$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: yd3utWwr2vEuXGIKXus3VyFW5LxkrfiKpgr7wVRwbuo= Subject key identifier: 7E:48:70:56:29:2B:C3:26:2C:DF:16:32:49:47:A7:6E:58:D3:A3:3C Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 01993124EC48CD5326F924D4DECEDBAA8AE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 13B4 Signing time: Wed 10 Sep 2025 01:02:07 +0000 Manifest this update: Wed 10 Sep 2025 01:02:07 +0000 Manifest next update: Thu 11 Sep 2025 01:02:07 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: /KD9Ne83eWGizXZtL+ieaJpiXNZUqwZmJRZdk3mPFm4=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:31:24:ec:48:cd:53:26:f9:24:d4:de:ce:db:aa:8a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Sep 10 01:02:07 2025 GMT Not After : Sep 11 01:02:07 2025 GMT Subject: CN=7e487056292bc3262cdf16324947a76e58d3a33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c5:e8:89:ff:db:b7:1c:6b:55:2f:3c:b0:90: d3:ca:ca:04:08:34:ab:4a:25:99:7f:8c:6a:23:2d: 64:84:f0:23:1e:ed:e5:6b:41:90:94:8f:8b:c7:7f: 7e:e9:ec:36:c0:d9:c0:fb:78:52:3c:d4:51:b9:a1: 86:c6:6e:36:77:fa:8c:25:cf:0a:a9:69:40:36:df: 62:69:02:79:58:14:62:f4:c7:4c:32:49:f2:37:6f: cd:c0:cd:40:79:ef:cb:42:18:e5:4b:ae:7b:9a:a6: 60:0b:6f:78:02:44:01:a0:b8:0e:b3:d8:3d:ca:7c: ad:73:68:3b:9f:b5:39:05:b7:94:e3:c1:32:e3:8d: 55:fd:c0:a8:9e:75:f6:90:c2:72:0f:c5:5b:33:d7: 2a:24:70:00:22:2f:0f:a5:40:64:7a:34:fa:8c:76: c6:2a:f3:fd:56:57:21:d3:9a:76:25:95:e1:18:fe: ac:24:dc:f6:df:47:9e:90:0f:71:81:db:ed:47:a2: 36:68:50:51:ca:fc:39:d8:91:ce:b7:ce:55:95:ce: aa:53:b9:11:4d:81:40:85:b8:86:ac:cd:7c:61:bc: a1:de:eb:8f:bf:8d:b4:c4:07:86:44:f0:0b:05:a1: 07:8c:42:2a:13:10:19:b2:a0:a1:a5:da:05:ad:86: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:48:70:56:29:2B:C3:26:2C:DF:16:32:49:47:A7:6E:58:D3:A3:3C X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f0:57:61:fc:c8:6b:cb:18:8a:0a:4c:65:73:42:28:84:57: 83:9e:93:33:be:fb:0f:16:8e:ec:68:48:12:6a:00:94:46:b4: dc:38:d8:0c:1f:e6:3c:2f:e4:fe:66:d0:9b:77:aa:cf:48:d5: b4:67:0e:00:85:33:9c:4e:69:83:e9:6f:30:20:2a:7b:1f:20: cc:74:47:2e:5d:ee:7e:4d:fd:c3:ca:98:b0:90:ad:ba:db:84: 94:c1:6a:e9:db:81:58:80:34:12:99:ef:05:bd:a0:68:48:76: a6:0f:4c:49:93:b2:7a:4c:e1:f5:a0:07:dc:f6:15:98:1b:35: 49:88:d7:d2:a9:d6:a9:e1:f3:23:a9:7e:e2:83:3f:9d:76:90: 88:d6:91:6a:14:f7:26:bd:7e:7c:40:ac:e9:d1:13:7e:4b:b0: 87:15:a2:63:da:3e:73:67:29:73:f4:8c:cd:fd:f3:a4:13:00: 6d:54:85:61:c4:3d:8b:f8:2c:58:29:c7:b5:51:0d:ae:6f:c1: 92:35:96:b1:71:6d:b1:0f:e4:3b:d6:b2:0f:19:5d:51:a3:78: 06:46:ba:86:39:b2:84:74:db:f5:17:da:77:96:cf:72:5e:2c: a5:2c:39:99:e8:0a:b2:db:e9:31:50:cd:3a:dc:47:ea:53:4e: 0d:bd:0c:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkxJOxIzVMm+STU3s7bqorjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUwOTEwMDEwMjA3WhcNMjUwOTExMDEwMjA3WjAzMTEwLwYDVQQD Eyg3ZTQ4NzA1NjI5MmJjMzI2MmNkZjE2MzI0OTQ3YTc2ZTU4ZDNhMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicXoif/btxxrVS88sJDTysoECDSr SiWZf4xqIy1khPAjHu3la0GQlI+Lx39+6ew2wNnA+3hSPNRRuaGGxm42d/qMJc8K qWlANt9iaQJ5WBRi9MdMMknyN2/NwM1Aee/LQhjlS657mqZgC294AkQBoLgOs9g9 ynytc2g7n7U5BbeU48Ey441V/cConnX2kMJyD8VbM9cqJHAAIi8PpUBkejT6jHbG KvP9Vlch05p2JZXhGP6sJNz230eekA9xgdvtR6I2aFBRyvw52JHOt85Vlc6qU7kR TYFAhbiGrM18Ybyh3uuPv420xAeGRPALBaEHjEIqExAZsqChpdoFrYZDDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5IcFYpK8MmLN8WMklHp25Y06M8MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/BXYfzI a8sYigpMZXNCKIRXg56TM777DxaO7GhIEmoAlEa03DjYDB/mPC/k/mbQm3eqz0jV tGcOAIUznE5pg+lvMCAqex8gzHRHLl3ufk39w8qYsJCtutuElMFq6duBWIA0Epnv Bb2gaEh2pg9MSZOyekzh9aAH3PYVmBs1SYjX0qnWqeHzI6l+4oM/nXaQiNaRahT3 Jr1+fECs6dETfkuwhxWiY9o+c2cpc/SMzf3zpBMAbVSFYcQ9i/gsWCnHtVENrm/B kjWWsXFtsQ/kO9ayDxldUaN4Bka6hjmyhHTb9Rfad5bPcl4spSw5megKstvpMVDN OtxH6lNODb0MQA== -----END CERTIFICATE-----Generated at Wed Sep 10 05:53:01 2025 by rpki-client