$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: J+qoRjoMUPSTL22Y19e7s01TZZAwu/HeGYvZFnM0Pqo= Subject key identifier: AA:AE:12:1F:C0:66:C9:88:BA:13:E8:CC:FB:C2:DD:D8:B2:D0:F3:20 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 0198D54E92382C0E9CF82F5ACB337701A4EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1668 Signing time: Sat 23 Aug 2025 05:02:32 +0000 Manifest this update: Sat 23 Aug 2025 05:02:32 +0000 Manifest next update: Sun 24 Aug 2025 05:02:32 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: AAWPbPjTyVT988aYaAp0o8ug4CA.roa (hash: W0Vm8/GtO/KKeUbt2/qoBL2G7a3VmqlowMCbkwrkEEM=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: xEMTxrkkEdV2UfDbyxTfeotFV2IK5IoFfq31qjPW2D4=) 11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 12: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 13: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:92:38:2c:0e:9c:f8:2f:5a:cb:33:77:01:a4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Aug 23 05:02:32 2025 GMT Not After : Aug 24 05:02:32 2025 GMT Subject: CN=aaae121fc066c988ba13e8ccfbc2ddd8b2d0f320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:cb:ee:8d:65:02:b7:b5:b0:66:12:0b:7f: c5:26:f9:88:27:11:2c:f5:3c:32:a5:c5:ed:63:c7: 4b:1a:d7:9d:a0:97:5c:e8:b3:cd:8a:66:b9:5f:df: 44:75:5b:47:3f:d9:5a:7e:92:0d:de:c4:4f:b8:e4: 59:7b:1f:00:f9:cf:74:6e:37:e1:83:80:b7:a3:da: f8:c9:cd:94:c4:67:18:51:c7:62:d6:80:17:f4:b9: 4d:d4:90:17:f4:80:8c:56:90:4f:82:4d:f0:8b:a8: 32:6b:d4:2f:7c:12:1c:49:cf:dd:43:c4:9d:8c:91: 48:11:69:9e:43:a6:a2:fe:80:ab:d2:93:80:b5:1b: ef:04:90:49:51:55:46:2c:4a:c1:63:28:8b:90:ae: d9:1c:61:f0:d9:34:41:e9:e7:16:f8:cd:65:b0:88: ea:dc:41:bd:91:8f:b9:13:2a:93:32:10:3d:0b:ba: a8:07:f7:bc:fe:32:b3:91:51:e5:34:33:ff:b5:cf: 70:f0:76:6c:9a:e8:31:e3:68:c7:86:8a:30:3e:a1: b3:e8:bb:4f:24:74:2a:24:7c:f0:e3:34:06:ee:ce: 55:55:ca:f9:2c:fc:c7:03:e2:72:5a:9c:95:a1:c2: c5:0f:55:08:b7:a4:af:ed:3f:f9:d9:b7:7e:70:d1: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AE:12:1F:C0:66:C9:88:BA:13:E8:CC:FB:C2:DD:D8:B2:D0:F3:20 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:c2:b1:b7:38:59:40:45:21:ab:7b:7c:f8:f9:3c:ce:5b:32: a7:40:e8:fc:1d:c4:7f:93:dd:55:83:7b:4f:b4:27:d3:8c:6c: bf:45:26:b5:02:98:e2:78:70:7f:52:38:e1:59:0f:30:06:9e: d7:26:b5:aa:ef:2e:21:65:bf:bd:3b:0a:18:e4:a3:34:6b:3f: 49:95:2f:8e:32:63:9b:3c:8a:cb:71:13:e9:d2:e2:f3:17:fb: bd:fd:45:36:98:e1:c3:44:fb:d2:56:a2:84:e2:18:45:4c:29: dc:85:55:cf:e7:20:9d:fb:c8:7f:16:33:e0:8c:f0:3c:71:53: 57:0b:14:e0:a5:95:ad:9f:af:9b:07:e0:18:b6:9d:ae:61:31: 3a:52:b9:5c:0f:be:06:cf:bd:88:96:f4:39:0f:62:95:cd:9c: 21:16:20:4d:b7:3b:f6:87:1a:0c:a2:1d:7d:88:b8:b6:6c:ba: 12:10:e5:85:62:32:fa:4f:17:6d:cf:bf:ae:20:c4:f1:5b:25: ee:81:ff:ef:d3:98:a1:f8:85:cd:18:77:0b:4e:07:5c:a3:79: d0:9c:f2:52:4a:7c:6d:41:d3:de:eb:b5:21:fc:de:3c:62:a3: 10:87:44:b5:af:05:6a:ec:7b:f2:87:76:8c:55:88:fe:e2:0d: a0:94:63:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTpI4LA6c+C9ayzN3AaTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwODIzMDUwMjMyWhcNMjUwODI0MDUwMjMyWjAzMTEwLwYDVQQD EyhhYWFlMTIxZmMwNjZjOTg4YmExM2U4Y2NmYmMyZGRkOGIyZDBmMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwLL7o1lAre1sGYSC3/FJvmIJxEs 9TwypcXtY8dLGtedoJdc6LPNima5X99EdVtHP9lafpIN3sRPuORZex8A+c90bjfh g4C3o9r4yc2UxGcYUcdi1oAX9LlN1JAX9ICMVpBPgk3wi6gya9QvfBIcSc/dQ8Sd jJFIEWmeQ6ai/oCr0pOAtRvvBJBJUVVGLErBYyiLkK7ZHGHw2TRB6ecW+M1lsIjq 3EG9kY+5EyqTMhA9C7qoB/e8/jKzkVHlNDP/tc9w8HZsmugx42jHhoowPqGz6LtP JHQqJHzw4zQG7s5VVcr5LPzHA+JyWpyVocLFD1UIt6Sv7T/52bd+cNHQEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKquEh/AZsmIuhPozPvC3diy0PMgMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMKxtzhZ QEUhq3t8+Pk8zlsyp0Do/B3Ef5PdVYN7T7Qn04xsv0UmtQKY4nhwf1I44VkPMAae 1ya1qu8uIWW/vTsKGOSjNGs/SZUvjjJjmzyKy3ET6dLi8xf7vf1FNpjhw0T70lai hOIYRUwp3IVVz+cgnfvIfxYz4IzwPHFTVwsU4KWVrZ+vmwfgGLadrmExOlK5XA++ Bs+9iJb0OQ9ilc2cIRYgTbc79ocaDKIdfYi4tmy6EhDlhWIy+k8Xbc+/riDE8Vsl 7oH/79OYofiFzRh3C04HXKN50JzyUkp8bUHT3uu1IfzePGKjEIdEta8Faux78od2 jFWI/uINoJRjSg== -----END CERTIFICATE-----Generated at Sat Aug 23 13:59:09 2025 by rpki-client