$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: HebnGyryONB4lNgaJSp0xNIQ0HkrxL+Kt/BRtBOgVxc= Subject key identifier: A5:96:87:A2:F2:1A:B3:F5:C8:D0:AB:2A:06:3E:36:F8:B6:1B:AD:8A Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 0197C726B14DDADA088ED3971533556E137A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 09D7 Signing time: Tue 01 Jul 2025 18:01:31 +0000 Manifest this update: Tue 01 Jul 2025 18:01:31 +0000 Manifest next update: Wed 02 Jul 2025 18:01:31 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (hash: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=) 10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 11: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 15: irT4DdDzgeP-65AGXrk0PHCAQVY.roa (hash: RsayR2J7jayb/ZHPN+8XPFdXktAjeGK/x5tQjIbG8/Y=) 16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: YAR84E1lvPZuqrrupvzRYcIxbzSaY4MADuKoMPOCSTQ=) 17: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=) 18: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 16:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c7:26:b1:4d:da:da:08:8e:d3:97:15:33:55:6e:13:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jul 1 18:01:31 2025 GMT Not After : Jul 2 18:01:31 2025 GMT Subject: CN=a59687a2f21ab3f5c8d0ab2a063e36f8b61bad8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:49:9d:e9:0f:ad:af:9f:13:51:e0:9d:6d: a3:9b:e4:7f:00:6e:66:73:bd:fd:4b:fa:2f:16:7f: 09:51:f3:99:5c:c1:1f:18:38:58:e2:10:13:a1:7b: 2f:25:b9:db:ca:c5:6f:85:1a:3a:37:fa:9f:b4:d2: 91:f4:54:a4:9e:9a:14:bc:fb:df:b3:e2:71:fc:1f: ca:81:fb:1d:e8:31:50:a7:82:e3:7e:b4:a0:7e:8c: dc:2d:01:c2:f7:b6:34:a1:ee:56:e9:51:6a:5d:6e: aa:21:3f:65:e9:85:57:dc:b7:40:02:6b:41:ca:05: e5:94:0d:ca:94:f4:03:de:bd:77:3b:ca:b1:d8:f5: ee:58:c8:f2:aa:20:89:34:14:1a:f1:1e:95:f6:ee: 56:43:42:d8:06:ba:38:6c:81:e3:fc:3d:e4:bd:b8: 51:b6:9d:be:1a:89:bf:c7:09:39:b2:92:fb:b2:8f: bd:4c:cd:e7:d2:be:26:0e:1c:4a:ea:2e:b9:00:a5: ed:ba:06:b4:3b:d7:b6:73:72:f9:fc:e5:87:0e:90: f6:58:06:d4:77:0a:52:1f:18:3c:8a:72:15:8f:d5: cf:a0:f1:3e:d1:bb:01:10:53:34:a6:f1:41:6f:69: f7:c9:bd:3b:f8:d9:81:e6:86:d5:c1:27:c2:58:bf: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:96:87:A2:F2:1A:B3:F5:C8:D0:AB:2A:06:3E:36:F8:B6:1B:AD:8A X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:03:35:c9:78:73:d2:e6:72:6e:93:e7:54:81:86:48:76:d5: f6:53:e2:cd:7a:d8:7a:bc:3f:72:68:86:2a:9a:f7:b4:3b:2b: 17:6f:c0:10:e7:77:44:af:16:3d:71:fe:7f:44:85:8d:9b:39: 66:5a:2a:2f:95:b5:a4:bc:02:a8:c3:fa:81:69:12:49:3c:ce: 91:54:67:60:df:86:5b:2f:dd:5b:02:f3:11:bc:46:fe:c8:bb: 9e:05:11:e3:be:f1:f4:e7:46:a1:24:83:87:e2:11:06:48:66: 8a:8f:2c:02:f0:72:51:a4:f6:1d:5b:60:2c:fc:cc:66:9e:c7: fb:0c:43:d1:40:cf:76:57:09:42:b3:c8:d2:31:ce:36:41:54: 7f:12:e1:1b:80:8b:ca:6e:87:6c:71:26:31:cf:85:9d:03:4d: 3b:e5:87:40:87:d5:32:58:23:64:87:18:7d:42:18:0f:cd:20: d1:a6:d9:64:63:5e:25:08:d6:fe:1d:e7:d1:0a:a6:80:3d:75: db:e0:a9:14:66:91:c9:63:f3:ed:fe:41:74:6c:43:fe:58:7b: e8:3f:bd:7d:fb:1e:a5:67:54:49:14:cc:24:5c:1b:a0:08:eb: 90:e1:9a:b6:c9:7b:02:78:d0:b4:cb:4c:41:a2:cf:32:66:4b: f2:3f:05:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfHJrFN2toIjtOXFTNVbhN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUwNzAxMTgwMTMxWhcNMjUwNzAyMTgwMTMxWjAzMTEwLwYDVQQD EyhhNTk2ODdhMmYyMWFiM2Y1YzhkMGFiMmEwNjNlMzZmOGI2MWJhZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOtJnekPra+fE1HgnW2jm+R/AG5m c739S/ovFn8JUfOZXMEfGDhY4hAToXsvJbnbysVvhRo6N/qftNKR9FSknpoUvPvf s+Jx/B/Kgfsd6DFQp4LjfrSgfozcLQHC97Y0oe5W6VFqXW6qIT9l6YVX3LdAAmtB ygXllA3KlPQD3r13O8qx2PXuWMjyqiCJNBQa8R6V9u5WQ0LYBro4bIHj/D3kvbhR tp2+Gom/xwk5spL7so+9TM3n0r4mDhxK6i65AKXtuga0O9e2c3L5/OWHDpD2WAbU dwpSHxg8inIVj9XPoPE+0bsBEFM0pvFBb2n3yb07+NmB5obVwSfCWL93YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWWh6LyGrP1yNCrKgY+Nvi2G62KMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAM1yXhz 0uZybpPnVIGGSHbV9lPizXrYerw/cmiGKpr3tDsrF2/AEOd3RK8WPXH+f0SFjZs5 ZloqL5W1pLwCqMP6gWkSSTzOkVRnYN+GWy/dWwLzEbxG/si7ngUR477x9OdGoSSD h+IRBkhmio8sAvByUaT2HVtgLPzMZp7H+wxD0UDPdlcJQrPI0jHONkFUfxLhG4CL ym6HbHEmMc+FnQNNO+WHQIfVMlgjZIcYfUIYD80g0abZZGNeJQjW/h3n0QqmgD11 2+CpFGaRyWPz7f5BdGxD/lh76D+9ffsepWdUSRTMJFwboAjrkOGatsl7AnjQtMtM QaLPMmZL8j8FUQ== -----END CERTIFICATE-----Generated at Wed Jul 2 01:32:36 2025 by rpki-client