$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: fU7n0OEEpxstYgDlud5AarcdZI20Jn1ZnNeK5F8NVGo= Subject key identifier: 72:1D:D6:77:00:BD:9B:B3:B3:F0:66:09:72:01:FE:2B:CD:E9:13:56 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 01974B8DA108E3D2F2B688C1FA325AAD4C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 159A Signing time: Sat 07 Jun 2025 18:01:02 +0000 Manifest this update: Sat 07 Jun 2025 18:01:02 +0000 Manifest next update: Sun 08 Jun 2025 18:01:02 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 5: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 6: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: j2c/Tg+/kh2M0TO0gDFkylYR8oajWRUOE2zdvreVzv8=) 7: PkUBswB6akpRoaWoY8idhiZO-0s.roa (hash: FTb6NXOjB3gAzHYZQp3OqT2aASeT3Lw8OwXcNy1cX04=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 12: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 13: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 14: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 15: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 16: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 17: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 18: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 19: u2jjT9a7gurHsCBuG6MLd36hk6U.roa (hash: 5ifFXhTaQ0rt9DDM8OyMYLPCzUHaKXbmifUQMc2oMtc=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=) 22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4b:8d:a1:08:e3:d2:f2:b6:88:c1:fa:32:5a:ad:4c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jun 7 18:01:02 2025 GMT Not After : Jun 8 18:01:02 2025 GMT Subject: CN=721dd67700bd9bb3b3f066097201fe2bcde91356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:66:07:bb:52:ae:bb:f3:06:49:b9:27:48: 7d:e6:72:d3:fb:59:73:5f:f1:81:6e:b4:27:22:4c: c4:c2:9d:df:15:b5:24:4d:bf:8e:4f:f1:40:7d:6c: 85:b2:4d:b2:01:c4:d4:d1:93:49:a5:b9:f3:ca:a6: e7:5c:c1:c9:4b:98:7a:4e:f6:9c:08:96:dd:04:05: 43:3a:04:55:85:99:a0:48:16:01:a9:c7:e6:6c:86: 64:1b:25:08:ba:ac:79:8d:23:95:fe:15:76:4a:b8: 89:55:b4:a2:52:fe:27:24:90:f8:9f:d0:4e:ac:8a: ae:1b:dc:cb:a3:e3:ee:db:ff:71:be:00:36:26:88: 6f:2d:2a:bb:97:2e:32:9f:28:a0:36:93:c5:3c:e9: dd:8d:11:3b:a6:1d:3c:30:2c:76:c9:14:b8:9b:9b: 72:d4:08:aa:f6:63:2e:e8:e5:83:ef:69:85:a1:ed: 61:bc:7b:be:10:d4:98:09:c5:d2:64:8c:90:c5:3b: 9d:82:e8:7e:6e:27:d7:ec:44:53:b5:75:45:1a:2f: 2a:65:57:cb:06:df:71:43:c3:01:de:4f:01:b0:fd: 3c:b3:8b:fb:68:e5:c6:0a:ff:4f:de:53:ae:14:47: f5:50:6e:be:00:5f:7b:d3:10:ed:82:48:a1:a6:04: 51:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:D6:77:00:BD:9B:B3:B3:F0:66:09:72:01:FE:2B:CD:E9:13:56 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:66:7b:4f:15:6e:58:e4:19:a9:64:09:3b:5e:93:9a:09:8c: 3d:11:16:b6:50:32:1e:49:89:82:a7:6d:1f:67:db:2e:0f:a2: 20:3a:57:c6:3f:41:91:f3:a3:d7:bd:a1:8b:54:b6:eb:01:ea: 3c:43:3a:f3:e0:36:cb:ec:a9:f1:2e:20:6a:15:5a:8a:69:d1: 88:96:40:60:87:05:40:9a:7c:08:71:06:28:5c:fb:d2:4e:dc: 6d:9e:a7:b4:1d:d4:dc:2f:f2:24:84:3b:81:78:38:4f:2b:20: d5:2c:67:db:19:05:5d:1a:26:4b:29:db:13:c5:7c:1a:9f:98: 55:1b:5e:d6:e5:36:76:83:0d:83:07:8e:3c:95:66:c2:04:11: 44:1f:9e:04:2f:0e:d5:f4:2d:ba:44:24:1d:f0:3f:c1:05:c2: d5:21:fa:73:bb:e3:c7:69:d8:2c:12:f3:d6:c5:c3:af:26:5d: d2:c7:c7:7e:34:77:05:df:62:21:43:ae:47:71:f0:b7:f2:53: 70:7a:af:59:5b:ea:c5:eb:c8:7b:c2:fe:3f:f4:9c:7a:0a:e1: 4b:61:fa:c9:05:59:1f:34:db:55:6d:f7:25:07:45:23:20:88: b4:b1:5a:8e:13:82:ae:19:6f:ec:c9:bb:94:38:70:c6:ab:e9: e0:c1:3f:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdLjaEI49LytojB+jJarUxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUwNjA3MTgwMTAyWhcNMjUwNjA4MTgwMTAyWjAzMTEwLwYDVQQD Eyg3MjFkZDY3NzAwYmQ5YmIzYjNmMDY2MDk3MjAxZmUyYmNkZTkxMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWNmB7tSrrvzBkm5J0h95nLT+1lz X/GBbrQnIkzEwp3fFbUkTb+OT/FAfWyFsk2yAcTU0ZNJpbnzyqbnXMHJS5h6Tvac CJbdBAVDOgRVhZmgSBYBqcfmbIZkGyUIuqx5jSOV/hV2SriJVbSiUv4nJJD4n9BO rIquG9zLo+Pu2/9xvgA2JohvLSq7ly4ynyigNpPFPOndjRE7ph08MCx2yRS4m5ty 1Aiq9mMu6OWD72mFoe1hvHu+ENSYCcXSZIyQxTudguh+bifX7ERTtXVFGi8qZVfL Bt9xQ8MB3k8BsP08s4v7aOXGCv9P3lOuFEf1UG6+AF970xDtgkihpgRRNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHId1ncAvZuzs/BmCXIB/ivN6RNWMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmZ7TxVu WOQZqWQJO16TmgmMPREWtlAyHkmJgqdtH2fbLg+iIDpXxj9BkfOj172hi1S26wHq PEM68+A2y+yp8S4gahVaimnRiJZAYIcFQJp8CHEGKFz70k7cbZ6ntB3U3C/yJIQ7 gXg4Tysg1Sxn2xkFXRomSynbE8V8Gp+YVRte1uU2doMNgweOPJVmwgQRRB+eBC8O 1fQtukQkHfA/wQXC1SH6c7vjx2nYLBLz1sXDryZd0sfHfjR3Bd9iIUOuR3Hwt/JT cHqvWVvqxevIe8L+P/ScegrhS2H6yQVZHzTbVW33JQdFIyCItLFajhOCrhlv7Mm7 lDhwxqvp4ME/GA== -----END CERTIFICATE-----Generated at Sun Jun 8 03:14:40 2025 by rpki-client