$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: JwRSoyhVDr1jBtx4lGYCI/mu7SqYAgNTnwPq7i0cGJA= Subject key identifier: FF:6A:81:22:38:8E:00:86:E0:C1:5E:44:79:97:20:EE:F6:04:6B:AB Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 01988920324170283526F998B5C50111DDA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 1632 Signing time: Fri 08 Aug 2025 10:00:44 +0000 Manifest this update: Fri 08 Aug 2025 10:00:44 +0000 Manifest next update: Sat 09 Aug 2025 10:00:44 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: VwLV6x+dkGli1o/buqCfZ5gU8IXUKXJTfGjfaWqTFYI=) 7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=) 10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 09 Aug 2025 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:89:20:32:41:70:28:35:26:f9:98:b5:c5:01:11:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Aug 8 10:00:44 2025 GMT Not After : Aug 9 10:00:44 2025 GMT Subject: CN=ff6a8122388e0086e0c15e44799720eef6046bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:d3:22:cb:fa:d3:3d:58:5a:4f:07:4e:79: d0:0e:a6:8b:82:ac:92:ad:ff:d3:dd:26:d0:04:08: 10:b0:99:29:b3:20:41:fa:42:20:2e:22:db:fd:e7: aa:00:a6:95:b2:01:49:24:1b:9e:94:05:9d:eb:13: 2b:e8:43:cf:12:32:0e:fa:c4:9a:a9:dd:a7:4b:b2: 8b:07:be:49:a5:ba:c3:8d:b8:a0:f7:e1:a9:22:16: 92:53:48:39:7a:ec:4b:51:2e:ec:b5:37:b9:c9:ce: e5:4b:d4:53:d2:1c:8e:0c:57:b0:5f:6a:e5:93:93: 66:91:7c:eb:3c:0d:27:be:60:df:b8:82:9d:e7:d9: 05:c6:ed:52:62:ef:87:64:ae:44:eb:1f:ba:a2:d7: 9b:fb:f3:13:af:84:99:f0:b4:28:a3:41:1b:38:79: 21:0b:c5:a6:f2:8f:95:6c:71:41:02:81:20:b4:4c: 1d:12:25:2f:85:28:67:01:d4:f4:2d:68:c8:96:88: 71:0d:f3:4e:79:ea:fa:60:b0:e4:bd:c1:0d:50:72: 92:d0:11:8e:b0:14:c4:27:2f:db:39:9f:88:3b:e1: 0d:78:65:51:22:60:d3:0d:fa:69:06:7b:3e:a2:54: 83:d0:0b:d1:bd:bb:9b:51:90:f9:2a:f2:d9:0a:18: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6A:81:22:38:8E:00:86:E0:C1:5E:44:79:97:20:EE:F6:04:6B:AB X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0c:2a:e4:2e:3d:97:4e:a9:2f:cf:02:20:22:ea:11:72:87: 2d:87:aa:f7:30:a1:1b:b8:4f:1e:bf:28:71:cc:6c:a2:24:38: fe:32:75:96:d4:c2:de:66:7d:dc:9a:46:4b:7d:78:9f:c1:f1: a3:71:9a:65:d4:8f:e8:68:e9:ba:41:26:d3:67:f8:90:c6:01: db:3d:8f:95:66:d1:68:4a:37:f4:5c:d4:3a:d4:92:ab:ab:c2: 89:aa:05:38:a6:6c:54:51:68:29:84:cf:cd:0b:b4:1c:cb:db: f9:fb:88:84:09:46:d0:57:98:a7:e9:9a:c8:47:da:38:77:59: b1:0a:a2:b7:50:17:7f:d2:29:dc:69:34:0c:95:75:d4:41:e2: 9e:d5:c1:61:82:50:5a:60:22:04:7f:f2:43:fa:fb:07:81:33: b9:e2:dc:8a:77:75:c6:ed:9c:c8:b3:88:58:cd:43:36:93:8a: 71:01:49:63:bf:88:99:3e:71:4b:af:6b:95:56:e3:01:d5:2d: 9d:93:1c:6f:48:ef:a2:62:e1:a9:63:f0:af:2f:48:63:ac:59: ae:e2:dd:45:18:56:6f:c5:12:73:63:2e:c5:d5:ab:56:50:78: c2:bf:d7:5f:c6:1e:50:66:76:66:e5:f2:ba:31:d6:e0:f2:d7: 40:7a:57:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiJIDJBcCg1JvmYtcUBEd2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUwODA4MTAwMDQ0WhcNMjUwODA5MTAwMDQ0WjAzMTEwLwYDVQQD EyhmZjZhODEyMjM4OGUwMDg2ZTBjMTVlNDQ3OTk3MjBlZWY2MDQ2YmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaLTIsv60z1YWk8HTnnQDqaLgqyS rf/T3SbQBAgQsJkpsyBB+kIgLiLb/eeqAKaVsgFJJBuelAWd6xMr6EPPEjIO+sSa qd2nS7KLB75JpbrDjbig9+GpIhaSU0g5euxLUS7stTe5yc7lS9RT0hyODFewX2rl k5NmkXzrPA0nvmDfuIKd59kFxu1SYu+HZK5E6x+6oteb+/MTr4SZ8LQoo0EbOHkh C8Wm8o+VbHFBAoEgtEwdEiUvhShnAdT0LWjIlohxDfNOeer6YLDkvcENUHKS0BGO sBTEJy/bOZ+IO+ENeGVRImDTDfppBns+olSD0AvRvbubUZD5KvLZChjRxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9qgSI4jgCG4MFeRHmXIO72BGurMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAwq5C49 l06pL88CICLqEXKHLYeq9zChG7hPHr8occxsoiQ4/jJ1ltTC3mZ93JpGS314n8Hx o3GaZdSP6GjpukEm02f4kMYB2z2PlWbRaEo39FzUOtSSq6vCiaoFOKZsVFFoKYTP zQu0HMvb+fuIhAlG0FeYp+mayEfaOHdZsQqit1AXf9Ip3Gk0DJV11EHintXBYYJQ WmAiBH/yQ/r7B4EzueLcind1xu2cyLOIWM1DNpOKcQFJY7+ImT5xS69rlVbjAdUt nZMcb0jvomLhqWPwry9IY6xZruLdRRhWb8USc2MuxdWrVlB4wr/XX8YeUGZ2ZuXy ujHW4PLXQHpXzA== -----END CERTIFICATE-----Generated at Fri Aug 8 19:36:40 2025 by rpki-client