$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: VLnj0uhNe792Ih+AiMhPQd1kN1yK6azW5ID5D/MwlpY= Subject key identifier: 95:9D:C8:FD:59:3A:14:AF:69:F8:27:B4:4A:15:3B:39:97:F3:1F:33 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019745C2467906255EF2CFEFCDB70A841F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1571 Signing time: Fri 06 Jun 2025 15:00:49 +0000 Manifest this update: Fri 06 Jun 2025 15:00:49 +0000 Manifest next update: Sat 07 Jun 2025 15:00:49 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: eoTrhqSW6yl4G8Iu4Tb9WM23e44MoQJaFDST55qVNhg=) 9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 11: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 12: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 13: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 14: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 15: lzfdj3sYjKwxJ-lEm4PMRG_z-x0.roa (hash: k0S/RTqMQtMqoYVsegJF/SGrW/zlHJLMymOnkkPiIpo=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:c2:46:79:06:25:5e:f2:cf:ef:cd:b7:0a:84:1f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jun 6 15:00:49 2025 GMT Not After : Jun 7 15:00:49 2025 GMT Subject: CN=959dc8fd593a14af69f827b44a153b3997f31f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:30:d4:24:f9:13:6a:8a:46:61:54:86:47:5c: 7c:92:79:84:db:f4:fd:82:31:05:41:b2:64:ce:9b: e3:85:cc:7d:e8:aa:e5:35:3d:9f:7e:e3:09:75:20: 7b:57:8d:29:1b:6d:6d:b1:1f:23:5d:fe:ed:a7:0f: 87:6f:0c:f9:0b:bb:36:34:0e:53:3f:40:f1:5c:80: 11:3b:27:bf:57:a7:8d:a3:e9:c6:ff:fd:44:ed:70: 42:3f:e9:0a:cf:c5:14:4f:36:01:2a:b8:e1:ea:82: 36:8e:25:20:11:dd:f3:7c:ee:09:27:36:9e:f9:80: bc:20:64:98:73:c6:d7:16:71:f0:b1:9f:2a:9c:41: a3:f0:7b:8c:7b:33:a5:6f:c7:01:3c:c4:b7:1c:af: 5c:bb:09:05:97:47:ae:5d:03:1a:96:2d:86:7b:68: 56:9c:46:fc:e0:fd:01:e2:49:62:9d:14:15:af:27: ec:00:6f:48:bc:5e:4c:21:22:e8:70:31:61:c0:fb: 48:2f:bb:ad:d7:af:75:f6:34:56:3b:ef:da:ec:d5: 76:b8:71:56:48:7f:a4:93:93:d2:8d:43:f9:cd:60: 15:7e:6d:22:fb:dd:43:ca:6b:50:7a:59:f8:c9:d9: f5:9d:51:f0:d4:33:49:a3:c9:ea:4e:ab:b6:84:51: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:C8:FD:59:3A:14:AF:69:F8:27:B4:4A:15:3B:39:97:F3:1F:33 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:75:3e:17:48:61:8f:e3:f3:91:43:2c:7d:45:59:0d:38:2b: 58:e3:43:d3:bc:e3:e7:81:f0:79:aa:60:8c:96:35:e2:db:2c: e2:f2:2d:c0:4c:5a:47:61:db:8f:fe:ae:86:24:32:5a:42:78: f9:9d:f3:92:e2:ff:e5:99:c8:13:56:05:24:c1:fb:5d:df:c5: 21:21:43:dc:d3:63:5e:2f:e4:8b:1b:48:00:c9:87:19:2b:a1: 92:ef:3f:09:f7:9a:18:bb:27:cb:3b:61:22:bf:47:02:c6:dd: 04:bb:30:f9:fe:30:74:70:5d:e3:b6:b8:98:4c:3e:46:d6:aa: 84:fe:6d:f0:2e:72:49:e0:b7:7d:fd:d7:6e:9b:b2:52:42:49: 38:74:e1:ee:c9:b8:86:64:19:ff:ba:19:a9:01:7b:b3:bf:1e: d7:b5:89:a6:36:32:63:87:fa:c8:bc:bb:dd:bf:55:a4:39:ae: 01:c0:a9:2a:9c:19:e8:cb:82:99:2c:70:35:7d:d4:29:7e:bd: f8:4b:41:7d:d9:e1:36:09:29:a9:bc:35:63:14:bd:41:87:6a: a4:24:fd:bf:a7:09:e5:97:88:74:27:3d:83:96:b9:c0:8c:f4: 17:ef:68:90:8b:a7:10:8a:00:d8:8c:02:e5:e2:5e:d1:2f:6e: eb:18:92:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdFwkZ5BiVe8s/vzbcKhB8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwNjA2MTUwMDQ5WhcNMjUwNjA3MTUwMDQ5WjAzMTEwLwYDVQQD Eyg5NTlkYzhmZDU5M2ExNGFmNjlmODI3YjQ0YTE1M2IzOTk3ZjMxZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzDUJPkTaopGYVSGR1x8knmE2/T9 gjEFQbJkzpvjhcx96KrlNT2ffuMJdSB7V40pG21tsR8jXf7tpw+Hbwz5C7s2NA5T P0DxXIAROye/V6eNo+nG//1E7XBCP+kKz8UUTzYBKrjh6oI2jiUgEd3zfO4JJzae +YC8IGSYc8bXFnHwsZ8qnEGj8HuMezOlb8cBPMS3HK9cuwkFl0euXQMali2Ge2hW nEb84P0B4klinRQVryfsAG9IvF5MISLocDFhwPtIL7ut16919jRWO+/a7NV2uHFW SH+kk5PSjUP5zWAVfm0i+91DymtQeln4ydn1nVHw1DNJo8nqTqu2hFF/GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWdyP1ZOhSvafgntEoVOzmX8x8zMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3U+F0hh j+PzkUMsfUVZDTgrWOND07zj54HweapgjJY14tss4vItwExaR2Hbj/6uhiQyWkJ4 +Z3zkuL/5ZnIE1YFJMH7Xd/FISFD3NNjXi/kixtIAMmHGSuhku8/CfeaGLsnyzth Ir9HAsbdBLsw+f4wdHBd47a4mEw+RtaqhP5t8C5ySeC3ff3XbpuyUkJJOHTh7sm4 hmQZ/7oZqQF7s78e17WJpjYyY4f6yLy73b9VpDmuAcCpKpwZ6MuCmSxwNX3UKX69 +EtBfdnhNgkpqbw1YxS9QYdqpCT9v6cJ5ZeIdCc9g5a5wIz0F+9okIunEIoA2IwC 5eJe0S9u6xiS7Q== -----END CERTIFICATE-----Generated at Sat Jun 7 01:12:57 2025 by rpki-client