$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: BHZ5RQlE4j60YQwGJUZhgvQgN1ZmyWDviT5aX50YF60= Subject key identifier: BA:E0:0B:AC:EF:62:8B:EF:30:01:D4:97:48:3B:5D:B6:E3:2F:38:29 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 01992EC7AFEBCC29119D6EF095C75D2576AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 166F Signing time: Tue 09 Sep 2025 14:01:02 +0000 Manifest this update: Tue 09 Sep 2025 14:01:02 +0000 Manifest next update: Wed 10 Sep 2025 14:01:02 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: jAlUnVcKUEdnzY1sRHngYLb5Xl5uV7EFE+MYppvxZrE=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2e:c7:af:eb:cc:29:11:9d:6e:f0:95:c7:5d:25:76:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Sep 9 14:01:02 2025 GMT Not After : Sep 10 14:01:02 2025 GMT Subject: CN=bae00bacef628bef3001d497483b5db6e32f3829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:71:68:bb:0b:58:01:bb:d2:6a:de:4e:e7:ee: 9c:a3:44:e4:bd:ee:29:11:08:4b:2d:74:42:07:3a: d2:14:a9:c9:4b:18:e2:e7:af:4c:7e:e8:69:5a:0b: 5f:5d:3d:b0:91:0e:a8:79:5a:3b:54:f6:f7:3b:30: 20:82:a1:ae:ae:a9:8f:93:a8:33:60:3e:ea:7e:03: 28:68:82:b7:8d:44:d0:a0:d0:a7:e2:71:44:15:73: 21:70:7f:e9:bb:9f:2c:50:6d:ae:fb:7f:01:91:b7: 8d:5a:25:13:b3:05:de:61:2d:ed:c9:1c:ef:a1:19: aa:6d:3b:75:b9:b1:45:d7:28:66:f6:76:e0:6d:a4: 8b:54:4d:68:c4:b2:72:f8:04:95:e2:8e:e4:ec:3f: bd:0b:3a:4e:fe:c2:7d:f7:ba:38:70:47:04:87:64: b9:5e:b2:32:55:b6:19:f5:41:29:66:00:ee:35:8d: f9:f0:14:b3:90:73:7d:e6:8f:af:89:9c:d7:62:22: 91:5e:d4:b2:0c:21:82:ac:75:09:4b:ec:5b:ba:da: 92:e7:fd:04:39:cc:42:d2:25:9e:cb:2a:dc:72:42: 4b:70:a2:a9:2c:8f:67:93:68:0f:ca:f8:01:98:3c: aa:75:54:a8:cf:bb:21:96:54:ff:8c:01:37:3e:57: 5b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E0:0B:AC:EF:62:8B:EF:30:01:D4:97:48:3B:5D:B6:E3:2F:38:29 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f4:df:b3:2b:a9:f0:17:84:ab:49:b2:aa:c4:b0:f6:c2:0d: c4:95:18:7a:39:75:2a:f0:32:f7:4c:de:a4:53:68:70:47:7f: 25:b6:af:e7:67:81:50:03:57:33:01:2a:89:0f:ea:27:0a:fa: f5:36:f8:18:26:b2:e3:ad:f7:8a:1f:76:b1:53:62:c6:68:81: 7b:7f:12:c8:57:38:31:41:13:14:c1:55:0d:e1:85:e1:67:e6: 7f:ad:07:b1:0f:0d:9a:0a:2c:bd:c6:2b:26:c0:69:33:1d:80: 44:a3:aa:c8:40:5a:29:73:9e:87:21:ab:84:49:88:12:6a:85: 29:b4:18:b3:d1:7c:7b:7e:2e:7e:5e:9a:f9:f9:f9:57:61:85: 03:03:80:7e:67:af:ae:42:5b:33:8a:b3:c2:3e:a2:d9:19:a2: 97:c8:7a:a7:5a:e7:63:24:a1:96:7c:dd:ec:eb:48:df:bf:d0: 6d:f3:04:f9:e8:ea:f9:1b:15:5b:d2:92:c1:c7:05:7b:06:01: 03:71:9b:6f:f6:cf:92:50:f1:9f:1f:65:34:d1:db:d0:18:9a: f5:3a:f2:5a:6b:25:70:40:eb:4c:38:a7:d0:e7:06:9e:c3:cf: ea:a1:5a:af:bc:1c:3b:f3:55:20:c0:ca:13:77:9f:f6:9f:73: eb:97:d8:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkux6/rzCkRnW7wlcddJXauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwOTA5MTQwMTAyWhcNMjUwOTEwMTQwMTAyWjAzMTEwLwYDVQQD EyhiYWUwMGJhY2VmNjI4YmVmMzAwMWQ0OTc0ODNiNWRiNmUzMmYzODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HFouwtYAbvSat5O5+6co0Tkve4p EQhLLXRCBzrSFKnJSxji569MfuhpWgtfXT2wkQ6oeVo7VPb3OzAggqGurqmPk6gz YD7qfgMoaIK3jUTQoNCn4nFEFXMhcH/pu58sUG2u+38BkbeNWiUTswXeYS3tyRzv oRmqbTt1ubFF1yhm9nbgbaSLVE1oxLJy+ASV4o7k7D+9CzpO/sJ997o4cEcEh2S5 XrIyVbYZ9UEpZgDuNY358BSzkHN95o+viZzXYiKRXtSyDCGCrHUJS+xbutqS5/0E OcxC0iWeyyrcckJLcKKpLI9nk2gPyvgBmDyqdVSoz7shllT/jAE3PldbkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrgC6zvYovvMAHUl0g7XbbjLzgpMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvTfsyup 8BeEq0myqsSw9sINxJUYejl1KvAy90zepFNocEd/Jbav52eBUANXMwEqiQ/qJwr6 9Tb4GCay4633ih92sVNixmiBe38SyFc4MUETFMFVDeGF4Wfmf60HsQ8NmgosvcYr JsBpMx2ARKOqyEBaKXOehyGrhEmIEmqFKbQYs9F8e34ufl6a+fn5V2GFAwOAfmev rkJbM4qzwj6i2Rmil8h6p1rnYyShlnzd7OtI37/QbfME+ejq+RsVW9KSwccFewYB A3Gbb/bPklDxnx9lNNHb0Bia9TryWmslcEDrTDin0OcGnsPP6qFar7wcO/NVIMDK E3ef9p9z65fYNQ== -----END CERTIFICATE-----Generated at Tue Sep 9 22:54:06 2025 by rpki-client