$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: yIqflS7/WQ++pZDD1552YwkZKB6mbQRtcaQhjFU/1iE= Subject key identifier: CF:DD:0E:DE:16:B2:06:4D:5F:32:4E:DF:5D:0B:69:3A:50:4C:80:8F Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019932366A3D38B11EFCE4F9BEA0B6AE4CED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 1697 Signing time: Wed 10 Sep 2025 06:00:50 +0000 Manifest this update: Wed 10 Sep 2025 06:00:50 +0000 Manifest next update: Thu 11 Sep 2025 06:00:50 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: FEemRqWNX5xhq2yBrzr1C3dcawc.roa (hash: zrzqLUFgS0O6VfPSR/q7YlCpjaLeDHcdItec7nZ4p/I=) 5: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 6: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 7: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: CCpgpRDmCBnhr70dhVJSQZD7JBamsfk//q+juufIsLw=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 12: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 13: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 14: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 15: fCgmJ5doD3FbIucqbIpGMlmtVvM.roa (hash: SfDUMiHPovragI5UdBifWGkDZRcp8pAn1e8WMKiD3hU=) 16: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 17: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 18: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 19: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=) 22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Sep 2025 02:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:32:36:6a:3d:38:b1:1e:fc:e4:f9:be:a0:b6:ae:4c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Sep 10 06:00:50 2025 GMT Not After : Sep 11 06:00:50 2025 GMT Subject: CN=cfdd0ede16b2064d5f324edf5d0b693a504c808f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:ad:36:ae:ce:ac:47:11:f9:a0:63:d8:d1: 50:83:73:c2:22:e3:fd:56:50:b1:6c:4d:8b:1c:00: 3b:a9:76:ff:06:b9:2e:54:a5:49:13:a7:3c:d6:4d: 59:38:58:1f:cf:96:9c:26:bf:28:fb:12:ec:ed:40: e0:61:ec:e5:4f:a2:ec:0c:cf:45:69:b9:83:ca:0a: 3d:10:ca:e0:5b:c1:7e:1f:13:23:46:ff:ea:94:cf: 96:02:36:89:81:fe:78:9a:28:3c:92:cd:f2:cf:93: 10:56:6e:2f:ef:7a:1c:f9:0a:52:4d:84:6e:d9:20: f7:58:20:60:14:64:13:16:49:5b:14:3c:06:15:56: ab:c1:17:9c:52:83:6d:c5:6f:64:b9:76:84:a3:b0: a6:fb:a2:dd:ca:ca:ae:e0:38:f6:7d:aa:a0:8c:aa: ab:29:19:57:4e:7b:a6:4a:92:7e:34:d8:8c:cf:61: f9:73:9e:0a:c1:46:ba:a2:81:d0:20:bc:f9:1a:3d: 11:bb:bd:9f:46:71:1e:be:ee:54:9a:3f:a5:79:17: d5:8b:b8:c2:4b:48:aa:86:c4:99:55:61:f9:0a:22: d8:fa:7c:5c:92:26:cf:13:2d:ec:f1:aa:8a:98:55: 0c:30:d8:ac:0c:05:14:c4:61:b3:53:1a:02:07:b7: 15:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DD:0E:DE:16:B2:06:4D:5F:32:4E:DF:5D:0B:69:3A:50:4C:80:8F X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5e:8f:a3:9a:12:47:30:73:e3:cb:bb:a2:97:62:eb:1a:4f: bd:5e:72:c1:41:4c:eb:84:e8:32:09:31:a0:c8:45:7b:84:0d: e9:bf:8b:d3:ab:14:ee:ac:24:ed:96:61:f6:ba:84:24:44:22: 3a:31:80:1c:85:2b:39:64:70:d1:78:4e:b9:6e:93:ee:51:c6: 1e:8d:53:e8:c3:c4:0c:a0:1c:a4:f5:53:47:b7:a8:24:8f:21: c0:a1:bb:9c:82:bf:19:31:1a:a6:ee:65:46:c8:78:f0:06:01: 03:f3:22:e9:33:2d:63:7d:ea:c8:ec:b9:00:b8:89:68:66:f9: 53:9d:9e:47:40:ff:70:8c:27:cc:c3:5c:e7:50:51:b2:a2:39: fd:c4:54:b3:98:a6:73:fa:7a:d4:22:ae:f7:ca:7d:60:ed:f5: a2:65:6f:38:94:35:19:23:5c:de:69:9f:a8:66:56:ef:4e:1b: e6:ff:60:6a:d2:8c:26:77:c1:04:06:66:1b:e9:ba:0c:c5:0d: 22:36:16:e6:03:eb:fb:6b:d3:56:7d:13:ab:d3:a8:32:66:fd: 53:ea:0f:8c:62:6d:a2:83:0c:da:ee:f2:ca:77:3e:14:8a:5e: 53:19:e8:e1:d7:ed:08:92:fa:e4:43:5a:77:48:c9:3f:1b:31: 96:c0:a6:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkyNmo9OLEe/OT5vqC2rkztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUwOTEwMDYwMDUwWhcNMjUwOTExMDYwMDUwWjAzMTEwLwYDVQQD EyhjZmRkMGVkZTE2YjIwNjRkNWYzMjRlZGY1ZDBiNjkzYTUwNGM4MDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i+tNq7OrEcR+aBj2NFQg3PCIuP9 VlCxbE2LHAA7qXb/BrkuVKVJE6c81k1ZOFgfz5acJr8o+xLs7UDgYezlT6LsDM9F abmDygo9EMrgW8F+HxMjRv/qlM+WAjaJgf54mig8ks3yz5MQVm4v73oc+QpSTYRu 2SD3WCBgFGQTFklbFDwGFVarwRecUoNtxW9kuXaEo7Cm+6Ldysqu4Dj2faqgjKqr KRlXTnumSpJ+NNiMz2H5c54KwUa6ooHQILz5Gj0Ru72fRnEevu5Umj+leRfVi7jC S0iqhsSZVWH5CiLY+nxckibPEy3s8aqKmFUMMNisDAUUxGGzUxoCB7cV1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/dDt4WsgZNXzJO310LaTpQTICPMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV6Po5oS RzBz48u7opdi6xpPvV5ywUFM64ToMgkxoMhFe4QN6b+L06sU7qwk7ZZh9rqEJEQi OjGAHIUrOWRw0XhOuW6T7lHGHo1T6MPEDKAcpPVTR7eoJI8hwKG7nIK/GTEapu5l Rsh48AYBA/Mi6TMtY33qyOy5ALiJaGb5U52eR0D/cIwnzMNc51BRsqI5/cRUs5im c/p61CKu98p9YO31omVvOJQ1GSNc3mmfqGZW704b5v9gatKMJnfBBAZmG+m6DMUN IjYW5gPr+2vTVn0Tq9OoMmb9U+oPjGJtooMM2u7yync+FIpeUxno4dftCJL65ENa d0jJPxsxlsCmxg== -----END CERTIFICATE-----Generated at Wed Sep 10 10:02:48 2025 by rpki-client