$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: QLR8Kd/LEZhB8uNJf+9yqFzt0olYVsQQ4jWOcYBxIls= Subject key identifier: 12:08:13:FB:B4:FA:E5:4E:CA:8E:17:13:90:26:E3:7C:F1:12:4E:BE Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01995FB3D9AF99DD7D9D19F5718BE9CB3704 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1695 Signing time: Fri 19 Sep 2025 02:00:46 +0000 Manifest this update: Fri 19 Sep 2025 02:00:46 +0000 Manifest next update: Sat 20 Sep 2025 02:00:46 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: 2whgTNHDYLvMTTD3xo70dPVndvmpJjCAGZ3Kqhe/UJY=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 22:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:5f:b3:d9:af:99:dd:7d:9d:19:f5:71:8b:e9:cb:37:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Sep 19 02:00:46 2025 GMT Not After : Sep 20 02:00:46 2025 GMT Subject: CN=120813fbb4fae54eca8e17139026e37cf1124ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:85:12:d2:1c:fe:87:b5:49:f6:5a:60:7d: 86:60:03:53:e5:5d:ff:3b:3b:39:a3:a9:7b:fd:3a: 05:f7:95:7a:4f:19:6a:c6:3a:3e:1d:57:f2:d0:f7: 49:52:99:80:bc:28:28:74:38:61:2f:46:55:d1:d8: 71:87:74:01:64:e5:92:b0:1c:27:0a:6f:34:49:f1: 72:05:17:f1:ca:18:0a:6e:55:0c:df:11:37:96:b3: 09:30:66:96:81:42:5b:ca:9b:44:5c:f6:34:16:d8: e9:da:3e:83:8a:bf:3d:ca:6a:d0:c0:5d:65:b9:18: c9:6d:76:2e:12:60:67:31:b2:90:b8:c6:07:b8:60: 40:81:e6:b4:89:b8:93:12:31:bc:00:6e:6b:23:a7: 82:2f:43:20:c9:dc:64:58:84:4f:36:0d:28:70:4a: c7:79:36:2b:ec:11:5e:73:16:ae:5f:4d:7a:40:0b: 01:33:03:2a:47:af:59:02:13:8f:7a:d7:d9:57:fa: 3a:6a:20:f1:b7:7c:4a:99:0a:f2:96:25:d2:0a:2a: d8:27:db:3a:c3:19:f5:d0:c1:6e:41:b5:39:5a:29: 9a:f5:11:a2:fa:79:38:d6:49:c1:0a:f3:41:5c:45: 4a:49:00:ea:80:21:da:45:dd:43:ec:36:cb:5b:47: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:08:13:FB:B4:FA:E5:4E:CA:8E:17:13:90:26:E3:7C:F1:12:4E:BE X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:07:9c:f4:45:a3:c2:93:2c:54:ef:65:46:7b:7b:54:3d:5a: b8:37:24:b9:d7:17:44:40:77:15:9b:90:70:4f:2f:97:ee:b1: 36:06:60:83:f1:a6:97:e1:99:d4:99:a8:64:75:59:66:6f:96: be:38:67:b4:3c:3c:50:68:da:8f:df:22:0a:6e:03:91:e9:3f: 43:92:9f:41:94:9b:c4:dd:ac:0e:8d:bc:a8:b5:a2:d5:b5:c9: 26:a2:94:41:03:8a:3e:8a:90:7a:76:b9:3c:9d:b8:10:07:b8: fc:9f:d0:2f:f9:7f:fa:7c:04:7b:1e:e0:43:85:6d:c9:71:a2: 84:93:ef:20:c5:de:90:79:dd:4a:36:28:29:50:a5:14:26:21: 07:81:78:0b:63:f7:bf:71:87:2e:ab:8e:dd:0c:10:4f:12:85: 47:83:c9:5b:3a:aa:f2:0e:f3:e9:f7:b9:14:c7:72:4c:0f:cc: 38:93:f6:50:a1:a5:69:22:d7:d4:c3:15:16:bd:93:39:8f:91: f4:0c:24:68:91:58:84:87:c0:08:ef:8b:ef:3b:4e:bf:a6:26: 2d:a5:4d:26:e2:7d:4c:59:d4:49:d6:81:7a:9f:66:15:4d:fd: b7:9e:46:48:f2:86:55:d6:55:20:a8:aa:38:4b:ab:2e:00:c0: 84:d5:a1:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlfs9mvmd19nRn1cYvpyzcEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwOTE5MDIwMDQ2WhcNMjUwOTIwMDIwMDQ2WjAzMTEwLwYDVQQD EygxMjA4MTNmYmI0ZmFlNTRlY2E4ZTE3MTM5MDI2ZTM3Y2YxMTI0ZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MeFEtIc/oe1SfZaYH2GYANT5V3/ Ozs5o6l7/ToF95V6Txlqxjo+HVfy0PdJUpmAvCgodDhhL0ZV0dhxh3QBZOWSsBwn Cm80SfFyBRfxyhgKblUM3xE3lrMJMGaWgUJbyptEXPY0Ftjp2j6Dir89ymrQwF1l uRjJbXYuEmBnMbKQuMYHuGBAgea0ibiTEjG8AG5rI6eCL0MgydxkWIRPNg0ocErH eTYr7BFecxauX016QAsBMwMqR69ZAhOPetfZV/o6aiDxt3xKmQryliXSCirYJ9s6 wxn10MFuQbU5Wima9RGi+nk41knBCvNBXEVKSQDqgCHaRd1D7DbLW0eSSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIIE/u0+uVOyo4XE5Am43zxEk6+MB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAec9EWj wpMsVO9lRnt7VD1auDckudcXREB3FZuQcE8vl+6xNgZgg/Gml+GZ1JmoZHVZZm+W vjhntDw8UGjaj98iCm4Dkek/Q5KfQZSbxN2sDo28qLWi1bXJJqKUQQOKPoqQena5 PJ24EAe4/J/QL/l/+nwEex7gQ4VtyXGihJPvIMXekHndSjYoKVClFCYhB4F4C2P3 v3GHLquO3QwQTxKFR4PJWzqq8g7z6fe5FMdyTA/MOJP2UKGlaSLX1MMVFr2TOY+R 9AwkaJFYhIfACO+L7ztOv6YmLaVNJuJ9TFnUSdaBep9mFU39t55GSPKGVdZVIKiq OEurLgDAhNWh5Q== -----END CERTIFICATE-----Generated at Fri Sep 19 08:57:50 2025 by rpki-client