$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: twontsPGQwpL7Iw6gH/44ULGx31+vR4BMolqpSHdClE= Subject key identifier: 0F:DC:7E:CA:FE:C5:C6:E1:FE:AF:E6:46:CB:CD:7B:B2:FF:70:77:A7 Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 01964E22F2540FD72B020AB25D4B0062E44B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1119 Signing time: Sat 19 Apr 2025 13:00:35 +0000 Manifest this update: Sat 19 Apr 2025 13:00:35 +0000 Manifest next update: Sun 20 Apr 2025 13:00:35 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: lnFDsTLOm3YRV3p2qLKCeLwctHDks4GLS/AxhU0Xs2k=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4e:22:f2:54:0f:d7:2b:02:0a:b2:5d:4b:00:62:e4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Apr 19 13:00:35 2025 GMT Not After : Apr 20 13:00:35 2025 GMT Subject: CN=0fdc7ecafec5c6e1feafe646cbcd7bb2ff7077a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:59:5d:99:e4:83:be:8c:80:12:f6:9d:20: b3:5a:1d:fe:ba:59:74:f6:5d:34:3a:63:70:9c:dd: f4:b7:ac:34:e0:fe:c2:ea:c2:97:b8:2c:08:2e:bc: 12:96:c4:93:f2:9f:8c:91:9c:95:64:4d:c5:82:74: 78:0b:27:e1:36:3e:98:a6:c6:31:f3:6f:67:72:c8: 5f:e7:f8:3a:60:f0:60:17:92:0f:94:de:c2:27:a5: 97:af:16:b7:7e:4e:e9:71:5a:fc:37:91:9f:5b:cc: 13:20:c3:17:2d:b4:4f:b0:bb:61:0b:2d:ac:64:8d: 2f:67:47:28:54:d1:93:e7:b1:bc:ff:ec:b6:34:a4: ef:fd:84:64:4d:1a:6a:7b:9e:10:a8:ee:b0:d3:77: d2:be:0a:66:a4:38:a3:b3:70:62:c4:9b:5a:af:26: b0:2c:0a:14:c5:4a:83:1d:b5:42:eb:2c:9c:9a:c3: 0e:88:69:b5:04:da:c5:76:ce:01:7a:5d:c0:7f:c0: ca:7a:76:92:93:04:c1:d9:a4:11:92:6d:fa:2c:cb: ad:19:c6:46:7b:35:93:c5:4a:23:a4:82:5a:f8:3b: 8c:23:25:33:98:03:f7:46:a8:78:e2:e3:57:cc:a3: 35:b4:1e:49:22:0c:ed:3e:79:3a:80:63:a1:88:9c: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DC:7E:CA:FE:C5:C6:E1:FE:AF:E6:46:CB:CD:7B:B2:FF:70:77:A7 X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b8:52:84:9e:7a:5a:48:fe:84:36:e1:6a:51:77:57:9c:e5: 82:a7:74:4d:55:3a:c1:fd:54:87:79:71:ca:7a:28:99:dc:dc: a4:65:8b:45:1e:e3:36:b3:8c:fd:40:cc:58:05:b7:62:52:5c: 52:c8:d6:8f:b8:3c:f9:b1:96:b3:ac:a1:f7:de:15:53:ed:48: 9a:a0:c3:56:bc:bf:f7:bc:33:2c:b0:92:03:4a:e1:8a:64:09: 0d:9b:10:1e:59:42:d1:b3:d7:96:82:7b:41:9a:73:fc:64:9d: 48:24:87:a5:db:4b:e6:9f:25:2c:58:51:73:06:29:25:e7:88: 44:51:2f:6e:08:87:85:01:d2:03:62:e6:c5:ed:55:b8:d4:ca: 46:a0:5d:01:9f:f3:3e:9c:0b:e7:d9:4d:20:25:5a:7a:ac:24: 82:e7:71:ec:ae:34:38:5c:cb:09:bd:2c:0c:3d:77:7c:10:c9: b6:72:70:58:43:0e:da:4a:df:5a:33:65:bf:b8:18:f3:e5:0d: 9d:ad:cb:81:10:8a:7e:2a:94:29:07:b6:88:dd:30:89:00:27: 01:35:fa:4a:f0:ea:50:80:c2:e8:bb:7e:8b:3a:ac:90:4d:b4: d9:12:4e:76:48:2e:aa:f7:4f:eb:65:7e:ee:a3:f9:2f:49:c0: 19:9b:ea:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZOIvJUD9crAgqyXUsAYuRLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwNDE5MTMwMDM1WhcNMjUwNDIwMTMwMDM1WjAzMTEwLwYDVQQD EygwZmRjN2VjYWZlYzVjNmUxZmVhZmU2NDZjYmNkN2JiMmZmNzA3N2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhZZXZnkg76MgBL2nSCzWh3+ull0 9l00OmNwnN30t6w04P7C6sKXuCwILrwSlsST8p+MkZyVZE3FgnR4CyfhNj6YpsYx 829ncshf5/g6YPBgF5IPlN7CJ6WXrxa3fk7pcVr8N5GfW8wTIMMXLbRPsLthCy2s ZI0vZ0coVNGT57G8/+y2NKTv/YRkTRpqe54QqO6w03fSvgpmpDijs3BixJtaryaw LAoUxUqDHbVC6yycmsMOiGm1BNrFds4Bel3Af8DKenaSkwTB2aQRkm36LMutGcZG ezWTxUojpIJa+DuMIyUzmAP3Rqh44uNXzKM1tB5JIgztPnk6gGOhiJz8RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/cfsr+xcbh/q/mRsvNe7L/cHenMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLhShJ56 Wkj+hDbhalF3V5zlgqd0TVU6wf1Uh3lxynoomdzcpGWLRR7jNrOM/UDMWAW3YlJc UsjWj7g8+bGWs6yh994VU+1ImqDDVry/97wzLLCSA0rhimQJDZsQHllC0bPXloJ7 QZpz/GSdSCSHpdtL5p8lLFhRcwYpJeeIRFEvbgiHhQHSA2Lmxe1VuNTKRqBdAZ/z PpwL59lNICVaeqwkgudx7K40OFzLCb0sDD13fBDJtnJwWEMO2krfWjNlv7gY8+UN na3LgRCKfiqUKQe2iN0wiQAnATX6SvDqUIDC6Lt+izqskE202RJOdkguqvdP62V+ 7qP5L0nAGZvqEA== -----END CERTIFICATE-----Generated at Sat Apr 19 18:03:57 2025 by rpki-client