$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: hLQXIszu039SzFLaewf5pc5/fuWuioyB9H2apkOfqPs= Subject key identifier: 91:D1:32:42:51:F8:B2:F9:68:45:B1:3A:FA:02:0E:89:8F:8C:15:1A Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 0198D583DE46614B609E5AE8D170E4D0095E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0A63 Signing time: Sat 23 Aug 2025 06:00:45 +0000 Manifest this update: Sat 23 Aug 2025 06:00:45 +0000 Manifest next update: Sun 24 Aug 2025 06:00:45 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (hash: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=) 10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 11: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 15: irT4DdDzgeP-65AGXrk0PHCAQVY.roa (hash: RsayR2J7jayb/ZHPN+8XPFdXktAjeGK/x5tQjIbG8/Y=) 16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: QJmZ9U/PsNbG99OcrcitlBSQD4qx6KviEn0z+4E85NE=) 17: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=) 18: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:de:46:61:4b:60:9e:5a:e8:d1:70:e4:d0:09:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Aug 23 06:00:45 2025 GMT Not After : Aug 24 06:00:45 2025 GMT Subject: CN=91d1324251f8b2f96845b13afa020e898f8c151a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:f9:fc:8c:ad:19:32:a5:4a:ab:89:6a:f2: 08:07:50:29:b1:1f:df:25:41:76:69:b7:0c:54:40: 3d:bb:5f:57:76:a9:89:5f:01:12:7c:4d:ba:00:4f: 07:ab:65:04:ae:ac:0c:55:8c:15:66:cb:f6:e2:cf: 9f:be:05:74:cf:d9:ee:8d:af:43:f8:c1:51:79:ef: ec:02:c3:57:71:59:d8:1f:69:18:c3:ae:5e:da:9c: 53:55:51:f1:8a:f2:eb:c6:4d:21:f9:27:ee:e7:ff: 69:9b:5e:bc:56:ba:f6:dc:97:0a:9c:b2:04:30:21: 0d:04:c7:51:2f:a6:0f:9d:4d:b8:01:58:33:6e:50: 8c:71:ba:0a:e7:31:14:12:3c:a7:fb:ec:fb:7c:be: 01:67:c6:b8:c9:36:af:f0:ee:1a:9d:3b:7e:3f:2e: b8:fe:6b:86:82:00:76:0b:c4:46:05:dc:4d:ad:8c: b9:51:c3:49:4b:11:d7:51:44:4e:6c:80:91:06:19: 5b:a5:09:b6:e6:0b:1a:5f:9c:44:02:05:8e:fa:ba: 1f:9f:ed:12:fb:1e:5e:19:e2:73:59:88:e0:0d:a2: 50:b7:ee:f9:99:e4:3f:87:07:2a:5c:b6:c1:cc:79: 5f:e1:3a:66:a9:08:cb:35:92:8c:11:4d:3f:a7:aa: a0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:32:42:51:F8:B2:F9:68:45:B1:3A:FA:02:0E:89:8F:8C:15:1A X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4f:6c:55:82:47:f1:c0:31:93:d5:5d:13:19:81:00:4e:6d: e9:ea:2f:c7:f8:ee:ba:63:8a:17:dd:3e:51:bf:81:a2:49:00: b1:7c:1c:e6:11:70:b6:57:30:b6:a1:25:83:90:2e:cc:ae:42: 16:29:f8:41:e7:8b:8a:96:35:10:56:a5:78:de:f3:5e:e0:f2: ef:00:e9:cc:13:57:85:1b:77:c3:11:b4:f5:cf:3a:55:fa:5d: 56:6e:43:0d:4a:94:37:08:23:5c:b8:cb:83:90:f3:10:c8:62: a8:1f:0b:5a:d4:e3:13:5e:ee:00:32:ab:4d:99:ab:2a:4e:29: f7:39:31:20:b3:3a:db:f5:30:4f:24:de:c7:5a:3d:36:18:db: 67:86:f1:22:57:ad:fc:33:3d:c5:ca:54:b7:ed:be:4d:80:12: 50:c4:61:ae:45:cd:c9:cc:4d:98:66:8c:de:74:89:ff:25:69: bc:bf:05:ce:15:01:6e:82:16:f9:f4:b3:76:09:74:4b:e2:1f: 38:a0:2a:6f:71:c4:f1:7c:67:a7:0d:f6:f3:40:ff:de:61:10: 82:a1:6c:fc:e0:db:73:b6:48:cd:8a:ea:c6:ca:d2:71:4b:9f: bc:fd:bf:29:10:be:83:01:75:ff:1d:e8:e8:84:87:7d:ce:10: b5:d0:fe:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg95GYUtgnlro0XDk0AleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUwODIzMDYwMDQ1WhcNMjUwODI0MDYwMDQ1WjAzMTEwLwYDVQQD Eyg5MWQxMzI0MjUxZjhiMmY5Njg0NWIxM2FmYTAyMGU4OThmOGMxNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxf5/IytGTKlSquJavIIB1ApsR/f JUF2abcMVEA9u19XdqmJXwESfE26AE8Hq2UErqwMVYwVZsv24s+fvgV0z9nuja9D +MFRee/sAsNXcVnYH2kYw65e2pxTVVHxivLrxk0h+Sfu5/9pm168Vrr23JcKnLIE MCENBMdRL6YPnU24AVgzblCMcboK5zEUEjyn++z7fL4BZ8a4yTav8O4anTt+Py64 /muGggB2C8RGBdxNrYy5UcNJSxHXUURObICRBhlbpQm25gsaX5xEAgWO+rofn+0S +x5eGeJzWYjgDaJQt+75meQ/hwcqXLbBzHlf4TpmqQjLNZKMEU0/p6qgZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHRMkJR+LL5aEWxOvoCDomPjBUaMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk9sVYJH 8cAxk9VdExmBAE5t6eovx/juumOKF90+Ub+BokkAsXwc5hFwtlcwtqElg5AuzK5C Fin4QeeLipY1EFaleN7zXuDy7wDpzBNXhRt3wxG09c86VfpdVm5DDUqUNwgjXLjL g5DzEMhiqB8LWtTjE17uADKrTZmrKk4p9zkxILM62/UwTyTex1o9NhjbZ4bxIlet /DM9xcpUt+2+TYASUMRhrkXNycxNmGaM3nSJ/yVpvL8FzhUBboIW+fSzdgl0S+If OKAqb3HE8Xxnpw3280D/3mEQgqFs/ODbc7ZIzYrqxsrScUufvP2/KRC+gwF1/x3o 6ISHfc4QtdD+wQ== -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:14 2025 by rpki-client