$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: iOKGs99QxaXF3DYtze07wvK1zov1AUL0xIIaKL5Uf+Y= Subject key identifier: 16:35:48:09:BE:7F:D1:D7:49:C3:26:1E:10:24:80:7B:6F:A6:CC:34 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01973B75A354CF97D3FD5E79CAD4E9EE9D5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 0F42 Signing time: Wed 04 Jun 2025 15:00:54 +0000 Manifest this update: Wed 04 Jun 2025 15:00:54 +0000 Manifest next update: Thu 05 Jun 2025 15:00:54 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (hash: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: JLu4LBJ/SNnx3aK/ZqAtTAROn/GB/t3SrQYBsSstGmU=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3b:75:a3:54:cf:97:d3:fd:5e:79:ca:d4:e9:ee:9d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jun 4 15:00:54 2025 GMT Not After : Jun 5 15:00:54 2025 GMT Subject: CN=16354809be7fd1d749c3261e1024807b6fa6cc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:5f:c5:0c:40:18:ca:fb:6a:a9:68:a1:87: 40:93:20:35:c6:41:93:a7:60:8b:73:84:77:25:f0: 65:22:6a:69:72:84:c8:79:45:8a:68:9b:96:8a:4c: 8b:28:e1:bd:f8:10:3c:79:3d:18:ab:df:e8:73:6c: 86:8a:2e:38:b9:17:cf:a8:3f:04:f7:26:23:89:58: a5:d8:19:6e:73:51:ae:82:70:1f:3c:d5:e8:76:f9: f9:ce:d1:f9:b1:c1:b0:68:4d:5f:c6:05:a6:1d:f3: 59:ff:5c:ac:92:ee:00:af:e4:60:05:b3:3d:2f:43: c2:26:78:ee:b9:2b:2d:8c:6f:ca:fc:c8:ef:7e:26: a7:af:bb:26:75:34:8d:6c:cf:00:36:6f:14:f4:79: 9d:f6:0d:13:52:c3:ae:7a:82:ad:12:48:5c:a8:73: fd:4b:27:1c:0c:03:9e:41:20:2d:3a:04:ca:f6:0c: 8d:2f:b8:d9:92:34:1b:0d:60:cf:cc:e0:d7:18:44: c0:f2:0c:3b:78:cd:52:da:d6:66:df:37:94:f5:6f: d9:80:ec:57:a3:09:74:72:62:9c:9c:85:06:e5:aa: d5:a3:fc:c6:aa:ff:7c:2c:bf:ca:f5:de:82:62:32: 76:89:e4:09:54:65:8b:22:cd:2e:5f:e0:f4:37:9f: f2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:35:48:09:BE:7F:D1:D7:49:C3:26:1E:10:24:80:7B:6F:A6:CC:34 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:21:91:ea:5c:a6:0c:14:81:41:16:0d:3c:dc:1e:d5:9e:a5: 99:5c:11:d0:1c:04:62:68:41:9d:eb:13:ba:a1:9a:fc:f2:46: 6f:64:a2:b7:a7:99:46:1f:b9:76:bd:27:8e:af:9f:d7:af:3f: bc:03:69:23:6c:49:da:f1:b8:6a:55:a4:09:92:a5:42:72:26: 0c:aa:9b:28:68:19:e5:55:08:86:d9:b4:2b:84:ec:d9:f9:38: 32:de:63:d7:96:91:3a:4b:b8:6d:73:e0:df:f4:b5:fc:26:38: 6c:00:92:45:06:29:d7:62:65:82:08:76:54:10:40:c7:8e:fa: 70:74:c9:f9:12:d3:55:40:50:d3:6d:dc:fc:7a:f9:44:d6:61: 72:59:ef:0d:0e:87:00:f2:a6:17:75:20:2f:f5:a7:3b:62:fa: b6:79:bc:3a:ff:88:d3:0f:b8:f3:6d:45:c7:c5:96:a1:96:83: d6:ac:6a:91:59:77:2f:fc:ac:1f:7f:7a:19:45:ce:ee:e0:3e: e3:1f:e6:3e:c1:09:e4:d6:5f:3d:de:a5:68:43:19:e2:2b:0e: 50:aa:ad:23:61:02:26:ae:96:1d:18:c8:da:18:07:cb:b6:d5: b6:f5:a8:28:00:13:b1:f6:a8:0b:33:a7:db:4b:e6:c3:48:67: a8:a8:72:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc7daNUz5fT/V55ytTp7p1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUwNjA0MTUwMDU0WhcNMjUwNjA1MTUwMDU0WjAzMTEwLwYDVQQD EygxNjM1NDgwOWJlN2ZkMWQ3NDljMzI2MWUxMDI0ODA3YjZmYTZjYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvdfxQxAGMr7aqlooYdAkyA1xkGT p2CLc4R3JfBlImppcoTIeUWKaJuWikyLKOG9+BA8eT0Yq9/oc2yGii44uRfPqD8E 9yYjiVil2Bluc1GugnAfPNXodvn5ztH5scGwaE1fxgWmHfNZ/1ysku4Ar+RgBbM9 L0PCJnjuuSstjG/K/Mjvfianr7smdTSNbM8ANm8U9Hmd9g0TUsOueoKtEkhcqHP9 SyccDAOeQSAtOgTK9gyNL7jZkjQbDWDPzODXGETA8gw7eM1S2tZm3zeU9W/ZgOxX owl0cmKcnIUG5arVo/zGqv98LL/K9d6CYjJ2ieQJVGWLIs0uX+D0N5/yfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY1SAm+f9HXScMmHhAkgHtvpsw0MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCGR6lym DBSBQRYNPNwe1Z6lmVwR0BwEYmhBnesTuqGa/PJGb2Sit6eZRh+5dr0njq+f168/ vANpI2xJ2vG4alWkCZKlQnImDKqbKGgZ5VUIhtm0K4Ts2fk4Mt5j15aROku4bXPg 3/S1/CY4bACSRQYp12Jlggh2VBBAx476cHTJ+RLTVUBQ023c/Hr5RNZhclnvDQ6H APKmF3UgL/WnO2L6tnm8Ov+I0w+4821Fx8WWoZaD1qxqkVl3L/ysH396GUXO7uA+ 4x/mPsEJ5NZfPd6laEMZ4isOUKqtI2ECJq6WHRjI2hgHy7bVtvWoKAATsfaoCzOn 20vmw0hnqKhy2Q== -----END CERTIFICATE-----Generated at Wed Jun 4 22:54:50 2025 by rpki-client