$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: ZDmk0DqOzCg6OytAw+gclXm5IlVrDKwEqryjNHMEh04= Subject key identifier: F0:FA:8E:2C:58:D6:5C:1E:38:06:BF:98:A6:E9:E8:54:EF:15:73:24 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019622262C992AF25DD0B9CEAC49929D8F3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 14FB Signing time: Fri 11 Apr 2025 00:00:49 +0000 Manifest this update: Fri 11 Apr 2025 00:00:49 +0000 Manifest next update: Sat 12 Apr 2025 00:00:49 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 5: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 6: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: RMbLD1OETOwCvMFlACTQNi6Jb8C70HvdmqmHaBwJiYo=) 7: PkUBswB6akpRoaWoY8idhiZO-0s.roa (hash: FTb6NXOjB3gAzHYZQp3OqT2aASeT3Lw8OwXcNy1cX04=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: UDpK0uTH8ulfX-BRue_LxyYrybg.roa (hash: Dp6K5s4cXqR6PiC8AlLBrRSOz+xKT0xrh8fKR2pD1Ns=) 11: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 12: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 13: Zj-6KAkyK5-uOxBzRulIBx_nCWw.roa (hash: 07kNnjyW7/TR0U85g69HMNgyJGZyH9KrbGOnY6jiV8c=) 14: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 15: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 16: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 17: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 18: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 19: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Apr 2025 21:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:22:26:2c:99:2a:f2:5d:d0:b9:ce:ac:49:92:9d:8f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Apr 11 00:00:49 2025 GMT Not After : Apr 12 00:00:49 2025 GMT Subject: CN=f0fa8e2c58d65c1e3806bf98a6e9e854ef157324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:bf:da:11:9a:5a:21:e8:8a:f2:2c:86:91: 5b:08:87:dd:03:84:95:8a:49:79:c3:d7:d0:1f:89: 06:ea:9a:74:25:3c:4e:d8:e6:b3:ee:e0:be:af:c8: 98:7d:3b:62:b0:75:83:6f:4b:e5:a6:c4:fa:99:3a: 55:10:3a:c2:e7:b1:83:35:f5:ec:ae:cf:f1:39:46: 3c:d4:cc:38:d6:bb:e1:12:50:8a:6e:cd:02:db:37: 59:33:08:01:3a:70:fb:1a:e9:d0:69:39:11:23:6e: 85:c5:3f:f8:d7:5f:95:89:7b:bf:4b:14:97:bf:92: ff:4b:e9:43:ab:25:9f:00:2f:3f:0c:35:e8:20:82: a4:55:96:f1:2c:6c:2f:9b:a4:88:8c:4f:9f:34:93: 0c:15:18:6b:92:f8:1e:c7:a6:2a:62:b3:c3:4a:fd: 70:08:6a:d3:94:7e:e9:e8:1c:15:ab:c5:c1:d8:ad: 57:3a:2b:d7:c0:53:34:ea:be:6a:7f:09:19:d9:17: 01:0b:67:3f:e9:4d:13:33:91:68:93:8b:30:b2:3c: e8:08:49:60:5c:2a:ad:a2:0e:85:f3:f8:be:e4:60: d7:66:92:7e:9e:56:5f:41:38:5b:7a:c1:10:d8:47: 98:a3:a8:63:52:e0:71:9b:16:3b:8e:6e:79:5f:47: ca:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:8E:2C:58:D6:5C:1E:38:06:BF:98:A6:E9:E8:54:EF:15:73:24 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c4:7f:f6:3f:67:4c:ee:17:26:33:54:74:01:c1:bd:0b:97: 8a:67:67:7c:49:86:94:4f:d5:72:ad:81:d5:a5:57:37:13:a5: 86:b3:4f:66:57:c4:bc:1d:9e:a2:8f:c7:0a:85:b8:b5:d5:bf: 2a:7c:9f:9f:08:f2:70:e8:71:f9:5e:fb:b5:9e:3c:f4:d5:4d: a7:f6:91:d8:94:95:7a:bf:ad:53:8a:a9:b7:3c:5c:fe:72:66: 18:7e:83:80:c1:7b:f8:37:b3:2f:dd:9f:cf:e9:33:34:3e:f0: 1a:f1:8a:78:2d:6c:03:79:e0:77:b9:f3:79:2f:98:c5:37:19: 81:29:68:57:e7:0b:07:d0:e1:75:79:96:65:24:3d:8b:3c:90: 92:94:68:b5:36:40:b3:4d:ef:60:07:a0:70:80:4c:47:6b:af: 3e:40:c7:99:ef:09:0d:00:f4:48:85:32:a6:c2:68:92:af:9f: 73:c7:94:7a:81:bf:4c:db:b9:9d:79:dc:a1:8a:6c:97:ae:a6: 60:9d:aa:1a:d0:32:86:dd:c9:1f:7a:25:0d:36:db:a8:33:5b: ff:42:3d:72:07:b0:18:f1:1d:bb:f2:1d:f7:98:62:2b:c8:38: 77:e0:a9:b7:0b:d0:fe:b7:14:cd:21:14:cf:71:9d:6e:91:e9: 63:dd:83:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYiJiyZKvJd0LnOrEmSnY89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUwNDExMDAwMDQ5WhcNMjUwNDEyMDAwMDQ5WjAzMTEwLwYDVQQD EyhmMGZhOGUyYzU4ZDY1YzFlMzgwNmJmOThhNmU5ZTg1NGVmMTU3MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hC/2hGaWiHoivIshpFbCIfdA4SV ikl5w9fQH4kG6pp0JTxO2Oaz7uC+r8iYfTtisHWDb0vlpsT6mTpVEDrC57GDNfXs rs/xOUY81Mw41rvhElCKbs0C2zdZMwgBOnD7GunQaTkRI26FxT/411+ViXu/SxSX v5L/S+lDqyWfAC8/DDXoIIKkVZbxLGwvm6SIjE+fNJMMFRhrkvgex6YqYrPDSv1w CGrTlH7p6BwVq8XB2K1XOivXwFM06r5qfwkZ2RcBC2c/6U0TM5Fok4swsjzoCElg XCqtog6F8/i+5GDXZpJ+nlZfQThbesEQ2EeYo6hjUuBxmxY7jm55X0fKlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD6jixY1lweOAa/mKbp6FTvFXMkMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMR/9j9n TO4XJjNUdAHBvQuXimdnfEmGlE/Vcq2B1aVXNxOlhrNPZlfEvB2eoo/HCoW4tdW/ KnyfnwjycOhx+V77tZ489NVNp/aR2JSVer+tU4qptzxc/nJmGH6DgMF7+DezL92f z+kzND7wGvGKeC1sA3ngd7nzeS+YxTcZgSloV+cLB9DhdXmWZSQ9izyQkpRotTZA s03vYAegcIBMR2uvPkDHme8JDQD0SIUypsJokq+fc8eUeoG/TNu5nXncoYpsl66m YJ2qGtAyht3JH3olDTbbqDNb/0I9cgewGPEdu/Id95hiK8g4d+CptwvQ/rcUzSEU z3GdbpHpY92Diw== -----END CERTIFICATE-----Generated at Fri Apr 11 05:15:00 2025 by rpki-client