$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: 2rK9lTZGRZXh8IfoX8jhD757Fh2tOK/tfyu+7fLdWZA= Subject key identifier: BE:0C:AF:B3:28:82:83:D6:DF:56:1F:D1:98:62:FB:D4:2F:5C:26:DE Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 01987486F312DB957BE0F7A7E8C7DC796A0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1236 Signing time: Mon 04 Aug 2025 10:00:57 +0000 Manifest this update: Mon 04 Aug 2025 10:00:57 +0000 Manifest next update: Tue 05 Aug 2025 10:00:57 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: ucPlwcRfk7COc8zVFQWBTtFhoGSieIbG2mpIDM/Xtcs=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:86:f3:12:db:95:7b:e0:f7:a7:e8:c7:dc:79:6a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Aug 4 10:00:57 2025 GMT Not After : Aug 5 10:00:57 2025 GMT Subject: CN=be0cafb3288283d6df561fd19862fbd42f5c26de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:39:4a:fd:a6:8f:cc:4c:dd:82:31:61:13: 5b:03:03:15:67:6e:ba:85:e3:c4:f2:99:1e:ac:30: 9a:34:75:a1:fc:e5:6f:59:e2:bf:b8:68:27:44:0b: 12:ab:ae:df:87:a7:58:d3:94:a8:b7:84:f1:9c:41: d3:9b:67:b4:6b:7f:d0:4d:b4:40:a1:2f:a5:2c:f8: 96:82:ff:c9:e7:e2:cd:61:37:23:7b:8c:19:23:b5: 9d:b6:42:ad:4b:99:9b:c0:6c:de:28:82:4c:df:fc: bf:73:d5:78:44:6e:d1:43:50:7f:20:04:2a:26:f5: 34:09:2d:fa:8c:3d:a9:3f:e1:50:c2:5e:e4:d7:35: e4:e7:de:3e:ee:7c:ec:bf:cf:8f:74:0e:eb:3f:ad: c2:8d:45:33:6e:7c:aa:95:4f:0f:cf:53:c6:d6:49: 86:db:79:61:85:b3:2e:c0:ca:06:69:75:b4:f9:8b: e4:62:96:af:15:e7:58:7e:97:3d:31:93:c7:58:44: f8:b5:49:16:78:5b:d2:07:ad:43:00:2a:18:36:80: 9f:8e:7d:f2:bf:e3:82:e3:1e:14:00:e0:a5:56:80: 65:56:b3:5c:79:ee:99:5a:5d:10:8b:22:64:98:42: 6c:84:dc:74:6e:81:4a:f7:bd:a6:1a:26:68:c1:91: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0C:AF:B3:28:82:83:D6:DF:56:1F:D1:98:62:FB:D4:2F:5C:26:DE X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:16:5c:30:b4:00:a5:5c:0e:a0:29:b6:15:4f:1a:13:4b:6a: 15:c3:8e:72:d1:26:7b:f2:b6:03:57:f8:a0:ce:e9:cf:30:ba: 67:6c:69:24:ab:f3:35:d0:74:04:81:d9:53:6f:b7:53:9a:9d: 71:11:2e:2e:22:13:c6:4d:3c:1f:84:6b:45:00:63:76:7c:85: df:aa:90:50:ae:98:f9:5f:dc:ab:29:cd:ca:f2:28:74:fc:b3: cc:ed:2d:37:94:c8:17:7f:05:c1:03:0c:00:66:fa:61:95:d4: 26:34:f7:00:d4:82:bd:5d:aa:83:4d:88:ae:dd:af:d5:35:31: 4d:da:e5:f1:3e:9a:08:cc:70:d9:d2:e7:14:54:d9:a9:b7:83: f3:68:a6:6c:53:87:b8:b5:ae:41:22:e3:5b:f2:60:65:7c:3f: fb:3f:7f:40:e1:13:a1:f5:01:ce:87:3f:31:66:a2:9b:62:64: f9:09:4b:55:f9:37:48:6a:8c:f9:d4:3f:48:07:4b:d1:27:0c: 4a:bb:6c:ae:49:c3:04:1e:59:b4:e2:27:eb:fc:80:30:57:ef: f7:a5:46:14:03:d2:5c:48:85:43:84:39:5c:6d:a8:32:0f:b9: 4f:43:c9:ed:9f:5f:72:89:11:e0:c1:ef:ed:c7:04:ba:3a:61: 00:bd:0f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0hvMS25V74Pen6MfceWoOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwODA0MTAwMDU3WhcNMjUwODA1MTAwMDU3WjAzMTEwLwYDVQQD EyhiZTBjYWZiMzI4ODI4M2Q2ZGY1NjFmZDE5ODYyZmJkNDJmNWMyNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6E5Sv2mj8xM3YIxYRNbAwMVZ266 hePE8pkerDCaNHWh/OVvWeK/uGgnRAsSq67fh6dY05Sot4TxnEHTm2e0a3/QTbRA oS+lLPiWgv/J5+LNYTcje4wZI7WdtkKtS5mbwGzeKIJM3/y/c9V4RG7RQ1B/IAQq JvU0CS36jD2pP+FQwl7k1zXk594+7nzsv8+PdA7rP63CjUUzbnyqlU8Pz1PG1kmG 23lhhbMuwMoGaXW0+YvkYpavFedYfpc9MZPHWET4tUkWeFvSB61DACoYNoCfjn3y v+OC4x4UAOClVoBlVrNcee6ZWl0QiyJkmEJshNx0boFK972mGiZowZGkLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4Mr7MogoPW31Yf0Zhi+9QvXCbeMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRZcMLQA pVwOoCm2FU8aE0tqFcOOctEme/K2A1f4oM7pzzC6Z2xpJKvzNdB0BIHZU2+3U5qd cREuLiITxk08H4RrRQBjdnyF36qQUK6Y+V/cqynNyvIodPyzzO0tN5TIF38FwQMM AGb6YZXUJjT3ANSCvV2qg02Irt2v1TUxTdrl8T6aCMxw2dLnFFTZqbeD82imbFOH uLWuQSLjW/JgZXw/+z9/QOETofUBzoc/MWaim2Jk+QlLVfk3SGqM+dQ/SAdL0ScM SrtsrknDBB5ZtOIn6/yAMFfv96VGFAPSXEiFQ4Q5XG2oMg+5T0PJ7Z9fcokR4MHv 7ccEujphAL0PBw== -----END CERTIFICATE-----Generated at Mon Aug 4 13:57:42 2025 by rpki-client