$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft File: nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json) Hash identifier: 1gjPGfME7uQNd5octK8seQTL+1C8g6S2I5RVPpfRG6I= Subject key identifier: 6D:CF:D5:0B:CC:DE:78:FA:1D:2C:98:1C:A1:59:DF:58:8C:FB:A6:20 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019A4C98334034C331A7F3EA61929908CB0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft Manifest number: 1731 Signing time: Tue 04 Nov 2025 02:00:34 +0000 Manifest this update: Tue 04 Nov 2025 02:00:34 +0000 Manifest next update: Wed 05 Nov 2025 02:00:34 +0000 Files and hashes: 1: 1-W6dNN7nS41OhiX2-XV_KGHmokY.roa (hash: Onsuz/Jpw7AenTCzarTD9Si7u90ClXn9NgWm5b3k5iE=) 2: 2YqdGEIdMzY2vhH5bWxnKdddSEU.roa (hash: 9LWiPodvJQom88P/dBp1yCiWmPws557eiQuQBNs6yF8=) 3: C0Doi3jyevr2-pR2IftNN92p59I.roa (hash: IIK5hBd1iLDFxEspDzzgvSmRdaIP8iF48tDZdnCcOcc=) 4: EV3RLPCtuI3lLeq6ottkvu3RCX0.roa (hash: j3FY48aHBuxh9abdvmrJO1cvpOYjsUrGf4ptwj/I2mQ=) 5: FybzIFcZSE5lsnT6b5cIlMlH9IM.roa (hash: toJxUUA3/IPlRPBEPuQc0lw9h60Drcko4fLHszQIAow=) 6: Gp3o2MiF1oou94m1N0eClpvHzrY.roa (hash: WlZdRex8WZO5KKcEySDhE9mngOOw2FW15QB8WoCkJfU=) 7: IbQ-D2yslx0iHz7liSbbaOCcfXA.roa (hash: Kl5zFWGMECrHwpmHWu5uCTOc6qSUXrcJGW6y65HYm/g=) 8: MDI3PVTTBwcyecs75qaLcWEEgQU.roa (hash: J7xJKQP86jfo8IhCdMIH6NbDyPPPNyVklFSD5qYitM0=) 9: MNsgwpzMGo9ny09J-jp2iHl3erE.roa (hash: rsV4oTpDDAsXfrCe5I5AMLsbpMjSWW+2NPe89PcwdUY=) 10: NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa (hash: 8g5jKG/3k2R8GSQmnC21Ug5DsSBfIQTr0ptpHX5icAA=) 11: SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa (hash: f9GEO2mKmV3YeM6oy8Q/SaJoAwb8zCw8nw1p8bg3GlE=) 12: aQCk6hvPoTmhPc0e5kydy3D8sWU.roa (hash: 6ETMfCfXE4+PmgEWBXrcFMAYtDdlxlq3pPGYTBG/KZ0=) 13: bT1D_GIGnTIb7UhfAkPO6nAxSAM.roa (hash: zt3d+v/4QH55XWn1NDaCM7sBKlqG8C4EgKfte1Y+FyE=) 14: dH7B0DaeyCDV-QwznQB8W2QHPrc.roa (hash: UjgYoN3aRA7tctag/yj4QVec+og5fXBAmkTeQQuaztU=) 15: fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa (hash: 2hWk6Tz7S8lDQWf6IFB7UfW3IQLP7xOfkykS1elEFd0=) 16: gMolns_uejn9VG4O2M9g9t6tvgo.roa (hash: pPHWNiYrbOjsjJvc3tnPANoOhTs+IAl6nKZxeY0Xyos=) 17: i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa (hash: yCustTGvO8JgJOXmLOMgvkNIm9AOeeXsZljacnVY85o=) 18: lI3KcK_JQBvOB3k2IueM3WHtrfw.roa (hash: Gb7bXt8QtmOseHG0MDJ5JR67PlBq2vdcxr+aQTeaaZE=) 19: mI7DIe-ZWUKxjXm68wpxaummpVQ.roa (hash: 8ILL3a5+iKTvSgugQcyufNykJWsVj3L0HY6IKspIJxE=) 20: mQTwlxrMVeib6W7__4VllTW-6C8.roa (hash: Ous0wtpwiez89Z5w9/QarT0NcGVwIRO+IhvC6Ze0CEc=) 21: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: Dagu3BbVKdcJe/jbFVI6fqM2YhmDa3WKhTcS+QCdu5E=) 22: ppW43VM2CosiQ0jXWBLP26MIgec.roa (hash: fkLyzmpdBhfbIOJrEyE+Zx2ZEoyizeyrfXYsByRxcls=) 23: qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa (hash: lgA7RrHTvmHBvzE9swyzozhILfgUmn/MQgrElmqhrAU=) 24: rUdLZ9H9NmIsZBannjA8IlEwiOU.roa (hash: UpDDwAK8lbQbhgQsmAizBJjhr50ngPTJj4DgWqUhhss=) 25: uazolYHYZBtijCrhgDu0uI9nLCk.roa (hash: PFT6HKinQsQ7x3TcytDfopexTxqZWQMq9Ui5wk2to2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:98:33:40:34:c3:31:a7:f3:ea:61:92:99:08:cb:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Nov 4 02:00:34 2025 GMT Not After : Nov 5 02:00:34 2025 GMT Subject: CN=6dcfd50bccde78fa1d2c981ca159df588cfba620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:04:37:61:d2:bc:c8:c9:80:3c:a4:43:7f: e0:b6:8a:62:28:05:57:fb:de:29:ba:eb:f0:00:5d: af:f6:ed:82:d5:7b:43:ea:30:e4:64:ed:d1:89:a6: 43:c4:5f:36:d7:37:cf:a2:0c:51:23:df:42:90:b1: 38:fe:1b:92:4f:24:02:59:97:33:0e:76:09:51:98: cd:4b:b6:6f:5c:30:43:1f:dc:06:6e:d5:78:1e:58: 91:7c:a0:42:91:36:7c:fe:d1:92:40:76:a4:1c:48: ca:76:03:ec:c2:06:f2:27:c9:b5:06:94:1d:1d:67: 62:2c:03:17:73:2d:b9:4b:71:dd:bc:2b:1a:65:ca: b4:fb:94:40:2f:0a:e2:70:ac:56:ba:58:1f:69:33: 47:c7:90:99:c3:91:95:69:e6:6d:5f:8e:ca:8b:9f: 7a:de:1b:9b:30:98:25:bd:1d:5a:3b:ac:10:9f:07: 25:bf:3c:de:b4:02:f9:94:52:83:fa:bc:f2:ce:84: 74:27:dd:7c:03:75:0e:2f:d4:14:5d:a2:59:6d:5f: 68:1e:08:fe:2c:be:1a:81:66:ba:a0:4e:a2:f2:ee: b0:ac:f3:f7:38:5b:62:79:47:80:2d:48:49:6f:5b: c7:7e:e2:20:d8:b6:1e:82:be:47:12:a9:18:80:67: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CF:D5:0B:CC:DE:78:FA:1D:2C:98:1C:A1:59:DF:58:8C:FB:A6:20 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2f:fa:ae:44:c7:ad:83:6a:1d:b5:cb:e2:4d:50:a2:39:78: 48:3e:a9:83:38:7c:b4:f8:d9:db:15:0f:db:36:53:37:39:ef: 63:b9:0a:b1:a3:60:89:e9:3a:43:da:4a:fb:82:7e:a9:98:0f: b9:50:25:97:64:ea:34:7a:16:c2:a0:13:80:03:e0:bf:a8:c4: d9:e1:d1:dc:14:6e:3e:f0:99:46:4f:01:8d:d0:90:94:97:c3: 24:63:fc:31:bf:c3:0f:cc:2f:68:0a:c7:c9:50:6b:6f:a5:74: 3f:aa:14:00:bd:33:9d:40:0c:84:81:a2:e4:52:35:52:94:63: 10:56:3e:e4:56:ca:2c:05:82:04:f4:a4:37:44:b2:89:64:b0: 4a:69:6d:9c:59:d3:05:ae:e4:bc:28:66:a4:4f:e7:1a:3f:aa: c8:27:0d:c8:12:01:2b:3e:4a:ab:21:2d:ac:0b:67:d8:47:85: e8:86:f3:28:ab:6a:60:e3:d5:df:cd:46:b5:2f:8a:bd:48:e6: af:45:dc:ea:4c:e0:ae:91:ff:29:d2:dc:a4:af:00:e1:b8:d3: 1e:79:e6:3b:20:1c:86:eb:48:4d:d8:49:47:36:7a:a4:9c:29: fa:82:dc:04:3d:b3:5b:7f:74:49:67:8c:70:00:e1:9e:5e:f4: af:2c:23:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMmDNANMMxp/PqYZKZCMsOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjUxMTA0MDIwMDM0WhcNMjUxMTA1MDIwMDM0WjAzMTEwLwYDVQQD Eyg2ZGNmZDUwYmNjZGU3OGZhMWQyYzk4MWNhMTU5ZGY1ODhjZmJhNjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroMEN2HSvMjJgDykQ3/gtopiKAVX +94puuvwAF2v9u2C1XtD6jDkZO3RiaZDxF821zfPogxRI99CkLE4/huSTyQCWZcz DnYJUZjNS7ZvXDBDH9wGbtV4HliRfKBCkTZ8/tGSQHakHEjKdgPswgbyJ8m1BpQd HWdiLAMXcy25S3HdvCsaZcq0+5RALwricKxWulgfaTNHx5CZw5GVaeZtX47Ki596 3hubMJglvR1aO6wQnwclvzzetAL5lFKD+rzyzoR0J918A3UOL9QUXaJZbV9oHgj+ LL4agWa6oE6i8u6wrPP3OFtieUeALUhJb1vHfuIg2LYegr5HEqkYgGdgbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3P1QvM3nj6HSyYHKFZ31iM+6YgMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy/6rkTH rYNqHbXL4k1Qojl4SD6pgzh8tPjZ2xUP2zZTNznvY7kKsaNgiek6Q9pK+4J+qZgP uVAll2TqNHoWwqATgAPgv6jE2eHR3BRuPvCZRk8BjdCQlJfDJGP8Mb/DD8wvaArH yVBrb6V0P6oUAL0znUAMhIGi5FI1UpRjEFY+5FbKLAWCBPSkN0SyiWSwSmltnFnT Ba7kvChmpE/nGj+qyCcNyBIBKz5KqyEtrAtn2EeF6IbzKKtqYOPV381GtS+KvUjm r0Xc6kzgrpH/KdLcpK8A4bjTHnnmOyAchutITdhJRzZ6pJwp+oLcBD2zW390SWeM cADhnl70rywj6A== -----END CERTIFICATE-----Generated at Tue Nov 4 10:45:12 2025 by rpki-client