$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: 1QuFpRVhB/YcAqKsdtBzwPo9nMMBoGDEYimaviR9XUc= Subject key identifier: 02:5C:C5:41:B6:87:22:06:E8:00:8C:76:33:70:B3:FC:C6:68:0E:AF Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 01992255AFB68AB8F7A2B39F627A115CF9DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1290 Signing time: Sun 07 Sep 2025 04:01:04 +0000 Manifest this update: Sun 07 Sep 2025 04:01:04 +0000 Manifest next update: Mon 08 Sep 2025 04:01:04 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: oqaoPsvjXOHWEnlxtJ22odvMVS5jLbZL9sciX2zKMWI=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:55:af:b6:8a:b8:f7:a2:b3:9f:62:7a:11:5c:f9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Sep 7 04:01:04 2025 GMT Not After : Sep 8 04:01:04 2025 GMT Subject: CN=025cc541b6872206e8008c763370b3fcc6680eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:f6:3c:69:17:4c:30:57:da:fc:7e:f7:b3: b1:88:9e:3c:f8:20:ce:b1:0f:fe:23:b1:62:82:c0: a8:37:34:b6:70:2f:d0:3a:30:b2:c9:69:8d:11:1a: 70:51:99:5d:c8:ef:e7:dd:10:b4:3f:00:c6:1a:62: 65:1c:b5:cb:ce:13:7f:7b:da:2d:53:6e:b9:49:e4: f0:9a:06:cf:08:2f:fa:ab:30:e1:38:b7:c3:c6:3c: c5:da:96:4b:50:19:67:f7:b9:3e:f3:54:2c:ea:ff: 14:2d:2b:73:3d:1a:77:90:8d:58:63:fb:7a:e7:74: 32:d2:60:1b:05:40:96:03:3d:0f:29:5f:c0:bb:49: 24:b4:a1:f2:a1:ca:54:f0:86:e9:31:93:e0:c4:14: 1c:49:a4:cd:be:d5:c0:54:92:df:f3:63:85:0c:d9: 93:ac:c6:10:4f:07:8f:e7:b3:51:ca:62:fd:bb:d9: af:7a:04:69:13:74:27:7c:35:a5:1a:df:45:9e:8b: 14:4c:c7:4b:2c:5f:12:bb:26:5b:44:fd:d7:24:c8: 6b:4a:4a:24:00:5c:c8:e6:67:18:e2:c8:cb:d3:f2: 83:42:b9:4a:eb:f7:49:03:f4:11:50:13:80:5c:39: 23:88:e6:fc:9c:64:39:fe:bd:54:1d:61:a0:20:2b: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5C:C5:41:B6:87:22:06:E8:00:8C:76:33:70:B3:FC:C6:68:0E:AF X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a3:81:0e:70:7c:62:40:27:61:b4:a8:ab:2c:83:86:d4:08: 0c:b2:c7:86:08:a3:f6:cf:6e:ce:0b:4d:38:70:3f:04:af:ed: b6:0d:3d:4b:e7:20:db:6a:c2:c3:90:ad:39:2e:f4:7d:1d:88: 94:67:dd:6c:42:70:e8:79:e8:b3:bb:90:25:b5:c5:85:df:83: 9f:90:a8:a7:79:c5:9f:91:50:4c:f2:81:0d:17:a8:de:ac:94: b6:96:12:6e:68:75:01:9a:b2:ab:f8:dc:d0:34:2c:d0:67:40: d5:46:55:79:33:c5:da:6d:7c:2c:f3:a9:a5:e6:ba:33:4c:96: a8:b5:20:6a:8e:b9:80:eb:9c:ca:3a:49:20:a4:d8:93:7f:db: ad:ab:43:a0:69:d5:45:57:82:35:89:79:24:12:da:72:82:b7: f7:f3:43:99:b3:69:59:61:22:76:2d:ba:06:bf:84:26:95:6a: 9f:98:c4:45:70:3d:ff:17:96:22:2c:69:f5:24:82:8b:6c:78: 77:52:17:af:82:2f:88:b2:32:53:3e:e5:31:51:7a:81:f8:53: 91:c4:1f:e3:c2:ab:42:f8:f0:a9:61:9c:73:e0:66:90:ec:dc: 61:16:08:30:d1:a7:19:eb:96:57:92:e3:9d:74:fd:d4:cc:5a: 2a:16:39:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkiVa+2irj3orOfYnoRXPneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwOTA3MDQwMTA0WhcNMjUwOTA4MDQwMTA0WjAzMTEwLwYDVQQD EygwMjVjYzU0MWI2ODcyMjA2ZTgwMDhjNzYzMzcwYjNmY2M2NjgwZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFT2PGkXTDBX2vx+97OxiJ48+CDO sQ/+I7FigsCoNzS2cC/QOjCyyWmNERpwUZldyO/n3RC0PwDGGmJlHLXLzhN/e9ot U265SeTwmgbPCC/6qzDhOLfDxjzF2pZLUBln97k+81Qs6v8ULStzPRp3kI1YY/t6 53Qy0mAbBUCWAz0PKV/Au0kktKHyocpU8IbpMZPgxBQcSaTNvtXAVJLf82OFDNmT rMYQTweP57NRymL9u9mvegRpE3QnfDWlGt9FnosUTMdLLF8SuyZbRP3XJMhrSkok AFzI5mcY4sjL0/KDQrlK6/dJA/QRUBOAXDkjiOb8nGQ5/r1UHWGgICuk/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJcxUG2hyIG6ACMdjNws/zGaA6vMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaOBDnB8 YkAnYbSoqyyDhtQIDLLHhgij9s9uzgtNOHA/BK/ttg09S+cg22rCw5CtOS70fR2I lGfdbEJw6Hnos7uQJbXFhd+Dn5Cop3nFn5FQTPKBDReo3qyUtpYSbmh1AZqyq/jc 0DQs0GdA1UZVeTPF2m18LPOppea6M0yWqLUgao65gOucyjpJIKTYk3/bratDoGnV RVeCNYl5JBLacoK39/NDmbNpWWEidi26Br+EJpVqn5jERXA9/xeWIixp9SSCi2x4 d1IXr4IviLIyUz7lMVF6gfhTkcQf48KrQvjwqWGcc+BmkOzcYRYIMNGnGeuWV5Lj nXT91MxaKhY5JQ== -----END CERTIFICATE-----Generated at Sun Sep 7 11:39:03 2025 by rpki-client