$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: hvUKK2BMrtRAQccVsQvLCONGGhyBqKXJCk0uwtTKtbs= Subject key identifier: D4:4F:09:F5:88:CF:53:CB:10:AA:7B:D5:17:79:14:BB:23:71:DC:5B Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 0198D5162F4748D4C693935C34B8108A3E82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1268 Signing time: Sat 23 Aug 2025 04:00:57 +0000 Manifest this update: Sat 23 Aug 2025 04:00:57 +0000 Manifest next update: Sun 24 Aug 2025 04:00:57 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: K8o3gVSZosWNreFGxqBTKvgoyifYPPPq3t9QceN4y5I=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:16:2f:47:48:d4:c6:93:93:5c:34:b8:10:8a:3e:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Aug 23 04:00:57 2025 GMT Not After : Aug 24 04:00:57 2025 GMT Subject: CN=d44f09f588cf53cb10aa7bd5177914bb2371dc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:59:db:b2:ed:4b:bb:f2:fe:12:9d:d8:a1:14: a6:04:03:10:07:7b:31:50:25:a5:5d:d3:0e:da:2f: a5:b7:26:36:02:e7:a6:d3:5c:b3:b7:a1:38:41:7f: 9e:aa:9b:8e:20:fd:c2:1c:53:7f:9e:78:84:ed:1b: 08:e2:83:a8:70:8d:30:6d:ce:fb:70:a8:69:0e:88: d5:8e:54:37:ec:72:f7:e6:e7:7f:38:c8:2b:01:20: a7:01:0c:e7:1f:0f:a1:58:38:ec:4d:89:30:28:21: c8:05:ce:12:0f:06:48:6d:cd:35:1b:14:d7:c7:75: c6:d7:cb:41:54:db:b9:90:83:b3:c5:a4:a9:16:6f: 25:83:43:7c:02:56:dc:32:8f:02:84:34:f5:3c:72: 0e:d9:07:f8:62:03:a3:a7:ec:1d:1e:9c:2a:ce:fb: e4:1e:73:4f:f6:bb:76:b3:01:30:5c:c7:44:8d:5c: 00:b9:a4:eb:3c:09:43:5d:21:97:74:d7:b5:c9:ae: 6d:e2:0d:41:a3:13:2c:95:9e:17:08:c6:2e:b9:96: 6f:ba:a6:d1:2d:9e:33:96:59:56:6b:54:4f:03:7f: 75:05:68:b9:e6:5d:35:58:79:64:76:9b:df:08:a7: 40:62:cd:26:2e:08:46:8d:a3:14:9d:e7:64:ed:e7: 82:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4F:09:F5:88:CF:53:CB:10:AA:7B:D5:17:79:14:BB:23:71:DC:5B X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:de:c1:06:3a:da:ee:13:d3:03:95:38:94:85:06:93:c5:c8: 5c:e0:c9:6e:ea:8e:72:ed:83:3c:bb:4f:b0:51:b1:6f:b6:48: 08:fe:52:41:e6:7d:53:ac:fc:48:5d:12:4b:11:b2:63:2d:98: ce:b7:37:fd:6d:f3:5c:69:5c:18:44:97:7a:41:a7:30:2e:9d: 9f:6e:dc:45:d0:51:27:eb:34:d0:87:59:b0:87:64:35:f8:f1: 55:c9:89:78:4e:a0:d4:5f:24:53:c9:8c:ac:cc:95:94:82:94: ef:73:61:d1:e3:5d:f4:29:5e:b5:0d:61:b3:11:1e:34:fb:4c: 08:21:31:15:b2:bc:ce:97:fa:51:e6:fe:f3:16:93:03:0e:82: 18:46:17:d5:8d:c0:f7:1f:f4:04:3d:d6:23:eb:17:c6:8d:36: 38:11:a9:20:62:6b:93:0f:71:00:04:7b:65:6c:14:5d:e9:94: cf:42:46:e5:11:4b:08:ab:58:fe:ad:45:5d:a0:3d:f6:2a:37: 37:66:99:5d:4b:e7:f3:e3:79:72:48:93:a0:cb:73:39:89:14: 7c:28:e9:29:36:c7:be:5a:31:a0:0d:cd:e8:bb:8e:16:53:e9: cd:76:a0:36:2c:f2:d3:af:ea:e5:93:d3:f6:b1:bc:52:54:97: 9f:4e:09:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFi9HSNTGk5NcNLgQij6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwODIzMDQwMDU3WhcNMjUwODI0MDQwMDU3WjAzMTEwLwYDVQQD EyhkNDRmMDlmNTg4Y2Y1M2NiMTBhYTdiZDUxNzc5MTRiYjIzNzFkYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1nbsu1Lu/L+Ep3YoRSmBAMQB3sx UCWlXdMO2i+ltyY2Auem01yzt6E4QX+eqpuOIP3CHFN/nniE7RsI4oOocI0wbc77 cKhpDojVjlQ37HL35ud/OMgrASCnAQznHw+hWDjsTYkwKCHIBc4SDwZIbc01GxTX x3XG18tBVNu5kIOzxaSpFm8lg0N8AlbcMo8ChDT1PHIO2Qf4YgOjp+wdHpwqzvvk HnNP9rt2swEwXMdEjVwAuaTrPAlDXSGXdNe1ya5t4g1BoxMslZ4XCMYuuZZvuqbR LZ4zlllWa1RPA391BWi55l01WHlkdpvfCKdAYs0mLghGjaMUnedk7eeCNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRPCfWIz1PLEKp71Rd5FLsjcdxbMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJN7BBjra 7hPTA5U4lIUGk8XIXODJbuqOcu2DPLtPsFGxb7ZICP5SQeZ9U6z8SF0SSxGyYy2Y zrc3/W3zXGlcGESXekGnMC6dn27cRdBRJ+s00IdZsIdkNfjxVcmJeE6g1F8kU8mM rMyVlIKU73Nh0eNd9CletQ1hsxEeNPtMCCExFbK8zpf6Ueb+8xaTAw6CGEYX1Y3A 9x/0BD3WI+sXxo02OBGpIGJrkw9xAAR7ZWwUXemUz0JG5RFLCKtY/q1FXaA99io3 N2aZXUvn8+N5ckiToMtzOYkUfCjpKTbHvloxoA3N6LuOFlPpzXagNizy06/q5ZPT 9rG8UlSXn04Jpw== -----END CERTIFICATE-----Generated at Sat Aug 23 11:26:15 2025 by rpki-client