$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: q84oQyT9gVuBujtL71ITmU5ikdxFbwW1fsDshs/0a6w= Subject key identifier: 7F:66:F2:00:96:8B:49:D6:81:00:EC:02:8E:97:C2:BC:13:62:CC:29 Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 019A0601F717ED1747FF82707CAFE34224E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 126D Signing time: Tue 21 Oct 2025 09:03:03 +0000 Manifest this update: Tue 21 Oct 2025 09:03:03 +0000 Manifest next update: Wed 22 Oct 2025 09:03:03 +0000 Files and hashes: 1: 1-vMQpoPzRNRomoOOMlQ_RFieN5E.roa (hash: jxr1drUW5D4B447tGRDp4ctx0qJ8sRRfploxS6UI7zo=) 2: 4Ws8Sjvx72Hy6J5E-P_EI_q3Slo.roa (hash: uWN9nsMDOn0xfjEWkhhvUgtWX2KzO1qJYjAx6fiUPH0=) 3: AtDKjNeuuNXeVqqffYxe6oseq6E.roa (hash: 8X3Pe8CzfVipbqmK38m2SCiV+GdUcXqwb5iKKxFpsvY=) 4: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 5: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 6: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: OxdIiAZhK2J2gnlV11A8WNe0yrycbwy6mOwDM40oN2Y=) 7: IzY3hBc9dplU60ltzFYrtaLdQVM.roa (hash: oWyFSqLRdDQLHe1B9vzDpFM/h/LlBXpLreUihDrqVEg=) 8: Pk-166nBqp2AnHZRjt3naSPZm_A.roa (hash: vCXEEXcMS38HEhXquUN+5uxP1rLIYunBHbDrNhQYfIs=) 9: VHDpAdR3NVqsO0e_r0e6tavcLhw.roa (hash: YhgbecYr8tRf7lmpu+uKj0OPPDbutngJmi5z3NyL5Eg=) 10: YlsSe-kZdyoSNv8frNMuJNKOEDg.roa (hash: KkWErRFQCKAaLuu8FmVfSF3bPQvyc+JXLf5z6FECaBo=) 11: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 12: bzqXpokQZM1aGs9ewZRks0hYHI4.roa (hash: hgSOUwN94Q7p6oexHTJXl0V0Ta0qXPc09UvqCMBYuIs=) 13: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 14: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 15: fqkGaUKO8jQgV43kpQCPk_QvAKY.roa (hash: hX2eXDOdterl33d5BLDKltIZDyu7ggsh0S/egGBhPp0=) 16: gr7Hsot6ZTb-tQFkDS-R02k4wEY.roa (hash: 3DFfqHgyxVAmbOljghFjNoIvArcsBlSFgk7x4Ag96IY=) 17: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 18: i61yJhWlIpiU3IaDDJOUzTLy3CI.roa (hash: 1EGI7WgAJYqPotcGFTR+YSEC2Cd3Jis75UUmneXHYjQ=) 19: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 20: mi0e81ENlhZL1HAJyDt-APK3Xmw.roa (hash: 4UM/16Qhwo7dbwcVYtQMkDVKLWRlfgabJ7zfNMBK+dA=) 21: waAUG9dHQxPuvbNDnM7McvKZrks.roa (hash: KM+Hqim19Y1GbtIM/SkitOgtiJ9ypF9fqby6ZM5bUSw=) 22: wsFGJdFqxDSrc6ZPuYUM3OEPBt4.roa (hash: 5N2lY2rir++DNkU0rNQwk4o3De67eUBe63z0gVaBPpI=) 23: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:06:01:f7:17:ed:17:47:ff:82:70:7c:af:e3:42:24:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Oct 21 09:03:03 2025 GMT Not After : Oct 22 09:03:03 2025 GMT Subject: CN=7f66f200968b49d68100ec028e97c2bc1362cc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0e:91:7c:3b:9c:d0:b5:fa:c1:77:8c:fc:5f: f2:af:ba:70:d0:d7:2d:c6:c3:eb:fb:40:e5:87:c9: 6a:2b:66:69:95:9d:83:7a:9c:72:17:c7:43:7b:5a: 2d:a4:8b:bf:f0:79:c2:82:9c:30:e9:1f:6f:f4:9e: fb:fb:bd:36:0a:62:6a:27:22:1d:bd:a8:11:ce:2a: 06:f5:55:f0:58:15:93:f3:91:5c:c6:c1:e0:d5:16: bb:5a:8e:50:54:b5:dc:d8:dc:1b:31:89:ff:41:93: 80:f4:f1:c6:62:f0:7f:98:24:2e:eb:be:b0:a2:23: d8:25:bb:a3:0a:98:96:a8:fa:1c:66:77:cf:bb:c1: 39:e2:8f:c8:68:44:56:21:f6:1d:00:ee:53:b5:18: ef:ff:c6:84:d0:e5:af:fb:59:19:59:2d:a9:9f:5d: cb:f4:19:71:f6:00:87:ac:32:11:6d:2e:d5:1f:4d: b6:8f:f6:cd:42:3c:e9:cc:43:a4:c5:b7:24:02:6d: 71:30:d1:8c:88:97:46:67:be:29:ea:05:2f:0d:ab: a7:7b:f1:56:2f:09:d9:0d:5f:9d:2e:4d:05:b1:b6: f2:f7:a7:55:b6:57:22:c1:da:d6:eb:c6:2b:69:b9: a7:8a:6f:c3:d1:c0:ab:4f:96:23:ab:0c:81:da:5c: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:66:F2:00:96:8B:49:D6:81:00:EC:02:8E:97:C2:BC:13:62:CC:29 X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:19:d7:59:29:61:c2:1c:f7:00:88:56:88:e3:69:d8:1c:ca: 9d:33:d8:8e:7c:a2:e8:f4:97:d4:8e:40:ac:53:2e:c5:9c:d0: 7b:c5:12:3e:04:c9:f9:af:6e:36:7a:8a:79:a1:e6:33:a3:ff: 7e:3a:3e:4a:5d:49:e9:99:85:c5:41:ee:56:87:82:57:f2:bb: e4:c6:74:c5:40:0e:9e:24:d1:42:64:90:4e:fe:59:1c:bd:cb: d4:b1:a5:77:46:e8:fa:50:75:56:ab:db:ce:13:30:d2:e4:dd: cd:1d:60:ae:3d:3c:ab:07:59:c0:da:ea:5c:b3:4e:f5:64:dd: 9a:fc:32:93:1a:57:1b:47:d8:fa:2b:2d:ca:e3:59:8b:45:ef: 47:37:15:e1:5d:a6:d6:89:09:25:01:0d:c0:ac:54:dc:23:b4: 08:40:77:47:04:f1:f2:11:cc:b6:a2:9b:48:0a:be:7a:f9:7e: 5f:f7:e5:bd:bd:99:7d:24:70:d6:60:e0:75:a6:2c:af:5d:37: a7:36:e8:c2:74:35:fe:69:1c:60:38:6c:d5:27:22:35:ba:11: 11:f8:0b:61:d0:b8:9c:33:75:c2:5f:f4:87:3c:78:d3:5d:03: 73:20:bf:8a:e2:7b:4d:13:4d:0b:39:cb:96:64:e0:2a:9e:c1: d7:2d:1e:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoGAfcX7RdH/4JwfK/jQiTmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUxMDIxMDkwMzAzWhcNMjUxMDIyMDkwMzAzWjAzMTEwLwYDVQQD Eyg3ZjY2ZjIwMDk2OGI0OWQ2ODEwMGVjMDI4ZTk3YzJiYzEzNjJjYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q6RfDuc0LX6wXeM/F/yr7pw0Nct xsPr+0Dlh8lqK2ZplZ2DepxyF8dDe1otpIu/8HnCgpww6R9v9J77+702CmJqJyId vagRzioG9VXwWBWT85FcxsHg1Ra7Wo5QVLXc2NwbMYn/QZOA9PHGYvB/mCQu676w oiPYJbujCpiWqPocZnfPu8E54o/IaERWIfYdAO5TtRjv/8aE0OWv+1kZWS2pn13L 9Blx9gCHrDIRbS7VH022j/bNQjzpzEOkxbckAm1xMNGMiJdGZ74p6gUvDaune/FW LwnZDV+dLk0Fsbby96dVtlciwdrW68Yrabmnim/D0cCrT5YjqwyB2lzuDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9m8gCWi0nWgQDsAo6XwrwTYswpMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxnXWSlh whz3AIhWiONp2BzKnTPYjnyi6PSX1I5ArFMuxZzQe8USPgTJ+a9uNnqKeaHmM6P/ fjo+Sl1J6ZmFxUHuVoeCV/K75MZ0xUAOniTRQmSQTv5ZHL3L1LGld0bo+lB1Vqvb zhMw0uTdzR1grj08qwdZwNrqXLNO9WTdmvwykxpXG0fY+istyuNZi0XvRzcV4V2m 1okJJQENwKxU3CO0CEB3RwTx8hHMtqKbSAq+evl+X/flvb2ZfSRw1mDgdaYsr103 pzbownQ1/mkcYDhs1SciNboREfgLYdC4nDN1wl/0hzx4010DcyC/iuJ7TRNNCznL lmTgKp7B1y0e8Q== -----END CERTIFICATE-----Generated at Tue Oct 21 13:14:16 2025 by rpki-client