$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: VKJWv3YTCfoxM2w4wlK1MAdNhqmbHP5PeRedc4GsB44= Subject key identifier: F1:5E:0C:7A:5E:64:6B:B3:D4:2A:C6:4C:8F:9D:87:49:3A:B4:AD:1A Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 01963B410608DAEC56D44597776E01910FF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 150E Signing time: Tue 15 Apr 2025 21:00:39 +0000 Manifest this update: Tue 15 Apr 2025 21:00:39 +0000 Manifest next update: Wed 16 Apr 2025 21:00:39 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa (hash: F+2AAW+4AfT1GQuiFRv0wVbwu5zq2uVmbs9qsl8++uA=) 3: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 4: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: PJk9rLFUod0Bk7wXSiFloTkAbVk8GZP171eTG84NDkY=) 11: QBb9KaF0cIXBem__XFHTxdHk0-g.roa (hash: /YyDhbAPnvtDPEPid9fWMtl8pnQeWOykKx8WROxiL+M=) 12: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 13: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 14: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 15: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 16: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 17: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 18: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 15:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3b:41:06:08:da:ec:56:d4:45:97:77:6e:01:91:0f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Apr 15 21:00:39 2025 GMT Not After : Apr 16 21:00:39 2025 GMT Subject: CN=f15e0c7a5e646bb3d42ac64c8f9d87493ab4ad1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:36:d1:64:ae:a2:57:9e:ad:5d:47:a6:b4: ce:ee:54:ac:33:16:1f:39:9d:21:6a:0f:b1:8e:8c: 18:6a:17:21:25:79:4f:cc:cb:1f:aa:85:aa:dc:1f: f0:af:9d:fa:9e:3b:83:c2:53:8e:17:9d:a4:9e:21: 39:05:8e:57:01:4a:7e:90:bd:f8:1d:a1:a3:20:7d: eb:a9:28:ab:be:a2:4c:e9:4a:3a:b8:9e:55:4b:53: 41:5a:a2:53:41:5d:f6:dc:d9:43:97:e9:2c:9d:6d: 8c:20:b9:5a:57:5f:25:bb:19:10:07:60:a0:34:77: dd:f8:b6:df:0f:39:9e:f3:f8:0b:91:41:a9:63:44: 1d:62:1e:eb:dc:cf:e3:20:f4:c3:a9:76:55:23:02: 3e:e6:7a:d0:e0:23:e2:ea:c7:3f:03:ed:0e:b4:a2: 92:e0:d8:c5:f9:f2:c9:50:d9:97:79:13:37:85:c7: a7:aa:2b:89:90:3e:1b:e4:79:c7:b1:d3:bb:4e:0c: 7e:60:2e:c1:1f:d6:69:e2:fb:f6:71:b2:11:3d:0d: be:89:4a:e3:76:30:f4:e6:b7:5c:e7:14:da:97:48: 9c:53:d7:77:6d:e8:a6:71:31:32:e5:31:d7:97:ce: ee:85:cd:84:b9:08:af:cd:c0:bb:66:1a:b2:0c:3b: 1a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5E:0C:7A:5E:64:6B:B3:D4:2A:C6:4C:8F:9D:87:49:3A:B4:AD:1A X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5a:30:35:f2:0f:81:44:73:dc:9b:0e:0a:c6:86:02:21:85: 0e:04:a4:d3:a5:3e:25:5a:4d:89:6e:6a:be:07:f3:75:f3:f4: 51:36:c0:1e:70:8c:9b:28:93:58:af:0b:66:ad:b3:21:37:73: 70:86:05:c0:08:8e:d5:bb:45:80:37:f1:06:c6:a9:c9:ff:35: 39:ff:50:62:32:9f:5d:80:56:f1:0d:02:de:af:71:4d:ec:c1: f9:40:5e:14:03:28:5d:d1:01:11:d5:47:d7:74:38:56:3b:ab: 7d:4e:84:42:99:25:d5:ab:ed:89:2c:a3:51:60:30:6f:db:d6: 91:cb:fa:3a:f4:09:2b:0b:f7:44:de:f3:fd:be:4a:99:6c:c5: b4:c4:35:65:56:fa:07:e6:dd:ba:96:06:29:e0:e2:92:12:39: ca:50:75:b7:cc:75:64:99:1d:32:2f:28:f1:6a:2e:8d:ac:bf: 6e:4a:85:47:da:61:0a:ab:8c:07:ee:c5:98:a7:35:dc:f9:32: ae:12:53:84:f2:0e:f8:5c:23:aa:2b:66:84:63:12:e6:29:cf: 36:07:74:44:e0:67:a2:58:64:be:80:73:b5:e8:61:ba:89:7c: 2d:c1:7d:0f:e2:c4:9e:e8:59:e4:db:64:38:69:5a:13:1e:b3: f0:c1:4e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY7QQYI2uxW1EWXd24BkQ/xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwNDE1MjEwMDM5WhcNMjUwNDE2MjEwMDM5WjAzMTEwLwYDVQQD EyhmMTVlMGM3YTVlNjQ2YmIzZDQyYWM2NGM4ZjlkODc0OTNhYjRhZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxU20WSuoleerV1HprTO7lSsMxYf OZ0hag+xjowYahchJXlPzMsfqoWq3B/wr536njuDwlOOF52kniE5BY5XAUp+kL34 HaGjIH3rqSirvqJM6Uo6uJ5VS1NBWqJTQV323NlDl+ksnW2MILlaV18luxkQB2Cg NHfd+LbfDzme8/gLkUGpY0QdYh7r3M/jIPTDqXZVIwI+5nrQ4CPi6sc/A+0OtKKS 4NjF+fLJUNmXeRM3hcenqiuJkD4b5HnHsdO7Tgx+YC7BH9Zp4vv2cbIRPQ2+iUrj djD05rdc5xTal0icU9d3beimcTEy5THXl87uhc2EuQivzcC7ZhqyDDsanwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFeDHpeZGuz1CrGTI+dh0k6tK0aMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1owNfIP gURz3JsOCsaGAiGFDgSk06U+JVpNiW5qvgfzdfP0UTbAHnCMmyiTWK8LZq2zITdz cIYFwAiO1btFgDfxBsapyf81Of9QYjKfXYBW8Q0C3q9xTezB+UBeFAMoXdEBEdVH 13Q4VjurfU6EQpkl1avtiSyjUWAwb9vWkcv6OvQJKwv3RN7z/b5KmWzFtMQ1ZVb6 B+bdupYGKeDikhI5ylB1t8x1ZJkdMi8o8Woujay/bkqFR9phCquMB+7FmKc13Pky rhJThPIO+FwjqitmhGMS5inPNgd0ROBnolhkvoBztehhuol8LcF9D+LEnuhZ5Ntk OGlaEx6z8MFOSQ== -----END CERTIFICATE-----Generated at Wed Apr 16 00:25:18 2025 by rpki-client