$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: ptJsGE0qN9pcmINpXWha0DUsYjzWVAG3ZQ0fBrF3Qks= Subject key identifier: 24:47:9D:D3:87:4F:8C:10:C1:9D:3C:CA:7D:2F:D4:6B:ED:8E:86:CC Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 0199FCFD6ED47857BD469821BB7367AD02AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0AFE Signing time: Sun 19 Oct 2025 15:01:31 +0000 Manifest this update: Sun 19 Oct 2025 15:01:31 +0000 Manifest next update: Mon 20 Oct 2025 15:01:31 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 10: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 11: cY4oD3aJCA3hPJ-HG5yOe86pth0.roa (hash: 6XtYpPP1NejHMwoPGzkgvVeeFIxmxEEEbrl1v95CK6c=) 12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 15: hAltwAar8cruPnrUggNtE-ckX2E.roa (hash: L6YarcwAfqpMI8vHdXzsk7yBc6dzjR+YnQY4CVhZuBE=) 16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: reXZwNPN10rrO2WHA3/4QxA2/PmRXUOZjSY4p+UuoEc=) 17: rCpV33sYtGVJt5YUfEHIV76lYwM.roa (hash: WOOfDrHmClUASPz1AvvDv7s8UiSaGZ142B0UsKi/kcM=) 18: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=) 19: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:fd:6e:d4:78:57:bd:46:98:21:bb:73:67:ad:02:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Oct 19 15:01:31 2025 GMT Not After : Oct 20 15:01:31 2025 GMT Subject: CN=24479dd3874f8c10c19d3cca7d2fd46bed8e86cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ef:82:f4:fa:c9:ab:04:35:ef:ae:c9:4a:96: 48:92:9c:3b:1a:09:67:2c:2b:d1:98:de:68:85:17: 45:60:50:21:90:d7:14:d5:57:ef:1a:81:35:81:45: 86:da:00:4a:2b:51:bc:a3:dd:9d:0c:1b:50:52:24: 64:6a:e6:ed:da:57:11:b3:18:1b:29:c6:36:35:9e: d4:d6:9b:fa:05:db:64:62:0c:cb:aa:13:e2:7b:69: a9:e1:cf:d2:61:f6:9f:a1:ff:6b:27:7e:8d:99:ac: 56:45:89:94:e5:0e:8f:54:4d:c7:e7:e0:ed:0a:79: a7:c0:42:e0:c1:61:c3:67:2f:60:69:45:e9:31:34: 9d:87:c2:5b:2b:0d:39:9d:d9:e4:43:fd:f6:e9:39: 22:bf:a5:57:9a:bc:68:6a:44:21:f8:ea:26:d1:7d: 58:05:0a:92:4d:9a:5d:48:a2:b8:da:c4:bd:5e:ad: 47:a6:54:7e:8b:58:eb:dd:7f:11:89:16:13:f3:40: 78:e7:cb:34:03:11:86:38:16:46:85:8d:57:ec:f8: 2d:e1:5c:ef:3d:49:d3:ff:60:89:90:60:4c:ae:b9: 78:59:51:e4:3d:3d:1e:a3:e0:53:8a:4e:c3:1b:26: e2:c2:26:a1:f3:25:a5:6f:27:72:8b:00:81:f7:9d: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:47:9D:D3:87:4F:8C:10:C1:9D:3C:CA:7D:2F:D4:6B:ED:8E:86:CC X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9b:b2:0b:c5:71:f5:61:4d:13:44:51:55:0f:4f:63:69:d8: 57:57:9e:2e:bb:d4:b5:4c:e2:fb:ec:e7:df:1e:6a:bd:35:ad: a2:5c:09:00:71:18:9a:eb:2f:06:3f:32:b2:31:b2:5c:d5:5e: 49:67:42:6a:09:2b:1f:0a:c6:80:e6:fa:9e:68:53:17:34:a7: 7d:b2:f8:81:a5:a5:6c:d8:39:59:4f:55:19:4a:3e:29:8b:fb: 5e:be:37:76:63:5c:28:68:61:02:81:50:a0:a9:67:d9:b5:f5: 5f:bf:c7:71:1d:30:64:51:69:e1:86:8d:ad:83:b6:bb:9f:85: 5b:22:ee:50:85:10:99:44:46:db:21:6b:28:af:1b:9a:6f:b4: 40:f4:db:9c:d3:ae:fb:bd:57:80:63:1d:4d:15:03:95:56:70: c1:54:7c:99:e6:5c:b5:dc:8a:72:0c:02:83:6a:63:5f:55:08: 92:2f:01:c0:06:ff:97:26:e2:3c:f4:6f:f6:1e:6a:3c:25:8c: 2d:8f:31:23:c3:cb:eb:96:c3:e3:04:f6:6e:1d:e0:ae:1d:82: ed:41:91:fa:35:9f:da:f2:03:d8:9d:fd:b9:08:32:d3:5f:24: 4e:6e:06:c3:0f:88:ad:b1:bb:b2:63:8f:52:04:d4:a6:2b:e3: 36:9b:a4:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8/W7UeFe9Rpghu3NnrQKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUxMDE5MTUwMTMxWhcNMjUxMDIwMTUwMTMxWjAzMTEwLwYDVQQD EygyNDQ3OWRkMzg3NGY4YzEwYzE5ZDNjY2E3ZDJmZDQ2YmVkOGU4NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO+C9PrJqwQ1767JSpZIkpw7Ggln LCvRmN5ohRdFYFAhkNcU1VfvGoE1gUWG2gBKK1G8o92dDBtQUiRkaubt2lcRsxgb KcY2NZ7U1pv6BdtkYgzLqhPie2mp4c/SYfafof9rJ36NmaxWRYmU5Q6PVE3H5+Dt CnmnwELgwWHDZy9gaUXpMTSdh8JbKw05ndnkQ/326Tkiv6VXmrxoakQh+Oom0X1Y BQqSTZpdSKK42sS9Xq1HplR+i1jr3X8RiRYT80B458s0AxGGOBZGhY1X7Pgt4Vzv PUnT/2CJkGBMrrl4WVHkPT0eo+BTik7DGybiwiah8yWlbydyiwCB953wTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRHndOHT4wQwZ08yn0v1GvtjobMMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5uyC8Vx 9WFNE0RRVQ9PY2nYV1eeLrvUtUzi++zn3x5qvTWtolwJAHEYmusvBj8ysjGyXNVe SWdCagkrHwrGgOb6nmhTFzSnfbL4gaWlbNg5WU9VGUo+KYv7Xr43dmNcKGhhAoFQ oKln2bX1X7/HcR0wZFFp4YaNrYO2u5+FWyLuUIUQmURG2yFrKK8bmm+0QPTbnNOu +71XgGMdTRUDlVZwwVR8meZctdyKcgwCg2pjX1UIki8BwAb/lybiPPRv9h5qPCWM LY8xI8PL65bD4wT2bh3grh2C7UGR+jWf2vID2J39uQgy018kTm4Gww+IrbG7smOP UgTUpivjNpuktQ== -----END CERTIFICATE-----Generated at Sun Oct 19 21:13:36 2025 by rpki-client