$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: 3Pdi2/zluM6s400srPscT/7mtwHQFejAZMrYWDQyCxA= Subject key identifier: 87:06:F4:E3:B0:30:D1:90:5B:9F:A1:F0:71:00:14:16:AE:80:B4:0F Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 0197500ECB3A9785B0093D128263A9E4A645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 1590 Signing time: Sun 08 Jun 2025 15:00:36 +0000 Manifest this update: Sun 08 Jun 2025 15:00:36 +0000 Manifest next update: Mon 09 Jun 2025 15:00:36 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: EMicvUyVDymJ0NOazNRbOtCiGUvMP8HfHcAJqr+DoIA=) 7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=) 10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Jun 2025 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:50:0e:cb:3a:97:85:b0:09:3d:12:82:63:a9:e4:a6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jun 8 15:00:36 2025 GMT Not After : Jun 9 15:00:36 2025 GMT Subject: CN=8706f4e3b030d1905b9fa1f071001416ae80b40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e3:88:90:e1:e1:b3:f5:8a:f7:f4:c5:22:62: 69:f6:b8:69:98:f9:ce:03:9f:49:f3:9f:8a:07:b9: 5c:7d:6b:a5:8d:a4:cb:8b:ff:ee:22:c9:b1:5c:56: 5a:44:26:55:cb:96:bb:66:2c:ac:a8:d7:3b:44:c3: ab:14:6b:28:5f:2b:3e:e3:1a:97:28:f1:ac:cd:af: a4:f4:a0:0e:42:33:ae:82:d7:6f:a3:9f:68:6c:32: 95:4a:41:9a:4e:dc:21:09:2c:c2:bf:1b:69:4b:4a: 12:b8:89:c3:9f:0a:69:3f:4d:4a:8f:60:20:5f:db: 45:43:73:3d:b6:dd:92:34:45:10:ea:a0:92:f0:3f: 8a:b2:f5:26:da:68:dc:89:f1:22:e4:7a:1b:e2:85: 72:7d:23:0e:39:04:00:8c:89:7d:6b:3e:7d:3f:76: 1f:4c:f9:51:3e:88:05:28:26:1c:e6:7a:cd:b4:ae: de:90:12:8e:42:b1:68:35:9c:02:6d:5c:4d:8e:cf: 62:09:a5:a6:b1:45:68:db:44:83:dd:71:d1:63:14: d6:fd:87:7d:81:d5:0a:15:c0:b8:38:ad:59:db:3a: ce:29:b5:dc:89:39:f9:ee:ab:38:d9:51:b3:0b:45: d1:33:b6:42:a7:35:5a:3a:18:ff:33:cf:df:51:f2: ef:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:06:F4:E3:B0:30:D1:90:5B:9F:A1:F0:71:00:14:16:AE:80:B4:0F X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:53:6c:46:12:e7:f6:bd:a5:dc:80:ab:19:1f:45:3c:d5:e8: 81:96:40:d3:36:2e:12:9d:e4:37:b2:a1:58:f0:a8:cf:71:6d: 0a:8e:73:4f:7f:d6:eb:f5:82:cc:b0:14:62:d1:58:89:82:ee: c4:38:85:79:4a:08:be:c5:18:15:78:b6:bb:24:23:30:98:01: 99:69:d4:4b:02:15:3e:4e:20:56:d3:b2:d2:b4:a8:6b:7f:9c: 2d:39:e9:ea:b9:f0:cf:08:9a:16:a6:73:b1:dc:a1:eb:59:f1: b1:70:42:ae:f9:ec:e6:7f:44:bc:a9:a6:01:b9:7d:62:e2:d4: c5:92:9c:87:b1:37:66:29:32:42:e4:16:eb:6f:78:84:27:80: b7:f6:75:17:54:05:78:b3:79:3a:2d:4f:5c:fc:71:f9:f5:ca: b9:5d:61:33:c4:b9:44:eb:a4:27:a2:92:4f:c9:71:93:b1:60: f5:00:67:8e:17:04:da:8a:4a:a7:b7:d2:cb:fd:52:a5:2e:99: ce:1a:f8:cb:24:15:8b:4d:60:6b:6f:73:6f:4c:0a:db:06:a5: 5e:2a:b0:bf:6b:a7:ce:22:cc:cc:98:c1:02:a3:1a:e2:94:d4: 81:6b:43:e0:bf:84:12:36:bf:95:44:60:88:db:8e:8f:eb:7d: f9:1c:04:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdQDss6l4WwCT0SgmOp5KZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUwNjA4MTUwMDM2WhcNMjUwNjA5MTUwMDM2WjAzMTEwLwYDVQQD Eyg4NzA2ZjRlM2IwMzBkMTkwNWI5ZmExZjA3MTAwMTQxNmFlODBiNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OOIkOHhs/WK9/TFImJp9rhpmPnO A59J85+KB7lcfWuljaTLi//uIsmxXFZaRCZVy5a7ZiysqNc7RMOrFGsoXys+4xqX KPGsza+k9KAOQjOugtdvo59obDKVSkGaTtwhCSzCvxtpS0oSuInDnwppP01Kj2Ag X9tFQ3M9tt2SNEUQ6qCS8D+KsvUm2mjcifEi5Hob4oVyfSMOOQQAjIl9az59P3Yf TPlRPogFKCYc5nrNtK7ekBKOQrFoNZwCbVxNjs9iCaWmsUVo20SD3XHRYxTW/Yd9 gdUKFcC4OK1Z2zrOKbXciTn57qs42VGzC0XRM7ZCpzVaOhj/M8/fUfLvcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcG9OOwMNGQW5+h8HEAFBaugLQPMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1NsRhLn 9r2l3ICrGR9FPNXogZZA0zYuEp3kN7KhWPCoz3FtCo5zT3/W6/WCzLAUYtFYiYLu xDiFeUoIvsUYFXi2uyQjMJgBmWnUSwIVPk4gVtOy0rSoa3+cLTnp6rnwzwiaFqZz sdyh61nxsXBCrvns5n9EvKmmAbl9YuLUxZKch7E3ZikyQuQW6294hCeAt/Z1F1QF eLN5Oi1PXPxx+fXKuV1hM8S5ROukJ6KST8lxk7Fg9QBnjhcE2opKp7fSy/1SpS6Z zhr4yyQVi01ga29zb0wK2walXiqwv2unziLMzJjBAqMa4pTUgWtD4L+EEja/lURg iNuOj+t9+RwE+A== -----END CERTIFICATE-----Generated at Sun Jun 8 23:29:35 2025 by rpki-client