$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: VJD4g93AgQ5rID5/E+ShC0ur9JO3Ha1mKyeiSu2iGaI= Subject key identifier: 4B:7C:82:C5:E6:16:2B:D5:C4:FA:75:46:D8:1F:7A:F2:07:6F:8A:E2 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 0198D4A7C5E5A8BAD665D3576C1857E4508F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 164D Signing time: Sat 23 Aug 2025 02:00:21 +0000 Manifest this update: Sat 23 Aug 2025 02:00:21 +0000 Manifest next update: Sun 24 Aug 2025 02:00:21 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: ChBeUvZs5PT/kzprSFQB7L1f+0IpRE9Z5JwRoYbm29M=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a7:c5:e5:a8:ba:d6:65:d3:57:6c:18:57:e4:50:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Aug 23 02:00:21 2025 GMT Not After : Aug 24 02:00:21 2025 GMT Subject: CN=4b7c82c5e6162bd5c4fa7546d81f7af2076f8ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a9:32:98:ae:83:ed:9c:e1:30:fc:50:ed:6d: e9:12:ae:58:2f:28:10:c8:74:c5:ff:6b:1c:a6:11: 8f:f2:91:e5:7e:24:ee:60:ef:6f:de:83:c0:12:40: 28:cb:0c:95:1e:5a:95:55:10:0f:c2:64:b4:79:8e: 84:50:99:8f:a8:8d:23:4f:ed:66:7b:4d:82:2d:5b: 3e:30:82:12:69:fd:36:d4:5f:64:a7:e4:3e:b5:11: fd:db:11:86:46:70:71:c5:4f:38:a6:38:9b:ce:b5: 75:d8:18:d3:fe:b8:a0:17:db:0b:70:d8:20:e7:01: 61:d6:9a:3b:bb:ae:6f:5e:61:09:38:44:26:bd:9f: 37:3a:d7:3e:4f:8f:6e:08:e9:94:55:9a:07:11:2c: fa:f7:26:66:26:87:d0:34:3d:32:b6:fe:aa:31:5e: 2b:39:48:87:48:d9:cf:11:61:07:a6:b2:b5:3e:3b: 3d:3f:d7:9e:90:30:67:44:f0:a9:f9:ec:02:52:2f: bc:74:ce:14:49:96:06:73:79:1d:2d:bc:f3:a7:c4: 7d:51:21:14:bf:85:5e:f9:5a:ff:4d:8a:16:43:13: f3:18:ea:b6:5d:94:1d:24:a2:a7:87:9e:cf:eb:ac: 4a:43:a7:5e:27:74:8f:2d:c2:54:e5:f5:c8:00:8d: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7C:82:C5:E6:16:2B:D5:C4:FA:75:46:D8:1F:7A:F2:07:6F:8A:E2 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c7:3c:15:c1:5d:00:67:a0:1d:b4:79:d4:bf:55:8b:f5:d6: 30:60:18:7c:62:cd:66:3d:b9:c7:fd:b6:94:26:81:0e:29:43: 3c:eb:0e:ae:dd:88:be:46:ef:c8:e1:a9:71:31:3f:0c:c1:8c: af:ef:2c:78:3a:ce:25:15:ad:59:7c:60:d5:d3:e1:07:21:f5: 4b:c5:0c:60:36:b7:5a:59:b0:c5:a0:8a:4d:84:bd:a5:5c:3a: e6:d6:77:88:b8:02:2a:4b:30:5f:d5:bf:6e:0f:c6:52:92:f6: ba:ae:fd:87:c5:10:ab:9e:f4:53:fb:9c:ef:52:b8:aa:fe:90: 54:7e:14:76:16:d9:6f:99:fd:d5:29:aa:02:6c:3f:9b:db:77: e1:7b:b1:bc:a4:59:3e:48:dd:54:8a:be:af:47:8b:78:f0:dd: 2f:9e:a1:ad:5e:4c:39:77:6f:4a:f7:74:68:49:81:1f:33:52: 6c:c2:41:2c:09:57:fe:99:1c:90:9a:80:d3:c1:72:b4:51:7b: 33:3c:45:f2:03:0f:84:c0:ff:2a:3c:7a:b5:42:2d:4d:cc:b9: 3b:85:8e:f4:c3:90:0a:d7:a0:73:5f:45:98:7d:9c:e2:7c:88: d8:ce:ab:d1:25:8e:56:4e:b7:19:85:c7:8a:93:e5:32:49:b4: ef:94:15:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUp8XlqLrWZdNXbBhX5FCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwODIzMDIwMDIxWhcNMjUwODI0MDIwMDIxWjAzMTEwLwYDVQQD Eyg0YjdjODJjNWU2MTYyYmQ1YzRmYTc1NDZkODFmN2FmMjA3NmY4YWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36kymK6D7ZzhMPxQ7W3pEq5YLygQ yHTF/2scphGP8pHlfiTuYO9v3oPAEkAoywyVHlqVVRAPwmS0eY6EUJmPqI0jT+1m e02CLVs+MIISaf021F9kp+Q+tRH92xGGRnBxxU84pjibzrV12BjT/rigF9sLcNgg 5wFh1po7u65vXmEJOEQmvZ83Otc+T49uCOmUVZoHESz69yZmJofQND0ytv6qMV4r OUiHSNnPEWEHprK1Pjs9P9eekDBnRPCp+ewCUi+8dM4USZYGc3kdLbzzp8R9USEU v4Ve+Vr/TYoWQxPzGOq2XZQdJKKnh57P66xKQ6deJ3SPLcJU5fXIAI1vHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEt8gsXmFivVxPp1RtgfevIHb4riMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMc8FcFd AGegHbR51L9Vi/XWMGAYfGLNZj25x/22lCaBDilDPOsOrt2IvkbvyOGpcTE/DMGM r+8seDrOJRWtWXxg1dPhByH1S8UMYDa3WlmwxaCKTYS9pVw65tZ3iLgCKkswX9W/ bg/GUpL2uq79h8UQq570U/uc71K4qv6QVH4UdhbZb5n91SmqAmw/m9t34XuxvKRZ PkjdVIq+r0eLePDdL56hrV5MOXdvSvd0aEmBHzNSbMJBLAlX/pkckJqA08FytFF7 MzxF8gMPhMD/Kjx6tUItTcy5O4WO9MOQCtegc19FmH2c4nyI2M6r0SWOVk63GYXH ipPlMkm075QVWQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:23:40 2025 by rpki-client