$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json) Hash identifier: 3PlQ4iMMUPyk/s8Lhq3OAlpSJR4oeIRct4iP5TCSugM= Subject key identifier: 27:1D:FB:25:A1:36:24:E4:1B:6E:5C:F2:16:43:19:ED:9A:1C:7E:DF Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 0198D54E8BB7A208F7A329720D6DF9812636 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft Manifest number: 133D Signing time: Sat 23 Aug 2025 05:02:31 +0000 Manifest this update: Sat 23 Aug 2025 05:02:31 +0000 Manifest next update: Sun 24 Aug 2025 05:02:31 +0000 Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=) 2: 6C2BEepiCaQMVtCkyhz30xXe8YE.roa (hash: LcW+0th7kvny6qypqSlzBgTR2tOOaIncb1qlmtnhBg4=) 3: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=) 4: I-9Tpf97kHf-GvztS87HSZmgBuY.roa (hash: 320Aem//4P5lEM+txy2iH8t6F4isw9J7RutBXPt3FIs=) 5: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=) 6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=) 7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=) 8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: mUZ3+40ABnnH8CqUga85jcc7j2ewzei/KVGQyQWu7bk=) 9: vBCHQIvxYnn49XpOGJSE4wjSlGw.roa (hash: 7CO1i5aTkd/bHcAyF+TmsIBuS1Bs7EA5n3iwLviSKeY=) 10: zy6JMMIZp4iT7e139le0NYBhce8.roa (hash: 7ppyWguuo1KWIsZnXyQq/hp4jdvBZxKn909Zkp3QprY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:8b:b7:a2:08:f7:a3:29:72:0d:6d:f9:81:26:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Aug 23 05:02:31 2025 GMT Not After : Aug 24 05:02:31 2025 GMT Subject: CN=271dfb25a13624e41b6e5cf2164319ed9a1c7edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:55:08:3f:23:be:e4:ce:48:c3:26:c2:5d: 11:f3:2b:d1:43:2d:c1:10:9e:06:97:5e:7a:14:cf: 91:33:de:c4:9a:48:a1:1e:8a:6e:c0:5d:84:29:5c: e1:46:0a:e3:26:66:e4:9a:bf:40:ca:ee:5d:cd:c9: 7a:10:c9:d7:25:c6:84:41:f9:fc:34:65:f3:6a:89: 47:7b:bb:9c:f9:cc:51:37:cf:a9:cf:2d:39:aa:aa: bf:f5:29:cf:69:97:61:cd:04:93:6b:68:56:a7:01: 04:b5:e5:4b:22:56:7c:a8:d7:8a:0f:d6:ee:e0:45: c2:77:f2:4b:ab:9a:f5:11:8c:21:12:3c:c0:1f:89: 5c:1c:ce:ba:b2:99:25:a7:1d:b9:5e:83:a2:4a:d1: e4:57:31:85:23:15:57:7c:3a:73:d5:1c:22:b2:78: e6:30:bd:66:9d:e1:4b:e5:23:b7:b6:52:03:e5:2c: 1a:e7:95:e9:3c:d4:19:cd:a2:0f:19:f5:8f:94:6f: 87:05:63:87:b6:c7:f3:62:c7:e0:e8:72:15:93:f4: a1:de:08:55:4f:3c:9f:15:3c:51:5d:54:c5:b3:d2: c6:8c:12:83:1d:ee:9c:db:a0:0a:43:01:df:50:66: a3:71:1b:b0:3a:2d:e2:68:32:8c:99:7d:8f:09:d2: 09:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1D:FB:25:A1:36:24:E4:1B:6E:5C:F2:16:43:19:ED:9A:1C:7E:DF X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:63:2b:4b:94:cc:0f:e3:45:8c:dc:25:e5:d0:bb:72:b5:a6: 77:34:5c:fd:a7:2e:09:75:b8:ed:6c:e7:90:e7:7c:fb:b5:ae: 06:2d:d5:64:17:2d:33:2d:8c:d5:05:fd:30:6c:25:6b:9a:1a: bf:a2:48:dc:80:4a:03:70:bb:9f:d8:fe:bb:d2:9a:c3:92:37: 03:d9:38:46:e0:18:b5:e9:54:1b:cf:fd:ea:33:73:89:6f:78: 93:42:50:f2:12:3d:8a:ff:54:ac:d5:de:fb:b9:ad:b4:4a:ea: 96:2b:01:a7:f1:a5:51:cb:4b:f4:7f:16:89:93:21:6e:09:7c: 9f:85:32:2b:ae:d7:42:be:aa:b2:9b:0d:7a:69:d8:f7:5e:56: 23:be:35:7b:14:52:fa:ef:7a:60:00:ff:4b:6b:c8:68:48:73: 82:b2:49:9f:f5:db:ad:b3:78:27:d0:20:72:bd:4e:6f:b4:8f: e8:87:e1:53:8e:9b:34:76:cf:5c:cc:f9:b5:f3:fd:21:36:79: 3a:6c:97:65:8b:cb:12:11:b4:4e:ed:6c:9a:dc:b0:78:dc:91: c6:80:dc:b7:57:84:b6:cd:7b:7e:d2:00:de:05:ae:fd:c9:36: eb:82:e5:6e:31:06:ed:e4:cb:6f:b9:51:ff:9d:c0:b7:7d:7d: f6:5b:a1:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTou3ogj3oylyDW35gSY2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjUwODIzMDUwMjMxWhcNMjUwODI0MDUwMjMxWjAzMTEwLwYDVQQD EygyNzFkZmIyNWExMzYyNGU0MWI2ZTVjZjIxNjQzMTllZDlhMWM3ZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRNVCD8jvuTOSMMmwl0R8yvRQy3B EJ4Gl156FM+RM97EmkihHopuwF2EKVzhRgrjJmbkmr9Ayu5dzcl6EMnXJcaEQfn8 NGXzaolHe7uc+cxRN8+pzy05qqq/9SnPaZdhzQSTa2hWpwEEteVLIlZ8qNeKD9bu 4EXCd/JLq5r1EYwhEjzAH4lcHM66spklpx25XoOiStHkVzGFIxVXfDpz1Rwisnjm ML1mneFL5SO3tlID5Swa55XpPNQZzaIPGfWPlG+HBWOHtsfzYsfg6HIVk/Sh3ghV TzyfFTxRXVTFs9LGjBKDHe6c26AKQwHfUGajcRuwOi3iaDKMmX2PCdIJcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcd+yWhNiTkG25c8hZDGe2aHH7fMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWMrS5TM D+NFjNwl5dC7crWmdzRc/acuCXW47WznkOd8+7WuBi3VZBctMy2M1QX9MGwla5oa v6JI3IBKA3C7n9j+u9Kaw5I3A9k4RuAYtelUG8/96jNziW94k0JQ8hI9iv9UrNXe +7mttErqlisBp/GlUctL9H8WiZMhbgl8n4UyK67XQr6qspsNemnY915WI741exRS +u96YAD/S2vIaEhzgrJJn/XbrbN4J9Agcr1Ob7SP6IfhU46bNHbPXMz5tfP9ITZ5 OmyXZYvLEhG0Tu1smtyweNyRxoDct1eEts17ftIA3gWu/ck264LlbjEG7eTLb7lR /53At3199luhVw== -----END CERTIFICATE-----Generated at Sat Aug 23 13:29:10 2025 by rpki-client