cc:4c:18: 17:2f:26:7e:5f:c1:1a:61:db:ac:34:a2:7f:7f:9b: 79:31:ca:2d:cf:30:1e:c2:b1:09:fd:1c:78:11:09: 95:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:29:ED:D1:2B:E6:CF:89:74:F0:BE:CA:D9:CF:D8:30:B5:CB:B9:16 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:d8:32:36:a8:ca:0e:51:4f:71:a9:92:0a:3f:fd:8a:33:70: f3:3b:3a:31:bd:bf:15:71:e8:da:c6:f3:cf:e0:bf:38:02:57: 5d:df:c4:53:ef:de:5f:ce:89:01:bb:d8:b2:de:f7:9f:16:a5: 50:a4:91:03:65:06:98:61:62:7a:15:09:a1:dc:2c:2c:a6:53: 84:3f:68:19:f8:ce:de:65:5f:cb:85:dd:a4:94:ae:e5:a5:af: cb:1d:d3:3d:db:76:ea:9a:58:11:ae:23:80:02:53:ee:ef:24: 82:8b:76:a9:06:ba:08:a7:ca:4a:37:43:c7:a0:51:94:89:0c: 6a:21:f0:f8:5f:c0:a4:c8:18:d3:69:43:66:bd:ed:24:54:a2: ac:39:1a:12:a8:00:e6:fb:6a:00:d4:cd:3e:e5:43:8a:05:7b: 3b:b6:d8:9d:4f:b7:2f:45:87:e1:52:a5:05:46:b4:a4:f8:51: eb:8e:e8:9c:a3:f3:6a:b0:48:54:69:e0:3e:e3:ed:77:75:52: 2e:f0:f6:1c:72:56:d3:26:57:6d:31:e0:79:af:cf:3c:a0:b5: 08:de:19:03:d8:12:26:c5:81:b2:aa:5f:96:b8:76:49:d3:ee: 37:c5:69:40:75:af:9d:e6:1a:c7:93:13:b5:79:2d:78:c8:98: 89:a2:70:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdnqUxuo2ZWKJrNascHaXADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUwNjEzMDUwMDM3WhcNMjUwNjE0MDUwMDM3WjAzMTEwLwYDVQQD Eyg0MzI5ZWRkMTJiZTZjZjg5NzRmMGJlY2FkOWNmZDgzMGI1Y2JiOTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAVfJ532RzTdntk4qqGTgKwvfa1C cJDa2gj+R8fMO4IxipcJ3g5UeXZ66pqFmN+jGyZaKhFOf02COyDaVghno4vJna3n APiJc9s7LkaJ1Rwp69sEU+qGZgp/3yxGVmFmNMWBg1kA97BO7Nu81nlWZQi9ePtF 2j7J4shJ1AXFZgsLWiBz1WsAANjAa3SvHd5L9cN4TwZE3WKzAjjL93FJcA4AjQv2 RmxoLKOEnBodBKNv8DIJFEI7/Hm/Bed/4KyR0qezKBXKGjRVh1old1bx6mXLOVKU r6ERddS8ivfMTBgXLyZ+X8EaYdusNKJ/f5t5McotzzAewrEJ/Rx4EQmV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMp7dEr5s+JdPC+ytnP2DC1y7kWMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedgyNqjK DlFPcamSCj/9ijNw8zs6Mb2/FXHo2sbzz+C/OAJXXd/EU+/eX86JAbvYst73nxal UKSRA2UGmGFiehUJodwsLKZThD9oGfjO3mVfy4XdpJSu5aWvyx3TPdt26ppYEa4j gAJT7u8kgot2qQa6CKfKSjdDx6BRlIkMaiHw+F/ApMgY02lDZr3tJFSirDkaEqgA 5vtqANTNPuVDigV7O7bYnU+3L0WH4VKlBUa0pPhR647onKPzarBIVGngPuPtd3VS LvD2HHJW0yZXbTHgea/PPKC1CN4ZA9gSJsWBsqpflrh2SdPuN8VpQHWvneYax5MT tXkteMiYiaJwOA== -----END CERTIFICATE-----Generated at Fri Jun 13 09:13:05 2025 by rpki-client