$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json) Hash identifier: 9rhCt6X4QSBoHkLgek+X8I7EdAE9TVRkM9ReNgTIuZM= Subject key identifier: FB:F8:69:98:86:01:9E:5E:8F:00:49:B1:33:D1:EC:65:89:F3:F2:40 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019860C94BF2DDAF5EF1361F10B72D46B2D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft Manifest number: 1612 Signing time: Thu 31 Jul 2025 14:01:01 +0000 Manifest this update: Thu 31 Jul 2025 14:01:01 +0000 Manifest next update: Fri 01 Aug 2025 14:01:01 +0000 Files and hashes: 1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=) 2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=) 3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=) 4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: QrCjoJWBtnzpbqdYAkN4fZ3fR+a1OpT/cqr0xQhkZ98=) 5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=) 6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=) 7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=) 8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=) 9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=) 10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=) 11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=) 12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=) 13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=) 14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=) 15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=) 16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=) 17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=) 18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 Aug 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:60:c9:4b:f2:dd:af:5e:f1:36:1f:10:b7:2d:46:b2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jul 31 14:01:01 2025 GMT Not After : Aug 1 14:01:01 2025 GMT Subject: CN=fbf8699886019e5e8f0049b133d1ec6589f3f240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:3a:90:b6:2a:31:0c:0c:ed:69:41:7a:dc: 50:49:18:23:c0:77:98:09:ac:79:18:b9:be:3c:de: c5:1c:73:1b:c1:ee:a2:d6:cb:69:13:f8:b0:de:a0: 6c:75:4e:54:16:fa:4a:45:70:33:55:fd:f7:43:cf: 81:f7:f6:8b:b8:1c:70:59:3e:14:5b:ac:87:af:c4: 22:a7:9f:bd:f2:7f:9b:cc:e0:e7:19:9e:f8:bf:a0: 3c:7d:ff:7b:bb:cb:1e:c7:1b:16:34:05:7b:68:f6: dc:91:b0:1a:ee:84:89:5a:bb:5d:2c:bd:8f:3c:2d: 96:b9:2e:4b:39:23:dc:14:36:63:a6:c4:bd:8a:5b: 79:e6:db:0f:b4:1b:ba:6a:0d:12:a6:cc:79:59:21: 31:50:24:64:1a:77:33:a5:1c:ae:4a:05:71:d5:10: e1:ac:35:3c:b3:cc:a2:a7:aa:71:04:39:78:55:37: b8:2c:68:d8:35:4e:19:aa:2f:0b:ad:98:2d:b1:7e: 89:e4:fe:bd:2f:83:03:98:4e:39:49:be:ad:53:cd: e3:9f:b7:5f:16:c5:26:36:61:c6:9f:19:63:ac:9d: 11:58:98:35:3e:fa:69:95:81:91:38:a4:2f:29:8f: 8c:19:ed:e4:36:59:1f:9e:bb:78:3c:5a:63:d9:fd: db:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:69:98:86:01:9E:5E:8F:00:49:B1:33:D1:EC:65:89:F3:F2:40 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2a:56:d3:2f:95:3e:ab:47:62:9a:74:6d:55:a3:d6:6d:ca: 9b:b5:2b:f1:66:0c:8a:44:34:01:17:ce:72:f7:f2:92:1c:46: c7:1c:b7:63:bc:cc:7a:3e:0d:1a:a4:e3:04:de:5f:1a:9f:b3: be:7a:fc:f1:d6:e9:3a:d2:4f:b6:30:a2:30:2e:c3:7a:57:b3: 15:93:05:08:8c:95:9e:fa:21:af:dc:19:87:f1:1a:ca:8b:c3: 17:19:b6:87:55:2a:d5:c2:af:05:fd:b5:e1:14:4d:f7:04:aa: f5:91:d7:59:b9:b8:42:8a:a0:c6:17:d3:b2:d9:65:20:f1:22: 56:0e:eb:50:1e:27:e9:67:13:8b:45:66:67:0d:e8:b0:61:0f: 54:cc:1c:94:39:39:24:05:ce:70:88:2e:1c:b6:d4:2d:6f:35: 11:e0:66:73:40:26:b0:11:70:11:d7:34:35:83:a1:77:88:b8: 83:64:56:71:b8:a9:83:b0:b2:fa:34:0e:4b:dd:ea:2f:78:ac: 3d:76:1a:84:bf:05:5a:9a:71:84:a1:4d:8a:d6:9b:09:de:c3: 05:36:cb:cc:3b:4b:41:a7:bf:79:63:9b:b8:e1:9b:28:6a:6e: 96:b2:9a:7d:cd:92:a0:a0:f8:9b:f7:e9:13:3f:8e:b8:15:98: ac:d4:ed:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhgyUvy3a9e8TYfELctRrLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjUwNzMxMTQwMTAxWhcNMjUwODAxMTQwMTAxWjAzMTEwLwYDVQQD EyhmYmY4Njk5ODg2MDE5ZTVlOGYwMDQ5YjEzM2QxZWM2NTg5ZjNmMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tA6kLYqMQwM7WlBetxQSRgjwHeY Cax5GLm+PN7FHHMbwe6i1stpE/iw3qBsdU5UFvpKRXAzVf33Q8+B9/aLuBxwWT4U W6yHr8Qip5+98n+bzODnGZ74v6A8ff97u8sexxsWNAV7aPbckbAa7oSJWrtdLL2P PC2WuS5LOSPcFDZjpsS9ilt55tsPtBu6ag0Spsx5WSExUCRkGnczpRyuSgVx1RDh rDU8s8yip6pxBDl4VTe4LGjYNU4Zqi8LrZgtsX6J5P69L4MDmE45Sb6tU83jn7df FsUmNmHGnxljrJ0RWJg1PvpplYGROKQvKY+MGe3kNlkfnrt4PFpj2f3bAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPv4aZiGAZ5ejwBJsTPR7GWJ8/JAMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCpW0y+V PqtHYpp0bVWj1m3Km7Ur8WYMikQ0ARfOcvfykhxGxxy3Y7zMej4NGqTjBN5fGp+z vnr88dbpOtJPtjCiMC7DelezFZMFCIyVnvohr9wZh/EayovDFxm2h1Uq1cKvBf21 4RRN9wSq9ZHXWbm4QoqgxhfTstllIPEiVg7rUB4n6WcTi0VmZw3osGEPVMwclDk5 JAXOcIguHLbULW81EeBmc0AmsBFwEdc0NYOhd4i4g2RWcbipg7Cy+jQOS93qL3is PXYahL8FWppxhKFNitabCd7DBTbLzDtLQae/eWObuOGbKGpulrKafc2SoKD4m/fp Ez+OuBWYrNTt3Q== -----END CERTIFICATE-----Generated at Thu Jul 31 20:06:46 2025 by rpki-client