$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: osqttB4xLQ8IdDAeS4TgQrYa7qZCdMs1cf7NWSJ6x0o= Subject key identifier: AE:16:F0:AA:4B:D2:C7:46:2C:92:B4:1B:3B:B6:E6:4F:ED:55:E7:08 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 01992F35B9702A13DE2E952AD30FCB9023E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 1688 Signing time: Tue 09 Sep 2025 16:01:13 +0000 Manifest this update: Tue 09 Sep 2025 16:01:13 +0000 Manifest next update: Wed 10 Sep 2025 16:01:13 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: Cu5pIKFtMdmyEjU2SFPSdknAwJGEVkqmVPlKTKBzu6o=) 7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=) 10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:35:b9:70:2a:13:de:2e:95:2a:d3:0f:cb:90:23:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Sep 9 16:01:13 2025 GMT Not After : Sep 10 16:01:13 2025 GMT Subject: CN=ae16f0aa4bd2c7462c92b41b3bb6e64fed55e708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:ab:29:50:a0:c4:6d:44:7c:d5:f4:31:20: 69:c8:11:e4:0d:2e:cc:66:a9:c7:e9:68:5b:35:d6: 6e:87:13:c3:8c:25:c8:4b:d5:35:a4:68:47:94:8d: 90:de:4f:e4:ab:28:0d:3d:f1:60:18:d3:33:c5:6f: 18:c6:76:c4:5a:60:42:f5:11:fc:3a:fd:81:be:de: 81:16:4d:d0:19:e1:d1:a8:af:94:4a:bb:93:96:e3: f6:7f:b4:d0:c9:ef:1a:1b:14:ac:6b:71:89:9d:65: 1e:ac:29:01:23:5d:c7:a6:d6:66:87:63:d4:8b:a6: b9:12:5e:6e:c9:44:81:0f:5a:9c:c4:ef:d6:07:c3: ed:11:ff:97:eb:db:61:7f:29:02:ed:3e:6b:27:00: d5:cc:b1:b1:85:b6:09:f7:d8:8f:e2:70:0a:24:f7: d6:93:42:03:44:fd:5b:4e:8a:29:ae:26:36:0c:0b: 83:79:66:b8:75:86:1b:2f:87:18:34:15:d2:e9:14: f0:61:6e:8e:19:fc:44:75:68:2f:86:0e:35:8e:d0: e5:8c:72:bd:19:d0:8e:63:24:78:04:fa:c1:b0:d2: 1f:96:a7:6f:44:d1:f9:f2:9f:c6:28:09:bc:85:2a: d6:1c:a7:4f:44:7d:28:ab:68:97:12:db:41:8f:93: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:16:F0:AA:4B:D2:C7:46:2C:92:B4:1B:3B:B6:E6:4F:ED:55:E7:08 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:11:8a:ea:f3:5b:0d:b0:b6:23:b6:43:20:d9:8f:e8:17: ce:a7:b2:25:65:06:5b:57:23:7a:c7:5d:bb:b1:90:87:2e:21: 87:36:6a:bc:d3:97:e4:cf:77:df:e9:f4:3f:13:3c:34:c2:38: 14:ad:c4:39:60:53:12:55:df:a1:cb:3a:9b:c5:67:ee:56:4a: ce:e5:64:f4:4a:f0:7d:82:5f:2e:92:de:74:a9:c0:f4:78:aa: c9:62:24:87:48:1a:92:5a:19:a2:99:e7:f9:04:64:0b:6a:80: 1f:20:5a:17:97:47:57:9f:4a:a4:a4:2e:b2:02:bc:b4:8a:6a: 93:bb:62:f9:e5:c8:6a:85:b5:06:19:a2:9c:02:c8:6b:4d:dd: a5:a6:c7:3b:cd:d0:f2:5f:51:b3:0e:81:18:b1:18:68:55:ff: 3e:94:cb:06:38:55:4e:69:d6:6d:37:65:1a:8a:06:55:cc:1b: f5:4e:e1:13:1c:2e:34:7c:6d:fa:52:6a:c9:d5:59:42:ca:1f: 64:64:d0:a4:2e:1b:f1:d1:7d:5c:5b:53:84:39:06:63:b9:24: 7f:9b:fc:a4:6b:c5:91:23:46:cf:ff:0b:cf:19:8d:ce:21:69: 6b:94:62:16:0a:b5:c2:3f:43:48:05:b2:2c:14:69:da:5a:17: 41:e2:73:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvNblwKhPeLpUq0w/LkCPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUwOTA5MTYwMTEzWhcNMjUwOTEwMTYwMTEzWjAzMTEwLwYDVQQD EyhhZTE2ZjBhYTRiZDJjNzQ2MmM5MmI0MWIzYmI2ZTY0ZmVkNTVlNzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJyrKVCgxG1EfNX0MSBpyBHkDS7M ZqnH6WhbNdZuhxPDjCXIS9U1pGhHlI2Q3k/kqygNPfFgGNMzxW8YxnbEWmBC9RH8 Ov2Bvt6BFk3QGeHRqK+USruTluP2f7TQye8aGxSsa3GJnWUerCkBI13HptZmh2PU i6a5El5uyUSBD1qcxO/WB8PtEf+X69thfykC7T5rJwDVzLGxhbYJ99iP4nAKJPfW k0IDRP1bToopriY2DAuDeWa4dYYbL4cYNBXS6RTwYW6OGfxEdWgvhg41jtDljHK9 GdCOYyR4BPrBsNIflqdvRNH58p/GKAm8hSrWHKdPRH0oq2iXEttBj5OdjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4W8KpL0sdGLJK0Gzu25k/tVecIMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlcRiurz Ww2wtiO2QyDZj+gXzqeyJWUGW1cjesddu7GQhy4hhzZqvNOX5M933+n0PxM8NMI4 FK3EOWBTElXfocs6m8Vn7lZKzuVk9ErwfYJfLpLedKnA9HiqyWIkh0gakloZopnn +QRkC2qAHyBaF5dHV59KpKQusgK8tIpqk7ti+eXIaoW1BhminALIa03dpabHO83Q 8l9Rsw6BGLEYaFX/PpTLBjhVTmnWbTdlGooGVcwb9U7hExwuNHxt+lJqydVZQsof ZGTQpC4b8dF9XFtThDkGY7kkf5v8pGvFkSNGz/8LzxmNziFpa5RiFgq1wj9DSAWy LBRp2loXQeJzPQ== -----END CERTIFICATE-----Generated at Tue Sep 9 23:05:20 2025 by rpki-client