$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: +JwFDuxbny/p2+889C8MMKJ62DC98Dc4rft+NBTBTtQ= Subject key identifier: CC:FE:12:AE:D0:9C:AF:F4:68:9A:73:35:7E:8F:C8:AA:4B:94:EA:A6 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019843D11097DACFD01C6FB64A4C68A4297F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1602 Signing time: Fri 25 Jul 2025 23:00:31 +0000 Manifest this update: Fri 25 Jul 2025 23:00:31 +0000 Manifest next update: Sat 26 Jul 2025 23:00:31 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: Yl1A7gcj+CLU7PcovIk4VLpk5J4tV+QxAiMcfU39wzQ=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:43:d1:10:97:da:cf:d0:1c:6f:b6:4a:4c:68:a4:29:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jul 25 23:00:31 2025 GMT Not After : Jul 26 23:00:31 2025 GMT Subject: CN=ccfe12aed09caff4689a73357e8fc8aa4b94eaa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:f0:67:53:c2:9b:33:55:6e:5b:b6:16:33: 11:13:28:26:e5:f3:1a:4e:06:e7:42:a1:47:2a:e4: a7:7b:8f:71:a8:37:9b:97:db:03:7c:f6:6d:96:01: 7c:ac:fa:d4:84:81:25:db:5a:b8:25:1d:54:24:f5: 04:69:0e:29:57:83:f5:03:6a:2e:30:de:c3:0c:9a: 95:31:4b:ad:d4:19:19:c2:e7:17:81:97:c2:b8:a2: d4:b5:cd:48:6a:6d:bb:e2:dc:bc:cf:c9:3c:e5:0e: 58:98:e7:65:36:3e:3a:47:72:40:0f:d2:59:99:50: 2e:94:c0:72:b3:66:b8:7c:5c:c3:2a:54:bf:cc:63: 13:6f:51:e6:f6:d1:a5:7d:37:92:55:15:61:af:59: a6:36:86:d9:f9:2c:18:df:ee:95:cc:0b:43:74:ce: ca:da:6c:ef:f3:05:4d:d2:92:07:32:c8:0f:a4:f0: 99:fc:12:74:b2:5a:56:83:7d:ba:c8:62:6f:77:14: 82:64:2f:40:b2:3c:94:b6:7a:46:d5:e9:7d:e6:fd: 36:62:b2:82:90:24:31:dd:7a:d2:76:d2:78:86:01: 99:1a:f8:39:98:cd:be:8f:f8:c7:00:4b:5d:a3:dc: 5b:48:5c:0f:14:50:9b:d4:26:19:f6:ff:38:b4:8a: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FE:12:AE:D0:9C:AF:F4:68:9A:73:35:7E:8F:C8:AA:4B:94:EA:A6 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bd:27:dc:03:71:59:5a:77:c2:3b:3d:b4:76:ca:52:bc:1b: b9:74:3b:c4:34:28:11:a3:f3:1a:d4:3a:f2:60:b0:c4:32:49: 51:ee:12:3c:53:a3:c4:3c:87:46:76:f1:14:f8:c4:47:21:39: fb:1b:ea:3e:f6:fc:f6:1b:74:4b:fa:0b:04:11:f6:56:70:3d: ba:66:12:52:11:cf:20:ae:5c:43:e4:db:6d:93:ae:c1:e9:96: e1:6e:5a:58:18:25:9e:e0:97:74:e8:66:79:19:5e:75:2d:73: 34:d0:90:41:eb:38:46:9b:20:16:72:42:9c:cf:31:11:ad:d5: 1c:47:01:95:9d:97:7a:ed:90:24:ec:a9:b9:94:9f:23:36:d4: 09:4f:3b:3f:75:91:9c:25:8a:05:42:0b:c3:5a:ba:07:86:c6: 41:c9:f0:46:18:d8:fa:3d:40:b1:67:43:77:fc:26:ff:02:95: cd:fb:ca:13:5f:2f:e4:83:0d:9e:0a:bb:f0:7a:1b:2d:00:69: 15:f0:26:fb:23:56:28:e4:16:97:91:b1:66:3c:1e:c3:86:15: c6:0a:a2:54:f8:7d:92:dc:80:94:80:18:4a:b1:b9:82:b3:1f: 53:cd:7e:59:16:2a:d9:a6:6b:14:05:0c:17:98:ba:f0:d4:30: de:9c:af:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhD0RCX2s/QHG+2SkxopCl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwNzI1MjMwMDMxWhcNMjUwNzI2MjMwMDMxWjAzMTEwLwYDVQQD EyhjY2ZlMTJhZWQwOWNhZmY0Njg5YTczMzU3ZThmYzhhYTRiOTRlYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApObwZ1PCmzNVblu2FjMREygm5fMa TgbnQqFHKuSne49xqDebl9sDfPZtlgF8rPrUhIEl21q4JR1UJPUEaQ4pV4P1A2ou MN7DDJqVMUut1BkZwucXgZfCuKLUtc1Iam274ty8z8k85Q5YmOdlNj46R3JAD9JZ mVAulMBys2a4fFzDKlS/zGMTb1Hm9tGlfTeSVRVhr1mmNobZ+SwY3+6VzAtDdM7K 2mzv8wVN0pIHMsgPpPCZ/BJ0slpWg326yGJvdxSCZC9AsjyUtnpG1el95v02YrKC kCQx3XrSdtJ4hgGZGvg5mM2+j/jHAEtdo9xbSFwPFFCb1CYZ9v84tIppVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMz+Eq7QnK/0aJpzNX6PyKpLlOqmMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb0n3ANx WVp3wjs9tHbKUrwbuXQ7xDQoEaPzGtQ68mCwxDJJUe4SPFOjxDyHRnbxFPjERyE5 +xvqPvb89ht0S/oLBBH2VnA9umYSUhHPIK5cQ+TbbZOuwemW4W5aWBglnuCXdOhm eRledS1zNNCQQes4RpsgFnJCnM8xEa3VHEcBlZ2Xeu2QJOypuZSfIzbUCU87P3WR nCWKBUILw1q6B4bGQcnwRhjY+j1AsWdDd/wm/wKVzfvKE18v5IMNngq78HobLQBp FfAm+yNWKOQWl5GxZjwew4YVxgqiVPh9ktyAlIAYSrG5grMfU81+WRYq2aZrFAUM F5i68NQw3pyvow== -----END CERTIFICATE-----Generated at Sat Jul 26 07:26:59 2025 by rpki-client