$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: a1ayF9rQXdX3dHZRsr0W9TJUjlXpNau3Uu4NBYHzmmE= Subject key identifier: FA:CD:44:A3:51:45:35:1F:B0:C0:0C:5E:8D:D1:A2:D5:C5:1B:4F:D3 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019873E2B1CD1C221E287B1A21BEB5C6C442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 0FE4 Signing time: Mon 04 Aug 2025 07:01:33 +0000 Manifest this update: Mon 04 Aug 2025 07:01:33 +0000 Manifest next update: Tue 05 Aug 2025 07:01:33 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: iXL5qQtRrkVLG9gYfHh5fVQ7T3g.roa (hash: /S4PPFIysWBHzoFOGmeyMQ0/WpKIWbdNqRJ+yMWrBac=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: PdodWbM4UIrHUVUQpdD40gM/zySzdTWzrXFbjJA1lKE=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 07:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:b1:cd:1c:22:1e:28:7b:1a:21:be:b5:c6:c4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Aug 4 07:01:33 2025 GMT Not After : Aug 5 07:01:33 2025 GMT Subject: CN=facd44a35145351fb0c00c5e8dd1a2d5c51b4fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:59:8a:e0:22:64:70:47:2c:a0:ee:78:2d: 54:a6:95:a0:e7:32:92:e0:fa:13:09:02:eb:64:e2: 0e:c9:ec:27:ac:c4:22:57:ff:cd:ea:10:fd:76:9a: 85:ca:6b:01:ad:58:fd:fe:8b:7a:b6:1c:ae:99:e4: 25:d6:92:29:c7:52:cf:44:80:f0:c2:a9:70:85:ba: 1d:24:60:75:7b:39:67:a3:34:ba:8a:24:d8:93:8b: b3:93:dd:95:74:33:31:a2:60:fe:99:f4:88:cf:0d: e1:6b:07:f2:e6:aa:66:86:b4:39:7f:0f:3c:a1:58: ed:d6:87:f0:9c:7e:e0:ba:bb:4b:54:d8:5a:86:bc: f7:9b:aa:58:a8:fd:bb:7f:7c:77:8f:ff:8b:0a:be: ba:e9:dd:96:db:7c:c4:85:5a:f1:92:c6:ad:3e:85: 25:26:9e:3b:8e:b1:13:74:94:78:a9:c1:4a:05:3b: b3:b3:57:44:05:14:d1:67:90:fe:8b:6b:68:1f:be: 87:ce:00:7a:ac:1f:9e:d8:ec:04:95:ad:b2:91:13: 62:94:7a:ec:65:cd:f3:94:b0:d4:71:cd:4c:45:3b: cf:1d:20:50:ed:34:aa:5e:e3:df:92:31:3e:34:a1: 24:aa:cd:16:26:9e:d6:c5:c2:c8:7f:2f:55:12:e3: 09:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:44:A3:51:45:35:1F:B0:C0:0C:5E:8D:D1:A2:D5:C5:1B:4F:D3 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2d:9f:19:0c:47:fd:d3:c4:cd:e1:10:3a:67:a5:cc:be:89: d7:cb:c4:bd:4a:bb:8b:55:50:ce:17:8a:c1:cf:5a:19:c2:7f: 2b:a2:c0:b1:f1:b9:e3:74:25:8e:23:c1:10:3f:a6:a5:d4:d2: da:6e:43:2e:ca:36:8d:8b:8c:33:e6:23:22:ec:64:9a:25:84: 3c:52:fb:5e:de:cf:46:61:e4:43:a4:3b:1e:f7:d6:94:1f:5d: 9b:6a:ef:7e:0f:10:6e:d1:98:03:a0:41:ba:34:16:be:98:75: 44:6a:cd:1e:97:24:0f:6c:de:bf:07:b2:1d:46:e3:c9:4a:c3: 2a:66:db:f1:db:9e:0d:53:5d:63:cc:84:1e:c3:87:ff:33:48: e1:7b:66:18:93:06:8c:71:f2:49:63:c9:f9:5b:3e:ae:be:21: 69:aa:67:82:c9:79:4a:d4:bd:fa:e8:42:e1:91:70:38:0a:e1: c9:b8:87:02:4a:cf:ce:4d:0e:a5:6d:40:8a:00:37:96:d4:5e: cf:47:18:90:38:06:d7:30:ae:5d:c6:4a:04:56:28:ba:e8:6b: c9:f9:c2:d5:ad:18:63:db:5a:cb:57:d5:43:32:6c:5c:73:01: d2:dd:1e:bc:16:27:84:c8:0b:9f:dc:c6:ba:71:cf:d2:6d:6d: cb:af:40:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4rHNHCIeKHsaIb61xsRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUwODA0MDcwMTMzWhcNMjUwODA1MDcwMTMzWjAzMTEwLwYDVQQD EyhmYWNkNDRhMzUxNDUzNTFmYjBjMDBjNWU4ZGQxYTJkNWM1MWI0ZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoppZiuAiZHBHLKDueC1UppWg5zKS 4PoTCQLrZOIOyewnrMQiV//N6hD9dpqFymsBrVj9/ot6thyumeQl1pIpx1LPRIDw wqlwhbodJGB1ezlnozS6iiTYk4uzk92VdDMxomD+mfSIzw3hawfy5qpmhrQ5fw88 oVjt1ofwnH7gurtLVNhahrz3m6pYqP27f3x3j/+LCr666d2W23zEhVrxksatPoUl Jp47jrETdJR4qcFKBTuzs1dEBRTRZ5D+i2toH76HzgB6rB+e2OwEla2ykRNilHrs Zc3zlLDUcc1MRTvPHSBQ7TSqXuPfkjE+NKEkqs0WJp7WxcLIfy9VEuMJ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrNRKNRRTUfsMAMXo3RotXFG0/TMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABi2fGQxH /dPEzeEQOmelzL6J18vEvUq7i1VQzheKwc9aGcJ/K6LAsfG543QljiPBED+mpdTS 2m5DLso2jYuMM+YjIuxkmiWEPFL7Xt7PRmHkQ6Q7HvfWlB9dm2rvfg8QbtGYA6BB ujQWvph1RGrNHpckD2zevweyHUbjyUrDKmbb8dueDVNdY8yEHsOH/zNI4XtmGJMG jHHySWPJ+Vs+rr4haapngsl5StS9+uhC4ZFwOArhybiHAkrPzk0OpW1AigA3ltRe z0cYkDgG1zCuXcZKBFYouuhryfnC1a0YY9tay1fVQzJsXHMB0t0evBYnhMgLn9zG unHP0m1ty69Alw== -----END CERTIFICATE-----Generated at Mon Aug 4 15:40:07 2025 by rpki-client