$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft File: bocQSk20xGNxp_i2pEH8MOzf4g8.mft (raw, json) Hash identifier: eGene6R6vR9BI5GecF4LnWTAKCzHGS9tRspn/66TsF8= Subject key identifier: 8F:BD:97:63:33:91:3A:42:79:02:34:BC:19:52:5C:3D:2A:30:92:E2 Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 01991CC170FF0B599F0BCD991EB8FBB6C843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft Manifest number: 065D Signing time: Sat 06 Sep 2025 02:01:03 +0000 Manifest this update: Sat 06 Sep 2025 02:01:03 +0000 Manifest next update: Sun 07 Sep 2025 02:01:03 +0000 Files and hashes: 1: 1lQ8gh9l3m3k0sNJU2OGXGi_s1M.roa (hash: cGP1padkbbQVYWoE/e/vrGnkmIgEvHGkoKHwvNi2i1Y=) 2: 3I5gldML-uQbyv9CkIBz-mgvWWk.roa (hash: eQaCI89QTy4mD37K4tNIxvLzbLgt03MOpzY9mO0sl3s=) 3: 3StlQJLBcPu1qxdEZ3JJOhm1Udg.roa (hash: iujEO2PTtn9nL8OTjRi898AzV+a2An7SXBq6YG65KaI=) 4: 52FAWMjukwSClkWfxKSDo4XBBoo.roa (hash: ypKj+SswxrhtvLkdDH0jGSwTM/p8FbWFW1TsPUqiZDY=) 5: 53-6v4txkTBlrr4mQ9BEOoOITGQ.roa (hash: /V7dlEX/iodJqJllmpCrS8JubIsPMm3gyCbsrYPAXNQ=) 6: 7xT-V2AfJ7cOEF-PLphwU7XPcF8.roa (hash: GxKtYKMpCX488B9i4qJSbSRlCLZBdKpoVEcbLS88GPw=) 7: DZEVG3s_YbDQv7uyGTLk5eEnBEc.roa (hash: vmmNG9wBUVs1bjs4kQtuxT15lN0hpOkAyVIAzMJ8j60=) 8: EQ2IvZUqnVn0lMaxD-2uyfZIE68.roa (hash: Qthm1o1lZVCkgyrZ5XiBtPb86SGLq9HwTrkWvzHtL+4=) 9: LztToIfHj5MPHP69zf_0q_SimrU.roa (hash: 0JPoHmLHmn9stIi7tg5FnXzBytZDbUKqcPQHQVNsAoU=) 10: Wz7uvxRJjmNbpMHXqyc5XIPjHYg.roa (hash: hYhipTaQ14gbpmM2CsGVDCplldw8XWpgCwk8ecMo+1k=) 11: Z0FuRe_3oJ_yWcDW6-1F-dZGvm8.roa (hash: xch+qAPR9QzGm1NgKYI8gVA4Qr0GtidJo5DTI17Jweo=) 12: ZbHp2Q0SQCE3MMYBAQ4MOMTgPEM.roa (hash: TQP4ZxqijWk9XzygHeIy2mb/KtPqcpn8/1/3cIo31Ss=) 13: _TpWPAgVzGQdAu8cjR2Dc6e9ZtA.roa (hash: rOZR+3np3EA3AflU2r578HJgACioxVlkiKkqQOW791k=) 14: bocQSk20xGNxp_i2pEH8MOzf4g8.crl (hash: Z/mHzNvosiJ8BCtfrHsvh30g7du9ABoQN+XTBv5XKz0=) 15: cCj87e869xFxifTftOqfvb6-2mo.roa (hash: bTsfeRR2v5VlvWqbaZbJaCthKlgXU0XAN9dl2IiSZuE=) 16: ckz8rqoc5X4WUxyhv3Kxg8VkWsk.roa (hash: 7S83sUKQXBMZe7VPFJaJQ8ERQa/kJSmK47Sjp9MOUBA=) 17: f017PzkxNN7Z5ETh0qCvv8t0lNo.roa (hash: RBBJWOHQn7zT4E3wUOt8OhgmQHDecS8xI1YeXa1Jnyc=) 18: hu0DNVNBS-52vImMrFag5xmRonA.roa (hash: S+JBIuGEFQfqRFNizmiIiEzsKVPxb9FoL2Uoi+rMdKU=) 19: kVb7Jw3eFm0rH_2hI_sFxpUe654.roa (hash: DhV0642v9bLRlCfdgD3Msa05srzFpUmzNDU1xI+EO2k=) 20: lkA5Va7IYiwu51AaeP4GUMUh7UE.roa (hash: /Zu4enZk5+JQNDPl22NC+bTj0qnkZzWb8K6ssL0z1co=) 21: pTFWP5ts7dNfHyhFc9nDm9T7Shk.roa (hash: KrXatMakUf7FEk5x5p0WIjNpbDIla1OfAVog24ZN1j0=) 22: pTWEmcxxbUcq7hN8YLy4UKx8H5o.roa (hash: NIjS07+RdWb042ouJdf2t90kSuPSNm0zpB6M3O7x/pg=) 23: rGOYtq_Thi1bHxPEPh_-1162hwE.roa (hash: sMSgNyPNu+dXEEK26rDJLJvw6klu2nxdHF72XJN9xsY=) 24: sYcIUF9JZUL8nalnP6guQpiQpFo.roa (hash: O15muEWAoO/BLk3AT82wezr5i9pcEWqA91vts9pFe9Q=) 25: sb2r06lxfTTfMKPVTEx0vt1r-0g.roa (hash: 5dDyMJ189GNvtSXAZ+TZwVb2T1qx9G0K1HzclsMu1P4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:c1:70:ff:0b:59:9f:0b:cd:99:1e:b8:fb:b6:c8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Sep 6 02:01:03 2025 GMT Not After : Sep 7 02:01:03 2025 GMT Subject: CN=8fbd976333913a42790234bc19525c3d2a3092e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:b7:40:7f:45:b8:20:b4:2f:b1:ca:f1:2d: 94:56:d2:6e:59:62:15:e2:8a:9b:4c:6a:fc:a7:59: 5f:78:82:78:5f:5e:2a:cc:b9:ac:ee:b7:a9:e1:1a: fd:d6:88:63:9a:e0:20:8c:0c:ef:53:dc:d4:f7:e2: 5f:57:e7:4f:3d:50:77:df:c6:85:52:5c:45:57:31: 82:0a:5e:67:8a:93:a4:a5:b1:6b:8e:e0:d9:8d:fd: 71:d6:93:b6:b3:e4:ea:bb:ed:65:a9:75:91:c9:e3: 3a:9f:91:d7:6e:a7:a8:09:de:84:28:69:72:98:84: d9:fb:49:fe:25:8a:0b:99:a3:27:25:31:21:e1:a3: 5c:e1:7d:40:39:a7:45:cf:f6:ca:0f:60:bc:b4:a2: 67:ec:c8:2f:33:bd:1b:79:c0:1a:a0:44:82:df:36: d9:97:ee:c2:73:d7:68:16:34:d6:fd:11:17:e9:3d: 6f:76:ae:e8:8a:67:bc:0b:b3:84:ed:90:d8:35:1d: ae:97:96:17:59:c5:89:f7:f7:36:07:35:93:2b:6e: fd:5f:45:c4:3e:a1:ca:f1:96:f2:c5:d6:5a:ce:40: d3:7d:af:c3:37:e7:43:6d:02:3b:e5:ff:a9:08:f3: c6:17:f3:e4:17:35:ea:ea:40:db:c9:b5:5b:e4:9c: 1e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BD:97:63:33:91:3A:42:79:02:34:BC:19:52:5C:3D:2A:30:92:E2 X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:85:0e:aa:ea:19:01:7b:c0:49:90:a7:76:7f:ca:a5:af:82: e8:f6:e1:38:d6:f7:dd:26:a2:3d:89:b2:b8:ca:d6:77:8e:86: 32:57:e6:71:21:24:16:d0:e0:7b:bf:c3:d9:33:48:6b:ec:ef: 49:51:ba:d4:23:99:ed:d0:c6:8a:ab:4f:9b:a0:4a:23:9e:94: 8d:2a:d2:9b:bc:49:71:fb:24:b4:0e:7d:cd:67:2d:52:70:f7: 1b:e8:71:5a:78:cc:3c:94:e8:d5:9c:8f:db:2b:db:e2:01:79: 91:5e:65:2a:ce:59:de:f7:58:2d:8b:67:32:95:71:93:47:9f: 8b:a6:a2:80:ad:09:ad:7c:70:e3:b4:71:df:40:1d:04:29:36: 1b:8b:a2:fa:30:f6:10:fb:41:85:c1:c8:f4:0a:eb:57:d2:9c: 0d:58:3b:5c:d8:4d:33:3b:45:5b:4d:90:6e:43:f1:6e:35:94: 98:61:80:ca:a0:cf:e3:95:46:28:5c:7a:21:5c:93:cf:2d:38: 48:68:16:03:e0:5d:f9:c6:2d:83:d0:2e:4c:30:56:74:46:3c: e4:d0:38:2e:f0:2f:36:d3:85:64:a1:30:44:80:c7:51:37:a7: 44:82:64:5d:ac:78:72:3d:8f:eb:37:7a:0f:07:39:69:91:f3: 48:b0:16:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkcwXD/C1mfC82ZHrj7tshDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjUwOTA2MDIwMTAzWhcNMjUwOTA3MDIwMTAzWjAzMTEwLwYDVQQD Eyg4ZmJkOTc2MzMzOTEzYTQyNzkwMjM0YmMxOTUyNWMzZDJhMzA5MmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygm3QH9FuCC0L7HK8S2UVtJuWWIV 4oqbTGr8p1lfeIJ4X14qzLms7rep4Rr91ohjmuAgjAzvU9zU9+JfV+dPPVB338aF UlxFVzGCCl5nipOkpbFrjuDZjf1x1pO2s+Tqu+1lqXWRyeM6n5HXbqeoCd6EKGly mITZ+0n+JYoLmaMnJTEh4aNc4X1AOadFz/bKD2C8tKJn7MgvM70becAaoESC3zbZ l+7Cc9doFjTW/REX6T1vdq7oime8C7OE7ZDYNR2ul5YXWcWJ9/c2BzWTK279X0XE PqHK8ZbyxdZazkDTfa/DN+dDbQI75f+pCPPGF/PkFzXq6kDbybVb5JwefQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+9l2MzkTpCeQI0vBlSXD0qMJLiMB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4UOquoZ AXvASZCndn/Kpa+C6PbhONb33SaiPYmyuMrWd46GMlfmcSEkFtDge7/D2TNIa+zv SVG61COZ7dDGiqtPm6BKI56UjSrSm7xJcfsktA59zWctUnD3G+hxWnjMPJTo1ZyP 2yvb4gF5kV5lKs5Z3vdYLYtnMpVxk0efi6aigK0JrXxw47Rx30AdBCk2G4ui+jD2 EPtBhcHI9ArrV9KcDVg7XNhNMztFW02QbkPxbjWUmGGAyqDP45VGKFx6IVyTzy04 SGgWA+Bd+cYtg9AuTDBWdEY85NA4LvAvNtOFZKEwRIDHUTenRIJkXax4cj2P6zd6 Dwc5aZHzSLAWxw== -----END CERTIFICATE-----Generated at Sat Sep 6 12:33:05 2025 by rpki-client