$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: 3E8PPkWx6mSOxB7A0ZxKCdHSDgDMidumOEo6t7pJooE= Subject key identifier: 97:04:11:2B:2B:45:90:66:09:76:61:B3:77:32:AC:81:D2:D7:7A:20 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 0198432C31B845F1021AF0A9C9BB43B6FBBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 15F5 Signing time: Fri 25 Jul 2025 20:00:26 +0000 Manifest this update: Fri 25 Jul 2025 20:00:26 +0000 Manifest next update: Sat 26 Jul 2025 20:00:26 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: AwxwsnCK9rp3xqZ9e3TQYkhXehxqCyfW34Aa57T9+LA=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:43:2c:31:b8:45:f1:02:1a:f0:a9:c9:bb:43:b6:fb:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jul 25 20:00:26 2025 GMT Not After : Jul 26 20:00:26 2025 GMT Subject: CN=9704112b2b459066097661b37732ac81d2d77a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:a5:e6:ff:88:8f:5d:c2:56:91:e7:89:ca: 67:db:1f:07:bd:bb:15:00:4b:93:f8:27:24:22:7a: d3:f8:cb:bf:1d:24:d4:c5:55:c9:e0:33:5a:fb:b9: a0:b1:6a:32:db:2c:6a:df:a6:2b:88:02:c4:b4:76: 19:15:c3:0a:c0:07:99:64:24:0a:40:56:e3:e0:e8: 71:01:a4:42:42:23:0a:b2:e7:02:e8:3f:90:f8:5e: 36:eb:13:6a:3d:31:57:42:59:54:d9:1e:43:93:74: c5:c4:69:2b:df:37:fe:2a:aa:bf:04:75:50:a6:0f: b8:9f:af:98:fa:d7:46:d7:48:b6:61:af:d3:9e:fe: 33:bf:40:5d:cd:a6:26:7b:41:cd:37:89:13:1e:01: c9:30:93:32:cb:98:5c:ff:53:3b:de:a8:6b:e8:c7: 56:ea:02:7b:8f:6b:5a:35:08:b0:48:f2:e6:a6:2c: 5a:dd:19:c1:bc:3a:0a:0b:86:f2:74:e1:eb:f4:4f: 4c:27:ce:99:10:eb:78:e9:24:53:c9:bf:36:ea:f6: 76:c7:4a:c6:d9:75:20:5c:ea:b3:5a:23:64:84:63: c6:1a:f5:d1:fc:67:f5:36:a1:7b:f1:f9:64:8d:3f: fd:5a:a2:f1:77:d1:cd:0d:b9:03:d4:05:91:9b:26: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:04:11:2B:2B:45:90:66:09:76:61:B3:77:32:AC:81:D2:D7:7A:20 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cc:fe:06:ba:ad:9e:b2:95:8d:7d:ce:19:c7:32:26:bd:b3: 2d:f3:7f:f8:13:1f:05:82:65:16:09:b6:55:c1:4e:91:97:10: 99:77:5f:87:5d:c3:20:2d:f2:20:a7:da:9c:08:de:42:06:33: 65:8f:29:80:c7:c5:18:81:4e:72:25:2d:50:da:dc:d5:f3:49: c4:e2:eb:a1:15:2c:bc:e6:49:80:fc:f3:54:32:86:df:9a:07: ef:ea:c6:4f:b7:91:20:b6:c8:da:9a:04:55:83:84:00:b7:15: 7f:bc:89:40:35:2d:39:27:a5:54:df:ff:97:23:25:86:f3:07: 57:19:b0:a1:c2:7d:60:b5:27:43:f3:d7:33:ed:6b:02:eb:01: 56:e7:26:ce:7f:fa:f9:a8:b2:19:98:23:85:e3:9f:21:8e:4f: 2d:96:22:35:8f:47:e2:c8:96:60:6d:41:f4:fe:8b:0e:b2:1f: a9:b9:ff:71:37:8f:d3:96:04:eb:f1:1b:d6:7a:b7:20:a0:75: ff:5d:da:8d:43:2a:4e:cc:0a:d2:89:58:45:9b:6a:b2:a5:ef: 0d:40:5e:b9:40:91:cd:10:1c:60:49:4f:47:ba:c7:ab:f8:79: 86:29:c4:c3:0f:c5:2c:f8:c7:4d:b1:42:48:22:77:f9:54:96: 2c:7f:ad:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhDLDG4RfECGvCpybtDtvu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwNzI1MjAwMDI2WhcNMjUwNzI2MjAwMDI2WjAzMTEwLwYDVQQD Eyg5NzA0MTEyYjJiNDU5MDY2MDk3NjYxYjM3NzMyYWM4MWQyZDc3YTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoal5v+Ij13CVpHnicpn2x8HvbsV AEuT+CckInrT+Mu/HSTUxVXJ4DNa+7mgsWoy2yxq36YriALEtHYZFcMKwAeZZCQK QFbj4OhxAaRCQiMKsucC6D+Q+F426xNqPTFXQllU2R5Dk3TFxGkr3zf+Kqq/BHVQ pg+4n6+Y+tdG10i2Ya/Tnv4zv0BdzaYme0HNN4kTHgHJMJMyy5hc/1M73qhr6MdW 6gJ7j2taNQiwSPLmpixa3RnBvDoKC4bydOHr9E9MJ86ZEOt46SRTyb826vZ2x0rG 2XUgXOqzWiNkhGPGGvXR/Gf1NqF78flkjT/9WqLxd9HNDbkD1AWRmybB5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcEESsrRZBmCXZhs3cyrIHS13ogMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8z+Brqt nrKVjX3OGccyJr2zLfN/+BMfBYJlFgm2VcFOkZcQmXdfh13DIC3yIKfanAjeQgYz ZY8pgMfFGIFOciUtUNrc1fNJxOLroRUsvOZJgPzzVDKG35oH7+rGT7eRILbI2poE VYOEALcVf7yJQDUtOSelVN//lyMlhvMHVxmwocJ9YLUnQ/PXM+1rAusBVucmzn/6 +aiyGZgjheOfIY5PLZYiNY9H4siWYG1B9P6LDrIfqbn/cTeP05YE6/Eb1nq3IKB1 /13ajUMqTswK0olYRZtqsqXvDUBeuUCRzRAcYElPR7rHq/h5hinEww/FLPjHTbFC SCJ3+VSWLH+t3g== -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:14 2025 by rpki-client