$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: Ljpz5AJR6XoacwT8Em3qTz1+FFz4jcNMwHWkcSxK/gQ= Subject key identifier: 93:A2:CE:DD:62:55:5A:74:25:D0:67:21:78:2F:66:75:5C:C4:92:F6 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01983239B13AFC24B00B69E9BDADB54257CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1330 Signing time: Tue 22 Jul 2025 13:01:38 +0000 Manifest this update: Tue 22 Jul 2025 13:01:38 +0000 Manifest next update: Wed 23 Jul 2025 13:01:38 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: p+2BxUk2gJHepyt0kak8VU/pCULzrJPkgKS+UYyt10s=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:32:39:b1:3a:fc:24:b0:0b:69:e9:bd:ad:b5:42:57:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jul 22 13:01:38 2025 GMT Not After : Jul 23 13:01:38 2025 GMT Subject: CN=93a2cedd62555a7425d06721782f66755cc492f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:09:8f:46:d8:75:44:34:84:7b:e1:0d:85: af:ce:81:e4:58:66:d3:10:b6:2a:98:b8:c8:f8:5e: d5:e2:d1:cb:75:f0:86:67:06:56:9d:f2:65:a5:16: a5:c1:5e:17:25:91:70:79:b1:57:08:c5:4a:53:31: 74:71:fe:21:37:7e:f2:c3:6a:be:81:1c:51:80:83: 3f:46:67:51:75:7f:bb:da:25:1e:ca:66:86:1c:a1: 4a:43:e4:5f:4b:e5:f5:d3:b3:2c:e7:09:ad:1a:ee: df:60:49:69:7d:cd:11:18:43:97:29:8e:71:59:bd: 9d:5c:dc:74:a6:e9:ad:de:29:89:50:fa:86:15:c1: 20:98:a1:ac:bd:e7:cd:20:ac:2b:03:84:2a:1d:64: 80:dc:b7:e6:73:47:6c:d6:cd:9c:2f:e1:68:53:bd: 37:55:78:8d:e2:d8:7c:1d:cc:e1:53:1d:df:5d:ef: c1:70:d0:b7:b1:3f:e5:bb:21:53:7c:f9:fd:41:31: ce:cd:e6:db:7d:ac:57:c6:d7:97:1a:a7:f8:89:59: f1:bd:5d:a8:83:50:bc:f3:54:b1:18:1c:b8:68:4c: 06:0f:a8:f4:0d:02:06:63:4a:0a:95:74:ba:bf:20: 0d:f9:86:98:2d:08:8a:81:02:e1:c3:ff:e5:b9:68: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A2:CE:DD:62:55:5A:74:25:D0:67:21:78:2F:66:75:5C:C4:92:F6 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:32:90:33:d4:28:65:37:fc:de:33:ae:39:84:ad:52:87:96: 44:47:db:ef:bb:7b:19:53:14:e9:82:4c:5f:ff:7e:54:d3:aa: b0:80:e7:58:de:f5:b2:33:00:d2:04:4f:e1:ae:73:48:32:66: 24:2e:53:e8:e7:47:02:e2:8c:99:29:f5:6d:51:b9:43:53:7c: 7b:11:18:36:b6:4c:22:1a:ec:70:03:f8:6a:86:0e:cd:77:9b: 4a:2f:f2:00:fb:d4:0b:41:35:d5:25:4c:9d:85:91:c2:2c:0c: 91:26:de:95:42:48:62:cf:3b:65:38:1e:a8:a5:9b:35:8d:c6: 84:77:83:10:a5:6a:78:9b:80:15:17:7b:22:f0:f3:6a:96:41: db:d1:19:17:42:76:91:22:eb:a1:3d:1b:a3:01:48:a7:2e:70: d4:6d:aa:20:6d:35:58:3a:f6:0d:b4:90:8c:10:c5:ac:3e:55: 6f:45:71:14:6e:e7:02:18:f0:4d:53:02:91:48:9d:05:2c:3e: 7a:c4:a0:fa:48:88:3e:bd:cf:03:49:b4:6a:15:ce:c0:94:d8: 75:26:a3:6f:11:6c:20:54:77:3f:84:f6:cf:10:db:7c:1c:d6: 24:00:39:24:e8:66:2b:7d:66:1e:df:07:f9:8f:2d:bc:2f:a0: 2e:39:66:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgyObE6/CSwC2npva21QlfNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUwNzIyMTMwMTM4WhcNMjUwNzIzMTMwMTM4WjAzMTEwLwYDVQQD Eyg5M2EyY2VkZDYyNTU1YTc0MjVkMDY3MjE3ODJmNjY3NTVjYzQ5MmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxUJj0bYdUQ0hHvhDYWvzoHkWGbT ELYqmLjI+F7V4tHLdfCGZwZWnfJlpRalwV4XJZFwebFXCMVKUzF0cf4hN37yw2q+ gRxRgIM/RmdRdX+72iUeymaGHKFKQ+RfS+X107Ms5wmtGu7fYElpfc0RGEOXKY5x Wb2dXNx0pumt3imJUPqGFcEgmKGsvefNIKwrA4QqHWSA3Lfmc0ds1s2cL+FoU703 VXiN4th8HczhUx3fXe/BcNC3sT/luyFTfPn9QTHOzebbfaxXxteXGqf4iVnxvV2o g1C881SxGBy4aEwGD6j0DQIGY0oKlXS6vyAN+YaYLQiKgQLhw//luWhvWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOizt1iVVp0JdBnIXgvZnVcxJL2MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTKQM9Qo ZTf83jOuOYStUoeWREfb77t7GVMU6YJMX/9+VNOqsIDnWN71sjMA0gRP4a5zSDJm JC5T6OdHAuKMmSn1bVG5Q1N8exEYNrZMIhrscAP4aoYOzXebSi/yAPvUC0E11SVM nYWRwiwMkSbelUJIYs87ZTgeqKWbNY3GhHeDEKVqeJuAFRd7IvDzapZB29EZF0J2 kSLroT0bowFIpy5w1G2qIG01WDr2DbSQjBDFrD5Vb0VxFG7nAhjwTVMCkUidBSw+ esSg+kiIPr3PA0m0ahXOwJTYdSajbxFsIFR3P4T2zxDbfBzWJAA5JOhmK31mHt8H +Y8tvC+gLjlmWQ== -----END CERTIFICATE-----Generated at Tue Jul 22 20:10:47 2025 by rpki-client