$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: t0yMg8VNi1T/sgOiJ4yyDY672cippnIr1bV4ejWKRRM= Subject key identifier: 95:5B:EE:C5:E5:87:CB:1F:22:EB:09:D5:E4:02:CC:E0:2F:B6:8C:2E Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019827103604EFA51BA362C005FF1916802D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 0FBC Signing time: Sun 20 Jul 2025 09:00:30 +0000 Manifest this update: Sun 20 Jul 2025 09:00:30 +0000 Manifest next update: Mon 21 Jul 2025 09:00:30 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (hash: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: tb0kPtCk2G+LA3yuBd/rbMqhLVBsPCvn0SSJY3kY1DU=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:10:36:04:ef:a5:1b:a3:62:c0:05:ff:19:16:80:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jul 20 09:00:30 2025 GMT Not After : Jul 21 09:00:30 2025 GMT Subject: CN=955beec5e587cb1f22eb09d5e402cce02fb68c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:50:53:29:87:cb:60:4b:58:ad:d3:38:ed:c9: b5:a3:06:01:3b:60:00:79:33:64:1d:46:43:a9:99: 8a:44:74:fa:1d:95:4c:ce:8c:7a:cf:cb:ea:ce:be: b4:28:d7:61:43:bb:60:4a:4b:b1:70:30:58:e3:d7: 1b:39:c1:52:9b:96:10:db:96:e6:62:74:ae:e2:c5: 9d:a2:46:fe:c3:5c:56:4f:d8:80:f4:df:61:2e:7a: 87:91:fe:e2:7e:69:1e:8d:76:f6:e7:95:c7:02:df: 7f:d7:fb:75:6e:5b:4c:82:52:5c:67:a4:7f:50:74: 34:43:a4:d1:dd:4c:37:46:ac:5d:32:49:8b:3e:a3: 2b:d9:49:b9:f1:ad:13:69:d7:91:d5:28:fb:b5:41: 0a:2b:73:85:fd:fd:3c:c5:fd:57:bb:aa:e0:04:7e: 5b:76:ab:81:c3:2e:dd:da:eb:c0:59:20:e3:f1:a6: 1a:ba:a0:99:e6:b1:2d:2d:b2:0b:6e:c0:6a:d6:9b: b1:ec:da:79:45:c0:66:81:b7:68:11:f9:08:6c:ce: 66:a0:79:9b:2f:a5:e9:61:20:97:b3:86:bf:23:1d: 81:75:c5:92:1b:79:79:3b:0a:05:36:22:48:1c:a4: 3b:15:13:cd:39:cc:21:09:51:0b:a2:0f:94:d4:67: c0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5B:EE:C5:E5:87:CB:1F:22:EB:09:D5:E4:02:CC:E0:2F:B6:8C:2E X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e6:a3:76:e2:b7:ca:e8:f3:9f:45:63:a6:a7:64:df:08:a9: 14:64:ec:e6:43:93:3f:f4:94:c2:a8:41:b4:5f:75:f1:d1:2b: 50:57:da:8b:ef:c3:46:12:d3:88:1d:5c:5d:b0:1a:66:69:b8: 79:50:63:a2:f9:40:78:c8:41:9d:db:91:69:ff:9b:e5:ba:cd: 15:2b:4f:8e:64:61:06:be:0f:4e:e2:b0:24:95:c5:58:9c:f8: 5d:17:19:76:bc:08:f8:f5:35:a7:31:78:fb:f1:aa:8f:98:6c: 35:3a:ae:89:94:7e:17:99:7c:f2:c4:b0:76:2a:f9:83:33:96: da:d9:8a:85:a6:76:5b:df:cd:0b:b2:5d:6d:82:87:93:06:19: 4e:71:22:e7:b3:65:4f:8d:c6:2a:ba:6a:7a:b9:b0:5e:c4:81: 7f:b0:f5:7a:1b:ce:81:c2:a3:25:ff:cc:aa:60:c9:c2:e1:d7: 49:0b:4b:31:be:ab:c4:c7:db:6f:7e:0e:d5:cf:91:99:25:dc: 9f:64:78:bd:9a:24:81:b8:85:ab:3a:f1:c0:a2:69:16:c3:99: 1d:81:45:54:7d:60:cc:5f:f7:c2:5a:03:87:01:01:95:76:f2: 43:d8:2b:98:24:63:91:3b:2e:43:3a:67:c4:5a:78:9d:36:06: 3b:75:c6:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnEDYE76Ubo2LABf8ZFoAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUwNzIwMDkwMDMwWhcNMjUwNzIxMDkwMDMwWjAzMTEwLwYDVQQD Eyg5NTViZWVjNWU1ODdjYjFmMjJlYjA5ZDVlNDAyY2NlMDJmYjY4YzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1BTKYfLYEtYrdM47cm1owYBO2AA eTNkHUZDqZmKRHT6HZVMzox6z8vqzr60KNdhQ7tgSkuxcDBY49cbOcFSm5YQ25bm YnSu4sWdokb+w1xWT9iA9N9hLnqHkf7ifmkejXb255XHAt9/1/t1bltMglJcZ6R/ UHQ0Q6TR3Uw3RqxdMkmLPqMr2Um58a0TadeR1Sj7tUEKK3OF/f08xf1Xu6rgBH5b dquBwy7d2uvAWSDj8aYauqCZ5rEtLbILbsBq1pux7Np5RcBmgbdoEfkIbM5moHmb L6XpYSCXs4a/Ix2BdcWSG3l5OwoFNiJIHKQ7FRPNOcwhCVELog+U1GfAxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVb7sXlh8sfIusJ1eQCzOAvtowuMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOajduK3 yujzn0Vjpqdk3wipFGTs5kOTP/SUwqhBtF918dErUFfai+/DRhLTiB1cXbAaZmm4 eVBjovlAeMhBnduRaf+b5brNFStPjmRhBr4PTuKwJJXFWJz4XRcZdrwI+PU1pzF4 +/Gqj5hsNTquiZR+F5l88sSwdir5gzOW2tmKhaZ2W9/NC7JdbYKHkwYZTnEi57Nl T43GKrpqermwXsSBf7D1ehvOgcKjJf/MqmDJwuHXSQtLMb6rxMfbb34O1c+RmSXc n2R4vZokgbiFqzrxwKJpFsOZHYFFVH1gzF/3wloDhwEBlXbyQ9grmCRjkTsuQzpn xFp4nTYGO3XGnw== -----END CERTIFICATE-----Generated at Sun Jul 20 14:13:01 2025 by rpki-client