$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: apC0bQLi7S6WysTE7L5Hx8sORhmITRTr7vBqUYvFdrQ= Subject key identifier: 92:B7:74:EB:A5:3C:0C:14:05:EE:4C:CD:1C:1D:64:2F:02:F0:6F:BB Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 01992EF6AF653379A3E37BB11F409ABBC294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0A92 Signing time: Tue 09 Sep 2025 14:52:22 +0000 Manifest this update: Tue 09 Sep 2025 14:52:22 +0000 Manifest next update: Wed 10 Sep 2025 14:52:22 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: 9z5hRco7JOV0tkSBwg-yH2Etniw.roa (hash: daQqLbm+rGZpr6jm2iT0nclkzMdOKDoq8fK32FmuoNM=) 3: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 4: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 5: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 6: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 7: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 8: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 9: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 11: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=) 15: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: 9C9eqwfYYAEptW1ffClt3vMKROKGHdRAx0zBb3+bk3M=) 16: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=) 17: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 14:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2e:f6:af:65:33:79:a3:e3:7b:b1:1f:40:9a:bb:c2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Sep 9 14:52:22 2025 GMT Not After : Sep 10 14:52:22 2025 GMT Subject: CN=92b774eba53c0c1405ee4ccd1c1d642f02f06fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:9b:e5:0b:0a:94:f6:b3:9f:12:11:f4:83: 4e:10:24:a0:66:77:2a:6d:be:2f:3a:db:d6:2f:c0: 0e:54:d2:8f:8f:0c:86:7d:a5:fc:e8:cb:2d:f6:90: b5:8e:fe:3a:e6:51:c0:12:76:c6:8d:60:35:0b:9d: 27:ae:3d:61:6e:81:83:bc:f5:95:bd:6a:ee:60:51: de:65:a9:9a:2d:42:f6:8c:02:6f:01:13:8b:fd:80: 1b:d8:5e:80:65:1a:f6:32:21:64:b0:e3:96:46:cd: c6:2c:b8:f3:b7:d6:3c:96:f6:99:06:07:28:bf:ee: ad:7e:4f:37:25:ac:68:1e:7c:49:e2:52:f0:53:34: a3:03:f3:6b:6d:08:32:a1:6a:20:3a:37:fd:69:44: f2:5a:f1:c9:f0:3c:1f:b8:c4:44:ce:47:e5:47:0d: 80:22:21:c5:6a:97:7f:46:87:fe:54:33:f1:ef:b7: 54:bb:9a:b8:c6:2d:8c:d2:13:68:3c:f3:6c:7e:39: 7f:eb:1d:df:65:f0:57:6c:c2:70:7d:65:78:9b:2b: dd:f3:66:b1:d2:e5:91:72:08:65:db:68:14:57:e8: 67:84:79:94:02:0a:1a:8a:a4:a9:2e:d8:ea:2a:1f: ba:84:90:74:71:f0:fe:5d:82:fe:0f:c4:de:d8:c8: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B7:74:EB:A5:3C:0C:14:05:EE:4C:CD:1C:1D:64:2F:02:F0:6F:BB X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d0:7b:c2:6a:52:d1:16:91:91:65:1e:99:ca:a4:5c:5a:7b: 9e:d3:da:f9:e1:2b:cd:49:60:87:47:6a:4c:19:b2:4d:98:14: 9f:2f:3c:43:4e:e9:95:23:e6:88:a7:78:6c:79:d3:f8:9b:6b: 49:9e:cb:20:bc:0d:4f:34:2e:b4:15:96:3e:23:3a:a4:88:51: 76:01:ff:15:f6:1b:db:13:fb:f9:0a:79:3f:1b:7f:d8:83:c0: dc:41:cb:44:2d:5d:95:ff:34:83:f4:7e:8a:00:18:75:7c:7d: 5b:fc:cd:dc:16:cf:1b:47:59:2e:57:3e:09:8b:f0:33:bf:de: 04:35:64:26:c1:d9:22:fd:68:fe:4e:24:c6:77:b3:90:ce:f9: 46:f7:e4:00:d0:2b:80:68:cf:dc:60:67:05:77:33:ba:e5:3c: 6c:0e:2d:8b:bf:9f:27:63:74:2b:b3:66:67:51:15:07:87:1a: 1a:a8:6a:6d:e9:f2:7f:00:4d:86:74:3c:62:97:3f:e0:d5:f9: 7b:0a:c9:3d:de:fc:a7:d0:63:0e:4d:9c:e3:fb:ce:45:b5:d8: ad:94:76:1b:2e:82:47:62:ce:82:97:fa:55:8d:7a:12:b7:4e: ff:37:ee:1b:95:b9:44:9b:04:40:ba:d7:c3:6d:db:b5:10:ed: bb:4a:46:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZku9q9lM3mj43uxH0Cau8KUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUwOTA5MTQ1MjIyWhcNMjUwOTEwMTQ1MjIyWjAzMTEwLwYDVQQD Eyg5MmI3NzRlYmE1M2MwYzE0MDVlZTRjY2QxYzFkNjQyZjAyZjA2ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoib5QsKlPaznxIR9INOECSgZncq bb4vOtvWL8AOVNKPjwyGfaX86Mst9pC1jv465lHAEnbGjWA1C50nrj1hboGDvPWV vWruYFHeZamaLUL2jAJvAROL/YAb2F6AZRr2MiFksOOWRs3GLLjzt9Y8lvaZBgco v+6tfk83JaxoHnxJ4lLwUzSjA/NrbQgyoWogOjf9aUTyWvHJ8DwfuMREzkflRw2A IiHFapd/Rof+VDPx77dUu5q4xi2M0hNoPPNsfjl/6x3fZfBXbMJwfWV4myvd82ax 0uWRcghl22gUV+hnhHmUAgoaiqSpLtjqKh+6hJB0cfD+XYL+D8Te2MhWtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJK3dOulPAwUBe5MzRwdZC8C8G+7MB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9B7wmpS 0RaRkWUemcqkXFp7ntPa+eErzUlgh0dqTBmyTZgUny88Q07plSPmiKd4bHnT+Jtr SZ7LILwNTzQutBWWPiM6pIhRdgH/FfYb2xP7+Qp5Pxt/2IPA3EHLRC1dlf80g/R+ igAYdXx9W/zN3BbPG0dZLlc+CYvwM7/eBDVkJsHZIv1o/k4kxnezkM75RvfkANAr gGjP3GBnBXczuuU8bA4ti7+fJ2N0K7NmZ1EVB4caGqhqbenyfwBNhnQ8Ypc/4NX5 ewrJPd78p9BjDk2c4/vORbXYrZR2Gy6CR2LOgpf6VY16ErdO/zfuG5W5RJsEQLrX w23btRDtu0pGMQ== -----END CERTIFICATE-----Generated at Tue Sep 9 18:24:39 2025 by rpki-client