$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: jfgPjfYlvVoO9JPBsoKZLHV6LQjwG3MEtCZ+HkeqiGk= Subject key identifier: C8:16:BC:07:C3:6A:C5:0C:02:6A:06:85:F3:D8:37:83:BC:2F:3E:A5 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019937CB1DFA4072B5CF44A352B5E386830D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 169B Signing time: Thu 11 Sep 2025 08:01:22 +0000 Manifest this update: Thu 11 Sep 2025 08:01:22 +0000 Manifest next update: Fri 12 Sep 2025 08:01:22 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: AAWPbPjTyVT988aYaAp0o8ug4CA.roa (hash: W0Vm8/GtO/KKeUbt2/qoBL2G7a3VmqlowMCbkwrkEEM=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: nKRe5GmTqlzXt9IfgV5YgAkP32JTyVtasOMUosrZxMY=) 11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 12: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 13: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Sep 2025 05:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:37:cb:1d:fa:40:72:b5:cf:44:a3:52:b5:e3:86:83:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Sep 11 08:01:22 2025 GMT Not After : Sep 12 08:01:22 2025 GMT Subject: CN=c816bc07c36ac50c026a0685f3d83783bc2f3ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:08:14:3b:bb:c8:71:94:b2:86:a7:6b:77:55: 08:60:d5:58:62:4c:9c:b0:f1:f6:ac:9c:23:80:0e: 5e:a0:38:b8:33:02:86:e0:2f:77:64:91:39:02:25: 82:69:63:39:90:07:8c:1e:44:d5:13:d5:c8:13:ad: 54:0e:86:b4:51:78:d8:26:84:6d:81:e6:43:f1:d8: ef:47:b8:9b:1a:be:b0:f0:55:c9:3a:b2:e8:aa:77: 18:dd:6b:30:cc:bb:e2:bf:a2:f4:9b:dd:96:7c:13: 24:87:c2:a7:ca:37:f6:d3:79:a2:5e:5b:22:c7:de: 8e:16:2b:d5:d8:06:44:1f:b4:10:2f:44:e4:2e:8b: 9b:2f:7d:a6:a9:37:c4:f9:a8:85:e4:10:fb:87:95: f9:72:49:48:af:b5:a2:52:16:15:24:0b:af:ff:43: 2b:c9:9b:27:d8:24:c2:91:6f:ce:49:be:e2:3b:a8: 9e:ac:32:1a:dc:d8:9c:89:7b:b4:88:81:dd:7a:f7: 61:21:fb:09:e0:99:4a:f6:8d:78:a1:e5:14:5e:3f: 22:67:7f:fb:1a:06:e6:89:cb:53:c7:78:f6:8a:a4: 22:a0:60:9e:e3:e7:a0:23:41:80:02:73:9e:02:99: 53:d8:b4:f2:c2:51:d0:78:50:e5:15:10:2d:97:e2: c4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:16:BC:07:C3:6A:C5:0C:02:6A:06:85:F3:D8:37:83:BC:2F:3E:A5 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:b5:8b:0e:1c:5b:57:68:a3:72:be:57:9d:cb:e2:b8:10:36: 05:e3:29:2b:e9:3b:b3:2f:13:ba:2e:fb:e1:07:c5:cf:14:30: 1d:3d:98:16:05:8d:90:95:de:45:19:d1:71:05:a0:dc:7d:1b: f6:42:8e:7d:1a:b6:25:97:79:24:e3:14:aa:94:f4:cc:87:63: 99:dc:09:ad:3e:2e:64:b4:7a:f7:91:6f:f3:66:1e:78:c5:fd: d6:74:f0:b3:23:63:df:99:4c:33:56:00:f8:d6:49:64:d0:7d: 0b:c6:61:b8:ef:8c:01:87:d7:2f:63:39:de:97:ef:93:87:12: e6:64:72:9a:98:d2:27:50:56:59:0f:51:b7:32:7d:9e:f5:79: 34:58:32:e9:4c:c5:ce:96:93:cd:35:2a:06:1c:af:d0:be:cf: e4:74:fc:e0:c2:04:08:85:72:5c:35:3c:b0:e7:a3:32:28:3c: c9:ae:89:cf:41:5f:a6:86:7a:8e:bd:85:08:92:1c:d1:98:da: b3:e1:08:08:68:00:90:b3:cc:a6:98:22:37:66:5b:c0:b5:f4: ba:5e:94:a9:ed:91:c0:ad:bc:97:37:2b:9b:dc:85:62:29:25: 5a:7d:80:7a:34:63:02:25:f2:81:71:dc:65:ea:61:92:4c:31: 99:e3:1d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZk3yx36QHK1z0SjUrXjhoMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwOTExMDgwMTIyWhcNMjUwOTEyMDgwMTIyWjAzMTEwLwYDVQQD EyhjODE2YmMwN2MzNmFjNTBjMDI2YTA2ODVmM2Q4Mzc4M2JjMmYzZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wgUO7vIcZSyhqdrd1UIYNVYYkyc sPH2rJwjgA5eoDi4MwKG4C93ZJE5AiWCaWM5kAeMHkTVE9XIE61UDoa0UXjYJoRt geZD8djvR7ibGr6w8FXJOrLoqncY3WswzLviv6L0m92WfBMkh8Knyjf203miXlsi x96OFivV2AZEH7QQL0TkLoubL32mqTfE+aiF5BD7h5X5cklIr7WiUhYVJAuv/0Mr yZsn2CTCkW/OSb7iO6ierDIa3NiciXu0iIHdevdhIfsJ4JlK9o14oeUUXj8iZ3/7 GgbmictTx3j2iqQioGCe4+egI0GAAnOeAplT2LTywlHQeFDlFRAtl+LEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgWvAfDasUMAmoGhfPYN4O8Lz6lMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLWLDhxb V2ijcr5XncviuBA2BeMpK+k7sy8Tui774QfFzxQwHT2YFgWNkJXeRRnRcQWg3H0b 9kKOfRq2JZd5JOMUqpT0zIdjmdwJrT4uZLR695Fv82YeeMX91nTwsyNj35lMM1YA +NZJZNB9C8ZhuO+MAYfXL2M53pfvk4cS5mRympjSJ1BWWQ9RtzJ9nvV5NFgy6UzF zpaTzTUqBhyv0L7P5HT84MIECIVyXDU8sOejMig8ya6Jz0FfpoZ6jr2FCJIc0Zja s+EICGgAkLPMppgiN2ZbwLX0ul6Uqe2RwK28lzcrm9yFYiklWn2AejRjAiXygXHc ZephkkwxmeMdKA== -----END CERTIFICATE-----Generated at Thu Sep 11 11:48:33 2025 by rpki-client