$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: VOEKh7VfkagQwm11V1Qru2NMPJa0YQ+CCIJs4TRYJB8= Subject key identifier: 7F:DA:3E:FC:D0:24:AB:C0:B3:00:A7:B7:3A:2D:A4:DA:57:07:64:E0 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 0199FD6AF16DCE4C3F984F5A7E5627AFE44F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 16F5 Signing time: Sun 19 Oct 2025 17:01:08 +0000 Manifest this update: Sun 19 Oct 2025 17:01:08 +0000 Manifest next update: Mon 20 Oct 2025 17:01:08 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: c212CzmbObAcrMgTCfkBLkXMin8.roa (hash: ciAznSQzQUmFlccmgG1WLelO9lpjKyJTL5WEen4RKFM=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: iZmuXhgkUDMI8rD0nnDFSslLpSc.roa (hash: HIW2261XLHIAaOOH5eBKS78OF9zXA7RurRmyIK9yhLk=) 6: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 7: mP-S5aKpzjHPTMYUwxCB2-7CEhQ.roa (hash: dQhgFgYjkT0BJ2PwJgliD78SQQKKnPd6jZtPJn6Gwe4=) 8: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: mkzUppeSQFp72tSEGEK0WcDVSQ6KPvq96O45GMC/pyI=) 9: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 10: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 11: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 12: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fd:6a:f1:6d:ce:4c:3f:98:4f:5a:7e:56:27:af:e4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Oct 19 17:01:08 2025 GMT Not After : Oct 20 17:01:08 2025 GMT Subject: CN=7fda3efcd024abc0b300a7b73a2da4da570764e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:27:80:82:d2:b3:cd:b6:47:4b:43:26:e2: d2:a0:1f:25:1c:68:ff:d8:9d:cd:74:f8:00:b2:ef: 3e:dc:1a:aa:90:2e:6f:97:f1:61:74:96:6a:aa:2e: 87:71:78:30:77:95:f7:c8:ef:11:ef:00:b3:83:ab: e7:40:da:a9:28:3c:cf:81:7c:ef:5f:3a:d5:af:53: 1e:9a:ab:c1:c9:3b:c5:0e:19:c7:3b:0e:f5:ea:68: cd:34:9d:eb:06:c8:c3:18:ae:56:e8:90:3b:fb:c6: 73:c8:17:a5:04:cb:2f:2f:16:1d:59:30:0d:b6:b8: a4:15:6a:13:19:76:1a:e9:a3:66:e3:8b:17:d3:2e: d0:9a:ba:94:e0:dd:e9:90:bc:55:82:f2:9e:40:6c: c7:d9:06:90:3f:40:21:d3:fd:93:46:dd:3b:6e:d8: 38:2d:c5:ff:b1:44:c4:0a:61:29:b2:b9:0d:ce:fa: 19:dc:63:b9:af:e9:70:ea:f9:75:17:f4:c6:bb:07: a1:72:32:49:83:91:af:1e:68:ae:7c:c0:9f:a2:9d: 89:41:bd:e3:49:a3:d3:e8:1b:00:d2:08:b3:49:65: 38:1e:15:95:bc:a0:d2:7f:b5:b0:0d:cf:61:41:33: ba:ef:f4:c9:eb:d9:6d:fc:ab:6f:27:c4:b1:43:6f: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:3E:FC:D0:24:AB:C0:B3:00:A7:B7:3A:2D:A4:DA:57:07:64:E0 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:71:cc:04:2f:ed:3c:d6:16:4c:3d:fb:f9:c7:e9:5b:c0: 1d:ee:35:32:46:35:5d:5a:97:d0:c2:2e:08:ba:dd:5d:16:86: dc:08:e3:1c:67:b5:1f:09:a9:1b:48:9f:09:26:2e:13:b8:ea: 3f:1d:52:28:7a:5b:41:9a:98:1c:f3:3e:52:fe:71:85:85:1c: 61:c0:ca:53:9a:ff:79:f3:a9:a4:0b:bb:3b:2c:41:ae:d3:a5: 48:61:4d:a3:c4:b2:70:b3:2c:9d:c2:30:e2:f6:82:a0:a6:11: b7:41:ce:27:33:cd:fa:65:5a:2a:6c:1b:b9:82:c2:88:da:17: 42:f7:d8:d0:39:b4:27:23:f8:06:67:4b:27:df:58:4a:5e:18: 4f:9f:d2:1e:32:82:53:ca:1a:78:3f:0b:06:90:47:31:7d:26: e9:c0:14:56:ef:92:63:51:b1:07:15:f0:1c:10:a4:f6:32:93: 48:28:17:d6:dd:e9:b4:0e:97:c3:47:82:08:76:d8:ab:c4:e4: 26:0b:80:12:88:af:60:37:f8:75:c1:4f:77:83:f3:51:f8:54: e4:be:8b:5b:6d:85:b6:2e:76:bd:13:35:28:ac:fb:14:12:ad: 51:c5:fa:c6:5e:0e:58:bc:81:bb:2e:cd:74:e5:98:f4:c8:6a: a0:2d:b6:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn9avFtzkw/mE9aflYnr+RPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUxMDE5MTcwMTA4WhcNMjUxMDIwMTcwMTA4WjAzMTEwLwYDVQQD Eyg3ZmRhM2VmY2QwMjRhYmMwYjMwMGE3YjczYTJkYTRkYTU3MDc2NGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+QngILSs822R0tDJuLSoB8lHGj/ 2J3NdPgAsu8+3BqqkC5vl/FhdJZqqi6HcXgwd5X3yO8R7wCzg6vnQNqpKDzPgXzv XzrVr1MemqvByTvFDhnHOw716mjNNJ3rBsjDGK5W6JA7+8ZzyBelBMsvLxYdWTAN trikFWoTGXYa6aNm44sX0y7QmrqU4N3pkLxVgvKeQGzH2QaQP0Ah0/2TRt07btg4 LcX/sUTECmEpsrkNzvoZ3GO5r+lw6vl1F/TGuwehcjJJg5GvHmiufMCfop2JQb3j SaPT6BsA0gizSWU4HhWVvKDSf7WwDc9hQTO67/TJ69lt/KtvJ8SxQ2+4hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/aPvzQJKvAswCntzotpNpXB2TgMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZJxzAQv 7TzWFkw9+/nH6VvAHe41MkY1XVqX0MIuCLrdXRaG3AjjHGe1HwmpG0ifCSYuE7jq Px1SKHpbQZqYHPM+Uv5xhYUcYcDKU5r/efOppAu7OyxBrtOlSGFNo8SycLMsncIw 4vaCoKYRt0HOJzPN+mVaKmwbuYLCiNoXQvfY0Dm0JyP4BmdLJ99YSl4YT5/SHjKC U8oaeD8LBpBHMX0m6cAUVu+SY1GxBxXwHBCk9jKTSCgX1t3ptA6Xw0eCCHbYq8Tk JguAEoivYDf4dcFPd4PzUfhU5L6LW22Fti52vRM1KKz7FBKtUcX6xl4OWLyBuy7N dOWY9MhqoC22lw== -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:05 2025 by rpki-client