$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: 3VgVgwepCFyO7iE6hYz9IKeGpP1DEj0idFMH9rceftU= Subject key identifier: C0:B2:17:6C:67:5B:A1:9E:23:F7:6D:88:E8:AE:80:92:34:F4:BB:FB Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 0198D65FEEBB8CB5BB55C6ECB9AAF73C372A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 165A Signing time: Sat 23 Aug 2025 10:01:07 +0000 Manifest this update: Sat 23 Aug 2025 10:01:07 +0000 Manifest next update: Sun 24 Aug 2025 10:01:07 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: ZG5DrlHIJ9kEcWv+Q2CJRlYO+AjDscoON0r3jStW+8o=) 7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=) 10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d6:5f:ee:bb:8c:b5:bb:55:c6:ec:b9:aa:f7:3c:37:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Aug 23 10:01:07 2025 GMT Not After : Aug 24 10:01:07 2025 GMT Subject: CN=c0b2176c675ba19e23f76d88e8ae809234f4bbfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:cd:1b:3d:b3:33:0b:1a:88:35:46:72:85: 0c:34:f9:c9:8f:ec:3c:63:b6:e2:8d:59:19:d8:b5: 4b:a3:93:6e:4b:4f:dd:59:f0:0e:c8:19:6b:56:ab: b9:1f:07:29:3f:29:82:98:2a:24:cb:a2:d2:43:25: ab:1c:6f:08:7f:cd:0c:a9:3e:6b:77:37:a8:ee:07: 6c:9c:86:4b:f6:75:56:ea:2d:cd:dd:b3:71:b5:d9: 56:42:82:2b:1b:55:b2:24:74:4a:c8:fc:10:8d:52: b4:db:dc:12:5b:c6:a3:08:00:06:83:5c:ca:51:69: f1:2c:44:af:57:38:cb:7e:ee:55:9a:a4:9b:67:41: b1:22:06:65:31:bc:38:20:84:35:da:e8:26:1e:ed: f3:28:2a:50:6d:42:41:95:fb:59:41:f0:d2:ff:59: 57:67:6d:04:a9:77:46:55:4a:13:cf:c9:41:67:50: fd:cf:8b:40:cc:4a:1f:d9:f4:d3:42:0a:ef:2d:32: d5:d2:bb:1b:6a:5b:cd:b6:da:31:0b:31:b7:65:50: fd:28:4e:17:23:fc:a3:9c:7e:0b:c5:25:4b:ce:89: 26:ae:b7:cb:c5:1b:dd:0c:60:d8:a4:52:9e:56:ec: 9f:19:62:15:4d:15:27:f6:c3:93:e9:20:89:58:97: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B2:17:6C:67:5B:A1:9E:23:F7:6D:88:E8:AE:80:92:34:F4:BB:FB X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:53:c1:54:f3:d0:3d:76:93:cb:f7:f0:c0:a0:47:d1:7c:f7: 54:a8:53:9e:ac:15:f8:2e:8a:60:38:34:d0:96:a6:cd:ce:4d: 63:77:35:47:70:0a:b1:fd:d2:89:39:85:e9:03:c1:8e:d1:10: ec:73:c0:b8:0d:4b:d8:a5:4d:b8:c6:05:a1:ba:0e:e2:10:99: 23:dc:0d:42:fa:4c:d1:da:c5:22:be:78:06:a3:28:83:86:5d: 3f:9b:d0:8c:1b:2c:0d:33:dc:c2:67:08:90:d3:4c:e1:fd:da: 1a:74:96:4c:64:b5:d4:2d:1a:c0:fa:94:61:b3:12:16:5e:82: 59:4c:00:d9:cc:b1:89:78:f5:4d:aa:e5:9c:1a:6e:bd:1a:62: 06:d1:bb:d3:24:a4:fc:c5:2f:2c:c4:92:85:66:39:ae:e9:ad: 90:0d:69:16:ed:1a:ed:b8:fd:ea:9c:27:1b:f0:3f:2e:62:86: e8:77:f3:db:f2:39:26:05:39:ac:83:d8:99:90:fa:3c:73:54: 0e:41:e4:fb:bc:c3:25:fc:d7:f2:32:e5:f2:3e:6c:a1:7c:35: c5:16:3e:8e:47:42:6a:5c:6d:de:40:72:b5:3d:09:3f:19:1a: ae:68:ab:66:43:f6:99:54:95:7f:d9:24:c4:3e:7d:68:d1:5d: 98:aa:e0:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjWX+67jLW7Vcbsuar3PDcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUwODIzMTAwMTA3WhcNMjUwODI0MTAwMTA3WjAzMTEwLwYDVQQD EyhjMGIyMTc2YzY3NWJhMTllMjNmNzZkODhlOGFlODA5MjM0ZjRiYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k7NGz2zMwsaiDVGcoUMNPnJj+w8 Y7bijVkZ2LVLo5NuS0/dWfAOyBlrVqu5HwcpPymCmCoky6LSQyWrHG8If80MqT5r dzeo7gdsnIZL9nVW6i3N3bNxtdlWQoIrG1WyJHRKyPwQjVK029wSW8ajCAAGg1zK UWnxLESvVzjLfu5VmqSbZ0GxIgZlMbw4IIQ12ugmHu3zKCpQbUJBlftZQfDS/1lX Z20EqXdGVUoTz8lBZ1D9z4tAzEof2fTTQgrvLTLV0rsbalvNttoxCzG3ZVD9KE4X I/yjnH4LxSVLzokmrrfLxRvdDGDYpFKeVuyfGWIVTRUn9sOT6SCJWJe+0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCyF2xnW6GeI/dtiOiugJI09Lv7MB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlPBVPPQ PXaTy/fwwKBH0Xz3VKhTnqwV+C6KYDg00Jamzc5NY3c1R3AKsf3SiTmF6QPBjtEQ 7HPAuA1L2KVNuMYFoboO4hCZI9wNQvpM0drFIr54BqMog4ZdP5vQjBssDTPcwmcI kNNM4f3aGnSWTGS11C0awPqUYbMSFl6CWUwA2cyxiXj1TarlnBpuvRpiBtG70ySk /MUvLMSShWY5rumtkA1pFu0a7bj96pwnG/A/LmKG6Hfz2/I5JgU5rIPYmZD6PHNU DkHk+7zDJfzX8jLl8j5soXw1xRY+jkdCalxt3kBytT0JPxkarmirZkP2mVSVf9kk xD59aNFdmKrg1w== -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:57 2025 by rpki-client