$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: V2hnTYXNn0RxYZhBi7I0YQNGi0xvMGvKWHHmh4Cyycc= Subject key identifier: 71:5E:5F:70:0A:C9:8F:CE:C2:06:EC:B8:B0:B3:22:27:74:CC:A1:D5 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 01950FEADB40A0E86833345CD76A7BBB8A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 144C Signing time: Sun 16 Feb 2025 18:00:04 +0000 Manifest this update: Sun 16 Feb 2025 18:00:04 +0000 Manifest next update: Mon 17 Feb 2025 18:00:04 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: 93AYgwR7TJpipIyJdT/adR/BLe7qHthnPaODIs00MjU=) 9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 11: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 12: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 13: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 14: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 15: lzfdj3sYjKwxJ-lEm4PMRG_z-x0.roa (hash: k0S/RTqMQtMqoYVsegJF/SGrW/zlHJLMymOnkkPiIpo=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:0f:ea:db:40:a0:e8:68:33:34:5c:d7:6a:7b:bb:8a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Feb 16 18:00:04 2025 GMT Not After : Feb 17 18:00:04 2025 GMT Subject: CN=715e5f700ac98fcec206ecb8b0b3222774cca1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:da:98:31:04:c0:7e:7a:92:67:71:bc:38: 3d:79:9d:c4:e9:0f:fe:ce:0b:2e:77:b2:6b:71:24: dd:15:71:4a:99:ef:d6:9b:c8:57:57:31:43:d8:34: 72:38:ba:80:fa:85:6b:d8:58:de:bf:1c:0d:0d:24: 38:a4:a8:a7:ff:9b:a2:88:c1:b1:31:5e:92:e0:42: c0:b0:7e:8c:0f:79:da:59:f1:b1:26:23:71:64:c4: f6:a6:04:6e:c8:87:fe:fd:7b:44:87:f4:f0:23:6d: 51:17:1b:05:e7:e1:26:15:a9:c3:ee:71:c3:d4:c7: 51:d3:60:53:eb:da:bd:e4:90:ec:57:62:77:67:db: 72:ac:86:a8:cc:74:b7:46:99:0f:fa:b8:e6:f5:81: 3a:35:7d:5d:87:33:ad:0e:45:4b:63:08:41:98:73: 64:e4:a8:80:f4:59:a9:0b:2f:44:23:9e:c7:47:9d: 8f:05:62:4e:a3:ae:04:75:c7:24:10:3c:ed:ee:80: 52:f7:e5:ce:c1:35:02:70:60:49:d0:dd:29:ba:f7: 63:aa:75:80:ee:f8:7a:ea:16:cd:90:ac:68:cd:79: 5a:07:2a:72:23:5e:0b:81:2b:31:99:28:25:07:5f: 5f:42:16:cd:cc:41:df:8b:cd:cf:78:eb:ff:3c:1d: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5E:5F:70:0A:C9:8F:CE:C2:06:EC:B8:B0:B3:22:27:74:CC:A1:D5 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2e:fc:96:04:5d:f0:54:83:70:7a:32:eb:02:20:cb:ea:cb: 06:c8:72:bf:9c:c5:d3:84:75:09:1a:da:37:4f:d6:cf:13:e1: 73:09:63:ef:0d:07:d4:e7:4b:88:af:c8:51:c9:0e:e4:91:73: 7c:8a:47:f8:67:7e:7d:5c:0d:90:62:6d:bf:66:7b:3b:8a:ab: 35:0e:ae:4a:78:c3:75:df:ea:00:89:4b:5d:4b:6b:a7:bb:e5: 30:a4:bd:b8:37:2a:0b:fe:d2:07:88:e8:4a:03:d8:94:d8:0a: 8d:a8:9c:3c:19:a0:cc:56:4b:97:3f:48:0e:8f:86:25:42:18: cd:0d:f3:68:28:11:c3:c2:19:fa:dc:ff:b2:a6:5b:7b:11:6d: fa:6c:4a:02:c1:b7:46:e4:83:9a:52:b9:b2:bb:01:ef:56:e9: 07:bb:f9:c1:50:98:db:b0:dd:a1:b7:97:22:0d:6b:9a:eb:39: b0:92:b9:41:c5:80:a5:d4:ec:61:f9:2d:63:b2:7c:79:2f:ac: b8:b3:e4:eb:e3:5d:2e:f9:94:99:b8:af:c7:22:93:fc:e6:68: ce:26:f6:97:eb:45:0b:9d:8f:31:4c:81:d4:0c:42:c6:2e:47: a3:2c:1f:2a:94:34:77:b3:9f:3d:e5:f2:5b:9b:71:b2:fc:47: 0a:ee:bd:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUP6ttAoOhoMzRc12p7u4p0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwMjE2MTgwMDA0WhcNMjUwMjE3MTgwMDA0WjAzMTEwLwYDVQQD Eyg3MTVlNWY3MDBhYzk4ZmNlYzIwNmVjYjhiMGIzMjIyNzc0Y2NhMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur7amDEEwH56kmdxvDg9eZ3E6Q/+ zgsud7JrcSTdFXFKme/Wm8hXVzFD2DRyOLqA+oVr2FjevxwNDSQ4pKin/5uiiMGx MV6S4ELAsH6MD3naWfGxJiNxZMT2pgRuyIf+/XtEh/TwI21RFxsF5+EmFanD7nHD 1MdR02BT69q95JDsV2J3Z9tyrIaozHS3RpkP+rjm9YE6NX1dhzOtDkVLYwhBmHNk 5KiA9FmpCy9EI57HR52PBWJOo64EdcckEDzt7oBS9+XOwTUCcGBJ0N0puvdjqnWA 7vh66hbNkKxozXlaBypyI14LgSsxmSglB19fQhbNzEHfi83PeOv/PB2DwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFeX3AKyY/OwgbsuLCzIid0zKHVMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy78lgRd 8FSDcHoy6wIgy+rLBshyv5zF04R1CRraN0/WzxPhcwlj7w0H1OdLiK/IUckO5JFz fIpH+Gd+fVwNkGJtv2Z7O4qrNQ6uSnjDdd/qAIlLXUtrp7vlMKS9uDcqC/7SB4jo SgPYlNgKjaicPBmgzFZLlz9IDo+GJUIYzQ3zaCgRw8IZ+tz/sqZbexFt+mxKAsG3 RuSDmlK5srsB71bpB7v5wVCY27DdobeXIg1rmus5sJK5QcWApdTsYfktY7J8eS+s uLPk6+NdLvmUmbivxyKT/OZozib2l+tFC52PMUyB1AxCxi5HoywfKpQ0d7OfPeXy W5txsvxHCu69wA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:11:10 2025 by rpki-client