$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft File: nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json) Hash identifier: Oinh2iESNM9JmEZwc43F8yVyrBG3QwYTgMCacg6ZXwM= Subject key identifier: CC:D3:6E:54:CF:63:38:28:C3:FF:BC:41:DD:39:FC:93:E7:DC:9B:15 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 01991CF88038AF4194AAB3B6578FEDE15C05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft Manifest number: 1693 Signing time: Sat 06 Sep 2025 03:01:11 +0000 Manifest this update: Sat 06 Sep 2025 03:01:11 +0000 Manifest next update: Sun 07 Sep 2025 03:01:11 +0000 Files and hashes: 1: 1-W6dNN7nS41OhiX2-XV_KGHmokY.roa (hash: Onsuz/Jpw7AenTCzarTD9Si7u90ClXn9NgWm5b3k5iE=) 2: 2YqdGEIdMzY2vhH5bWxnKdddSEU.roa (hash: 9LWiPodvJQom88P/dBp1yCiWmPws557eiQuQBNs6yF8=) 3: BviWEmaP3_lgIrWubDU6uMTA2H8.roa (hash: atRgCl8RxHKHCEL0/AcFViVgxr58CMMvRd/DcUp5/fw=) 4: C0Doi3jyevr2-pR2IftNN92p59I.roa (hash: IIK5hBd1iLDFxEspDzzgvSmRdaIP8iF48tDZdnCcOcc=) 5: EV3RLPCtuI3lLeq6ottkvu3RCX0.roa (hash: j3FY48aHBuxh9abdvmrJO1cvpOYjsUrGf4ptwj/I2mQ=) 6: FybzIFcZSE5lsnT6b5cIlMlH9IM.roa (hash: toJxUUA3/IPlRPBEPuQc0lw9h60Drcko4fLHszQIAow=) 7: IbQ-D2yslx0iHz7liSbbaOCcfXA.roa (hash: Kl5zFWGMECrHwpmHWu5uCTOc6qSUXrcJGW6y65HYm/g=) 8: MDI3PVTTBwcyecs75qaLcWEEgQU.roa (hash: J7xJKQP86jfo8IhCdMIH6NbDyPPPNyVklFSD5qYitM0=) 9: MNsgwpzMGo9ny09J-jp2iHl3erE.roa (hash: rsV4oTpDDAsXfrCe5I5AMLsbpMjSWW+2NPe89PcwdUY=) 10: NFuskTNMmJ3Bn8XhO1OlW1lNEM0.roa (hash: 8g5jKG/3k2R8GSQmnC21Ug5DsSBfIQTr0ptpHX5icAA=) 11: QQVkAwo--2Lt9xnTOmPMO5FGF7Y.roa (hash: bJ2Nfv2wZhNbOARIqp31fKQFXd4d6cW7n2uw7pHNCB4=) 12: SU9AQ9blAXTI6dmft2PYXIZ4D6s.roa (hash: f9GEO2mKmV3YeM6oy8Q/SaJoAwb8zCw8nw1p8bg3GlE=) 13: aQCk6hvPoTmhPc0e5kydy3D8sWU.roa (hash: 6ETMfCfXE4+PmgEWBXrcFMAYtDdlxlq3pPGYTBG/KZ0=) 14: bT1D_GIGnTIb7UhfAkPO6nAxSAM.roa (hash: zt3d+v/4QH55XWn1NDaCM7sBKlqG8C4EgKfte1Y+FyE=) 15: dH7B0DaeyCDV-QwznQB8W2QHPrc.roa (hash: UjgYoN3aRA7tctag/yj4QVec+og5fXBAmkTeQQuaztU=) 16: fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa (hash: 2hWk6Tz7S8lDQWf6IFB7UfW3IQLP7xOfkykS1elEFd0=) 17: gMolns_uejn9VG4O2M9g9t6tvgo.roa (hash: pPHWNiYrbOjsjJvc3tnPANoOhTs+IAl6nKZxeY0Xyos=) 18: i85rSvPBK7Zup2Hyp-6Lw-N8sVY.roa (hash: yCustTGvO8JgJOXmLOMgvkNIm9AOeeXsZljacnVY85o=) 19: lI3KcK_JQBvOB3k2IueM3WHtrfw.roa (hash: Gb7bXt8QtmOseHG0MDJ5JR67PlBq2vdcxr+aQTeaaZE=) 20: mI7DIe-ZWUKxjXm68wpxaummpVQ.roa (hash: 8ILL3a5+iKTvSgugQcyufNykJWsVj3L0HY6IKspIJxE=) 21: mQTwlxrMVeib6W7__4VllTW-6C8.roa (hash: Ous0wtpwiez89Z5w9/QarT0NcGVwIRO+IhvC6Ze0CEc=) 22: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: fVwGvrRzufjNJIyzCBbPj31xCInfPb4ArskwBP/EeRA=) 23: ppW43VM2CosiQ0jXWBLP26MIgec.roa (hash: fkLyzmpdBhfbIOJrEyE+Zx2ZEoyizeyrfXYsByRxcls=) 24: qXfDdPXAtBqzMlBRbG9d8SZSuRU.roa (hash: lgA7RrHTvmHBvzE9swyzozhILfgUmn/MQgrElmqhrAU=) 25: rUdLZ9H9NmIsZBannjA8IlEwiOU.roa (hash: UpDDwAK8lbQbhgQsmAizBJjhr50ngPTJj4DgWqUhhss=) 26: uazolYHYZBtijCrhgDu0uI9nLCk.roa (hash: PFT6HKinQsQ7x3TcytDfopexTxqZWQMq9Ui5wk2to2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Sep 2025 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:1c:f8:80:38:af:41:94:aa:b3:b6:57:8f:ed:e1:5c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Sep 6 03:01:11 2025 GMT Not After : Sep 7 03:01:11 2025 GMT Subject: CN=ccd36e54cf633828c3ffbc41dd39fc93e7dc9b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:24:c6:84:9f:6f:1c:05:f3:15:b6:f5:b7: 57:23:86:0e:37:d0:06:8d:4f:95:06:fb:70:c8:d2: dd:5a:0a:e2:45:da:ab:ee:32:ef:4e:10:26:f4:6e: b6:d5:f2:83:99:f2:a4:a0:04:0c:2b:b2:03:2d:99: 58:d3:ff:76:ea:11:25:83:e3:79:d2:68:cc:8d:14: 10:82:69:de:ca:c2:35:1a:ec:d5:df:26:f3:90:f6: bf:c8:6f:39:0c:92:54:61:1e:c3:e7:56:b0:fc:4f: 9b:07:cb:ec:29:21:a7:59:d3:00:5c:ac:4f:3e:39: c2:5d:bf:bd:84:82:87:80:9a:cd:9a:57:bd:1e:09: ab:cb:31:ad:bd:8d:d2:d5:b0:7e:bc:aa:eb:c5:85: d4:ac:31:1e:ff:e8:08:65:7d:f1:73:a4:5c:9c:29: 63:7b:da:2f:ba:b8:5f:d7:46:ba:cd:b9:2b:44:7b: d8:f8:89:77:69:cf:61:a4:4e:2e:03:40:58:80:bc: ca:a0:5d:68:84:bb:df:b6:2f:93:4c:15:72:df:69: 07:ad:74:58:58:ea:68:1c:10:7d:06:10:ea:2b:d4: 9e:3e:fd:c5:20:e9:d6:d5:cf:d9:ca:18:70:96:5f: 24:ce:f5:2b:87:4a:31:e7:0f:8c:d0:ec:3e:78:26: 1f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D3:6E:54:CF:63:38:28:C3:FF:BC:41:DD:39:FC:93:E7:DC:9B:15 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:91:00:a2:c0:a5:36:0c:13:0a:f9:82:5b:4e:29:00:59:1d: 55:a0:61:58:ea:69:d1:7f:4f:f0:fa:c8:46:e6:15:55:c3:88: f9:bc:66:a7:2d:db:30:f9:b0:3d:eb:3c:99:d9:45:68:9e:26: 79:f1:5f:a5:af:d5:de:c8:27:ed:e9:e6:ca:70:74:91:41:20: 5b:60:45:38:d9:ac:04:30:42:c4:2f:6c:10:bf:1e:16:a4:e4: 07:99:c6:4e:57:f5:8f:ea:38:20:22:39:2b:8a:f2:05:7f:fa: 09:e0:34:92:74:f6:c8:8b:08:0a:7a:fb:9e:6c:07:0c:a5:87: 5a:39:b7:69:2a:bc:e1:b5:6e:0a:85:34:96:b9:0e:ef:12:d0: 8b:b3:2e:0b:8d:83:96:6e:3a:a5:bb:f3:21:f2:bf:b5:d8:81: 31:44:c1:ce:d9:14:44:b3:9f:d8:28:e7:8a:2f:fe:1c:df:00: f8:b3:2c:cd:6a:96:81:3b:9f:b5:0d:4c:98:fd:fa:4a:f5:ab: 28:dc:54:13:bc:f1:bb:12:32:9a:da:2a:35:3c:c6:a8:89:ba: 28:69:7e:0d:c9:5e:56:91:a4:f9:c4:a8:a8:24:ba:b3:e0:ea: 8f:7e:9b:99:b8:d3:25:f6:5f:72:f0:db:b7:14:e2:ac:c9:1e: f3:4f:71:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkc+IA4r0GUqrO2V4/t4VwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjUwOTA2MDMwMTExWhcNMjUwOTA3MDMwMTExWjAzMTEwLwYDVQQD EyhjY2QzNmU1NGNmNjMzODI4YzNmZmJjNDFkZDM5ZmM5M2U3ZGM5YjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk8kxoSfbxwF8xW29bdXI4YON9AG jU+VBvtwyNLdWgriRdqr7jLvThAm9G621fKDmfKkoAQMK7IDLZlY0/926hElg+N5 0mjMjRQQgmneysI1GuzV3ybzkPa/yG85DJJUYR7D51aw/E+bB8vsKSGnWdMAXKxP PjnCXb+9hIKHgJrNmle9HgmryzGtvY3S1bB+vKrrxYXUrDEe/+gIZX3xc6RcnClj e9ovurhf10a6zbkrRHvY+Il3ac9hpE4uA0BYgLzKoF1ohLvfti+TTBVy32kHrXRY WOpoHBB9BhDqK9SePv3FIOnW1c/Zyhhwll8kzvUrh0ox5w+M0Ow+eCYfQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzTblTPYzgow/+8Qd05/JPn3JsVMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpEAosCl NgwTCvmCW04pAFkdVaBhWOpp0X9P8PrIRuYVVcOI+bxmpy3bMPmwPes8mdlFaJ4m efFfpa/V3sgn7enmynB0kUEgW2BFONmsBDBCxC9sEL8eFqTkB5nGTlf1j+o4ICI5 K4ryBX/6CeA0knT2yIsICnr7nmwHDKWHWjm3aSq84bVuCoU0lrkO7xLQi7MuC42D lm46pbvzIfK/tdiBMUTBztkURLOf2Cjnii/+HN8A+LMszWqWgTuftQ1MmP36SvWr KNxUE7zxuxIymtoqNTzGqIm6KGl+DcleVpGk+cSoqCS6s+Dqj36bmbjTJfZfcvDb txTirMke809xxg== -----END CERTIFICATE-----Generated at Sat Sep 6 05:51:04 2025 by rpki-client