$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: KKjSne7Wvhasr54fUtm0ZjEmD3IgLnv9Aeqd6gobpK0= Subject key identifier: 2D:22:32:BF:9D:42:A5:F2:DF:4A:90:5A:45:75:C3:9A:CA:9D:21:22 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01987BD2E6221573FCC318F261B941FF7D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 161F Signing time: Tue 05 Aug 2025 20:01:15 +0000 Manifest this update: Tue 05 Aug 2025 20:01:15 +0000 Manifest next update: Wed 06 Aug 2025 20:01:15 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: JXJRpgJPAMVOvgjddzsYzjkdVANlHc9QA3bGO+sURGc=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7b:d2:e6:22:15:73:fc:c3:18:f2:61:b9:41:ff:7d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Aug 5 20:01:15 2025 GMT Not After : Aug 6 20:01:15 2025 GMT Subject: CN=2d2232bf9d42a5f2df4a905a4575c39aca9d2122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:84:9c:8b:ff:1b:b9:1a:27:ed:26:42:26:0b: 06:9f:84:40:3b:97:63:73:f2:5d:87:03:08:3f:f6: e1:33:a5:51:2a:b5:06:38:8a:84:dd:21:10:aa:71: a6:0c:be:5d:73:d7:df:3e:4b:e1:97:b0:1a:67:d4: f7:57:e7:59:8c:14:78:f2:5c:21:d5:e9:a4:84:7f: e9:b4:10:72:d1:39:c0:ae:0d:b8:e7:54:ba:87:16: 5f:f5:cf:bf:44:25:3c:e4:70:cc:cc:a7:dc:29:3c: c2:bf:2f:47:b8:c4:5b:d4:2f:d8:bb:20:69:e6:b5: 85:93:fd:39:25:eb:b2:63:11:f5:c3:ce:79:e7:6f: 77:d9:bf:1a:01:a7:b3:82:0d:7a:43:18:af:a6:4d: 33:55:f9:3d:71:30:38:3d:9b:5f:cb:8a:fc:24:ee: 7e:2d:07:55:48:ca:cc:1b:4d:63:f7:94:cd:f1:ad: 6f:09:84:76:56:2e:80:17:3f:27:56:26:4d:28:02: 2e:a9:27:c2:a5:bc:fd:fa:44:86:1f:fd:63:a8:79: 30:8e:18:ac:2c:7e:25:ac:be:f7:27:b0:f7:42:ff: bd:30:27:5c:23:b7:cb:12:0e:1f:da:ff:f1:1e:9c: a2:74:5d:67:41:92:0d:38:3e:8b:ee:27:f7:c5:3d: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:22:32:BF:9D:42:A5:F2:DF:4A:90:5A:45:75:C3:9A:CA:9D:21:22 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:de:a6:82:d0:64:82:69:35:2d:41:ca:88:82:e9:91:f6:e1: 0a:62:e4:29:d1:c8:ff:2f:a2:ef:a7:e9:82:82:4a:17:7d:b6: 26:76:6d:3a:a1:ed:45:36:45:67:e1:f8:7d:50:a0:d9:cc:b8: cb:19:98:38:d9:15:d2:6e:aa:b5:9e:4d:a9:e4:bb:f0:54:ab: 0e:9e:1c:db:88:7b:6d:e1:fe:27:80:f6:a1:ff:74:cd:d4:66: 48:bf:1e:03:5d:b3:ac:9d:93:24:0a:af:c5:c7:cd:78:ed:b3: 07:42:8a:7f:c9:7a:b6:ea:43:34:07:56:74:67:17:e1:7d:08: 5b:17:87:93:c2:10:a4:b3:d8:36:98:83:04:68:84:65:09:c1: 6c:a7:b9:a6:e2:59:54:40:56:ac:c0:44:81:1b:e9:b0:92:20: 39:51:91:ae:5c:49:c3:e0:b3:45:2f:29:0d:a5:cc:06:61:c9: 11:bc:40:dd:04:a5:76:0d:b2:83:47:1f:e8:73:92:77:ed:52: 7c:7a:d3:9f:49:3f:e2:4c:38:64:5f:5d:76:b1:15:14:7a:f6: 98:8b:85:92:7e:d1:99:1e:38:27:07:d2:76:a4:d4:11:6d:27: 38:d1:9f:65:ea:81:ba:a2:19:26:22:95:5b:48:73:5d:50:2b: 4c:12:02:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh70uYiFXP8wxjyYblB/303MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwODA1MjAwMTE1WhcNMjUwODA2MjAwMTE1WjAzMTEwLwYDVQQD EygyZDIyMzJiZjlkNDJhNWYyZGY0YTkwNWE0NTc1YzM5YWNhOWQyMTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYSci/8buRon7SZCJgsGn4RAO5dj c/JdhwMIP/bhM6VRKrUGOIqE3SEQqnGmDL5dc9ffPkvhl7AaZ9T3V+dZjBR48lwh 1emkhH/ptBBy0TnArg2451S6hxZf9c+/RCU85HDMzKfcKTzCvy9HuMRb1C/YuyBp 5rWFk/05JeuyYxH1w85552932b8aAaezgg16Qxivpk0zVfk9cTA4PZtfy4r8JO5+ LQdVSMrMG01j95TN8a1vCYR2Vi6AFz8nViZNKAIuqSfCpbz9+kSGH/1jqHkwjhis LH4lrL73J7D3Qv+9MCdcI7fLEg4f2v/xHpyidF1nQZINOD6L7if3xT3BNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0iMr+dQqXy30qQWkV1w5rKnSEiMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcd6mgtBk gmk1LUHKiILpkfbhCmLkKdHI/y+i76fpgoJKF322JnZtOqHtRTZFZ+H4fVCg2cy4 yxmYONkV0m6qtZ5NqeS78FSrDp4c24h7beH+J4D2of90zdRmSL8eA12zrJ2TJAqv xcfNeO2zB0KKf8l6tupDNAdWdGcX4X0IWxeHk8IQpLPYNpiDBGiEZQnBbKe5puJZ VEBWrMBEgRvpsJIgOVGRrlxJw+CzRS8pDaXMBmHJEbxA3QSldg2yg0cf6HOSd+1S fHrTn0k/4kw4ZF9ddrEVFHr2mIuFkn7RmR44JwfSdqTUEW0nONGfZeqBuqIZJiKV W0hzXVArTBICMg== -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:52 2025 by rpki-client