$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: 7B/BMIGGed0OXP2eBnXxhd5kJar0tSgQN6xejWwu6ww= Subject key identifier: 47:73:78:CB:97:BF:0B:B5:CC:06:41:59:5B:10:7B:97:AE:54:FD:0B Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 0198D583EB096214FB8E4B648DAFC8A227BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 1666 Signing time: Sat 23 Aug 2025 06:00:49 +0000 Manifest this update: Sat 23 Aug 2025 06:00:49 +0000 Manifest next update: Sun 24 Aug 2025 06:00:49 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 5: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 6: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: XJImnuq0zxhXEhO78G+1j/JHwus72MqID5tR4A8GdGw=) 7: PkUBswB6akpRoaWoY8idhiZO-0s.roa (hash: FTb6NXOjB3gAzHYZQp3OqT2aASeT3Lw8OwXcNy1cX04=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 12: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 13: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 14: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 15: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 16: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 17: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 18: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 19: u2jjT9a7gurHsCBuG6MLd36hk6U.roa (hash: 5ifFXhTaQ0rt9DDM8OyMYLPCzUHaKXbmifUQMc2oMtc=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=) 22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:83:eb:09:62:14:fb:8e:4b:64:8d:af:c8:a2:27:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Aug 23 06:00:49 2025 GMT Not After : Aug 24 06:00:49 2025 GMT Subject: CN=477378cb97bf0bb5cc0641595b107b97ae54fd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:d1:a3:92:74:c3:38:fe:9d:85:42:9a:9d: 1a:82:c4:ee:30:f6:f0:b9:b7:dd:4d:c1:6a:97:89: 4a:d4:21:e6:a0:00:46:44:f6:78:2f:3c:6a:a5:4f: 5e:83:36:be:d4:2c:8e:c2:97:69:cd:eb:b3:80:74: b8:78:cf:17:17:7e:f8:7e:e3:dc:fd:94:01:3b:36: ae:fc:d5:6e:f0:19:cd:ce:49:cd:7b:8a:e3:7d:8d: 75:fb:c1:94:6c:98:51:8b:6e:4f:b9:05:d0:aa:c9: a5:85:c4:db:fc:62:d8:70:a3:b1:4a:f1:b5:50:29: 79:7e:4e:34:15:a7:c1:f2:74:36:6a:de:b1:7f:b0: 06:43:d9:cd:8c:e6:bc:d6:48:59:8c:6f:1c:79:2d: 24:bf:94:ea:37:b4:09:52:8f:ab:cb:c5:03:b3:77: 1d:f3:d8:34:9d:7b:77:35:1e:14:37:f3:46:8e:10: 8f:c9:f0:ad:2e:d8:84:88:0d:90:1b:7d:92:ff:01: e8:a2:d8:ee:ad:3b:ab:85:26:c5:f3:b7:b5:b3:99: 79:c0:18:d7:e4:f0:7a:59:25:8d:53:ca:3f:6d:e5: b5:d1:28:67:1e:3e:f1:d7:c8:35:ed:91:5c:72:e5: 44:6d:a5:51:41:c3:1d:bc:d3:bd:5e:43:fd:32:c2: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:78:CB:97:BF:0B:B5:CC:06:41:59:5B:10:7B:97:AE:54:FD:0B X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:47:73:f8:d9:cc:2c:a5:3f:2f:92:e9:29:ab:0e:78:f5:9e: d7:d4:6c:db:37:55:13:77:c3:25:4a:f0:05:7d:8b:fb:75:91: 22:0d:a6:51:c6:d3:1f:93:c1:55:b7:82:9d:6f:35:c3:ad:0b: 80:a5:40:01:85:68:8e:b6:a3:5b:5a:2b:6d:7e:c0:d2:0e:80: 2e:bc:ab:31:d0:1a:fe:be:23:d5:ed:75:3d:0b:9c:aa:c6:9e: 76:45:c0:b5:d9:25:bf:06:60:77:17:eb:29:62:9b:3e:dd:e9: 0f:19:0a:99:82:24:3c:63:4e:26:da:7e:fa:ad:ea:75:69:39: 2d:99:f2:1d:aa:54:7f:df:43:7b:1f:2e:37:c9:55:8f:62:5e: 2f:46:d6:21:ff:a1:3b:27:e6:76:f7:25:c2:2c:0e:64:0f:27: eb:57:2b:82:ee:05:ad:bb:9b:e4:7b:7e:a1:7e:ec:ff:14:ed: 3d:2f:38:c9:cd:55:b4:3f:d3:1a:e1:92:f5:70:11:64:96:46: 90:bd:57:5a:11:d8:57:8f:87:e9:5c:06:37:ba:ff:fd:31:79: 8c:cf:61:1f:dc:fa:1e:2b:ae:63:57:31:c9:11:84:bf:43:d5: e9:99:16:e2:cc:c5:63:62:39:dc:ad:fd:3e:9e:f4:60:11:80: b8:62:16:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVg+sJYhT7jktkja/Ioie7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUwODIzMDYwMDQ5WhcNMjUwODI0MDYwMDQ5WjAzMTEwLwYDVQQD Eyg0NzczNzhjYjk3YmYwYmI1Y2MwNjQxNTk1YjEwN2I5N2FlNTRmZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRPRo5J0wzj+nYVCmp0agsTuMPbw ubfdTcFql4lK1CHmoABGRPZ4LzxqpU9egza+1CyOwpdpzeuzgHS4eM8XF374fuPc /ZQBOzau/NVu8BnNzknNe4rjfY11+8GUbJhRi25PuQXQqsmlhcTb/GLYcKOxSvG1 UCl5fk40FafB8nQ2at6xf7AGQ9nNjOa81khZjG8ceS0kv5TqN7QJUo+ry8UDs3cd 89g0nXt3NR4UN/NGjhCPyfCtLtiEiA2QG32S/wHootjurTurhSbF87e1s5l5wBjX 5PB6WSWNU8o/beW10ShnHj7x18g17ZFccuVEbaVRQcMdvNO9XkP9MsKKmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdzeMuXvwu1zAZBWVsQe5euVP0LMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkdz+NnM LKU/L5LpKasOePWe19Rs2zdVE3fDJUrwBX2L+3WRIg2mUcbTH5PBVbeCnW81w60L gKVAAYVojrajW1orbX7A0g6ALryrMdAa/r4j1e11PQucqsaedkXAtdklvwZgdxfr KWKbPt3pDxkKmYIkPGNOJtp++q3qdWk5LZnyHapUf99Dex8uN8lVj2JeL0bWIf+h OyfmdvclwiwOZA8n61crgu4Frbub5Ht+oX7s/xTtPS84yc1VtD/TGuGS9XARZJZG kL1XWhHYV4+H6VwGN7r//TF5jM9hH9z6HiuuY1cxyRGEv0PV6ZkW4szFY2I53K39 Pp70YBGAuGIW0Q== -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:04 2025 by rpki-client