$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json) Hash identifier: m4Ou5Q0v8zBT5f8ItVo6dEmvN9OAb/D6WIwhPN+WZfk= Subject key identifier: 69:09:49:B6:0B:78:50:3F:5A:82:49:B2:03:56:F9:A1:C9:26:35:2B Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 01994DE42DBA9291C1BCA036911B5E7B7E41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft Manifest number: 16BF Signing time: Mon 15 Sep 2025 15:00:23 +0000 Manifest this update: Mon 15 Sep 2025 15:00:23 +0000 Manifest next update: Tue 16 Sep 2025 15:00:23 +0000 Files and hashes: 1: 2pr-_P6iDqjAxA7czCmuypqm4EU.roa (hash: ej7V7a6TRJZtAHiPijn6nzDCvVHx84y+/K94PPrq0S8=) 2: 6Wce0HwyXHqQ5XvowobWiCGASj8.roa (hash: JFU8RjnJrDHjFA6pQUpW2/JnNtPldCW7iPpp3L9hrfw=) 3: 7ew9vmcgcgJuvHxbbgCDhgBggzg.roa (hash: u0wbp7PqNlKFQlgee1VKfFdKJWs/LztnZMwBMRcyX9U=) 4: CPiIojjN_hGhtM9o3XpsrEzWNo8.roa (hash: LStwxa+rr7x142c0mGinIBqV/v+geLFxA1eFA03qVbo=) 5: GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa (hash: XcS1ZuCgKYC4lujI/f/yKgFd5if0KehDM2OJ7bBb2dY=) 6: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: Z88Ia3Q4xgqa7QYWnIsGGIbPNJJUAnHSDD6oo5oTQYs=) 7: f4t-1VFv0wJXrCB6YZIPAPv9-_4.roa (hash: Ea5jz9z6SY24kbMtlWhlg64/CK2usGJdx2mHbhrVAiM=) 8: rF0kzZSKuRp9f5OAK1xzxjWnP_M.roa (hash: W29hKmwtJPDYzUzOuqPmBq8PGVFBZCB4em8Vuyyfmuo=) 9: tqu-QanjX6tyJHx__ZdrkRcFQsk.roa (hash: OLKkbSnqqo0RLnA2/zbv4ebHR3Sjd16V0KLb7Bt5pzw=) 10: wm3FF6TcNdhmFRFUIxDvSQsFFHs.roa (hash: yN9Af3xDoVTZnaMiLHePewMhUBUJG8I+0XgRaKt0OxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:4d:e4:2d:ba:92:91:c1:bc:a0:36:91:1b:5e:7b:7e:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Sep 15 15:00:23 2025 GMT Not After : Sep 16 15:00:23 2025 GMT Subject: CN=690949b60b78503f5a8249b20356f9a1c926352b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6b:66:7b:8b:32:3a:0a:71:47:d7:47:fb:15: fb:56:9f:a0:2d:2c:c4:ab:5d:55:42:04:52:e5:d4: d3:83:a9:f4:32:d2:dd:00:fc:69:6b:f8:d4:1e:89: 14:b9:e9:78:1e:e6:c8:de:71:81:d9:80:a9:59:75: e2:c9:29:bb:48:e8:c1:fc:dc:cf:fe:8f:8b:2d:09: 4c:23:d2:f3:06:84:15:ce:43:12:cf:f5:b0:90:c5: 03:a1:b2:77:05:d8:21:17:4f:43:26:a0:77:97:b2: 07:da:44:5d:fb:cf:ca:7e:c1:3f:5f:3d:00:f5:5d: 1e:53:8e:c3:b6:95:7a:ee:5f:02:b0:a8:3d:db:e3: b5:69:e6:59:ea:c2:72:3d:5a:0d:ef:32:19:07:f0: bb:d4:b2:f5:9e:d4:d8:37:ab:59:88:60:23:c6:1a: a9:d5:ff:07:e0:59:ee:fb:1d:1f:3c:21:24:4e:14: 41:60:b8:80:68:6a:b4:71:a3:7f:53:2a:2b:73:a3: 37:eb:be:a0:9d:30:65:dd:ac:3d:b5:41:92:85:a9: c4:6f:bf:7b:81:9e:21:2e:f8:4e:c3:7b:92:f1:a6: 82:0e:97:3e:98:be:9f:24:51:70:02:7f:c1:74:eb: 52:43:71:82:3b:b8:04:b9:0c:8c:b5:f0:49:0a:e6: 80:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:09:49:B6:0B:78:50:3F:5A:82:49:B2:03:56:F9:A1:C9:26:35:2B X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:e0:14:7c:0c:4b:08:aa:6e:1e:1e:3f:bc:a9:17:de:cb:cb: c8:41:e8:81:4c:73:dc:a4:67:f5:de:22:ed:5d:9f:bc:4d:4c: a1:83:61:01:43:33:20:dd:e1:e7:cb:3f:2d:2d:7d:5b:6f:20: 71:63:8b:87:05:46:3b:7c:a7:46:0e:12:6a:e4:e3:9e:e3:6c: 0b:e6:f1:a7:91:83:93:3e:20:a4:e6:21:8a:79:07:61:b9:85: 69:83:68:93:a3:5f:eb:bf:eb:49:e5:84:e8:80:2a:55:8c:a1: 5d:5d:1d:d1:79:4d:9a:60:98:f0:78:97:b3:13:0a:18:d3:d6: ed:ae:22:f1:37:ff:66:6a:89:d6:f7:88:8d:80:14:02:4b:c2: 67:28:34:ae:d1:ae:4c:28:47:e7:20:a5:f0:57:e8:e7:42:06: 6e:86:28:23:f9:9d:74:6c:3d:a1:06:e7:16:84:0b:5f:e9:e5: 1e:a4:cd:e2:a6:54:0e:8c:0c:d3:35:1f:4f:41:15:1c:97:d7: 03:d3:0c:8a:df:b2:3e:f1:f5:56:cf:cc:f7:ff:41:0f:0a:37: 9c:60:e7:2d:e7:bf:7c:f5:58:3a:08:b6:d9:34:62:8a:63:ea: 55:fd:ae:fb:91:ca:87:e2:b5:9b:93:7d:14:02:87:26:d3:e9: 43:34:e8:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlN5C26kpHBvKA2kRtee35BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjUwOTE1MTUwMDIzWhcNMjUwOTE2MTUwMDIzWjAzMTEwLwYDVQQD Eyg2OTA5NDliNjBiNzg1MDNmNWE4MjQ5YjIwMzU2ZjlhMWM5MjYzNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2tme4syOgpxR9dH+xX7Vp+gLSzE q11VQgRS5dTTg6n0MtLdAPxpa/jUHokUuel4HubI3nGB2YCpWXXiySm7SOjB/NzP /o+LLQlMI9LzBoQVzkMSz/WwkMUDobJ3BdghF09DJqB3l7IH2kRd+8/KfsE/Xz0A 9V0eU47DtpV67l8CsKg92+O1aeZZ6sJyPVoN7zIZB/C71LL1ntTYN6tZiGAjxhqp 1f8H4Fnu+x0fPCEkThRBYLiAaGq0caN/Uyorc6M3676gnTBl3aw9tUGShanEb797 gZ4hLvhOw3uS8aaCDpc+mL6fJFFwAn/BdOtSQ3GCO7gEuQyMtfBJCuaAjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkJSbYLeFA/WoJJsgNW+aHJJjUrMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleAUfAxL CKpuHh4/vKkX3svLyEHogUxz3KRn9d4i7V2fvE1MoYNhAUMzIN3h58s/LS19W28g cWOLhwVGO3ynRg4SauTjnuNsC+bxp5GDkz4gpOYhinkHYbmFaYNok6Nf67/rSeWE 6IAqVYyhXV0d0XlNmmCY8HiXsxMKGNPW7a4i8Tf/ZmqJ1veIjYAUAkvCZyg0rtGu TChH5yCl8Ffo50IGboYoI/mddGw9oQbnFoQLX+nlHqTN4qZUDowM0zUfT0EVHJfX A9MMit+yPvH1Vs/M9/9BDwo3nGDnLee/fPVYOgi22TRiimPqVf2u+5HKh+K1m5N9 FAKHJtPpQzToLA== -----END CERTIFICATE-----Generated at Tue Sep 16 01:14:40 2025 by rpki-client