$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: 1lKTICiY7yz9R3E854205d1vJ4G0SFhEKzRMEmXMrcI= Subject key identifier: 83:05:ED:F7:7E:25:FE:04:22:5C:97:42:61:C8:88:8C:76:CA:21:A1 Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 0198D706256385A04D118A0BA5CFE08D4E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 165E Signing time: Sat 23 Aug 2025 13:02:40 +0000 Manifest this update: Sat 23 Aug 2025 13:02:40 +0000 Manifest next update: Sun 24 Aug 2025 13:02:40 +0000 Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=) 2: 328wcZUwLN_vfeq8C6isq-A3BoM.roa (hash: GlJNad5vKZfYBMC3kSAskLw5gbwDcjVPCSvhXw5VGI0=) 3: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=) 4: BZBW5YOkIp9LbtIp95M8WoQVxcY.roa (hash: X42F21g8cnpx/mEkXiPNfQhd+7IgYORDgkACnwHFRjA=) 5: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=) 6: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=) 7: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=) 8: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=) 9: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=) 10: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: xQ1BZ23jXPhsrIBftgoxtsYIeu13xbDXZOOgmifVnGU=) 11: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:06:25:63:85:a0:4d:11:8a:0b:a5:cf:e0:8d:4e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Aug 23 13:02:40 2025 GMT Not After : Aug 24 13:02:40 2025 GMT Subject: CN=8305edf77e25fe04225c974261c8888c76ca21a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:49:c1:ad:49:29:3f:c7:ff:84:6b:e3:43:41: e4:43:a5:11:e9:c6:1c:d5:38:c2:6b:08:3c:84:aa: 5c:95:b1:d1:2d:2e:ba:63:c8:f3:a1:d1:b0:c2:55: 0a:6e:c3:3e:ab:91:0b:1e:f5:37:27:98:63:db:d5: 5b:51:dc:7f:fd:d1:af:3b:8f:18:cb:4f:93:48:7f: 79:4d:92:5a:66:fa:2c:0d:ae:43:83:47:6e:b0:9c: 6a:b3:3a:1b:15:dd:b2:0a:fc:c5:32:63:05:5e:3f: 51:40:aa:e0:fa:88:62:5e:ab:01:f0:14:7a:89:24: 73:fc:ee:ab:d6:cc:c2:f2:58:f3:12:25:41:70:d3: 4c:c5:53:41:0b:39:9d:32:07:fa:22:fd:cb:7b:4d: ff:22:08:b0:ff:3f:a8:c8:11:c6:d3:69:a8:6a:04: a7:e1:97:4b:ef:8d:73:fb:d0:2e:c7:7a:2f:61:a1: fc:11:ac:fd:51:b0:48:8d:04:fc:9e:99:4a:d4:7c: 8c:b0:6d:6a:e4:da:17:16:3e:6a:36:d6:fb:a4:cd: cf:3a:f4:a9:5f:07:e8:9c:d7:6a:c5:3d:61:61:d0: 85:f6:83:cd:d7:77:4f:13:f1:ce:70:73:aa:50:11: b1:04:f1:d5:99:80:47:fe:2b:1f:c6:bf:f3:bf:5f: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:05:ED:F7:7E:25:FE:04:22:5C:97:42:61:C8:88:8C:76:CA:21:A1 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e7:65:44:26:41:6a:79:66:1f:51:a2:49:ae:9d:39:47:0e: c2:59:80:f9:9f:04:a1:fd:32:93:ff:b1:1f:e7:d2:0c:31:57: 88:3c:be:fa:91:d0:cb:e1:9b:5a:30:d2:29:3b:59:43:cb:d0: 41:fe:b0:a3:69:97:d3:7f:81:05:22:d4:07:fa:ae:f9:ee:31: 4a:80:99:46:1b:f3:a4:1b:c5:96:65:28:61:cd:65:a1:94:7a: de:c1:2d:0a:76:d0:4d:f9:2e:d8:4e:0b:97:20:e9:d3:0e:24: 47:50:f5:19:31:de:33:87:83:4a:77:8d:62:8b:9a:fc:18:32: 64:77:19:5b:4c:2e:90:a3:14:35:da:55:09:27:db:c4:48:1d: 82:9b:35:91:be:9c:88:7d:39:a6:b5:79:06:86:4f:5d:de:9c: 05:b6:43:7a:76:7c:71:f3:5b:2d:1c:a2:ba:35:36:8f:4f:0f: 8b:58:cb:2a:6d:17:7e:d4:d4:d8:62:28:bd:9c:16:3c:b8:ef: 82:d0:c8:86:9e:1e:d4:79:74:c6:94:04:7d:86:aa:e6:ee:20: 6f:71:5d:d4:9a:c0:ba:2d:06:ad:f6:7a:56:92:bc:78:22:7d: c7:ea:91:b5:8e:12:82:16:dd:6c:3f:77:63:8d:4c:95:79:26: d1:f4:9c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXBiVjhaBNEYoLpc/gjU54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjUwODIzMTMwMjQwWhcNMjUwODI0MTMwMjQwWjAzMTEwLwYDVQQD Eyg4MzA1ZWRmNzdlMjVmZTA0MjI1Yzk3NDI2MWM4ODg4Yzc2Y2EyMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0nBrUkpP8f/hGvjQ0HkQ6UR6cYc 1TjCawg8hKpclbHRLS66Y8jzodGwwlUKbsM+q5ELHvU3J5hj29VbUdx//dGvO48Y y0+TSH95TZJaZvosDa5Dg0dusJxqszobFd2yCvzFMmMFXj9RQKrg+ohiXqsB8BR6 iSRz/O6r1szC8ljzEiVBcNNMxVNBCzmdMgf6Iv3Le03/Igiw/z+oyBHG02moagSn 4ZdL741z+9Aux3ovYaH8Eaz9UbBIjQT8nplK1HyMsG1q5NoXFj5qNtb7pM3POvSp XwfonNdqxT1hYdCF9oPN13dPE/HOcHOqUBGxBPHVmYBH/isfxr/zv1/dbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMF7fd+Jf4EIlyXQmHIiIx2yiGhMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+dlRCZB anlmH1GiSa6dOUcOwlmA+Z8Eof0yk/+xH+fSDDFXiDy++pHQy+GbWjDSKTtZQ8vQ Qf6wo2mX03+BBSLUB/qu+e4xSoCZRhvzpBvFlmUoYc1loZR63sEtCnbQTfku2E4L lyDp0w4kR1D1GTHeM4eDSneNYoua/BgyZHcZW0wukKMUNdpVCSfbxEgdgps1kb6c iH05prV5BoZPXd6cBbZDenZ8cfNbLRyiujU2j08Pi1jLKm0XftTU2GIovZwWPLjv gtDIhp4e1Hl0xpQEfYaq5u4gb3Fd1JrAui0GrfZ6VpK8eCJ9x+qRtY4SghbdbD93 Y41MlXkm0fScgA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:28 2025 by rpki-client