$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: U5PqjqTeaprue6nzaaozvbBdIKbveDKWXB+5L88DvMU= Subject key identifier: 42:45:CF:E3:F3:40:02:11:8C:86:D2:08:8A:FA:28:25:38:67:9E:0B Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 01987487407B2B2280472AE69AA269C4B5A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 010B Signing time: Mon 04 Aug 2025 10:01:17 +0000 Manifest this update: Mon 04 Aug 2025 10:01:17 +0000 Manifest next update: Tue 05 Aug 2025 10:01:17 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: OWURZZQfXBLCjrMIo9lI7C6_8rU.roa (hash: mhkt0q1UgZZPM01b3Aszei1MJkXP1Fj7gDNO1ZQ7Zg0=) 5: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 6: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 7: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 8: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 9: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 10: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 11: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 12: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: +OESTmvfjZa5rkRjYOwtGfgZxc/1ACgDpg9MaMYzBNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:87:40:7b:2b:22:80:47:2a:e6:9a:a2:69:c4:b5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Aug 4 10:01:17 2025 GMT Not After : Aug 5 10:01:17 2025 GMT Subject: CN=4245cfe3f34002118c86d2088afa282538679e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:15:d6:b0:e6:60:2d:3c:75:5d:f5:8a:e3: 1b:6d:fe:c2:06:b9:66:9b:81:db:fa:10:03:fc:cf: 2b:96:4b:82:a5:ad:09:cf:2d:e7:cf:1a:25:95:8e: 4a:94:11:8e:60:3f:80:6d:70:41:15:37:00:bb:c8: df:48:90:9e:ac:69:e7:e2:ec:d8:5a:da:89:9c:fb: 8c:73:60:1d:7d:49:03:df:53:94:ef:11:99:91:6e: 76:46:db:3e:1d:7c:00:c1:31:ce:fb:27:a6:b8:be: 16:85:13:b4:54:03:c2:8d:a8:45:84:29:71:50:ec: 2e:df:09:9b:38:cd:48:70:d0:2a:fb:7e:ca:47:ff: 13:28:c0:be:dd:34:37:7d:b7:ec:11:4c:56:cd:53: 11:64:7b:64:f6:08:4b:11:91:21:8c:47:c5:58:03: 30:d4:b4:3b:40:64:d8:e7:06:c7:a6:aa:89:b7:d9: 74:a7:c3:ed:53:70:04:da:c4:ea:2a:e3:dc:8c:9f: fa:76:61:a8:cf:38:d5:de:37:88:f2:e2:5b:64:7c: a0:2d:c3:c8:2c:50:70:7e:15:c5:53:2a:11:91:fb: 43:8f:0e:40:14:98:c1:bd:06:1d:ec:77:b2:ef:0a: 20:50:11:1b:db:59:53:1f:a0:0d:cb:b9:05:39:2b: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:45:CF:E3:F3:40:02:11:8C:86:D2:08:8A:FA:28:25:38:67:9E:0B X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:55:af:2d:30:76:f4:e0:07:c8:70:cf:e9:c1:b7:e1:ee:00: 15:10:59:7c:22:8c:59:7a:03:10:a2:ae:af:2a:cb:92:d8:67: 26:7b:05:d8:29:33:9e:7a:2e:35:80:70:14:4d:d4:10:3e:45: 27:a2:b1:64:82:20:ec:50:80:4a:a0:7c:18:1b:12:e0:f9:b2: 59:b6:ef:d5:83:01:d8:54:b1:6e:35:e2:e5:1e:09:79:1c:bb: d5:26:40:10:d5:f7:cb:78:2d:35:5e:5d:7c:70:51:da:9a:5b: cf:63:42:a1:52:f6:6f:b5:57:5d:df:4a:4d:5a:5f:04:c5:bf: 6c:da:5e:b1:32:e1:96:87:95:f2:99:79:0f:91:e3:30:eb:e4: d6:3a:64:8e:6f:bc:da:ed:4d:fc:86:7c:80:57:6a:e3:31:3a: d7:bc:2e:e1:21:25:e3:e1:33:c9:48:40:67:47:e4:a0:dc:33: 73:d1:d7:5c:92:2c:6e:d4:cd:94:0c:28:de:28:f7:01:49:de: 6b:60:0a:37:f1:c4:a9:a6:f4:4c:43:7f:ee:e6:ec:bc:2e:78: b9:fe:7c:e3:8b:3e:eb:bc:6b:6c:f2:c9:59:ae:f5:2a:0f:50: a8:42:8c:ce:cf:07:cc:1d:db:03:a5:13:c2:59:50:46:58:d4: 3f:af:ca:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0h0B7KyKARyrmmqJpxLWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUwODA0MTAwMTE3WhcNMjUwODA1MTAwMTE3WjAzMTEwLwYDVQQD Eyg0MjQ1Y2ZlM2YzNDAwMjExOGM4NmQyMDg4YWZhMjgyNTM4Njc5ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngQV1rDmYC08dV31iuMbbf7CBrlm m4Hb+hAD/M8rlkuCpa0Jzy3nzxollY5KlBGOYD+AbXBBFTcAu8jfSJCerGnn4uzY WtqJnPuMc2AdfUkD31OU7xGZkW52Rts+HXwAwTHO+yemuL4WhRO0VAPCjahFhClx UOwu3wmbOM1IcNAq+37KR/8TKMC+3TQ3fbfsEUxWzVMRZHtk9ghLEZEhjEfFWAMw 1LQ7QGTY5wbHpqqJt9l0p8PtU3AE2sTqKuPcjJ/6dmGozzjV3jeI8uJbZHygLcPI LFBwfhXFUyoRkftDjw5AFJjBvQYd7Hey7wogUBEb21lTH6ANy7kFOSvAnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJFz+PzQAIRjIbSCIr6KCU4Z54LMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVWvLTB2 9OAHyHDP6cG34e4AFRBZfCKMWXoDEKKuryrLkthnJnsF2CkznnouNYBwFE3UED5F J6KxZIIg7FCASqB8GBsS4PmyWbbv1YMB2FSxbjXi5R4JeRy71SZAENX3y3gtNV5d fHBR2ppbz2NCoVL2b7VXXd9KTVpfBMW/bNpesTLhloeV8pl5D5HjMOvk1jpkjm+8 2u1N/IZ8gFdq4zE617wu4SEl4+EzyUhAZ0fkoNwzc9HXXJIsbtTNlAwo3ij3AUne a2AKN/HEqab0TEN/7ubsvC54uf5844s+67xrbPLJWa71Kg9QqEKMzs8HzB3bA6UT wllQRljUP6/KTg== -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:23 2025 by rpki-client