$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: fIE6PjXE8aAgdfJbIiCp2fsMouYSGlJzODnrZOsrZnQ= Subject key identifier: F8:73:17:26:15:BF:4C:F8:DF:4D:FF:6C:0A:86:E7:31:2C:62:13:2B Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 01963F1DEC10D456EAF93176CAB51CC9B3F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 14E9 Signing time: Wed 16 Apr 2025 15:00:47 +0000 Manifest this update: Wed 16 Apr 2025 15:00:47 +0000 Manifest next update: Thu 17 Apr 2025 15:00:47 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: XjB6QFLIVbw1YZWx7gcUMhYQQmXsGWgFejlFch+5QxA=) 9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 11: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 12: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 13: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 14: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 15: lzfdj3sYjKwxJ-lEm4PMRG_z-x0.roa (hash: k0S/RTqMQtMqoYVsegJF/SGrW/zlHJLMymOnkkPiIpo=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 13:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3f:1d:ec:10:d4:56:ea:f9:31:76:ca:b5:1c:c9:b3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Apr 16 15:00:47 2025 GMT Not After : Apr 17 15:00:47 2025 GMT Subject: CN=f873172615bf4cf8df4dff6c0a86e7312c62132b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:3f:5c:0d:a4:d7:58:fb:32:23:38:cf:e9: 0d:bf:39:01:51:88:37:21:33:df:cf:c5:ca:fe:aa: 59:12:4e:50:1a:be:f6:bf:9a:da:fc:75:d5:87:24: fe:d5:94:49:95:5f:44:04:fb:9b:db:8a:07:88:82: fe:97:02:ea:1d:92:f8:b6:11:9a:b4:f8:ac:0c:f2: b1:54:59:14:ff:eb:1f:a1:a8:74:80:86:70:6b:09: 18:4c:61:92:2a:91:8c:7d:fa:9f:1d:b3:ca:48:b4: c8:cb:98:83:fb:6e:9b:83:be:08:c9:0b:9e:d0:e4: 35:0a:c7:4e:a9:6f:c1:2b:a7:fb:b7:d1:7d:e7:e3: ae:67:fd:a2:cb:13:8c:15:2c:a0:5f:bf:c0:f3:72: b6:93:14:64:09:97:49:76:06:12:85:0f:50:4f:1e: d0:3b:a1:6d:c0:fb:2f:51:54:37:e1:77:cb:f3:83: d6:c7:57:f1:f4:c1:34:79:32:65:6f:9c:8c:1c:4d: 5a:2e:16:93:3b:90:ba:43:09:a5:2b:b7:80:25:21: e9:ee:f9:3f:f5:64:1c:a9:ba:4e:62:7f:2c:e2:fb: c2:4a:89:a5:41:f0:5e:11:4e:43:50:8b:fb:19:11: ad:9e:0c:cf:b7:76:29:27:33:c2:41:d1:f7:3f:2f: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:73:17:26:15:BF:4C:F8:DF:4D:FF:6C:0A:86:E7:31:2C:62:13:2B X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e3:80:9f:fa:03:b1:4f:43:a7:32:87:3e:49:d1:c2:04:b3: ad:05:89:3b:62:61:e1:f7:15:4e:4a:cc:70:2c:6a:69:f6:04: 96:34:52:41:60:96:dc:95:2d:87:3b:29:33:1e:64:bf:9a:4e: ac:1f:3c:df:f8:4d:2e:bc:4c:a4:ae:00:2f:6b:3b:28:99:3c: a9:0f:23:cf:5c:c6:ed:d5:59:92:1d:28:6b:73:95:c4:31:8d: 40:43:b5:24:d5:01:c3:32:ad:cc:2c:32:09:71:a0:98:b5:a5: 47:01:f9:82:d1:1b:08:bf:c3:a1:fc:12:3d:12:be:f8:b7:d4: 4b:22:7b:09:64:dc:5b:bb:23:b4:97:62:3b:12:32:af:52:21: e7:08:4f:04:d0:ff:00:d8:76:1e:e1:f3:d6:fc:67:c7:1d:f0: 6e:cd:84:f4:ad:01:31:03:4d:ad:ac:88:8f:04:36:1c:e8:08: b6:55:dd:e9:3f:33:4c:f0:ca:37:33:ca:69:fc:db:aa:b4:47: 4d:d3:2c:1e:90:af:15:c4:ab:9f:45:a2:65:1e:ce:94:96:5d: bb:0b:68:c9:82:9f:32:48:d0:1c:37:2d:2d:a9:5d:30:5a:08: 98:a4:64:61:d5:ba:3a:93:fe:4b:5b:8d:50:c1:7f:82:21:1d: 6f:0e:7b:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY/HewQ1Fbq+TF2yrUcybPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwNDE2MTUwMDQ3WhcNMjUwNDE3MTUwMDQ3WjAzMTEwLwYDVQQD EyhmODczMTcyNjE1YmY0Y2Y4ZGY0ZGZmNmMwYTg2ZTczMTJjNjIxMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOk/XA2k11j7MiM4z+kNvzkBUYg3 ITPfz8XK/qpZEk5QGr72v5ra/HXVhyT+1ZRJlV9EBPub24oHiIL+lwLqHZL4thGa tPisDPKxVFkU/+sfoah0gIZwawkYTGGSKpGMffqfHbPKSLTIy5iD+26bg74IyQue 0OQ1CsdOqW/BK6f7t9F95+OuZ/2iyxOMFSygX7/A83K2kxRkCZdJdgYShQ9QTx7Q O6FtwPsvUVQ34XfL84PWx1fx9ME0eTJlb5yMHE1aLhaTO5C6QwmlK7eAJSHp7vk/ 9WQcqbpOYn8s4vvCSomlQfBeEU5DUIv7GRGtngzPt3YpJzPCQdH3Py++kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhzFyYVv0z4303/bAqG5zEsYhMrMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+OAn/oD sU9DpzKHPknRwgSzrQWJO2Jh4fcVTkrMcCxqafYEljRSQWCW3JUthzspMx5kv5pO rB883/hNLrxMpK4AL2s7KJk8qQ8jz1zG7dVZkh0oa3OVxDGNQEO1JNUBwzKtzCwy CXGgmLWlRwH5gtEbCL/DofwSPRK++LfUSyJ7CWTcW7sjtJdiOxIyr1Ih5whPBND/ ANh2HuHz1vxnxx3wbs2E9K0BMQNNrayIjwQ2HOgItlXd6T8zTPDKNzPKafzbqrRH TdMsHpCvFcSrn0WiZR7OlJZduwtoyYKfMkjQHDctLaldMFoImKRkYdW6OpP+S1uN UMF/giEdbw57Kw== -----END CERTIFICATE-----Generated at Thu Apr 17 01:12:43 2025 by rpki-client