$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: Kz4aNBn4STdvesOQ0I4QvjPHMBVCOH9nkqXnTuQLCPw= Subject key identifier: 57:7D:DE:79:BB:52:4F:EF:60:A1:0E:1A:2D:11:63:E1:DF:DD:9B:50 Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 01974365CFCCA50062F34B9FA366CD9B9D4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1198 Signing time: Fri 06 Jun 2025 04:00:35 +0000 Manifest this update: Fri 06 Jun 2025 04:00:35 +0000 Manifest next update: Sat 07 Jun 2025 04:00:35 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: SwPNrJ0WWa5xLlKOzYtgKgNuYRth/PXQmcGCPfE+FEM=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:43:65:cf:cc:a5:00:62:f3:4b:9f:a3:66:cd:9b:9d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Jun 6 04:00:35 2025 GMT Not After : Jun 7 04:00:35 2025 GMT Subject: CN=577dde79bb524fef60a10e1a2d1163e1dfdd9b50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:dc:29:71:b3:85:e7:67:e8:b0:64:04:e8: d5:da:3c:a0:e9:fe:f2:7b:c1:a5:56:80:a4:d6:7b: 8c:75:44:65:76:f4:df:45:16:8f:2b:ad:1f:20:48: 9e:26:32:fd:63:82:63:d7:61:dd:88:0e:78:97:1e: 9c:ef:52:c9:98:70:37:42:b9:29:37:fe:1f:a1:46: 1e:3d:dc:67:a5:d6:5e:98:d6:74:8e:42:ba:29:97: cd:47:79:45:d5:b8:3d:50:e8:7b:ed:61:54:cb:8c: 67:9b:90:5a:0d:05:11:3f:6c:2f:38:2e:49:8d:86: 4c:5f:14:81:cd:dd:04:8e:af:8a:cd:d8:b0:10:e7: 14:31:3a:6d:5c:04:a4:ca:3b:5d:26:d0:8b:e2:d9: 75:25:d4:11:67:7b:46:64:f0:ed:2a:ea:4b:71:5c: fa:54:df:00:3c:a9:0d:08:4f:de:2d:fb:3f:9a:44: ad:44:75:b4:40:48:1f:1f:cc:27:6e:6a:94:b0:b7: 0b:c8:50:26:6d:62:55:8d:20:87:18:dd:26:17:f0: 7b:b6:ab:89:4b:be:66:51:b5:ce:1d:29:91:ca:b6: ca:88:9b:81:7e:6c:22:54:21:29:76:4f:f1:3e:6e: d8:dc:59:d5:e3:ef:de:07:77:86:15:bb:8e:3d:0e: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:DE:79:BB:52:4F:EF:60:A1:0E:1A:2D:11:63:E1:DF:DD:9B:50 X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:af:ea:9a:bb:ed:7e:0f:44:f4:26:d6:48:d9:d3:e5:1d:5d: b8:84:43:d7:a6:9f:19:1a:30:9a:13:54:c1:fb:74:d4:b4:78: aa:8b:ff:1b:40:73:fa:01:a0:cf:b3:44:3f:c3:24:9b:01:6d: 4c:fb:8f:3f:33:3c:be:54:c1:ec:d8:cf:f6:20:7d:4c:dd:79: d8:01:fa:6b:6b:0f:bc:c7:17:12:8e:fd:b4:6f:c0:44:da:c0: 1e:a2:e2:d1:39:1c:9f:7a:39:eb:97:24:71:90:d0:d2:3b:13: 40:b9:93:fc:c7:78:cc:b4:64:c7:c0:0c:c5:25:19:4e:05:85: 63:96:cc:22:de:fc:6d:7e:96:98:05:3d:e8:c4:54:ed:8b:c0: f8:c3:a3:4d:c0:47:ca:95:48:45:fe:c3:8b:61:72:d6:cb:31: da:a7:69:70:d2:1c:d1:b1:af:1c:b4:bb:50:76:71:3f:91:5e: 25:12:93:53:6a:4b:8a:de:ea:d5:76:9f:b1:48:50:c0:f4:04: ed:55:3b:ef:1f:b2:10:df:4a:50:3b:44:8d:a5:4f:7f:12:8c: 6f:6f:6c:75:00:eb:ab:d4:8c:02:f8:f7:6f:13:7c:e7:7b:3e: bc:b8:d8:e2:30:9c:26:69:b9:a3:b8:ba:3f:85:84:19:40:63: 09:1c:2a:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdDZc/MpQBi80ufo2bNm51KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwNjA2MDQwMDM1WhcNMjUwNjA3MDQwMDM1WjAzMTEwLwYDVQQD Eyg1NzdkZGU3OWJiNTI0ZmVmNjBhMTBlMWEyZDExNjNlMWRmZGQ5YjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut/cKXGzhedn6LBkBOjV2jyg6f7y e8GlVoCk1nuMdURldvTfRRaPK60fIEieJjL9Y4Jj12HdiA54lx6c71LJmHA3Qrkp N/4foUYePdxnpdZemNZ0jkK6KZfNR3lF1bg9UOh77WFUy4xnm5BaDQURP2wvOC5J jYZMXxSBzd0Ejq+KzdiwEOcUMTptXASkyjtdJtCL4tl1JdQRZ3tGZPDtKupLcVz6 VN8APKkNCE/eLfs/mkStRHW0QEgfH8wnbmqUsLcLyFAmbWJVjSCHGN0mF/B7tquJ S75mUbXOHSmRyrbKiJuBfmwiVCEpdk/xPm7Y3FnV4+/eB3eGFbuOPQ4EhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFd93nm7Uk/vYKEOGi0RY+Hf3ZtQMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK/qmrvt fg9E9CbWSNnT5R1duIRD16afGRowmhNUwft01LR4qov/G0Bz+gGgz7NEP8MkmwFt TPuPPzM8vlTB7NjP9iB9TN152AH6a2sPvMcXEo79tG/ARNrAHqLi0Tkcn3o565ck cZDQ0jsTQLmT/Md4zLRkx8AMxSUZTgWFY5bMIt78bX6WmAU96MRU7YvA+MOjTcBH ypVIRf7Di2Fy1ssx2qdpcNIc0bGvHLS7UHZxP5FeJRKTU2pLit7q1XafsUhQwPQE 7VU77x+yEN9KUDtEjaVPfxKMb29sdQDrq9SMAvj3bxN853s+vLjY4jCcJmm5o7i6 P4WEGUBjCRwq2w== -----END CERTIFICATE-----Generated at Fri Jun 6 11:52:45 2025 by rpki-client