$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: 9koCcDt5SKCcrAqMu+PDip4vM3s7FbeYKzXq38y57uA= Subject key identifier: 42:D4:FF:2D:95:0D:50:3D:AD:8D:ED:33:1A:92:D8:36:9D:49:89:C5 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019845BF6B3B9F16384267D262B1874EDF4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 1250 Signing time: Sat 26 Jul 2025 08:00:29 +0000 Manifest this update: Sat 26 Jul 2025 08:00:29 +0000 Manifest next update: Sun 27 Jul 2025 08:00:29 +0000 Files and hashes: 1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=) 2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: Ly4ssYUxiBKAeQIg6wtHN2o1kfOeLd2x6pL+H5CD8Gs=) 8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=) 10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 02:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:bf:6b:3b:9f:16:38:42:67:d2:62:b1:87:4e:df:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jul 26 08:00:29 2025 GMT Not After : Jul 27 08:00:29 2025 GMT Subject: CN=42d4ff2d950d503dad8ded331a92d8369d4989c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3c:0a:cd:f0:e9:8e:d1:a2:3d:13:19:31:39: 62:a3:f8:9d:56:51:04:01:74:cc:fe:20:59:43:57: 80:64:f6:55:ae:67:fb:f5:af:06:2c:d8:66:fe:9d: 87:c9:de:14:80:91:a8:85:c4:1b:12:d5:bc:dc:78: 72:ec:30:05:83:94:46:8d:4e:d2:5f:ec:3d:86:78: 3c:f3:ba:8b:a8:09:45:6e:d2:97:96:87:a8:c4:44: bd:5c:66:ac:c0:37:40:3c:ec:b8:23:38:ad:a8:b5: 78:21:46:eb:8f:37:d2:e8:1d:0f:93:82:50:26:f6: 50:f9:8b:12:75:86:d2:70:54:27:0a:b7:62:68:b4: 97:af:6b:fc:88:34:29:b0:d6:b3:50:93:8c:9b:36: bb:da:fd:d4:6b:86:b9:0f:3f:a9:72:0a:a5:e2:7c: a1:84:ca:9f:22:04:5f:99:e8:4c:e1:79:5b:2d:e7: 84:58:16:d9:a9:ef:63:34:6d:62:6b:2e:cd:bd:83: 59:05:ff:8f:29:2d:67:44:c1:54:77:eb:68:54:53: c6:8c:a9:41:19:33:27:fe:1d:6a:4b:7c:63:d4:51: 5e:16:6e:1b:00:fe:94:12:25:7b:7d:04:7a:db:b8: 84:99:16:b8:32:d4:c5:ce:bb:3f:0b:da:f6:41:4b: df:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D4:FF:2D:95:0D:50:3D:AD:8D:ED:33:1A:92:D8:36:9D:49:89:C5 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a9:19:bd:3d:8c:f0:ca:b8:73:73:e5:cd:16:26:63:44:89: 12:9e:ae:37:26:b8:1f:c0:5e:cb:1d:e5:39:10:56:1b:ee:ff: 94:d2:1c:b3:a3:ed:f3:cd:9d:54:17:83:58:de:4a:4e:43:05: 54:46:bd:7f:af:6a:f0:e6:cb:26:54:cb:79:c3:86:ab:4b:03: ce:3c:1e:a0:de:0c:8c:52:fa:f6:15:1f:95:34:56:fd:8b:f8: 51:d1:9e:e6:95:48:ba:4f:8e:8b:e8:57:ed:34:9c:47:ea:ce: bd:35:bb:4f:c7:f4:5f:5a:00:12:ec:9a:60:bc:61:16:0c:a5: 66:3c:ae:bc:fc:ad:f5:6e:6e:51:98:77:f4:97:c9:e5:36:ed: 9d:49:28:36:32:74:02:85:40:7f:7b:58:95:dd:e4:16:31:26: 19:41:31:8d:3b:08:1a:d9:06:29:5b:45:33:40:2d:9d:af:9d: 70:97:6c:71:c7:6b:f8:3f:6b:9b:3c:f6:6d:f6:65:0e:2d:3f: 1f:de:a2:a7:c6:5b:74:99:e8:fe:d2:f2:1f:1e:b1:a4:52:3c: 98:7c:13:14:a0:01:40:f6:ea:51:6b:2c:dd:5a:df:96:56:76: 12:1e:94:aa:0e:1d:8f:28:df:19:e4:2f:5c:91:61:6d:02:e7: 7e:8b:63:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhFv2s7nxY4QmfSYrGHTt9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUwNzI2MDgwMDI5WhcNMjUwNzI3MDgwMDI5WjAzMTEwLwYDVQQD Eyg0MmQ0ZmYyZDk1MGQ1MDNkYWQ4ZGVkMzMxYTkyZDgzNjlkNDk4OWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTwKzfDpjtGiPRMZMTlio/idVlEE AXTM/iBZQ1eAZPZVrmf79a8GLNhm/p2Hyd4UgJGohcQbEtW83Hhy7DAFg5RGjU7S X+w9hng887qLqAlFbtKXloeoxES9XGaswDdAPOy4IzitqLV4IUbrjzfS6B0Pk4JQ JvZQ+YsSdYbScFQnCrdiaLSXr2v8iDQpsNazUJOMmza72v3Ua4a5Dz+pcgql4nyh hMqfIgRfmehM4XlbLeeEWBbZqe9jNG1iay7NvYNZBf+PKS1nRMFUd+toVFPGjKlB GTMn/h1qS3xj1FFeFm4bAP6UEiV7fQR627iEmRa4MtTFzrs/C9r2QUvf5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELU/y2VDVA9rY3tMxqS2DadSYnFMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKkZvT2M 8Mq4c3PlzRYmY0SJEp6uNya4H8Beyx3lORBWG+7/lNIcs6Pt882dVBeDWN5KTkMF VEa9f69q8ObLJlTLecOGq0sDzjweoN4MjFL69hUflTRW/Yv4UdGe5pVIuk+Oi+hX 7TScR+rOvTW7T8f0X1oAEuyaYLxhFgylZjyuvPyt9W5uUZh39JfJ5TbtnUkoNjJ0 AoVAf3tYld3kFjEmGUExjTsIGtkGKVtFM0Atna+dcJdsccdr+D9rmzz2bfZlDi0/ H96ip8ZbdJno/tLyHx6xpFI8mHwTFKABQPbqUWss3VrfllZ2Eh6Uqg4djyjfGeQv XJFhbQLnfotjog== -----END CERTIFICATE-----Generated at Sat Jul 26 11:32:13 2025 by rpki-client