$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: CvxK1WXWqXsEINO2N6csBhxCXqOlIT7uue9kk+YMT74= Subject key identifier: C3:E1:3B:8C:6A:EB:67:FD:09:0D:5A:92:B5:87:67:6C:13:72:A1:01 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 01987E9CC338E329A39219904F77A748F824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 1639 Signing time: Wed 06 Aug 2025 09:00:59 +0000 Manifest this update: Wed 06 Aug 2025 09:00:59 +0000 Manifest next update: Thu 07 Aug 2025 09:00:59 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 5: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 6: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: DarZjkNgBfPHKZzemCWqXUdXjusWOPIctjE1/qs/Fgg=) 7: PkUBswB6akpRoaWoY8idhiZO-0s.roa (hash: FTb6NXOjB3gAzHYZQp3OqT2aASeT3Lw8OwXcNy1cX04=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 12: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 13: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 14: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 15: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 16: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 17: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 18: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 19: u2jjT9a7gurHsCBuG6MLd36hk6U.roa (hash: 5ifFXhTaQ0rt9DDM8OyMYLPCzUHaKXbmifUQMc2oMtc=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=) 22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:7e:9c:c3:38:e3:29:a3:92:19:90:4f:77:a7:48:f8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Aug 6 09:00:59 2025 GMT Not After : Aug 7 09:00:59 2025 GMT Subject: CN=c3e13b8c6aeb67fd090d5a92b587676c1372a101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:0a:b8:fa:1f:b4:e0:48:b7:8b:c3:58:06: f2:90:d5:62:dc:b0:f2:59:3a:06:c7:f3:65:e4:f1: 3e:d6:77:8e:5a:d1:56:2a:f7:74:6a:ef:87:0f:45: d1:6b:bb:86:8e:4b:29:ac:6b:ff:a6:d0:58:99:99: 84:41:c3:3a:7d:20:9f:fd:b6:55:d4:26:f0:07:21: e5:e7:7b:a3:a3:e8:18:23:14:77:b9:d9:49:41:12: 05:0f:ad:49:13:e2:c0:75:92:27:b1:94:9f:b3:4b: b4:c4:16:f5:a9:53:a9:2a:f9:12:b3:80:05:b3:75: 2b:72:df:a7:d7:e4:70:4a:79:ea:33:ca:db:b7:95: 43:27:b8:e5:0b:64:45:5f:aa:ac:8b:27:2b:ff:4a: 17:6e:0e:d7:11:de:77:6a:fb:37:ec:73:2a:fd:04: bd:d8:ac:be:bf:3b:17:17:64:ef:18:74:90:d7:28: 89:f8:68:d8:7a:4f:21:77:5c:a1:b2:e5:a3:89:93: 7f:9c:94:48:2a:d6:03:a0:08:5b:ba:a1:8b:f0:6b: 69:ac:4c:2e:17:00:40:e2:61:5f:77:4a:59:d6:4a: 82:ad:e4:74:44:1b:7c:8f:f6:32:77:74:ba:cf:96: 55:4f:af:9b:d4:dc:0a:f7:fd:8c:cf:98:10:50:c3: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E1:3B:8C:6A:EB:67:FD:09:0D:5A:92:B5:87:67:6C:13:72:A1:01 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d8:cc:00:b4:f1:6e:7e:c4:ec:d7:90:d8:b7:39:92:5b:55: 93:28:54:65:dd:53:59:d1:ca:6f:27:91:f1:ad:c7:d4:b4:65: 0a:3c:df:b4:01:f4:00:aa:bb:c7:40:cf:1c:8f:e9:4d:63:10: a5:71:e3:e7:81:9d:ce:1b:9e:72:2f:d1:3f:b0:82:4b:61:04: 7d:fa:b1:7b:44:e5:4f:4c:9a:e4:2f:98:07:eb:b0:0e:68:59: a6:83:be:58:65:c5:09:10:f9:0e:ef:eb:0f:51:8c:4d:d6:54: ae:76:2e:9e:6f:4f:f8:f1:6c:59:de:ea:bf:82:91:8a:9d:81: d9:36:98:26:f7:4e:9d:ae:56:2e:43:ec:c1:5d:f3:87:81:d4: ea:25:e6:5b:15:5e:91:82:d7:d3:d9:00:ee:96:01:84:d5:25: 5d:3a:bc:43:f4:7e:ca:b6:38:43:0b:15:94:b9:6d:08:08:0e: 7f:9a:09:f1:55:77:f5:ab:e4:21:7e:da:48:c6:1f:8c:e6:c6: e9:cc:bd:a3:72:38:39:9e:ba:8f:09:b4:b7:bb:ce:c0:75:9e: 0a:59:21:f3:85:87:d3:7e:6b:82:96:e8:28:cd:53:d9:5b:d9: 45:76:fb:af:e9:10:f8:5f:9a:34:39:93:b3:73:1e:a6:38:e1: 61:03:3e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh+nMM44ymjkhmQT3enSPgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUwODA2MDkwMDU5WhcNMjUwODA3MDkwMDU5WjAzMTEwLwYDVQQD EyhjM2UxM2I4YzZhZWI2N2ZkMDkwZDVhOTJiNTg3Njc2YzEzNzJhMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubcKuPoftOBIt4vDWAbykNVi3LDy WToGx/Nl5PE+1neOWtFWKvd0au+HD0XRa7uGjksprGv/ptBYmZmEQcM6fSCf/bZV 1CbwByHl53ujo+gYIxR3udlJQRIFD61JE+LAdZInsZSfs0u0xBb1qVOpKvkSs4AF s3Urct+n1+RwSnnqM8rbt5VDJ7jlC2RFX6qsiycr/0oXbg7XEd53avs37HMq/QS9 2Ky+vzsXF2TvGHSQ1yiJ+GjYek8hd1yhsuWjiZN/nJRIKtYDoAhbuqGL8GtprEwu FwBA4mFfd0pZ1kqCreR0RBt8j/Yyd3S6z5ZVT6+b1NwK9/2Mz5gQUMNQNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPhO4xq62f9CQ1akrWHZ2wTcqEBMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtjMALTx bn7E7NeQ2Lc5kltVkyhUZd1TWdHKbyeR8a3H1LRlCjzftAH0AKq7x0DPHI/pTWMQ pXHj54Gdzhueci/RP7CCS2EEffqxe0TlT0ya5C+YB+uwDmhZpoO+WGXFCRD5Du/r D1GMTdZUrnYunm9P+PFsWd7qv4KRip2B2TaYJvdOna5WLkPswV3zh4HU6iXmWxVe kYLX09kA7pYBhNUlXTq8Q/R+yrY4QwsVlLltCAgOf5oJ8VV39avkIX7aSMYfjObG 6cy9o3I4OZ66jwm0t7vOwHWeClkh84WH035rgpboKM1T2VvZRXb7r+kQ+F+aNDmT s3MepjjhYQM+qQ== -----END CERTIFICATE-----Generated at Wed Aug 6 16:26:07 2025 by rpki-client