$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: XtOSaV2EFN23ToF9wstEu4ODlblCw76q8FCpR69uZns= Subject key identifier: 94:2B:1F:E1:04:4E:7B:68:5B:74:33:88:A5:A7:BF:A1:2B:DF:17:36 Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 019836BA6C2C35D123DB2BD2F93B0BEEB53A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1216 Signing time: Wed 23 Jul 2025 10:00:43 +0000 Manifest this update: Wed 23 Jul 2025 10:00:43 +0000 Manifest next update: Thu 24 Jul 2025 10:00:43 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: Q9++4Zy9MPTxbfanIALDWSlL4pJMGRWegCgWglkyKAo=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:ba:6c:2c:35:d1:23:db:2b:d2:f9:3b:0b:ee:b5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Jul 23 10:00:43 2025 GMT Not After : Jul 24 10:00:43 2025 GMT Subject: CN=942b1fe1044e7b685b743388a5a7bfa12bdf1736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:6f:a5:ee:61:2c:25:e1:ae:f0:47:48:87: 12:20:e8:4d:b1:71:f0:2d:a7:a3:19:9a:70:4e:86: 65:7d:38:0d:65:0e:9c:1c:3d:32:c4:74:49:71:d3: 58:38:78:84:7f:a0:ea:31:f1:e7:0c:d6:6a:fe:33: 28:e1:37:88:a8:df:c6:01:71:78:02:56:2b:14:9e: 90:f7:7d:80:80:a1:05:9e:1f:12:6b:02:ba:7f:cf: 36:8e:a2:93:89:c4:d3:03:57:c5:16:03:df:e6:4c: 9c:5c:73:d8:e9:45:28:85:d0:9a:db:d7:7d:c9:48: aa:c2:9d:5b:bf:5e:a3:dc:34:9a:0a:1b:63:4f:e4: b1:bc:4a:57:b1:35:cb:ad:84:e0:76:dd:3c:6e:e7: bb:14:15:17:26:61:3a:09:de:15:3c:c0:68:70:99: ee:f8:0d:e2:db:c2:77:7b:3f:d5:cb:3b:ac:77:1f: f8:3c:cb:23:54:0d:27:ba:e6:fa:9a:ff:71:70:35: 23:9c:2e:16:f9:68:db:80:19:ee:81:ce:f8:6f:59: 00:98:d3:93:2b:52:b8:b1:01:0f:6a:2e:c4:88:b7: 14:d0:c9:67:75:76:4b:ad:c5:08:bb:1a:2e:8a:1c: a4:38:f8:a9:ff:92:6f:ca:95:38:e6:a6:3c:a1:67: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2B:1F:E1:04:4E:7B:68:5B:74:33:88:A5:A7:BF:A1:2B:DF:17:36 X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:81:8e:05:95:bc:2d:50:ed:3a:9c:6f:d6:3a:0a:02:e8:65: 90:16:71:da:d4:2a:b4:c8:ae:68:c4:ba:73:ab:3c:44:12:eb: 39:cc:1b:9d:e2:12:ba:3e:46:55:8c:2c:d6:df:79:6b:91:f5: 88:3d:8e:15:9d:b3:cd:0a:d1:16:13:d1:40:16:89:cc:ff:78: 1f:11:28:b8:aa:23:be:c1:1f:ca:ad:a3:ec:18:e1:a9:7f:df: 17:5a:da:72:dd:26:b5:5c:54:b5:6a:f9:9f:49:fb:85:d0:fb: 51:3d:9e:33:5d:61:a1:45:19:f0:4a:ab:6f:6a:df:19:a7:ba: 05:0c:e3:dd:73:24:fc:f3:cc:f5:86:11:2a:eb:66:73:5d:06: a0:1d:ee:e6:1c:b4:8b:0c:b3:41:ea:cd:52:c0:3c:23:83:fd: 47:15:36:6e:46:a8:f6:e6:cc:13:9c:3a:d8:38:6e:a4:63:5b: 19:ae:90:b0:47:0d:e1:74:7d:96:a8:f8:a4:fc:7e:e1:20:f4: 81:b5:2a:7c:f8:ab:49:5d:85:52:16:8e:5e:37:4b:1f:8c:f7: 1e:6d:06:a7:11:f1:cd:dc:4e:e0:8d:fd:71:4a:aa:57:a3:5b: d9:22:72:3b:c8:8c:20:b8:c3:93:0b:d7:11:43:aa:17:f4:0b: b4:86:4b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2umwsNdEj2yvS+TsL7rU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwNzIzMTAwMDQzWhcNMjUwNzI0MTAwMDQzWjAzMTEwLwYDVQQD Eyg5NDJiMWZlMTA0NGU3YjY4NWI3NDMzODhhNWE3YmZhMTJiZGYxNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCBvpe5hLCXhrvBHSIcSIOhNsXHw LaejGZpwToZlfTgNZQ6cHD0yxHRJcdNYOHiEf6DqMfHnDNZq/jMo4TeIqN/GAXF4 AlYrFJ6Q932AgKEFnh8SawK6f882jqKTicTTA1fFFgPf5kycXHPY6UUohdCa29d9 yUiqwp1bv16j3DSaChtjT+SxvEpXsTXLrYTgdt08bue7FBUXJmE6Cd4VPMBocJnu +A3i28J3ez/Vyzusdx/4PMsjVA0nuub6mv9xcDUjnC4W+WjbgBnugc74b1kAmNOT K1K4sQEPai7EiLcU0MlndXZLrcUIuxouihykOPip/5JvypU45qY8oWeRqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQrH+EETntoW3QziKWnv6Er3xc2MB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYGOBZW8 LVDtOpxv1joKAuhlkBZx2tQqtMiuaMS6c6s8RBLrOcwbneISuj5GVYws1t95a5H1 iD2OFZ2zzQrRFhPRQBaJzP94HxEouKojvsEfyq2j7BjhqX/fF1ract0mtVxUtWr5 n0n7hdD7UT2eM11hoUUZ8Eqrb2rfGae6BQzj3XMk/PPM9YYRKutmc10GoB3u5hy0 iwyzQerNUsA8I4P9RxU2bkao9ubME5w62DhupGNbGa6QsEcN4XR9lqj4pPx+4SD0 gbUqfPirSV2FUhaOXjdLH4z3Hm0GpxHxzdxO4I39cUqqV6Nb2SJyO8iMILjDkwvX EUOqF/QLtIZL2g== -----END CERTIFICATE-----Generated at Wed Jul 23 11:52:57 2025 by rpki-client