$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: AlkBL4d0PC3g2Q9GdfjQD0MgEPTza/dgUgSb78CGoyo= Subject key identifier: BB:AE:90:52:AF:9D:2E:84:EF:55:97:24:80:E8:2F:CA:9F:B9:D1:C6 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 0199161BACF6661A1E7AB5201C33D5C49305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1038 Signing time: Thu 04 Sep 2025 19:02:16 +0000 Manifest this update: Thu 04 Sep 2025 19:02:16 +0000 Manifest next update: Fri 05 Sep 2025 19:02:16 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: iXL5qQtRrkVLG9gYfHh5fVQ7T3g.roa (hash: /S4PPFIysWBHzoFOGmeyMQ0/WpKIWbdNqRJ+yMWrBac=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: exDDTA21dYB5yKxYlwvyZcrn+ENa8iffkaD7ddrJXCk=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Sep 2025 16:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:16:1b:ac:f6:66:1a:1e:7a:b5:20:1c:33:d5:c4:93:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Sep 4 19:02:16 2025 GMT Not After : Sep 5 19:02:16 2025 GMT Subject: CN=bbae9052af9d2e84ef55972480e82fca9fb9d1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:f1:40:4e:b6:ac:dc:85:30:8a:0a:ca:ae: 23:bc:4c:cc:c1:74:96:17:d9:43:37:97:ee:62:63: ce:48:85:79:2c:3d:fe:83:5e:3c:97:09:c2:1e:25: c8:28:71:36:43:bb:2c:6f:b5:78:ee:38:be:24:b7: c8:0c:50:f5:8d:a2:29:f1:5a:86:c7:bc:b2:ef:15: 8a:6f:d3:19:14:1c:ce:28:d1:20:2f:b3:f5:4a:17: 3d:4a:c7:f3:c0:db:f5:19:09:a1:84:36:8b:05:1e: a9:b0:ff:6e:d3:5c:62:76:b8:6d:8e:58:04:58:b8: 7f:44:b3:e3:63:88:d0:b1:26:06:e6:22:7c:3a:d9: 9a:b0:43:73:9c:02:f6:ca:40:dd:74:a2:42:b7:df: aa:7f:96:f3:cc:6b:c3:14:07:8d:17:d9:44:52:ca: 87:ce:9d:10:89:b4:a6:6c:9c:7f:90:41:4b:3a:5a: d6:36:63:c7:40:16:c9:9e:87:52:21:77:81:8b:e4: a5:43:49:b3:fd:7e:af:c0:d2:4e:a7:50:6b:49:19: 83:13:b4:e9:53:fd:ea:01:df:9a:cc:43:0c:f4:3b: 41:22:c9:0f:c9:ff:99:e2:f8:b5:b0:72:18:33:72: 90:a0:d4:d4:bc:6e:bd:52:c0:fa:fd:06:91:35:14: 95:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AE:90:52:AF:9D:2E:84:EF:55:97:24:80:E8:2F:CA:9F:B9:D1:C6 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0f:bd:af:f5:15:f2:cd:c1:1a:e1:6a:2e:f1:12:b3:32:53: 20:ea:8f:1b:ed:6a:03:04:6a:45:73:ec:80:03:a8:c8:21:2f: 62:7b:f9:c0:f5:c0:c7:a3:40:76:6b:ff:de:ac:46:22:0d:4b: 27:4e:27:44:ec:19:c9:d2:0c:35:69:3a:59:01:74:a8:26:b3: 6e:cd:43:dd:51:a3:80:70:55:7a:f6:91:c8:3c:33:6a:98:c2: 78:03:62:5f:9a:37:3b:a4:7d:85:16:23:0a:6b:c9:b6:c3:92: 68:e2:49:d8:b1:50:d3:e4:dc:35:a3:88:45:74:df:a4:b3:f9: 3b:f8:82:07:b5:12:2e:37:e0:e6:97:d7:bf:03:2b:6e:db:42: 5d:31:fc:fe:b5:ea:8f:f1:45:d1:51:c5:82:67:07:ff:cf:d7: 3e:1a:39:3b:0d:eb:0d:91:64:9d:2f:8d:2b:34:6a:32:54:f2: 88:c7:35:77:b4:ce:df:66:b3:5a:48:fb:31:88:d2:39:dd:d7: c4:a1:30:44:9f:4e:97:8a:d8:c5:5a:19:49:76:29:61:71:27: f1:2e:18:3d:f7:12:6c:3f:d4:10:18:42:eb:54:43:df:f5:5a: e4:72:0d:7b:46:76:94:69:ce:dd:0a:27:39:d2:30:82:cc:67: dc:35:77:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkWG6z2ZhoeerUgHDPVxJMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUwOTA0MTkwMjE2WhcNMjUwOTA1MTkwMjE2WjAzMTEwLwYDVQQD EyhiYmFlOTA1MmFmOWQyZTg0ZWY1NTk3MjQ4MGU4MmZjYTlmYjlkMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTzxQE62rNyFMIoKyq4jvEzMwXSW F9lDN5fuYmPOSIV5LD3+g148lwnCHiXIKHE2Q7ssb7V47ji+JLfIDFD1jaIp8VqG x7yy7xWKb9MZFBzOKNEgL7P1Shc9SsfzwNv1GQmhhDaLBR6psP9u01xidrhtjlgE WLh/RLPjY4jQsSYG5iJ8OtmasENznAL2ykDddKJCt9+qf5bzzGvDFAeNF9lEUsqH zp0QibSmbJx/kEFLOlrWNmPHQBbJnodSIXeBi+SlQ0mz/X6vwNJOp1BrSRmDE7Tp U/3qAd+azEMM9DtBIskPyf+Z4vi1sHIYM3KQoNTUvG69UsD6/QaRNRSV8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuukFKvnS6E71WXJIDoL8qfudHGMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw+9r/UV 8s3BGuFqLvESszJTIOqPG+1qAwRqRXPsgAOoyCEvYnv5wPXAx6NAdmv/3qxGIg1L J04nROwZydIMNWk6WQF0qCazbs1D3VGjgHBVevaRyDwzapjCeANiX5o3O6R9hRYj CmvJtsOSaOJJ2LFQ0+TcNaOIRXTfpLP5O/iCB7USLjfg5pfXvwMrbttCXTH8/rXq j/FF0VHFgmcH/8/XPho5Ow3rDZFknS+NKzRqMlTyiMc1d7TO32azWkj7MYjSOd3X xKEwRJ9Ol4rYxVoZSXYpYXEn8S4YPfcSbD/UEBhC61RD3/Va5HINe0Z2lGnO3Qon OdIwgsxn3DV31A== -----END CERTIFICATE-----Generated at Fri Sep 5 02:13:55 2025 by rpki-client