$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: DAI4PgQ2o1g1g0xOy/bYrCnrUtSNZYeFJeHc+tDEQtw= Subject key identifier: A9:21:5D:45:A8:3F:77:8A:BE:E4:49:65:A6:87:78:EE:6D:6E:89:2D Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 01973CBF3BD5A444818297D5524E063FFE42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 10C4 Signing time: Wed 04 Jun 2025 21:00:54 +0000 Manifest this update: Wed 04 Jun 2025 21:00:54 +0000 Manifest next update: Thu 05 Jun 2025 21:00:54 +0000 Files and hashes: 1: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (hash: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=) 2: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 3: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: 0d4vbJ0qZ/q+arKwhDlpeIxoqFBp26QKyatW7X71ZTw=) 5: K_EJriKArevlzfQZbolNDBtx8oo.roa (hash: 6w0sGv73nByWKd1Uamo+uAderKU68u5gHX69ydcFrwY=) 6: MZC0ct0Xstv22HLBnvUeWGBv83E.roa (hash: htp3HHZJT8KbtGdttjdWwv8CIeJ5zxP/H9XYr6UcMA8=) 7: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 8: c0saeT7oyOM1WCUUQrmmX2fqgNM.roa (hash: 5yb90x5g3edLkqLhkF3jwb0dKbfW1CJXOp2x6by5pto=) 9: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 10: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 11: eSlIjU--zzeljHxDb7Lmc0oTcr0.roa (hash: 29lnhAvQJG6lXbXS0KcxL34Q9L1+10qH6WOklcnahZ4=) 12: gLTyoT53I5lI2-lkOJJIfUKtbTI.roa (hash: 12uR9b0I8gzTcAnLqYhZOre02X+/fR86aQPixtWQtWI=) 13: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 14: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 15: jnx5aKNnolcZ3DRs--XxMnF1C9s.roa (hash: BNfQ4G4yEHNGvATZ14nkcpQc9VpIfzviDY17CZ0qkzo=) 16: kWgcOnHE4loB2SO1RafMA_sfxyo.roa (hash: qhX4ZFqSLA0ZjpIXxZoMeER1s51JEQ2ukADkC9RRayQ=) 17: oWtKMibiFTPsmEQGFMzECE5UHiw.roa (hash: Z5zglLw9W05ND5JEUY4X4umH8SL2gsFyXHtqi9P1iNQ=) 18: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3c:bf:3b:d5:a4:44:81:82:97:d5:52:4e:06:3f:fe:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Jun 4 21:00:54 2025 GMT Not After : Jun 5 21:00:54 2025 GMT Subject: CN=a9215d45a83f778abee44965a68778ee6d6e892d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:00:f8:2e:1c:4d:1d:7d:d4:b2:ff:cc:d5: 3c:99:dd:9b:cc:68:65:89:cb:bd:4e:d1:85:e4:54: f4:1c:cb:88:15:fb:10:3c:b5:af:7a:6b:49:10:88: 17:ac:74:2a:55:c2:a9:c9:df:3b:97:6f:59:da:92: 66:27:ac:dc:1f:5a:8e:15:4e:da:ff:bf:6e:a1:0c: 55:d6:34:03:5d:b1:58:5c:d5:b9:ca:38:ec:65:5d: a2:4b:64:4f:97:d2:49:48:0e:38:1d:37:43:8a:6d: 4a:a8:d1:6e:38:fb:44:82:d7:76:1f:2a:0f:f0:6f: 5e:7c:ec:0c:34:87:84:58:eb:6c:14:36:e1:96:40: 89:b4:41:e5:2e:e1:0d:b9:6b:c3:98:9e:42:09:eb: 4a:68:f0:ef:35:32:44:ab:c6:a3:07:be:c3:98:03: 47:53:a0:78:bc:13:45:ec:4b:5b:fa:bb:a8:fc:3e: 39:f2:1c:b9:c6:cd:25:a5:58:73:0c:7e:67:4a:53: bc:4b:b0:2c:6e:20:78:5e:82:25:a0:68:3e:18:bf: 0f:aa:04:b6:5e:97:92:8d:62:bf:38:09:74:3b:89: 52:6f:60:fc:b1:c5:d4:2e:f8:a4:20:ae:f4:b9:6b: 1c:e0:28:5b:4c:2f:d4:ce:a3:43:91:56:ff:a3:31: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:21:5D:45:A8:3F:77:8A:BE:E4:49:65:A6:87:78:EE:6D:6E:89:2D X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7c:87:2c:f6:78:3e:f1:f3:ca:5c:0b:e7:17:14:5d:43:38: 88:74:fc:e7:31:df:4b:9d:f3:c1:25:43:fc:b6:b0:4d:3d:80: 3b:59:e9:36:27:00:74:9c:2c:89:9f:6b:de:95:83:38:e5:7d: 07:a6:81:74:61:72:da:a8:26:23:0e:52:5f:26:4a:7d:de:99: 4d:e5:ba:e1:06:53:e5:36:3e:fd:31:16:57:08:8e:2e:97:1f: c5:b4:42:3f:f2:7f:16:f2:df:66:0f:26:cf:eb:8f:ab:34:9a: eb:95:4b:bb:d0:a5:3c:6e:25:cc:ee:e1:0c:f8:fc:af:59:7d: f3:00:b6:80:f4:bd:79:8a:65:aa:3c:81:ae:1d:b3:72:26:63: 34:79:06:a6:de:dd:63:e4:f5:ec:0e:67:34:3d:5c:0e:84:26: fb:d0:b4:de:87:aa:d8:dd:36:31:5d:0c:1c:77:42:49:75:16: 1f:f3:1d:58:37:65:a4:03:11:b7:cd:a9:7b:a6:63:3a:01:d4: 65:d6:76:45:fe:d0:8b:71:d6:2a:29:24:32:c4:9a:2e:1e:87: 14:8d:27:dd:b1:dd:34:c8:1b:9d:11:08:b5:80:57:fe:51:07: 04:c4:c6:75:75:87:25:ee:49:87:10:cb:ac:40:38:f2:7c:91: cf:ec:4d:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc8vzvVpESBgpfVUk4GP/5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUwNjA0MjEwMDU0WhcNMjUwNjA1MjEwMDU0WjAzMTEwLwYDVQQD EyhhOTIxNWQ0NWE4M2Y3NzhhYmVlNDQ5NjVhNjg3NzhlZTZkNmU4OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBIA+C4cTR191LL/zNU8md2bzGhl icu9TtGF5FT0HMuIFfsQPLWvemtJEIgXrHQqVcKpyd87l29Z2pJmJ6zcH1qOFU7a /79uoQxV1jQDXbFYXNW5yjjsZV2iS2RPl9JJSA44HTdDim1KqNFuOPtEgtd2HyoP 8G9efOwMNIeEWOtsFDbhlkCJtEHlLuENuWvDmJ5CCetKaPDvNTJEq8ajB77DmANH U6B4vBNF7Etb+ruo/D458hy5xs0lpVhzDH5nSlO8S7AsbiB4XoIloGg+GL8PqgS2 XpeSjWK/OAl0O4lSb2D8scXULvikIK70uWsc4ChbTC/UzqNDkVb/ozE2tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkhXUWoP3eKvuRJZaaHeO5tboktMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnyHLPZ4 PvHzylwL5xcUXUM4iHT85zHfS53zwSVD/LawTT2AO1npNicAdJwsiZ9r3pWDOOV9 B6aBdGFy2qgmIw5SXyZKfd6ZTeW64QZT5TY+/TEWVwiOLpcfxbRCP/J/FvLfZg8m z+uPqzSa65VLu9ClPG4lzO7hDPj8r1l98wC2gPS9eYplqjyBrh2zciZjNHkGpt7d Y+T17A5nND1cDoQm+9C03oeq2N02MV0MHHdCSXUWH/MdWDdlpAMRt82pe6ZjOgHU ZdZ2Rf7Qi3HWKikkMsSaLh6HFI0n3bHdNMgbnREItYBX/lEHBMTGdXWHJe5JhxDL rEA48nyRz+xNLw== -----END CERTIFICATE-----Generated at Thu Jun 5 06:42:03 2025 by rpki-client