$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: d/chsyUhz1EgfR2Z49hVqBuTmagzUY7pcVUoMgj5g2Y= Subject key identifier: 2E:0F:B5:21:60:06:0E:A3:4C:16:F8:B4:E4:3C:EA:5E:6A:F7:2E:3B Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019750EA930C6DE02E2E4A0C6B7035477893 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0999 Signing time: Sun 08 Jun 2025 19:00:39 +0000 Manifest this update: Sun 08 Jun 2025 19:00:39 +0000 Manifest next update: Mon 09 Jun 2025 19:00:39 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (hash: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=) 10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 11: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 12: czgjqrf2lapbXeVYP9ODbikQ6sU.roa (hash: Sob92iox8FAuLbYC7O6yXinthlLYCpBjBKCErucg688=) 13: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 14: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 15: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 16: irT4DdDzgeP-65AGXrk0PHCAQVY.roa (hash: RsayR2J7jayb/ZHPN+8XPFdXktAjeGK/x5tQjIbG8/Y=) 17: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: mZ1SpFnJvSIeJP5C6KP4ZzGeJGDGcWAH//XiWuyjZQs=) 18: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 17:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:50:ea:93:0c:6d:e0:2e:2e:4a:0c:6b:70:35:47:78:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jun 8 19:00:39 2025 GMT Not After : Jun 9 19:00:39 2025 GMT Subject: CN=2e0fb52160060ea34c16f8b4e43cea5e6af72e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:e8:88:86:fe:ef:5d:e4:df:80:66:90:fa: 95:4f:68:81:71:2d:48:c1:e2:86:0f:f3:fe:af:45: b9:7b:8c:3a:9b:fe:ce:f9:47:db:a5:19:71:98:71: ea:f9:77:4e:8c:0d:09:ce:4b:90:57:d1:49:a0:2e: c2:11:b7:40:a3:f7:15:6a:d9:3e:85:51:83:11:81: 09:ee:07:9f:c3:c9:bf:2e:3a:d8:84:8e:0b:65:4f: 11:fc:a7:ce:3d:54:f4:6c:75:d1:ed:96:58:3e:9e: ee:42:dd:5c:da:90:7d:ee:68:1e:f4:14:27:1a:90: e9:89:ad:24:0e:32:1e:2b:37:bf:da:59:3f:0b:27: 8f:ba:89:15:09:ea:2e:0f:d5:74:18:53:34:70:09: 7f:6f:2d:ee:81:99:b0:d8:4d:07:e5:26:0a:59:b0: 6f:3b:69:a9:13:31:9a:fa:0d:a0:38:fc:b7:07:cd: 3c:8b:6e:82:e9:16:8f:47:10:bb:54:d2:05:98:dc: 59:67:4b:09:ab:2a:f9:38:46:e9:0a:19:04:3b:55: 9b:73:22:4e:bc:6f:ff:4c:73:82:a9:67:bc:c8:3f: 0f:7a:80:4f:6f:cf:bf:2b:9c:ec:3f:27:71:f2:d7: ae:f1:6e:91:01:4a:41:ac:8d:26:4f:80:06:4b:2a: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0F:B5:21:60:06:0E:A3:4C:16:F8:B4:E4:3C:EA:5E:6A:F7:2E:3B X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5a:ad:6b:c3:f7:d4:36:cc:1b:2c:04:56:65:c3:5d:25:8d: c7:ce:26:06:07:ce:d5:03:2e:52:4f:58:26:c5:25:18:0c:7d: eb:20:bf:1a:5d:79:73:ce:d3:aa:6d:ee:fc:e3:dd:d1:31:fb: 92:22:5c:70:f8:7e:2c:fe:44:9e:44:c0:c5:7e:ba:0c:eb:10: c7:88:42:b5:06:bc:79:6a:b1:8a:d5:9f:bb:e2:2f:47:44:5d: 65:b3:64:8d:5e:5a:29:9c:4d:e1:e3:88:0c:d9:51:11:19:dc: 32:65:01:16:95:a1:8d:e5:d7:21:d6:36:48:2a:68:48:2a:06: ba:f9:20:4c:8b:69:f1:df:a3:20:14:cb:1a:a2:1f:68:ee:63: 8c:cd:53:b0:b7:51:63:bc:40:ef:15:52:aa:6c:ae:b4:93:fd: ca:6b:03:f5:d6:07:a4:72:53:de:03:35:33:92:82:eb:27:c6: c5:ea:1c:05:3e:62:6c:28:01:3e:4d:e8:27:c7:ef:04:19:2c: 4f:5a:7c:26:9a:11:05:0e:df:44:cc:cb:d9:3b:ca:22:4e:1d: be:15:b3:1a:f0:f6:37:2c:09:d1:61:b5:49:22:88:20:a7:0e: f2:5d:90:38:d0:5f:4b:4f:bf:7f:d1:3c:19:42:aa:2d:48:fe: e1:0b:57:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdQ6pMMbeAuLkoMa3A1R3iTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUwNjA4MTkwMDM5WhcNMjUwNjA5MTkwMDM5WjAzMTEwLwYDVQQD EygyZTBmYjUyMTYwMDYwZWEzNGMxNmY4YjRlNDNjZWE1ZTZhZjcyZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30roiIb+713k34BmkPqVT2iBcS1I weKGD/P+r0W5e4w6m/7O+UfbpRlxmHHq+XdOjA0JzkuQV9FJoC7CEbdAo/cVatk+ hVGDEYEJ7gefw8m/LjrYhI4LZU8R/KfOPVT0bHXR7ZZYPp7uQt1c2pB97mge9BQn GpDpia0kDjIeKze/2lk/CyePuokVCeouD9V0GFM0cAl/by3ugZmw2E0H5SYKWbBv O2mpEzGa+g2gOPy3B808i26C6RaPRxC7VNIFmNxZZ0sJqyr5OEbpChkEO1WbcyJO vG//THOCqWe8yD8PeoBPb8+/K5zsPydx8teu8W6RAUpBrI0mT4AGSyr78wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4PtSFgBg6jTBb4tOQ86l5q9y47MB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlqta8P3 1DbMGywEVmXDXSWNx84mBgfO1QMuUk9YJsUlGAx96yC/Gl15c87Tqm3u/OPd0TH7 kiJccPh+LP5EnkTAxX66DOsQx4hCtQa8eWqxitWfu+IvR0RdZbNkjV5aKZxN4eOI DNlRERncMmUBFpWhjeXXIdY2SCpoSCoGuvkgTItp8d+jIBTLGqIfaO5jjM1TsLdR Y7xA7xVSqmyutJP9ymsD9dYHpHJT3gM1M5KC6yfGxeocBT5ibCgBPk3oJ8fvBBks T1p8JpoRBQ7fRMzL2TvKIk4dvhWzGvD2NywJ0WG1SSKIIKcO8l2QONBfS0+/f9E8 GUKqLUj+4QtXPg== -----END CERTIFICATE-----Generated at Sun Jun 8 23:34:00 2025 by rpki-client