$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json) Hash identifier: 0Bqe608SJPr8GP793xklH6VX3bastWz8xEmxj362ERE= Subject key identifier: 74:00:D9:FD:36:CC:A0:00:23:51:35:B6:8B:25:27:9F:27:7D:AF:CE Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 01992820DE8E3812C43AA46A178A6731BE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft Manifest number: 1689 Signing time: Mon 08 Sep 2025 07:01:06 +0000 Manifest this update: Mon 08 Sep 2025 07:01:06 +0000 Manifest next update: Tue 09 Sep 2025 07:01:06 +0000 Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=) 2: 2BoUvh_GbNXWKhjcWBS_yTXM_no.roa (hash: MtuK0RhBI+g+mJx4Xe5+O3ZgD8e9nOn294SgFs9tufQ=) 3: 328wcZUwLN_vfeq8C6isq-A3BoM.roa (hash: GlJNad5vKZfYBMC3kSAskLw5gbwDcjVPCSvhXw5VGI0=) 4: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=) 5: BZBW5YOkIp9LbtIp95M8WoQVxcY.roa (hash: X42F21g8cnpx/mEkXiPNfQhd+7IgYORDgkACnwHFRjA=) 6: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=) 7: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=) 8: Nw0MJW1-17GSjmW0I-SeXIKcXZc.roa (hash: bVKXfQW3a25ibMtG9JEwc2vSFy0FIYerrDATet1Yfbc=) 9: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=) 10: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=) 11: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: P3qnOXg4HqBUr11SRh1LOpTAqB7yZgOMrz2Z0UjJg8Q=) 12: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:28:20:de:8e:38:12:c4:3a:a4:6a:17:8a:67:31:be:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Sep 8 07:01:06 2025 GMT Not After : Sep 9 07:01:06 2025 GMT Subject: CN=7400d9fd36cca000235135b68b25279f277dafce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:4d:90:be:a7:03:04:36:4e:10:1f:2a:35: 82:15:b5:fb:99:4f:4b:98:6a:49:27:a4:8c:38:49: d7:47:f0:53:5a:f0:d3:f2:57:e8:46:c9:e2:31:38: eb:d4:2a:0e:86:be:92:bc:50:ee:b2:de:85:71:d9: af:b5:9f:d8:16:65:c4:ce:31:5c:e7:0d:6a:71:ae: 6b:77:f3:db:a6:a5:80:26:e9:26:47:75:f9:4c:76: ea:2e:ea:24:06:e1:7b:db:05:47:7a:74:9b:ae:f6: 71:45:1d:4c:cc:5e:0b:83:85:93:21:0a:8c:12:ce: dd:20:14:e2:22:3f:cb:94:5d:34:a4:1a:40:6a:28: 30:3a:bc:8f:4b:e9:ac:86:97:28:9d:ea:eb:50:11: ba:41:cb:68:0d:0a:21:3e:6f:34:2a:28:16:e4:10: c1:10:a3:5f:a2:a5:84:c5:11:76:b1:aa:d3:57:19: 26:e9:ba:21:1c:54:22:84:39:ba:b0:9a:8e:41:4f: 35:25:6c:a9:78:ff:40:68:51:ca:84:6b:64:94:dd: ec:50:93:c8:e2:1d:ce:5e:59:81:13:70:da:df:3f: 22:6e:8a:78:65:e5:d4:60:51:47:33:26:ab:16:c6: 8c:70:c8:c6:45:4a:8c:e5:9c:a3:d5:e7:62:1c:cd: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:00:D9:FD:36:CC:A0:00:23:51:35:B6:8B:25:27:9F:27:7D:AF:CE X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ad:fe:a7:36:f8:c2:a3:7e:35:c4:11:99:e1:88:75:ea:08: f2:1e:9c:bb:80:8f:4f:74:8a:cd:c6:82:8a:10:4e:35:bc:33: 79:73:76:dc:b9:fd:71:0a:93:79:b0:d3:38:b0:ad:32:61:74: 9f:65:99:dc:18:af:33:1e:60:b0:4b:35:18:8e:ae:3a:8d:3b: a9:d3:bf:a1:68:4e:e1:ee:21:dc:45:41:a9:b4:e8:9d:1c:f4: 97:70:4c:e6:50:17:8b:21:e3:bd:2c:49:67:47:9d:8f:0a:b6: a8:e6:b5:f3:c8:24:22:dd:13:88:b7:ff:08:c8:7d:5c:5d:eb: 22:2f:eb:d3:6c:c0:a1:df:8b:c7:b9:f2:4c:87:f3:30:77:39: 56:0c:df:7a:75:34:64:15:04:15:30:49:55:11:8b:96:b4:ab: 46:81:1f:fc:d1:43:55:09:74:21:30:c9:35:dd:10:c6:47:47: 65:b9:88:5c:64:d1:2c:ca:41:a3:d9:72:7a:72:06:ec:c4:98: 2a:8f:61:1f:18:5a:e8:07:06:15:cf:6c:02:25:10:8e:83:e6: df:4f:85:94:e8:ae:71:06:3f:0d:72:41:47:9a:cd:11:b3:d4: d8:3b:99:0c:82:63:24:55:64:c0:1e:e1:d6:7c:a0:e4:cc:d3: 9c:fb:42:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkoIN6OOBLEOqRqF4pnMb40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjUwOTA4MDcwMTA2WhcNMjUwOTA5MDcwMTA2WjAzMTEwLwYDVQQD Eyg3NDAwZDlmZDM2Y2NhMDAwMjM1MTM1YjY4YjI1Mjc5ZjI3N2RhZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSlNkL6nAwQ2ThAfKjWCFbX7mU9L mGpJJ6SMOEnXR/BTWvDT8lfoRsniMTjr1CoOhr6SvFDust6FcdmvtZ/YFmXEzjFc 5w1qca5rd/PbpqWAJukmR3X5THbqLuokBuF72wVHenSbrvZxRR1MzF4Lg4WTIQqM Es7dIBTiIj/LlF00pBpAaigwOryPS+mshpconerrUBG6QctoDQohPm80KigW5BDB EKNfoqWExRF2sarTVxkm6bohHFQihDm6sJqOQU81JWypeP9AaFHKhGtklN3sUJPI 4h3OXlmBE3Da3z8ibop4ZeXUYFFHMyarFsaMcMjGRUqM5Zyj1ediHM0c9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQA2f02zKAAI1E1toslJ58nfa/OMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK3+pzb4 wqN+NcQRmeGIdeoI8h6cu4CPT3SKzcaCihBONbwzeXN23Ln9cQqTebDTOLCtMmF0 n2WZ3BivMx5gsEs1GI6uOo07qdO/oWhO4e4h3EVBqbTonRz0l3BM5lAXiyHjvSxJ Z0edjwq2qOa188gkIt0TiLf/CMh9XF3rIi/r02zAod+Lx7nyTIfzMHc5VgzfenU0 ZBUEFTBJVRGLlrSrRoEf/NFDVQl0ITDJNd0QxkdHZbmIXGTRLMpBo9lyenIG7MSY Ko9hHxha6AcGFc9sAiUQjoPm30+FlOiucQY/DXJBR5rNEbPU2DuZDIJjJFVkwB7h 1nyg5MzTnPtCJg== -----END CERTIFICATE-----Generated at Mon Sep 8 08:37:01 2025 by rpki-client