$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: p9tyyH4bDMZor5aiRC3VzArlQArX+whYHqAzRlQmB5o= Subject key identifier: 44:A3:8F:56:7E:0B:08:BC:12:29:68:9A:94:79:46:E0:4E:57:3E:72 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 01984A417683526EB5DEEF9C4C1FB0387C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1620 Signing time: Sun 27 Jul 2025 05:01:00 +0000 Manifest this update: Sun 27 Jul 2025 05:01:00 +0000 Manifest next update: Mon 28 Jul 2025 05:01:00 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: AAWPbPjTyVT988aYaAp0o8ug4CA.roa (hash: W0Vm8/GtO/KKeUbt2/qoBL2G7a3VmqlowMCbkwrkEEM=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: 4lISGSY/nFtANCCIbM8xBWOAJsuCP+9AJTzZnfj7fvQ=) 11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 12: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 13: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Jul 2025 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:4a:41:76:83:52:6e:b5:de:ef:9c:4c:1f:b0:38:7c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jul 27 05:01:00 2025 GMT Not After : Jul 28 05:01:00 2025 GMT Subject: CN=44a38f567e0b08bc1229689a947946e04e573e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7a:0c:76:fa:89:61:24:2f:46:43:39:8f:68: 74:5b:fb:63:4c:25:fd:6f:62:ea:58:5e:15:d0:cc: 7f:4c:2a:d5:24:c5:64:a6:e1:e3:2c:4e:86:1a:90: e8:d6:43:5e:ba:7f:24:82:62:e0:9a:ae:b3:54:55: 50:22:ac:21:4a:78:c8:1a:9e:cd:ad:52:1d:62:c9: 7d:16:08:70:50:14:bb:c9:f1:3f:f2:6f:46:d9:cf: de:f7:7e:cb:cd:30:80:ad:15:b1:78:93:35:06:58: a5:0d:4f:98:1a:ef:f4:0b:55:d7:f0:79:e4:6e:b1: d1:0f:1f:84:4f:84:96:84:fc:0f:0a:f4:94:94:3c: ba:b3:d3:04:ce:4f:86:2d:05:0b:c7:1c:50:01:fa: ac:fb:67:dd:96:5c:9e:2d:92:01:7b:fd:8f:89:47: 94:e0:79:81:fc:17:11:ee:02:c4:04:0f:76:0a:cb: 67:7e:22:86:36:5c:50:77:c0:86:e7:9f:ef:ea:0e: 9d:fd:b2:98:a1:c6:bb:10:27:8d:74:29:7a:39:ef: 8d:b2:55:6d:0a:7f:ca:40:f5:44:86:07:f4:53:6c: e3:11:fa:e7:5b:57:e2:a4:53:27:49:a6:51:f6:6d: e1:4f:a6:2d:dd:91:dd:87:c3:e4:80:b3:67:80:60: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A3:8F:56:7E:0B:08:BC:12:29:68:9A:94:79:46:E0:4E:57:3E:72 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ad:46:66:6d:71:a1:52:75:f2:05:c2:fc:c7:80:15:71:39: ac:84:ae:6c:d2:da:d3:67:db:4b:51:f7:87:33:e6:ad:ae:27: 97:1e:4f:11:74:cd:cc:e1:9a:d0:e7:50:c6:77:cd:a2:64:db: f6:ef:0c:3c:f1:60:18:3e:ae:76:4d:eb:01:9d:c7:5e:bb:0a: c6:1e:5b:4a:44:b2:a3:a5:6c:d3:74:25:19:bc:81:60:53:c4: 28:94:65:f4:5e:24:f5:30:24:59:57:3b:66:49:5e:79:08:97: 14:7e:ce:05:a8:36:21:13:fd:5f:15:76:cb:71:28:09:20:d0: 9b:a6:80:54:8b:71:ff:ee:87:4a:ee:0a:e2:34:3c:4d:5d:2e: f5:df:5b:f8:2f:ba:2a:a1:40:4a:5d:bc:da:6c:d9:bf:e2:ee: 18:85:2f:a1:81:88:97:8a:7a:cb:bf:13:41:3c:da:02:75:00: eb:e0:d7:e2:a6:7d:2b:da:54:07:b6:c7:fd:dd:01:82:f4:d7: 1c:c5:59:27:71:0f:c6:ec:06:b8:20:29:3a:0a:68:21:a4:e7: 74:43:00:a7:52:14:03:60:0c:0d:0a:fe:cd:b1:1d:0b:c1:7b: ed:cf:d5:46:02:1a:86:12:9b:8d:63:65:39:b3:a3:d2:7b:da: 54:32:7b:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhKQXaDUm613u+cTB+wOHyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwNzI3MDUwMTAwWhcNMjUwNzI4MDUwMTAwWjAzMTEwLwYDVQQD Eyg0NGEzOGY1NjdlMGIwOGJjMTIyOTY4OWE5NDc5NDZlMDRlNTczZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HoMdvqJYSQvRkM5j2h0W/tjTCX9 b2LqWF4V0Mx/TCrVJMVkpuHjLE6GGpDo1kNeun8kgmLgmq6zVFVQIqwhSnjIGp7N rVIdYsl9FghwUBS7yfE/8m9G2c/e937LzTCArRWxeJM1BlilDU+YGu/0C1XX8Hnk brHRDx+ET4SWhPwPCvSUlDy6s9MEzk+GLQULxxxQAfqs+2fdllyeLZIBe/2PiUeU 4HmB/BcR7gLEBA92CstnfiKGNlxQd8CG55/v6g6d/bKYoca7ECeNdCl6Oe+NslVt Cn/KQPVEhgf0U2zjEfrnW1fipFMnSaZR9m3hT6Yt3ZHdh8PkgLNngGAilwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESjj1Z+Cwi8EilompR5RuBOVz5yMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa1GZm1x oVJ18gXC/MeAFXE5rISubNLa02fbS1H3hzPmra4nlx5PEXTNzOGa0OdQxnfNomTb 9u8MPPFgGD6udk3rAZ3HXrsKxh5bSkSyo6Vs03QlGbyBYFPEKJRl9F4k9TAkWVc7 ZkleeQiXFH7OBag2IRP9XxV2y3EoCSDQm6aAVItx/+6HSu4K4jQ8TV0u9d9b+C+6 KqFASl282mzZv+LuGIUvoYGIl4p6y78TQTzaAnUA6+DX4qZ9K9pUB7bH/d0BgvTX HMVZJ3EPxuwGuCApOgpoIaTndEMAp1IUA2AMDQr+zbEdC8F77c/VRgIahhKbjWNl ObOj0nvaVDJ77w== -----END CERTIFICATE-----Generated at Sun Jul 27 08:31:12 2025 by rpki-client