$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: tj32F2A4GtuZgkohue7vU7vyHd3y232hFcgPUIt1uEU= Subject key identifier: 5B:15:5C:19:20:FD:47:0E:45:05:5B:51:C5:16:3B:FE:D1:B3:D9:8B Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 0198469B5E1404180710CC116E2DE53ACB82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0A19 Signing time: Sat 26 Jul 2025 12:00:43 +0000 Manifest this update: Sat 26 Jul 2025 12:00:43 +0000 Manifest next update: Sun 27 Jul 2025 12:00:43 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (hash: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=) 10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 11: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 15: irT4DdDzgeP-65AGXrk0PHCAQVY.roa (hash: RsayR2J7jayb/ZHPN+8XPFdXktAjeGK/x5tQjIbG8/Y=) 16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: SILYdJt+T1Cx5wx8RSxZmH3H9l16sh+aC9AI5L9d+Xc=) 17: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=) 18: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:46:9b:5e:14:04:18:07:10:cc:11:6e:2d:e5:3a:cb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jul 26 12:00:43 2025 GMT Not After : Jul 27 12:00:43 2025 GMT Subject: CN=5b155c1920fd470e45055b51c5163bfed1b3d98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0f:6b:ac:e6:85:f1:08:14:32:ee:f6:28:34: 65:37:48:10:d1:9f:92:f6:db:01:ff:78:cc:92:a9: 3d:84:01:df:ed:47:bc:39:94:34:b0:21:f2:4e:dd: 74:83:e8:81:cd:95:31:18:2d:9a:23:cc:a3:eb:a4: 91:68:9a:9a:e6:f8:0b:d8:db:61:d3:39:2a:4a:41: 84:b7:70:00:13:d3:53:bf:84:78:98:9d:85:9c:7c: 9a:ab:4b:35:d6:9a:0e:33:a0:03:98:76:3f:50:e9: ae:74:fc:8b:4f:7e:86:f8:c3:a7:4c:c9:90:da:6f: 2a:78:71:32:dc:f0:a2:41:c9:43:56:3f:1c:66:9e: 87:41:34:69:e3:02:b1:bf:59:fd:dd:c1:0e:dd:cd: 07:81:d5:73:e6:c6:ea:34:64:d6:0f:a5:51:b2:b0: e4:55:62:dc:59:e8:57:e4:fc:af:04:d9:03:a8:3e: 8d:b3:5f:96:e0:ae:ba:5f:41:ff:c9:ef:1f:61:9a: 30:da:29:33:3f:df:0d:f4:e2:4b:5a:9d:d0:4e:6e: 78:f7:94:87:eb:95:59:50:eb:36:2a:7b:9a:c0:b5: 9a:cf:c0:d5:25:96:74:05:a9:b4:50:5d:db:6a:52: 01:0e:23:3e:58:6b:2f:03:e3:c0:5d:5b:85:cf:b3: 8e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:15:5C:19:20:FD:47:0E:45:05:5B:51:C5:16:3B:FE:D1:B3:D9:8B X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:49:01:4e:61:f2:cb:b9:ff:0a:76:bc:b1:b4:95:24:da:9b: 8e:03:89:26:95:99:ef:4c:16:71:20:c6:80:c8:67:ea:2e:9f: 1e:f9:51:81:35:95:2b:8e:6f:d7:31:a6:f4:e2:cd:16:03:8c: 5d:20:e4:22:f4:01:75:d0:87:09:5f:f7:b0:22:9b:4e:c8:aa: 84:c2:b8:18:db:c4:ad:03:81:a2:c3:b1:de:bb:2e:61:3e:8c: 94:43:25:34:45:60:ec:b8:b0:74:54:84:33:4d:62:ac:a7:25: 2b:8d:f7:5d:5f:70:af:ef:14:20:7a:d0:ef:6e:37:b3:d0:5f: 32:62:4b:a1:f7:45:9b:ef:35:9e:d1:b8:85:2a:9c:26:9e:d1: 5e:fe:b8:5f:b4:e1:bb:6a:c6:d1:72:27:80:13:36:4d:5e:f0: 38:9e:10:19:ae:11:56:a9:f0:21:60:39:c6:49:e8:b9:4b:48: d8:ad:75:2c:88:3b:47:ba:4b:55:0e:53:5c:b0:42:30:28:66: 5e:72:39:71:40:d5:60:d1:60:e4:f2:24:ca:7f:ae:3d:03:41: e8:72:65:0e:bc:76:fc:b6:50:b7:cc:ff:f4:72:e4:33:15:9c: ce:cf:bc:49:14:dc:d6:43:42:9e:4a:a8:13:fe:4e:0a:29:b0: 3a:a4:12:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhGm14UBBgHEMwRbi3lOsuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUwNzI2MTIwMDQzWhcNMjUwNzI3MTIwMDQzWjAzMTEwLwYDVQQD Eyg1YjE1NWMxOTIwZmQ0NzBlNDUwNTViNTFjNTE2M2JmZWQxYjNkOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6w9rrOaF8QgUMu72KDRlN0gQ0Z+S 9tsB/3jMkqk9hAHf7Ue8OZQ0sCHyTt10g+iBzZUxGC2aI8yj66SRaJqa5vgL2Nth 0zkqSkGEt3AAE9NTv4R4mJ2FnHyaq0s11poOM6ADmHY/UOmudPyLT36G+MOnTMmQ 2m8qeHEy3PCiQclDVj8cZp6HQTRp4wKxv1n93cEO3c0HgdVz5sbqNGTWD6VRsrDk VWLcWehX5PyvBNkDqD6Ns1+W4K66X0H/ye8fYZow2ikzP98N9OJLWp3QTm5495SH 65VZUOs2KnuawLWaz8DVJZZ0Bam0UF3balIBDiM+WGsvA+PAXVuFz7OOhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsVXBkg/UcORQVbUcUWO/7Rs9mLMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEkBTmHy y7n/Cna8sbSVJNqbjgOJJpWZ70wWcSDGgMhn6i6fHvlRgTWVK45v1zGm9OLNFgOM XSDkIvQBddCHCV/3sCKbTsiqhMK4GNvErQOBosOx3rsuYT6MlEMlNEVg7LiwdFSE M01irKclK433XV9wr+8UIHrQ7243s9BfMmJLofdFm+81ntG4hSqcJp7RXv64X7Th u2rG0XIngBM2TV7wOJ4QGa4RVqnwIWA5xknouUtI2K11LIg7R7pLVQ5TXLBCMChm XnI5cUDVYNFg5PIkyn+uPQNB6HJlDrx2/LZQt8z/9HLkMxWczs+8SRTc1kNCnkqo E/5OCimwOqQSNQ== -----END CERTIFICATE-----Generated at Sat Jul 26 15:02:39 2025 by rpki-client