$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft File: NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json) Hash identifier: 3Zwb4GsNd6GREpvu7rVG6DNfWMqGKXxY5SNlHTksf9s= Subject key identifier: 37:66:48:84:C4:CE:7E:3C:C0:C5:31:25:03:1A:BD:06:D3:57:5C:E5 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 0196022F059EF4828A01CF22A428D0693921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft Manifest number: 1643 Signing time: Fri 04 Apr 2025 19:02:38 +0000 Manifest this update: Fri 04 Apr 2025 19:02:38 +0000 Manifest next update: Sat 05 Apr 2025 19:02:38 +0000 Files and hashes: 1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=) 2: 2mR5XJM5LrYDZGVcubbLp9z9mZY.roa (hash: EuQxIpZO0qFCZhL2ClxvLOJhKQDZsHqs5wudD54Am90=) 3: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=) 4: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=) 5: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=) 6: BY7zogmO24IEG5UVppQeS6Gd5vE.roa (hash: p8kUsZQCJoolGFVcidzfKv54az7wkfAAI5567t8FEGQ=) 7: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=) 8: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=) 9: ID4trGdaWKJu5BbNXALaxIjZ31k.roa (hash: Pkv6z01q9dvGXVnFDwkYMbgGkDFgHerMyDhgKR/xJeg=) 10: In6HHlbOKgo-tBtDKsZPQTlArGs.roa (hash: CFnMXJRMI0xcGsbclTIgiHmpFuGQYTKvMSrP+u/dCV4=) 11: JUEJ1bnTf0kwNpf0XsZJp2QsJAo.roa (hash: VZTjh3lQnDMpevPygqIRVRGJtopvsnGmz6ycKHPoHw8=) 12: MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa (hash: 2cRjKiLLq409oV3H3w03WuAOBjBM+sqVFpy4OKfY030=) 13: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: trlrnIlbZas/LPHUj/zlvBo9GDlYRtVI2JhEbqgDc6Y=) 14: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=) 15: ObZzYN2E0kdZNeSLF4XNFHQWZK0.roa (hash: 85PbvghxphTHomH9hrjntHu2TbF8oiO3c8zwpKmiEd4=) 16: PE7M_PNES4VfYrOezPHtsiJVIgw.roa (hash: cIU86lSCql3IPuDO8lVSwh1Ibw7DhdUEMPDGwtFRQDw=) 17: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=) 18: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=) 19: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=) 20: UslAMNDGH2di8acO0CKRyggNeYw.roa (hash: Is2XzIL1X5KivLoJ0suQcLDIhE0bjKUklpVRev/W/oI=) 21: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=) 22: XQShfPP8T7NpXfHF3bR3ZAaS_7E.roa (hash: xjzNWhe5FpZ13zIe4c3zk/xvRI8dLOaIlu7Ow5qH8uo=) 23: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=) 24: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=) 25: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=) 26: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=) 27: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=) 28: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=) 29: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=) 30: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=) 31: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=) 32: o-h2A957dlcPkUpwvfVIlQ19QGk.roa (hash: TLWzVDizEQzpjZ25+tu4lXknyJozTbrV/Wbt2G8zyy8=) 33: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=) 34: pAOdgvf-88bUESvFBoyLLnRj2oM.roa (hash: unjJHwtKYlvTaRdGwafd8E56bsSmlQmKJExK/izsPzk=) 35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=) 36: uCyH2-fPRpFibOOxTNl7u6CXQas.roa (hash: tlDsieQUw597/PTZ8W1911q4kuRCKAdlDdwHG1Otktc=) 37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=) 38: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=) 39: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:2f:05:9e:f4:82:8a:01:cf:22:a4:28:d0:69:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Apr 4 19:02:38 2025 GMT Not After : Apr 5 19:02:38 2025 GMT Subject: CN=37664884c4ce7e3cc0c53125031abd06d3575ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:a7:37:95:ad:f5:7f:f4:c3:01:cb:81:ff: 83:da:8e:5b:73:3a:29:25:6c:fb:9e:37:0a:b5:bf: 74:cb:69:78:14:a5:93:7e:2c:a9:d1:9a:36:27:5d: db:4a:ca:0e:e6:18:50:3f:35:26:e4:ba:70:6b:d5: 5d:71:61:3a:98:c9:f6:da:8c:e1:a2:ea:84:72:4b: 3c:a1:d5:00:8f:86:6b:fa:7f:fa:83:65:3c:2d:41: c4:18:7d:d7:f3:8c:b0:1f:72:73:36:74:94:97:57: 72:1e:55:6f:3a:c5:aa:65:30:ff:e8:17:5c:8c:4a: 65:eb:00:9e:a7:cf:7b:3c:0c:88:c7:8e:25:11:b7: da:fc:3a:5d:8a:37:8f:68:48:12:a3:2c:89:28:5e: bd:55:21:f5:83:8d:6a:8c:78:62:90:50:8c:89:91: a0:e0:2a:79:31:4e:6a:61:ef:c9:91:e4:f6:5d:46: d2:ff:3e:a1:66:a5:50:f0:80:ac:60:87:74:9c:33: 76:3d:62:c6:4f:b8:0c:92:c8:4d:1b:cd:e1:48:70: 8d:a4:13:1d:48:1a:4c:bd:a2:3a:41:30:fd:fa:0a: 7b:b4:df:84:e7:59:10:9d:6b:7a:b2:dd:78:26:5e: 78:19:07:ef:ec:27:74:a1:fd:c2:2c:65:65:6e:ab: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:66:48:84:C4:CE:7E:3C:C0:C5:31:25:03:1A:BD:06:D3:57:5C:E5 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:81:1c:48:b6:20:f9:05:b7:4d:7b:e0:19:ee:2e:fd:60:64: 19:9e:01:f0:7d:eb:6e:59:e3:4b:3a:7a:07:63:1e:18:4c:87: a2:8b:59:77:b6:1d:b6:be:00:10:4e:95:75:b3:ad:c7:17:46: 84:6b:c5:71:ae:07:ae:aa:47:ad:d3:33:58:1a:c6:95:52:fd: b9:35:a2:10:34:e4:de:6a:21:f6:54:46:04:f6:0f:aa:12:85: 94:1a:ff:5e:61:1e:96:4f:fd:71:49:29:f3:d3:13:9b:1e:af: 00:2c:84:54:75:f3:47:c7:8b:98:ae:ee:42:58:b7:2e:2f:4f: 1d:f8:bf:1c:80:3d:ec:04:c7:85:03:17:4d:67:63:44:bb:46: a1:7f:ce:23:38:92:ba:ed:6c:77:1b:56:cf:9d:de:20:d0:8e: 53:0d:61:a3:07:db:09:47:29:d5:04:44:bf:d4:3b:7f:54:22: b5:68:4f:a3:2a:1e:1d:22:06:a2:38:f8:6e:dc:91:c9:b0:f3: fc:b5:88:33:47:e0:fe:fa:37:19:99:fe:4d:af:93:17:8a:60: 35:15:c4:05:ca:97:2e:8d:bd:fc:00:30:de:be:d0:ed:01:b7: ca:4c:96:28:c6:da:81:0b:14:a5:ab:ed:7c:dd:e6:a3:05:9c: 81:bb:43:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYCLwWe9IKKAc8ipCjQaTkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjUwNDA0MTkwMjM4WhcNMjUwNDA1MTkwMjM4WjAzMTEwLwYDVQQD EygzNzY2NDg4NGM0Y2U3ZTNjYzBjNTMxMjUwMzFhYmQwNmQzNTc1Y2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4enN5Wt9X/0wwHLgf+D2o5bczop JWz7njcKtb90y2l4FKWTfiyp0Zo2J13bSsoO5hhQPzUm5Lpwa9VdcWE6mMn22ozh ouqEcks8odUAj4Zr+n/6g2U8LUHEGH3X84ywH3JzNnSUl1dyHlVvOsWqZTD/6Bdc jEpl6wCep897PAyIx44lEbfa/DpdijePaEgSoyyJKF69VSH1g41qjHhikFCMiZGg 4Cp5MU5qYe/JkeT2XUbS/z6hZqVQ8ICsYId0nDN2PWLGT7gMkshNG83hSHCNpBMd SBpMvaI6QTD9+gp7tN+E51kQnWt6st14Jl54GQfv7Cd0of3CLGVlbqsrUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdmSITEzn48wMUxJQMavQbTV1zlMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYEcSLYg +QW3TXvgGe4u/WBkGZ4B8H3rblnjSzp6B2MeGEyHootZd7Ydtr4AEE6VdbOtxxdG hGvFca4HrqpHrdMzWBrGlVL9uTWiEDTk3moh9lRGBPYPqhKFlBr/XmEelk/9cUkp 89MTmx6vACyEVHXzR8eLmK7uQli3Li9PHfi/HIA97ATHhQMXTWdjRLtGoX/OIziS uu1sdxtWz53eINCOUw1howfbCUcp1QREv9Q7f1QitWhPoyoeHSIGojj4btyRybDz /LWIM0fg/vo3GZn+Ta+TF4pgNRXEBcqXLo29/AAw3r7Q7QG3ykyWKMbagQsUpavt fN3mowWcgbtDPg== -----END CERTIFICATE-----Generated at Sat Apr 5 00:05:13 2025 by rpki-client