$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: rCloJaIMXIXVUGZDRIyLzsPSJkcRqju5GY8ywCQJiQ0= Subject key identifier: DE:2C:2E:6E:02:42:9A:07:01:25:D1:40:B7:14:88:0A:6A:96:19:51 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 01994EC00FD1336EF49C652BF0C0ED420429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 017C Signing time: Mon 15 Sep 2025 19:00:33 +0000 Manifest this update: Mon 15 Sep 2025 19:00:33 +0000 Manifest next update: Tue 16 Sep 2025 19:00:33 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: OWURZZQfXBLCjrMIo9lI7C6_8rU.roa (hash: mhkt0q1UgZZPM01b3Aszei1MJkXP1Fj7gDNO1ZQ7Zg0=) 5: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 6: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 7: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 8: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 9: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 10: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 11: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 12: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: 1GV1X3tK0qdY1Xf2nx1Sn/2oaMCNwdoJsnBdTlSiwfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Sep 2025 17:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:4e:c0:0f:d1:33:6e:f4:9c:65:2b:f0:c0:ed:42:04:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Sep 15 19:00:33 2025 GMT Not After : Sep 16 19:00:33 2025 GMT Subject: CN=de2c2e6e02429a070125d140b714880a6a961951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:57:2e:fa:f5:83:45:a3:86:37:55:cb:af: a8:bf:cf:5e:92:94:08:59:32:15:34:57:8d:84:18: b7:80:1a:58:aa:d9:0a:69:c8:8c:4c:aa:c1:51:2a: e2:1f:26:44:8b:8a:51:e7:5e:57:e6:a6:a4:25:50: e7:6d:43:fa:e8:3d:56:c7:72:35:85:6a:50:59:62: 2a:9c:cf:57:f4:16:84:85:e2:b2:e4:9e:86:b0:6b: c3:85:37:e1:c0:4f:75:80:f1:5a:0b:e2:3f:e3:63: d5:84:aa:b0:b0:7e:6c:a9:02:32:93:92:f4:96:da: ef:ba:23:d1:18:1c:30:d1:a7:d5:97:48:aa:2d:2a: 83:71:35:7e:3d:05:44:f4:52:ac:3c:b3:bc:d0:7f: 3d:3d:af:46:64:00:f1:70:2b:59:87:62:b9:93:ee: bc:7b:59:4c:e4:2c:f6:b4:ee:d7:9b:4d:7c:48:36: 77:be:e7:d4:e7:b5:c8:63:f3:2e:f2:79:67:f5:11: 22:b9:b6:ba:da:8d:1d:f8:11:ba:62:a1:a9:90:30: 74:fb:45:cb:3d:49:5a:5c:86:3b:c0:70:3f:52:ab: 61:e8:6c:e5:ef:e4:cb:14:91:22:62:72:c2:2e:54: dc:79:2c:42:1e:e5:c0:c9:eb:45:8c:47:8e:79:32: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2C:2E:6E:02:42:9A:07:01:25:D1:40:B7:14:88:0A:6A:96:19:51 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:15:6c:ea:42:13:16:c8:ea:3d:84:be:ab:24:f3:fe:4e:b3: 5d:43:cb:7a:e6:6e:2e:fa:1b:04:ae:70:42:f0:44:e0:25:d2: 99:26:eb:9f:fb:62:68:5d:b8:1d:e0:c0:e3:67:0d:b1:b4:a6: 2a:55:43:5d:a4:fd:ec:03:e3:33:ea:33:f2:b6:29:64:44:74: 67:f0:8e:1e:90:77:6f:91:54:47:7a:97:c1:ff:09:18:e4:71: ee:40:b8:09:46:67:17:28:e2:fb:07:6f:0c:81:60:85:04:59: ed:93:92:af:82:e7:b9:c6:71:be:b5:46:55:3b:0a:cd:1e:65: 92:86:e4:17:76:05:f0:a1:30:6d:83:4f:c1:50:82:4f:e9:71: 64:52:d6:21:ec:3d:69:a3:23:08:b4:ee:d9:78:f2:cb:f6:f1: ff:df:92:30:bb:bb:e6:71:b4:d3:b1:7b:76:62:e8:61:ba:c6: 88:f4:a4:c7:eb:6e:b2:d6:d4:26:dd:12:f5:83:8a:5c:ff:86: af:bb:d5:c9:48:9a:ef:39:f9:35:75:c5:02:07:3e:57:74:32: 4c:93:e9:1a:42:70:c3:d2:b9:8a:1d:bc:3a:3e:df:3c:c5:87: 49:49:6e:18:ef:ae:45:33:05:fe:6d:2b:a5:31:af:48:9d:52: 36:0e:67:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlOwA/RM270nGUr8MDtQgQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUwOTE1MTkwMDMzWhcNMjUwOTE2MTkwMDMzWjAzMTEwLwYDVQQD EyhkZTJjMmU2ZTAyNDI5YTA3MDEyNWQxNDBiNzE0ODgwYTZhOTYxOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQVXLvr1g0WjhjdVy6+ov89ekpQI WTIVNFeNhBi3gBpYqtkKaciMTKrBUSriHyZEi4pR515X5qakJVDnbUP66D1Wx3I1 hWpQWWIqnM9X9BaEheKy5J6GsGvDhTfhwE91gPFaC+I/42PVhKqwsH5sqQIyk5L0 ltrvuiPRGBww0afVl0iqLSqDcTV+PQVE9FKsPLO80H89Pa9GZADxcCtZh2K5k+68 e1lM5Cz2tO7Xm018SDZ3vufU57XIY/Mu8nln9REiuba62o0d+BG6YqGpkDB0+0XL PUlaXIY7wHA/Uqth6Gzl7+TLFJEiYnLCLlTceSxCHuXAyetFjEeOeTIK8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4sLm4CQpoHASXRQLcUiApqlhlRMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxVs6kIT FsjqPYS+qyTz/k6zXUPLeuZuLvobBK5wQvBE4CXSmSbrn/tiaF24HeDA42cNsbSm KlVDXaT97APjM+oz8rYpZER0Z/COHpB3b5FUR3qXwf8JGORx7kC4CUZnFyji+wdv DIFghQRZ7ZOSr4LnucZxvrVGVTsKzR5lkobkF3YF8KEwbYNPwVCCT+lxZFLWIew9 aaMjCLTu2Xjyy/bx/9+SMLu75nG007F7dmLoYbrGiPSkx+tustbUJt0S9YOKXP+G r7vVyUia7zn5NXXFAgc+V3QyTJPpGkJww9K5ih28Oj7fPMWHSUluGO+uRTMF/m0r pTGvSJ1SNg5nQQ== -----END CERTIFICATE-----Generated at Tue Sep 16 01:15:48 2025 by rpki-client