$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: 0NMNMz9SiOk3alKM14Fwv3Loam6n0kpyIDfH7hQH9yI= Subject key identifier: B1:47:39:23:19:9E:9C:1D:41:9A:43:42:FB:BA:84:88:A7:FA:DB:1B Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 01988A331C62C296E4F4993F5F5B226B160D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0A3C Signing time: Fri 08 Aug 2025 15:01:02 +0000 Manifest this update: Fri 08 Aug 2025 15:01:02 +0000 Manifest next update: Sat 09 Aug 2025 15:01:02 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (hash: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=) 10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 11: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 15: irT4DdDzgeP-65AGXrk0PHCAQVY.roa (hash: RsayR2J7jayb/ZHPN+8XPFdXktAjeGK/x5tQjIbG8/Y=) 16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: Y2B57SGI9WL8B1xGLlH4fWkrujC3MfW6aciCKZwpnXU=) 17: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=) 18: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 11:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:8a:33:1c:62:c2:96:e4:f4:99:3f:5f:5b:22:6b:16:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Aug 8 15:01:02 2025 GMT Not After : Aug 9 15:01:02 2025 GMT Subject: CN=b1473923199e9c1d419a4342fbba8488a7fadb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:7c:46:c8:97:8c:3a:25:18:2e:ca:5a:f2: 4e:14:ce:da:46:77:d7:86:d7:db:ab:54:5b:03:29: 55:de:53:a7:fb:d7:06:ac:0e:56:f8:39:58:da:9e: 37:b4:a3:96:8f:c3:7f:37:32:20:a2:02:91:f0:27: b5:be:6b:2c:5f:00:bf:86:80:b7:91:7d:73:31:6d: 0a:3a:e3:fb:d4:81:5e:71:3b:81:cb:42:da:f0:b1: 75:d4:71:71:75:11:32:80:7b:9d:8d:0b:f0:61:ad: 55:7c:cd:be:69:f1:43:6d:57:c8:b4:52:eb:92:ff: 79:cf:9f:9c:c0:99:da:7f:f5:b4:76:5b:dd:ab:00: df:61:1d:59:8f:2a:fe:f4:40:98:79:59:9d:c9:35: c1:18:f0:94:4e:08:75:ef:ad:e1:d9:41:bd:1b:b6: 91:ac:64:7a:35:a9:8f:f0:c5:75:73:af:b4:de:54: f1:d3:92:18:2a:33:39:34:25:51:1f:1b:5e:48:3a: 71:fe:81:1f:ef:34:eb:3e:32:f2:e5:4c:5f:06:df: e0:6a:70:fc:12:69:4b:96:7f:23:93:0c:e8:12:36: e2:a9:54:15:e7:45:80:a8:d1:85:97:5f:85:c0:6e: 85:53:89:ce:f0:45:63:b2:78:7a:52:ff:c3:56:86: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:47:39:23:19:9E:9C:1D:41:9A:43:42:FB:BA:84:88:A7:FA:DB:1B X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:71:f8:b2:e6:ca:db:06:49:b4:bb:16:e6:96:88:65:74:44: 24:0c:7d:f6:4a:31:29:2c:b6:f4:5f:88:c7:ba:3e:30:4a:17: 1d:27:49:47:fe:da:10:19:4e:98:ea:97:f3:6f:7d:fc:06:30: 8c:8c:1e:bf:46:b0:81:1b:7e:1d:17:22:ae:75:3c:19:62:ae: ef:a6:76:04:7e:23:7f:25:dd:5a:87:a3:6e:f9:34:a9:af:95: a0:e0:cc:c2:96:d0:5a:0c:22:f2:59:cb:bf:3f:69:85:cf:fa: e6:4c:f2:2d:1d:cf:9b:4f:a4:dd:97:98:13:c3:fa:be:fa:5b: cd:9d:7f:01:a4:ac:b6:0b:d6:6b:d8:13:8c:b1:ca:bb:4d:89: 59:b3:99:1d:16:07:88:75:b5:0f:eb:d7:81:cc:b8:ea:de:05: a3:4e:56:00:83:41:92:c1:ef:d6:aa:73:52:42:a1:31:ad:a0: f0:02:c5:b9:f4:c0:8e:0a:fa:47:d7:a3:7e:96:89:ad:f4:a3: 18:88:02:bb:32:e1:f5:23:05:ce:82:a5:dc:40:7c:46:e8:68: 5e:80:9c:e2:d3:4f:4c:c7:b9:eb:37:cd:84:2a:43:5d:4a:fa: 03:95:ab:05:09:c2:e2:68:58:4d:1d:96:d6:21:38:d1:73:cf: ac:eb:6d:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiKMxxiwpbk9Jk/X1siaxYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUwODA4MTUwMTAyWhcNMjUwODA5MTUwMTAyWjAzMTEwLwYDVQQD EyhiMTQ3MzkyMzE5OWU5YzFkNDE5YTQzNDJmYmJhODQ4OGE3ZmFkYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmR8RsiXjDolGC7KWvJOFM7aRnfX htfbq1RbAylV3lOn+9cGrA5W+DlY2p43tKOWj8N/NzIgogKR8Ce1vmssXwC/hoC3 kX1zMW0KOuP71IFecTuBy0La8LF11HFxdREygHudjQvwYa1VfM2+afFDbVfItFLr kv95z5+cwJnaf/W0dlvdqwDfYR1Zjyr+9ECYeVmdyTXBGPCUTgh1763h2UG9G7aR rGR6NamP8MV1c6+03lTx05IYKjM5NCVRHxteSDpx/oEf7zTrPjLy5UxfBt/ganD8 EmlLln8jkwzoEjbiqVQV50WAqNGFl1+FwG6FU4nO8EVjsnh6Uv/DVoaXswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFHOSMZnpwdQZpDQvu6hIin+tsbMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnH4subK 2wZJtLsW5paIZXREJAx99koxKSy29F+Ix7o+MEoXHSdJR/7aEBlOmOqX8299/AYw jIwev0awgRt+HRcirnU8GWKu76Z2BH4jfyXdWoejbvk0qa+VoODMwpbQWgwi8lnL vz9phc/65kzyLR3Pm0+k3ZeYE8P6vvpbzZ1/AaSstgvWa9gTjLHKu02JWbOZHRYH iHW1D+vXgcy46t4Fo05WAINBksHv1qpzUkKhMa2g8ALFufTAjgr6R9ejfpaJrfSj GIgCuzLh9SMFzoKl3EB8RuhoXoCc4tNPTMe56zfNhCpDXUr6A5WrBQnC4mhYTR2W 1iE40XPPrOtthw== -----END CERTIFICATE-----Generated at Fri Aug 8 19:31:46 2025 by rpki-client