$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: 8UqcvuKE4MU09H1LdJFbMN7VatllUA1rFECPBXpKZPQ= Subject key identifier: E1:29:E2:05:D7:30:59:66:4D:D9:CA:06:DC:46:92:9B:36:92:17:76 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 0199FEB4D7EEA2A2B21FD7A08077F40CF502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 16F9 Signing time: Sun 19 Oct 2025 23:01:28 +0000 Manifest this update: Sun 19 Oct 2025 23:01:28 +0000 Manifest next update: Mon 20 Oct 2025 23:01:28 +0000 Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=) 2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=) 3: BZBW5YOkIp9LbtIp95M8WoQVxcY.roa (hash: X42F21g8cnpx/mEkXiPNfQhd+7IgYORDgkACnwHFRjA=) 4: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=) 5: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=) 6: Nw0MJW1-17GSjmW0I-SeXIKcXZc.roa (hash: bVKXfQW3a25ibMtG9JEwc2vSFy0FIYerrDATet1Yfbc=) 7: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=) 8: Ubb9BSUymwSV4V7pCCtD-AeNfDg.roa (hash: VLj6KeOPsOnaGNTSbliJq5gjR7omChPt0ofE4tlWJ6c=) 9: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=) 10: adv2I8ohQ_Aaz3Td1g442WIiJb8.roa (hash: Dm02CNuasphr+tPivahhTRsXMIx045kC5rG2wb2fZlE=) 11: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: 8vLuMEc6bTI16ZS4lHdObpe3lJhdo/YrcAzktnoYQV8=) 12: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:b4:d7:ee:a2:a2:b2:1f:d7:a0:80:77:f4:0c:f5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Oct 19 23:01:28 2025 GMT Not After : Oct 20 23:01:28 2025 GMT Subject: CN=e129e205d73059664dd9ca06dc46929b36921776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:8d:bf:ec:46:a7:8b:88:84:c6:2c:80:af: 2d:0f:a8:c1:c3:8e:77:2e:2b:de:30:6f:1f:76:9c: af:69:0e:5e:a8:57:7f:25:bb:35:3b:35:1a:32:3c: 17:bb:7f:e3:18:83:17:8f:14:70:eb:7e:0f:9a:33: 03:c9:3e:50:e9:5d:ad:bb:72:88:29:52:91:bf:2f: 3a:78:05:ff:f4:96:2d:d3:e0:4b:3f:e3:4f:e6:19: 44:47:5a:a8:22:e5:13:a9:31:7a:e3:08:1d:4f:1a: 3b:4a:35:31:16:a5:e9:64:ea:78:92:17:fe:33:2b: 2b:0a:bc:e4:60:3a:23:56:43:56:6d:fc:34:9f:68: 7d:ad:37:24:68:b8:80:bc:7c:b9:e2:bf:65:1c:5c: a7:8e:8d:a0:1c:77:0a:38:1e:1b:35:a4:a8:65:a7: 4a:47:7d:a8:aa:26:0c:e6:99:f9:21:91:ed:98:6d: 42:0d:c5:a8:5c:7f:c4:f1:1f:89:09:ba:a8:f9:1a: f7:fd:d2:d0:2d:f6:cc:f9:6a:72:46:3f:ff:48:82: ae:7b:51:34:48:06:92:8b:7f:bb:69:9a:db:64:5e: bb:c2:32:5d:fe:a6:8b:b7:8c:6f:d9:d4:49:3f:5f: bb:5e:5e:5f:fb:26:6a:8c:8e:c4:69:75:8d:81:32: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:29:E2:05:D7:30:59:66:4D:D9:CA:06:DC:46:92:9B:36:92:17:76 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a5:24:6a:b0:85:10:4d:c4:c7:1d:0f:3e:3c:87:e6:70:97: 3c:58:5b:70:0a:a2:5b:09:aa:3b:e5:98:05:85:42:53:56:ae: c8:a4:47:48:94:ce:27:cf:c2:8c:f9:f6:6c:d6:81:1c:fc:2c: b1:2b:63:77:93:eb:b1:2e:af:ab:02:be:1c:b8:cb:34:c0:9c: bd:95:63:dd:da:7e:a4:c8:13:7f:e3:ab:8b:fd:1a:e7:e7:b0: 9b:31:71:98:19:70:b2:08:17:ed:66:b8:7b:f2:65:94:48:17: 60:1c:51:93:1f:fe:79:2b:42:d4:91:50:ec:0b:e1:93:a5:57: e8:c5:b6:5b:a1:b7:4b:99:52:c5:a9:8a:65:e2:a4:e3:d5:34: 07:22:50:cf:83:a0:15:0b:21:dc:ac:5f:86:8d:3e:51:bf:23: 2a:44:52:ac:86:ca:b5:66:a5:0f:03:e3:ff:7a:1d:55:6a:7b: 8a:c2:72:7e:a3:b8:2a:9f:9a:ec:f5:a0:bb:59:0a:8a:6a:65: 01:77:7e:93:24:f3:65:be:24:67:45:8f:a4:17:4c:93:ad:52: 35:3e:5d:bd:03:c6:05:9c:85:15:81:fe:1b:fb:36:5a:2e:f6: c6:0a:ed:b5:67:4c:64:78:73:1e:c9:78:4c:a9:90:69:bd:ce: ce:f6:07:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+tNfuoqKyH9eggHf0DPUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjUxMDE5MjMwMTI4WhcNMjUxMDIwMjMwMTI4WjAzMTEwLwYDVQQD EyhlMTI5ZTIwNWQ3MzA1OTY2NGRkOWNhMDZkYzQ2OTI5YjM2OTIxNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymONv+xGp4uIhMYsgK8tD6jBw453 LiveMG8fdpyvaQ5eqFd/Jbs1OzUaMjwXu3/jGIMXjxRw634PmjMDyT5Q6V2tu3KI KVKRvy86eAX/9JYt0+BLP+NP5hlER1qoIuUTqTF64wgdTxo7SjUxFqXpZOp4khf+ MysrCrzkYDojVkNWbfw0n2h9rTckaLiAvHy54r9lHFynjo2gHHcKOB4bNaSoZadK R32oqiYM5pn5IZHtmG1CDcWoXH/E8R+JCbqo+Rr3/dLQLfbM+WpyRj//SIKue1E0 SAaSi3+7aZrbZF67wjJd/qaLt4xv2dRJP1+7Xl5f+yZqjI7EaXWNgTLAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEp4gXXMFlmTdnKBtxGkps2khd2MB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6UkarCF EE3Exx0PPjyH5nCXPFhbcAqiWwmqO+WYBYVCU1auyKRHSJTOJ8/CjPn2bNaBHPws sStjd5PrsS6vqwK+HLjLNMCcvZVj3dp+pMgTf+Ori/0a5+ewmzFxmBlwsggX7Wa4 e/JllEgXYBxRkx/+eStC1JFQ7Avhk6VX6MW2W6G3S5lSxamKZeKk49U0ByJQz4Og FQsh3Kxfho0+Ub8jKkRSrIbKtWalDwPj/3odVWp7isJyfqO4Kp+a7PWgu1kKimpl AXd+kyTzZb4kZ0WPpBdMk61SNT5dvQPGBZyFFYH+G/s2Wi72xgrttWdMZHhzHsl4 TKmQab3OzvYH5A== -----END CERTIFICATE-----Generated at Mon Oct 20 02:09:21 2025 by rpki-client