$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft File: nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json) Hash identifier: I5OXMWU2NZFEgHpjiJcJc4fYe3dez/SnAGhwmch2cvU= Subject key identifier: 63:CB:60:A5:E2:05:34:88:CA:53:D9:CE:D8:4C:8F:DB:71:F3:CD:46 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 0198D583D502901EF0601295D60DD3B77884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft Manifest number: 166E Signing time: Sat 23 Aug 2025 06:00:43 +0000 Manifest this update: Sat 23 Aug 2025 06:00:43 +0000 Manifest next update: Sun 24 Aug 2025 06:00:43 +0000 Files and hashes: 1: 1-W6dNN7nS41OhiX2-XV_KGHmokY.roa (hash: Onsuz/Jpw7AenTCzarTD9Si7u90ClXn9NgWm5b3k5iE=) 2: 2YqdGEIdMzY2vhH5bWxnKdddSEU.roa (hash: 9LWiPodvJQom88P/dBp1yCiWmPws557eiQuQBNs6yF8=) 3: BviWEmaP3_lgIrWubDU6uMTA2H8.roa (hash: atRgCl8RxHKHCEL0/AcFViVgxr58CMMvRd/DcUp5/fw=) 4: C0Doi3jyevr2-pR2IftNN92p59I.roa (hash: IIK5hBd1iLDFxEspDzzgvSmRdaIP8iF48tDZdnCcOcc=) 5: EV3RLPCtuI3lLeq6ottkvu3RCX0.roa (hash: j3FY48aHBuxh9abdvmrJO1cvpOYjsUrGf4ptwj/I2mQ=) 6: FybzIFcZSE5lsnT6b5cIlMlH9IM.roa (hash: toJxUUA3/IPlRPBEPuQc0lw9h60Drcko4fLHszQIAow=) 7: IbQ-D2yslx0iHz7liSbbaOCcfXA.roa (hash: Kl5zFWGMECrHwpmHWu5uCTOc6qSUXrcJGW6y65HYm/g=) 8: MDI3PVTTBwcyecs75qaLcWEEgQU.roa (hash: J7xJKQP86jfo8IhCdMIH6NbDyPPPNyVklFSD5qYitM0=) 9: MNsgwpzMGo9ny09J-jp2iHl3erE.roa (hash: rsV4oTpDDAsXfrCe5I5AMLsbpMjSWW+2NPe89PcwdUY=) 10: NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa (hash: 8g5jKG/3k2R8GSQmnC21Ug5DsSBfIQTr0ptpHX5icAA=) 11: QQVkAwo--2Lt9xnTOmPMO5FGF7Y.roa (hash: bJ2Nfv2wZhNbOARIqp31fKQFXd4d6cW7n2uw7pHNCB4=) 12: SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa (hash: f9GEO2mKmV3YeM6oy8Q/SaJoAwb8zCw8nw1p8bg3GlE=) 13: aQCk6hvPoTmhPc0e5kydy3D8sWU.roa (hash: 6ETMfCfXE4+PmgEWBXrcFMAYtDdlxlq3pPGYTBG/KZ0=) 14: bT1D_GIGnTIb7UhfAkPO6nAxSAM.roa (hash: zt3d+v/4QH55XWn1NDaCM7sBKlqG8C4EgKfte1Y+FyE=) 15: dH7B0DaeyCDV-QwznQB8W2QHPrc.roa (hash: UjgYoN3aRA7tctag/yj4QVec+og5fXBAmkTeQQuaztU=) 16: fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa (hash: 2hWk6Tz7S8lDQWf6IFB7UfW3IQLP7xOfkykS1elEFd0=) 17: gMolns_uejn9VG4O2M9g9t6tvgo.roa (hash: pPHWNiYrbOjsjJvc3tnPANoOhTs+IAl6nKZxeY0Xyos=) 18: i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa (hash: yCustTGvO8JgJOXmLOMgvkNIm9AOeeXsZljacnVY85o=) 19: lI3KcK_JQBvOB3k2IueM3WHtrfw.roa (hash: Gb7bXt8QtmOseHG0MDJ5JR67PlBq2vdcxr+aQTeaaZE=) 20: mI7DIe-ZWUKxjXm68wpxaummpVQ.roa (hash: 8ILL3a5+iKTvSgugQcyufNykJWsVj3L0HY6IKspIJxE=) 21: mQTwlxrMVeib6W7__4VllTW-6C8.roa (hash: Ous0wtpwiez89Z5w9/QarT0NcGVwIRO+IhvC6Ze0CEc=) 22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: qwwzsK3U58rrC9wanSpnR54zptvOWef30Kw2vNM+qUs=) 23: ppW43VM2CosiQ0jXWBLP26MIgec.roa (hash: fkLyzmpdBhfbIOJrEyE+Zx2ZEoyizeyrfXYsByRxcls=) 24: qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa (hash: lgA7RrHTvmHBvzE9swyzozhILfgUmn/MQgrElmqhrAU=) 25: rUdLZ9H9NmIsZBannjA8IlEwiOU.roa (hash: UpDDwAK8lbQbhgQsmAizBJjhr50ngPTJj4DgWqUhhss=) 26: uazolYHYZBtijCrhgDu0uI9nLCk.roa (hash: PFT6HKinQsQ7x3TcytDfopexTxqZWQMq9Ui5wk2to2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:d5:02:90:1e:f0:60:12:95:d6:0d:d3:b7:78:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Aug 23 06:00:43 2025 GMT Not After : Aug 24 06:00:43 2025 GMT Subject: CN=63cb60a5e2053488ca53d9ced84c8fdb71f3cd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:6c:b5:f6:99:01:b0:03:d3:4f:f3:df:a0: d8:b0:fa:a6:41:de:a2:3c:3f:1b:35:ec:9a:34:9b: 0e:0a:25:72:ac:70:d6:6e:be:9c:f8:b0:3a:20:58: 4b:bd:7d:db:f9:b4:df:f5:b1:75:eb:0f:00:90:81: 6e:f8:96:f7:c1:57:b5:bc:0a:de:52:34:ad:8a:a9: a9:2b:e7:64:d2:57:7d:1b:fa:f2:68:ce:1e:ff:96: 9c:a9:00:fe:be:10:21:0f:46:d9:0b:a1:21:ac:2d: 94:0f:fb:56:b8:27:40:55:83:00:c4:f8:93:f1:c1: e6:07:ad:7c:7d:96:09:c6:f1:17:d5:da:8d:92:ce: 5a:50:04:7e:21:78:5c:e7:fe:f4:e8:22:11:af:f0: 27:46:45:e3:22:99:6a:b7:05:71:7c:b5:2a:e7:15: 53:57:42:c9:8b:92:6b:46:c3:d6:a8:31:f1:ae:3b: 74:db:20:80:92:0b:bc:66:4e:3c:52:35:de:96:44: 81:3d:5b:5a:8f:c8:94:52:c3:5f:d5:e8:2e:96:e1: 20:c0:d5:bb:b4:30:e6:dd:72:07:ae:29:a1:b1:51: c1:9b:8a:14:dd:e2:0b:cf:e3:e2:82:85:0c:18:40: 95:cb:fb:13:7d:1e:77:51:11:0a:82:48:ec:a4:27: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CB:60:A5:E2:05:34:88:CA:53:D9:CE:D8:4C:8F:DB:71:F3:CD:46 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b8:c5:71:c7:52:ca:7c:9e:b2:c9:a0:8f:6b:6e:43:06:d5: 56:75:03:06:45:9d:69:5b:84:fd:d6:a9:2b:eb:de:b0:55:9c: ac:3b:19:78:37:1e:13:d7:10:85:17:13:26:51:e7:42:76:42: 68:0a:93:74:17:82:f5:ad:c1:60:b3:c0:eb:1d:9d:6d:c5:bf: e8:ef:85:e3:03:a7:79:15:60:fe:36:3d:05:17:0f:a0:58:b9: b4:bf:78:9b:61:e6:17:b6:f1:f1:7f:22:aa:cc:65:bf:2d:e2: 4f:cd:a7:8b:fd:7c:fb:31:6c:63:00:51:c5:92:6d:4e:9c:63: e2:91:15:07:90:3e:dd:ec:3f:e7:0f:cb:9b:32:f5:50:1a:25: a8:71:06:b2:7d:2d:98:2d:b0:4f:3b:59:c0:fe:6a:0b:18:5b: 68:c8:ef:c1:16:7c:5e:7a:a6:42:97:e7:c3:21:c2:24:2a:6f: 40:c3:c6:61:e6:9c:a6:12:2f:5c:01:ce:3c:61:9a:cd:82:17: d2:d7:05:67:7c:5b:8a:69:42:d4:86:4a:bc:0d:d8:e5:75:cb: dc:ec:d4:a0:e0:9a:ad:85:9b:a1:17:c8:d5:7f:cc:91:25:2c: 48:44:84:5e:f0:c7:3d:69:8b:f8:60:37:1d:a0:c9:32:83:90: 6d:3c:7d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg9UCkB7wYBKV1g3Tt3iEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjUwODIzMDYwMDQzWhcNMjUwODI0MDYwMDQzWjAzMTEwLwYDVQQD Eyg2M2NiNjBhNWUyMDUzNDg4Y2E1M2Q5Y2VkODRjOGZkYjcxZjNjZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryNstfaZAbAD00/z36DYsPqmQd6i PD8bNeyaNJsOCiVyrHDWbr6c+LA6IFhLvX3b+bTf9bF16w8AkIFu+Jb3wVe1vAre UjStiqmpK+dk0ld9G/ryaM4e/5acqQD+vhAhD0bZC6EhrC2UD/tWuCdAVYMAxPiT 8cHmB618fZYJxvEX1dqNks5aUAR+IXhc5/706CIRr/AnRkXjIplqtwVxfLUq5xVT V0LJi5JrRsPWqDHxrjt02yCAkgu8Zk48UjXelkSBPVtaj8iUUsNf1eguluEgwNW7 tDDm3XIHrimhsVHBm4oU3eILz+PigoUMGECVy/sTfR53UREKgkjspCd6gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPLYKXiBTSIylPZzthMj9tx881GMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7jFccdS ynyessmgj2tuQwbVVnUDBkWdaVuE/dapK+vesFWcrDsZeDceE9cQhRcTJlHnQnZC aAqTdBeC9a3BYLPA6x2dbcW/6O+F4wOneRVg/jY9BRcPoFi5tL94m2HmF7bx8X8i qsxlvy3iT82ni/18+zFsYwBRxZJtTpxj4pEVB5A+3ew/5w/LmzL1UBolqHEGsn0t mC2wTztZwP5qCxhbaMjvwRZ8XnqmQpfnwyHCJCpvQMPGYeacphIvXAHOPGGazYIX 0tcFZ3xbimlC1IZKvA3Y5XXL3OzUoOCarYWboRfI1X/MkSUsSESEXvDHPWmL+GA3 HaDJMoOQbTx9yg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:22:39 2025 by rpki-client