$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: ZG84dzc+zWhJVSs0+1hovrCxNzm8CKl0ntND2WoAVwM= Subject key identifier: 55:C1:7D:6C:B2:8B:3C:70:63:A2:95:10:92:28:F7:31:DF:78:F2:8B Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019874195EE5FB9C7C28CCA11B97E4D03E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 1268 Signing time: Mon 04 Aug 2025 08:01:16 +0000 Manifest this update: Mon 04 Aug 2025 08:01:16 +0000 Manifest next update: Tue 05 Aug 2025 08:01:16 +0000 Files and hashes: 1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=) 2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: l5TxH6lWK+RhTPnVz5uxN98IpCvuV15puZGWjQzL3Oo=) 8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=) 10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:19:5e:e5:fb:9c:7c:28:cc:a1:1b:97:e4:d0:3e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Aug 4 08:01:16 2025 GMT Not After : Aug 5 08:01:16 2025 GMT Subject: CN=55c17d6cb28b3c7063a295109228f731df78f28b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:cf:4b:26:1b:38:4c:ed:10:47:36:34:16:a3: ac:35:38:f5:2b:7c:7e:8d:5b:e1:8d:e8:e7:c3:e8: 63:ab:67:b3:6b:c7:52:ca:7e:99:49:2b:ec:96:d1: 6c:ac:7e:13:97:79:a2:77:9d:23:72:8d:76:4a:11: e0:a5:41:3d:8c:44:cc:19:54:77:12:4c:c2:56:10: 1d:ad:03:66:48:d9:74:f4:e7:df:6e:31:48:34:3f: 42:a7:b4:7e:dd:56:6e:87:0d:5a:55:6c:78:ab:b0: 49:f4:58:3c:e2:71:56:0d:d7:5b:6e:d4:db:fd:64: b7:81:cd:3f:80:ea:fe:55:b7:c9:c4:aa:41:d2:ab: d5:66:1f:4a:a3:22:50:cd:fd:75:69:74:56:79:77: d4:a6:1c:f5:ad:20:44:fc:8e:12:4b:86:88:13:30: a9:62:09:47:f9:e3:d9:ce:be:57:2d:b9:bf:79:e4: 22:86:0b:6f:e1:63:27:ae:fd:4d:63:3d:6c:48:75: 8a:cc:c9:3c:dd:9b:0e:fa:64:87:24:67:0b:bc:a6: d0:8b:b1:cb:b6:26:46:f4:86:71:a2:b0:fc:d4:05: d7:4c:bd:4a:74:c6:f7:fd:76:68:80:14:3e:f3:fa: 72:53:48:e5:49:8b:16:ba:be:c0:78:84:58:c5:1a: e9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C1:7D:6C:B2:8B:3C:70:63:A2:95:10:92:28:F7:31:DF:78:F2:8B X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ab:44:6a:18:49:93:be:bb:af:62:d9:04:16:12:19:ec:0b: 01:82:40:7f:06:e8:fc:f9:0a:27:9c:4a:c6:88:2e:e3:b3:99: 73:5c:75:2f:36:3d:7b:94:24:27:71:9a:16:43:e7:05:5d:84: 81:07:3d:45:29:a9:51:d3:f9:47:69:a6:d4:bd:c1:76:12:3e: a7:15:20:51:59:6d:45:80:3f:55:1b:1d:0b:55:a8:6a:d8:43: 7b:a1:9c:da:fb:a0:cd:32:a8:23:22:ad:59:2f:ed:f7:e1:02: f0:ef:ab:31:5e:10:d3:7d:98:a0:23:38:2f:9d:f6:9f:fa:e8: 51:4b:16:c4:50:e1:7e:14:bf:7f:e7:32:a6:71:47:e7:a2:c5: a1:94:5c:c4:5f:38:de:65:5c:fa:6d:08:c7:1e:93:bf:e7:c3: 6d:0f:58:02:04:7c:22:4d:52:d9:09:ee:57:69:f8:47:8b:e2: f3:31:f4:85:7b:e9:bc:ed:73:13:3a:f1:e5:9b:de:05:e4:16: d5:0d:7a:1f:49:4f:45:d6:d7:95:6f:5d:d7:1e:43:00:95:81: ca:70:96:11:cb:7d:45:01:09:15:c4:57:ce:e0:4e:04:37:2c: 16:62:d4:87:3d:0c:d5:0c:6c:4d:d3:d0:dd:ef:7e:1a:7d:c3: 27:29:e5:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0GV7l+5x8KMyhG5fk0D57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUwODA0MDgwMTE2WhcNMjUwODA1MDgwMTE2WjAzMTEwLwYDVQQD Eyg1NWMxN2Q2Y2IyOGIzYzcwNjNhMjk1MTA5MjI4ZjczMWRmNzhmMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA989LJhs4TO0QRzY0FqOsNTj1K3x+ jVvhjejnw+hjq2eza8dSyn6ZSSvsltFsrH4Tl3mid50jco12ShHgpUE9jETMGVR3 EkzCVhAdrQNmSNl09OffbjFIND9Cp7R+3VZuhw1aVWx4q7BJ9Fg84nFWDddbbtTb /WS3gc0/gOr+VbfJxKpB0qvVZh9KoyJQzf11aXRWeXfUphz1rSBE/I4SS4aIEzCp YglH+ePZzr5XLbm/eeQihgtv4WMnrv1NYz1sSHWKzMk83ZsO+mSHJGcLvKbQi7HL tiZG9IZxorD81AXXTL1KdMb3/XZogBQ+8/pyU0jlSYsWur7AeIRYxRrpcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXBfWyyizxwY6KVEJIo9zHfePKLMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqtEahhJ k767r2LZBBYSGewLAYJAfwbo/PkKJ5xKxogu47OZc1x1LzY9e5QkJ3GaFkPnBV2E gQc9RSmpUdP5R2mm1L3BdhI+pxUgUVltRYA/VRsdC1WoathDe6Gc2vugzTKoIyKt WS/t9+EC8O+rMV4Q032YoCM4L532n/roUUsWxFDhfhS/f+cypnFH56LFoZRcxF84 3mVc+m0Ixx6Tv+fDbQ9YAgR8Ik1S2QnuV2n4R4vi8zH0hXvpvO1zEzrx5ZveBeQW 1Q16H0lPRdbXlW9d1x5DAJWBynCWEct9RQEJFcRXzuBOBDcsFmLUhz0M1QxsTdPQ 3e9+Gn3DJynlBw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:22:43 2025 by rpki-client