$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: IAjnRvoD5Enur6yE7mpCG99SnnHaAGarn/2XM1DxKcc= Subject key identifier: 2A:09:D9:3A:A9:6A:00:A2:9C:8B:1F:E2:B8:CF:B6:6A:69:A8:14:AC Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019893A491F26F28CFE1E59B1A67A1602365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1646 Signing time: Sun 10 Aug 2025 11:01:32 +0000 Manifest this update: Sun 10 Aug 2025 11:01:32 +0000 Manifest next update: Mon 11 Aug 2025 11:01:32 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: AAWPbPjTyVT988aYaAp0o8ug4CA.roa (hash: W0Vm8/GtO/KKeUbt2/qoBL2G7a3VmqlowMCbkwrkEEM=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: hSBCt3gPjKYgHoIbQjMcAv1r8yxIQ+eE2I5Qib3WsDg=) 11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 12: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 13: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 11 Aug 2025 11:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:93:a4:91:f2:6f:28:cf:e1:e5:9b:1a:67:a1:60:23:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Aug 10 11:01:32 2025 GMT Not After : Aug 11 11:01:32 2025 GMT Subject: CN=2a09d93aa96a00a29c8b1fe2b8cfb66a69a814ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:78:9a:96:75:a9:66:02:13:97:8b:bc:ab:59: 53:b9:f8:ed:49:2e:d3:43:b8:c5:4e:9c:65:b9:6f: 07:dc:64:b9:94:9b:cc:20:43:65:82:6f:3d:83:43: 78:75:0a:59:49:f3:fc:f2:34:64:56:36:45:8e:6c: dd:99:3a:54:a4:e6:c2:01:83:41:2b:cf:b9:08:c5: e3:df:43:5a:e2:86:d4:37:f8:f7:37:52:52:b0:29: 32:52:37:b2:e3:8a:fb:52:8e:65:1a:44:7e:bb:73: 87:16:5b:d4:62:91:7d:dd:fc:b1:36:58:57:4f:c2: de:4a:57:26:b4:ad:84:b9:9e:8e:15:f9:7a:83:2e: e3:4a:e2:78:52:f2:2a:b7:fc:cd:2f:1e:e2:4a:5a: a5:aa:d9:26:b4:e1:7e:e0:99:06:01:50:b2:9f:1f: 3f:e0:d1:23:eb:2e:94:06:47:41:0a:5e:49:b6:72: 54:b7:07:84:28:e4:e0:9b:00:d8:b4:f3:47:bc:08: db:6d:88:90:56:9c:eb:bb:d9:5a:2b:f8:6a:d2:db: 7f:19:1e:06:6a:9d:71:de:a8:99:78:86:69:7b:c5: fa:da:bc:88:ec:6b:51:9a:ca:02:dd:34:63:fd:c2: c7:6a:e0:e6:53:f7:8f:6a:6e:18:d4:59:e5:f2:64: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:D9:3A:A9:6A:00:A2:9C:8B:1F:E2:B8:CF:B6:6A:69:A8:14:AC X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d2:ba:e5:4b:b8:4d:77:d2:4f:28:bb:79:f1:e7:6f:f8:3b: 46:d4:13:87:1b:c6:55:7a:18:89:82:25:a7:35:ad:9f:88:46: c6:cf:90:27:20:2d:39:8d:78:fa:84:23:3c:40:1f:76:c8:46: 31:66:5d:f6:2b:94:f0:6c:38:fa:2c:5b:84:9e:2b:ba:a9:57: bc:9d:16:6a:ac:c0:48:f2:2c:0a:eb:c2:3a:b7:49:a5:b9:f5: ab:b5:dd:a8:d9:53:72:91:13:16:79:4b:9f:08:d5:58:88:25: cc:67:ae:3d:08:05:8c:6e:e3:0f:02:ea:63:28:af:40:ed:ad: 4b:21:64:12:9a:15:75:4d:3d:34:db:bc:69:16:e3:b0:25:2e: 10:18:4e:eb:82:16:5f:ae:78:1d:ef:65:4e:d1:3f:37:d2:19: aa:d0:70:ee:e9:a8:75:6a:66:ad:d2:ef:48:05:3b:2d:4c:7e: 9c:31:4c:3a:60:30:ad:bd:dc:98:64:4e:bc:b3:6b:f4:fe:43: 2a:b8:38:1c:94:34:2b:d0:94:6c:67:7b:a6:25:58:ff:5f:2c: c2:4b:26:5b:06:5b:d4:b7:31:45:93:de:b6:2b:fa:91:c9:5c: 2e:06:ed:ea:be:ad:a1:91:c1:bf:b8:e4:5d:d5:e4:86:8c:53: a0:32:25:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiTpJHybyjP4eWbGmehYCNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwODEwMTEwMTMyWhcNMjUwODExMTEwMTMyWjAzMTEwLwYDVQQD EygyYTA5ZDkzYWE5NmEwMGEyOWM4YjFmZTJiOGNmYjY2YTY5YTgxNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3ialnWpZgITl4u8q1lTufjtSS7T Q7jFTpxluW8H3GS5lJvMIENlgm89g0N4dQpZSfP88jRkVjZFjmzdmTpUpObCAYNB K8+5CMXj30Na4obUN/j3N1JSsCkyUjey44r7Uo5lGkR+u3OHFlvUYpF93fyxNlhX T8LeSlcmtK2EuZ6OFfl6gy7jSuJ4UvIqt/zNLx7iSlqlqtkmtOF+4JkGAVCynx8/ 4NEj6y6UBkdBCl5JtnJUtweEKOTgmwDYtPNHvAjbbYiQVpzru9laK/hq0tt/GR4G ap1x3qiZeIZpe8X62ryI7GtRmsoC3TRj/cLHauDmU/ePam4Y1Fnl8mSRAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoJ2TqpagCinIsf4rjPtmppqBSsMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtK65Uu4 TXfSTyi7efHnb/g7RtQThxvGVXoYiYIlpzWtn4hGxs+QJyAtOY14+oQjPEAfdshG MWZd9iuU8Gw4+ixbhJ4ruqlXvJ0WaqzASPIsCuvCOrdJpbn1q7XdqNlTcpETFnlL nwjVWIglzGeuPQgFjG7jDwLqYyivQO2tSyFkEpoVdU09NNu8aRbjsCUuEBhO64IW X654He9lTtE/N9IZqtBw7umodWpmrdLvSAU7LUx+nDFMOmAwrb3cmGROvLNr9P5D Krg4HJQ0K9CUbGd7piVY/18swksmWwZb1LcxRZPetiv6kclcLgbt6r6toZHBv7jk XdXkhoxToDIlNw== -----END CERTIFICATE-----Generated at Sun Aug 10 18:11:39 2025 by rpki-client