$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: kFq+htKRFfp2nMNQR1Gc/yDL2ndnc6QB/aFFwJtL9F8= Subject key identifier: 54:4C:5C:99:53:6D:04:ED:F2:21:3E:5B:E6:AE:BC:7F:C5:8C:9D:F7 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 0198477702CDE52912D269C9BAA99E4E23A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 1610 Signing time: Sat 26 Jul 2025 16:00:38 +0000 Manifest this update: Sat 26 Jul 2025 16:00:38 +0000 Manifest next update: Sun 27 Jul 2025 16:00:38 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: EPwGqoCKkQHWqSlIbzgTf+r7KLBX0/vXt0AwSwDSQuw=) 7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=) 10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:47:77:02:cd:e5:29:12:d2:69:c9:ba:a9:9e:4e:23:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jul 26 16:00:38 2025 GMT Not After : Jul 27 16:00:38 2025 GMT Subject: CN=544c5c99536d04edf2213e5be6aebc7fc58c9df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:15:b1:0f:94:05:6d:70:89:78:54:2d:1b: 79:74:1d:c9:02:8d:11:df:93:b9:e1:00:4e:91:cf: 65:fd:9a:20:55:3a:49:f7:85:be:72:89:7b:97:16: 14:12:42:ba:ae:3f:20:b9:ae:54:b6:de:55:30:27: cf:9e:b8:4d:af:72:78:91:35:d3:a5:bf:d3:2f:82: c2:82:de:8a:bf:ea:d0:85:98:19:ba:a2:1d:77:0b: 3a:e0:db:30:33:81:ec:88:8a:a7:0a:31:1f:21:ee: 52:2b:00:54:ee:76:93:68:23:42:ae:0e:00:15:a3: e6:da:e1:f1:1c:7b:bf:03:5c:4d:8a:d8:2e:6c:7a: 0b:c9:6b:3f:13:b6:6f:08:3e:6f:57:9a:2d:b0:7f: 82:b9:c2:a5:8f:67:af:de:86:83:7f:b9:60:66:d1: 09:37:45:ed:a9:68:24:09:a9:e0:e0:7c:b3:21:11: 89:c5:7b:07:53:69:ff:17:18:ca:55:73:23:ed:6b: 44:d2:42:6b:85:f3:d6:ea:74:95:ea:e3:6d:6c:55: 83:87:dd:9d:c0:ba:0c:9c:21:97:b8:ab:85:1e:f9: f7:d9:06:b7:46:0d:fd:b6:d0:02:29:d4:47:55:92: 0c:fe:f7:6f:39:81:5b:80:65:e7:ef:7d:16:38:af: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4C:5C:99:53:6D:04:ED:F2:21:3E:5B:E6:AE:BC:7F:C5:8C:9D:F7 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d3:36:41:21:40:68:bf:28:12:fb:59:28:85:6f:e7:10:11: ff:35:c6:11:ab:da:39:14:02:3f:1a:f9:4b:49:fa:50:14:cc: f5:df:40:51:21:2e:75:23:76:75:b9:1a:cb:e5:4d:3c:70:dc: 05:7c:ad:61:c6:f0:f6:80:49:44:2c:c1:db:49:23:e5:f1:90: 25:c4:14:16:66:7c:cf:19:95:5c:9b:ae:f1:1a:84:4b:28:66: 66:ee:41:36:93:5b:85:41:6a:c0:76:1e:27:58:c5:e8:1b:dd: db:ea:92:9b:96:d6:4e:be:c5:ab:46:6d:97:c2:b6:06:93:cf: 3d:70:c5:1d:cd:0a:01:06:32:0d:80:a2:91:64:31:56:ef:5b: 48:4b:8c:08:bd:b8:9c:fa:c1:29:6a:f3:98:55:96:c0:e0:d2: 92:a2:07:35:41:34:2d:d4:e1:03:32:e2:6f:55:9e:a2:68:85: bc:ec:0f:36:96:ac:6a:96:f6:2d:41:39:c8:5f:4b:51:26:9f: 6d:ab:69:6a:94:7c:94:c1:15:fa:df:b0:b8:a4:01:b4:e3:29: 87:c3:7a:95:6e:33:07:8a:03:20:09:20:9f:1a:d4:28:25:d1: d4:d2:d3:9b:26:31:d2:a7:63:8b:be:95:61:4e:cd:5a:9f:fb: 2f:15:a2:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhHdwLN5SkS0mnJuqmeTiOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUwNzI2MTYwMDM4WhcNMjUwNzI3MTYwMDM4WjAzMTEwLwYDVQQD Eyg1NDRjNWM5OTUzNmQwNGVkZjIyMTNlNWJlNmFlYmM3ZmM1OGM5ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwIVsQ+UBW1wiXhULRt5dB3JAo0R 35O54QBOkc9l/ZogVTpJ94W+col7lxYUEkK6rj8gua5Utt5VMCfPnrhNr3J4kTXT pb/TL4LCgt6Kv+rQhZgZuqIddws64NswM4HsiIqnCjEfIe5SKwBU7naTaCNCrg4A FaPm2uHxHHu/A1xNitgubHoLyWs/E7ZvCD5vV5otsH+CucKlj2ev3oaDf7lgZtEJ N0XtqWgkCang4HyzIRGJxXsHU2n/FxjKVXMj7WtE0kJrhfPW6nSV6uNtbFWDh92d wLoMnCGXuKuFHvn32Qa3Rg39ttACKdRHVZIM/vdvOYFbgGXn730WOK80dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRMXJlTbQTt8iE+W+auvH/FjJ33MB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9M2QSFA aL8oEvtZKIVv5xAR/zXGEavaORQCPxr5S0n6UBTM9d9AUSEudSN2dbkay+VNPHDc BXytYcbw9oBJRCzB20kj5fGQJcQUFmZ8zxmVXJuu8RqESyhmZu5BNpNbhUFqwHYe J1jF6Bvd2+qSm5bWTr7Fq0Ztl8K2BpPPPXDFHc0KAQYyDYCikWQxVu9bSEuMCL24 nPrBKWrzmFWWwODSkqIHNUE0LdThAzLib1WeomiFvOwPNpasapb2LUE5yF9LUSaf batpapR8lMEV+t+wuKQBtOMph8N6lW4zB4oDIAkgnxrUKCXR1NLTmyYx0qdji76V YU7NWp/7LxWiPw== -----END CERTIFICATE-----Generated at Sat Jul 26 20:39:19 2025 by rpki-client