$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: zLw4pNqkXP+FBKiYmlSqDxQJUA7FGpN2ZMUvsWAPIV8= Subject key identifier: 84:2E:62:91:A1:ED:91:C3:F1:1D:04:DF:DB:F5:6F:64:28:A6:81:10 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 01991E786C8AC21D09E55F6E8AEF6C7111CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 13D1 Signing time: Sat 06 Sep 2025 10:00:32 +0000 Manifest this update: Sat 06 Sep 2025 10:00:32 +0000 Manifest next update: Sun 07 Sep 2025 10:00:32 +0000 Files and hashes: 1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=) 2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=) 3: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=) 4: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=) 5: 8SguPHIphMGnD7X3CTG_nndU6mE.roa (hash: Of38WddSvMyNlDKwk9utKdII5/SSSiTvKKiNw3Nm+mE=) 6: 9USzYLBawhQVkHZbF2gEbzhvC5s.roa (hash: gAEvHU7vjJHAyOa+y6y8BFG0zaydLqnsUXwSsV0Q83s=) 7: 9o1bJHIY2DKstOflrYyuB4_xDJU.roa (hash: v84lCLYd/0h8qh/tv6tRvbnV7bRzw3VazSaPX2e1ubo=) 8: BQ_7CRByLAUpF1evkSyLCrrovKE.roa (hash: uT3RGzji41/DL4m9M7hw+Zpz+kLpotb4EKSd9Zae5tA=) 9: CFhlrDajXf3prASuHUigrlnSiAU.roa (hash: S45pXkeadV6pfqDwvbXAapLz/gU90+zWr5XqA0RMwBY=) 10: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=) 11: I5aarYiM-goUW477Ov8AhLUgl5k.roa (hash: CgJlVudWPHeCj96sK9qKukfdq52UuVvM4VWhcidna2c=) 12: I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa (hash: 5OhiLGp3GkkcRYzG4tfq1G76vW7BOIqKJjeoc64Pt4o=) 13: MhM8AdXgoCd4zrzFUNyYeB1JwVg.roa (hash: x8CsV2gfv0T+wUL+aorX982fUJ/l+SVnwH0Xs0/jba0=) 14: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=) 15: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=) 16: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=) 17: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=) 18: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=) 19: t65dNvZ6mIPWzEgYcMlAUQutKR4.roa (hash: IJP/pC4d01Se7R3R057e96hfMZC2OpsCJpYV3fv+Wfw=) 20: uGhxQuJoiydmGBCdoiTuE4rnskY.roa (hash: cp9F2KjzrCdyiwYgQ04s2rnpm15FpJSYgYYNO9VL9i4=) 21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: 1dRXs/gVn/Nyj8yjvPViDbnG7WkkJ8h19TC1AKeisgU=) 22: w35GeF1NRVWkdgYrM-D2oVh4XKk.roa (hash: 0xzHuhqUOoAiP/Y6/IovF7/iSmc6xQ7Xmuv7ej0uOJ0=) 23: zJrytwhNn33RoSAoI5Qn10QSE6w.roa (hash: mDTA9dxPTeU4ZJWlcC8F4sxgrVofGKRa0HFyIp6VO+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1e:78:6c:8a:c2:1d:09:e5:5f:6e:8a:ef:6c:71:11:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Sep 6 10:00:32 2025 GMT Not After : Sep 7 10:00:32 2025 GMT Subject: CN=842e6291a1ed91c3f11d04dfdbf56f6428a68110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f1:0c:cc:94:12:af:06:76:7c:6b:7c:7b:e8: d3:74:12:49:67:dc:68:58:32:0d:7a:1d:81:04:33: 9c:5b:80:9e:9a:35:11:3c:13:ce:8d:2a:68:fa:e0: 52:60:1a:8e:c4:78:ae:f7:8c:45:fa:78:cb:94:e7: ab:21:b7:0a:7f:f6:5f:eb:68:31:40:c9:45:09:a6: ca:6b:b3:f9:05:7f:c0:7b:16:95:f5:d1:00:5a:bc: 76:9e:67:3a:d4:8e:3b:50:a3:05:54:30:cf:e1:18: 0a:f2:8e:35:f9:1e:80:7b:dd:90:44:e1:bb:4f:e5: 3b:69:76:24:5a:06:0e:08:7a:a5:7e:66:13:2d:bb: 01:5c:ea:7d:32:ec:c3:05:7b:60:f3:e1:a8:08:dd: f9:71:a0:76:d1:ae:ca:90:14:91:d8:cb:37:b4:33: 1a:c0:59:d0:13:30:f7:e0:61:2a:bc:0d:bc:25:d0: 56:e7:99:01:93:f1:b5:a3:0e:6c:b7:8d:2d:a3:95: 60:03:74:f5:80:14:f2:cd:36:cf:50:f0:95:b3:0e: e9:b9:79:7c:c8:5f:e2:7d:c2:a3:b0:61:67:26:ce: 44:ca:31:9a:92:ce:cc:db:21:71:a0:e2:83:d6:bb: 05:e8:2d:29:de:b4:fd:df:ee:5d:d9:80:fb:7d:bc: b3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2E:62:91:A1:ED:91:C3:F1:1D:04:DF:DB:F5:6F:64:28:A6:81:10 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3a:f2:67:06:78:fd:a2:8c:8c:47:17:c5:64:17:04:bc:09: d6:dd:57:ff:a3:ae:56:e4:02:6c:55:af:25:cd:09:1f:2e:54: 8d:b2:8c:1d:79:a9:94:d1:db:d1:2a:32:bd:26:ca:30:4a:51: 29:0f:dc:dd:6e:cf:ec:87:52:a7:cd:b2:0e:ef:9a:85:de:88: 76:22:17:3d:08:44:40:fa:76:fe:ef:3b:a0:98:2a:55:43:26: 0d:0f:1d:10:a0:87:ea:f1:b1:d1:33:5e:94:ba:08:14:8c:96: b9:4e:7c:27:ad:fc:ac:62:1e:00:63:4b:20:de:98:6d:e0:61: 12:ed:f7:ba:b4:03:9f:55:41:69:90:19:a4:07:7d:fb:9a:27: d5:cd:e1:79:17:a5:1d:1d:4f:dc:86:76:87:fe:5e:66:d5:83: f3:dd:d5:2b:63:c1:ba:f6:fd:cb:1d:3d:f2:c7:e5:f8:46:3d: 79:98:14:ab:07:da:0a:c2:18:75:96:07:df:11:d1:6f:2f:af: 54:e9:37:4a:be:14:54:8b:b2:2f:07:0b:cc:8c:ee:93:f5:04: 44:87:f2:74:f0:21:97:d3:d0:08:2c:d4:23:53:01:e6:cc:6e: c1:f3:33:0a:e8:57:e0:47:aa:f4:9d:2c:b8:47:38:4f:97:bc: 4f:09:70:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkeeGyKwh0J5V9uiu9scRHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUwOTA2MTAwMDMyWhcNMjUwOTA3MTAwMDMyWjAzMTEwLwYDVQQD Eyg4NDJlNjI5MWExZWQ5MWMzZjExZDA0ZGZkYmY1NmY2NDI4YTY4MTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPEMzJQSrwZ2fGt8e+jTdBJJZ9xo WDINeh2BBDOcW4CemjURPBPOjSpo+uBSYBqOxHiu94xF+njLlOerIbcKf/Zf62gx QMlFCabKa7P5BX/AexaV9dEAWrx2nmc61I47UKMFVDDP4RgK8o41+R6Ae92QROG7 T+U7aXYkWgYOCHqlfmYTLbsBXOp9MuzDBXtg8+GoCN35caB20a7KkBSR2Ms3tDMa wFnQEzD34GEqvA28JdBW55kBk/G1ow5st40to5VgA3T1gBTyzTbPUPCVsw7puXl8 yF/ifcKjsGFnJs5EyjGaks7M2yFxoOKD1rsF6C0p3rT93+5d2YD7fbyzGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQuYpGh7ZHD8R0E39v1b2QopoEQMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjryZwZ4 /aKMjEcXxWQXBLwJ1t1X/6OuVuQCbFWvJc0JHy5UjbKMHXmplNHb0SoyvSbKMEpR KQ/c3W7P7IdSp82yDu+ahd6IdiIXPQhEQPp2/u87oJgqVUMmDQ8dEKCH6vGx0TNe lLoIFIyWuU58J638rGIeAGNLIN6YbeBhEu33urQDn1VBaZAZpAd9+5on1c3heRel HR1P3IZ2h/5eZtWD893VK2PBuvb9yx098sfl+EY9eZgUqwfaCsIYdZYH3xHRby+v VOk3Sr4UVIuyLwcLzIzuk/UERIfydPAhl9PQCCzUI1MB5sxuwfMzCuhX4Eeq9J0s uEc4T5e8TwlwEA== -----END CERTIFICATE-----Generated at Sat Sep 6 12:38:12 2025 by rpki-client