$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: 73OYPPPHXvbvYs8jDle+MlOfGZXeR3dyxkzziPT0p7o= Subject key identifier: F8:77:B1:3B:6D:2D:E5:C1:35:02:14:BF:4A:40:2A:70:44:15:8D:99 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 0197499EDE3B5FC93912144568EEFF25FA74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 159A Signing time: Sat 07 Jun 2025 09:00:37 +0000 Manifest this update: Sat 07 Jun 2025 09:00:37 +0000 Manifest next update: Sun 08 Jun 2025 09:00:37 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa (hash: F+2AAW+4AfT1GQuiFRv0wVbwu5zq2uVmbs9qsl8++uA=) 3: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 4: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: DrJYUy7392YQF71Zh7mNSSWmfunKTkrRr/JP6Xd1s6c=) 11: QBb9KaF0cIXBem__XFHTxdHk0-g.roa (hash: /YyDhbAPnvtDPEPid9fWMtl8pnQeWOykKx8WROxiL+M=) 12: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 13: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 14: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 15: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 16: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 17: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 18: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:49:9e:de:3b:5f:c9:39:12:14:45:68:ee:ff:25:fa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jun 7 09:00:37 2025 GMT Not After : Jun 8 09:00:37 2025 GMT Subject: CN=f877b13b6d2de5c1350214bf4a402a7044158d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:41:c5:6c:a6:d2:cf:7c:21:f9:c8:30:66: 65:52:39:c6:b3:2b:81:03:ea:81:d9:e0:59:28:38: a3:76:c1:c8:47:42:89:f9:ea:aa:9f:5a:da:00:b6: 12:42:dd:a6:95:80:27:06:fa:cd:fa:ce:ed:41:03: c0:e0:1f:1b:10:d8:df:df:d8:d6:0f:e2:15:a2:97: 05:bd:a4:1e:85:09:13:f7:84:e5:52:6b:69:9f:19: 59:1a:37:90:10:20:84:ec:41:1b:7b:98:9b:92:68: 1c:84:51:4a:21:25:09:5c:8c:c4:91:62:fa:46:7b: 50:c9:01:51:5a:72:55:6c:ba:48:e4:ef:af:db:c1: 6c:96:75:40:dc:96:e1:6b:cc:4f:51:f5:8c:a7:d8: b7:91:1b:10:5e:ee:f5:60:5e:12:4c:10:ad:0c:27: 6a:34:2d:75:17:aa:4c:a5:a8:41:82:3d:52:9b:c3: 2d:87:13:7f:8d:81:da:05:e5:45:dd:e9:bc:cc:97: b0:a7:c1:65:c1:af:23:c5:fb:a8:6d:9b:0b:46:11: 60:bc:9e:a8:f3:18:ff:37:80:89:34:83:a9:7f:02: c3:a9:13:6d:c5:ba:bc:02:84:b2:19:b3:05:f9:e8: 36:7f:b4:1e:33:67:e9:07:83:19:dc:9d:22:12:53: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:77:B1:3B:6D:2D:E5:C1:35:02:14:BF:4A:40:2A:70:44:15:8D:99 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:34:8b:52:a9:2e:42:a7:24:2b:89:f6:2a:64:bb:07:3d:cd: fb:9a:ab:46:86:b6:5f:66:38:da:fd:7f:c0:fc:e1:fc:af:a1: 08:38:e5:44:ed:2b:bd:ac:6f:8b:87:fe:5c:1a:d2:bf:a4:44: c4:3f:e1:c2:1d:33:45:e1:b8:a3:91:33:a8:18:b8:f6:55:05: 35:67:72:21:16:41:6b:24:3a:fa:6c:b6:cc:53:76:ee:bf:28: bf:e5:1a:67:ce:c0:57:5f:4a:30:ba:95:61:bb:eb:77:c7:ec: c9:f0:c2:b5:c8:24:2b:ad:63:33:a5:da:bc:59:50:de:86:73: b3:e5:38:3d:8f:02:05:6e:86:7e:9e:b6:2b:9c:4d:68:da:fb: b6:e5:73:9d:6e:6a:18:df:be:77:cb:0c:a0:4d:60:06:32:42: 2e:ca:cf:33:cf:bc:7c:16:50:3b:63:ae:84:90:94:89:be:e9: fb:51:ed:a2:77:5d:e2:f4:fa:5a:7b:8b:d9:1c:0e:f6:d0:bd: b5:c6:cc:cc:a1:ad:ea:82:bf:32:f7:36:74:8d:d4:71:41:5e: 8b:3d:2c:fa:96:06:2e:e1:fd:e3:6f:94:19:85:f3:a7:29:95: d4:3d:87:27:77:95:b8:81:9d:df:82:17:36:22:76:ad:64:4d: e1:a3:93:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdJnt47X8k5EhRFaO7/Jfp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwNjA3MDkwMDM3WhcNMjUwNjA4MDkwMDM3WjAzMTEwLwYDVQQD EyhmODc3YjEzYjZkMmRlNWMxMzUwMjE0YmY0YTQwMmE3MDQ0MTU4ZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkdBxWym0s98IfnIMGZlUjnGsyuB A+qB2eBZKDijdsHIR0KJ+eqqn1raALYSQt2mlYAnBvrN+s7tQQPA4B8bENjf39jW D+IVopcFvaQehQkT94TlUmtpnxlZGjeQECCE7EEbe5ibkmgchFFKISUJXIzEkWL6 RntQyQFRWnJVbLpI5O+v28FslnVA3Jbha8xPUfWMp9i3kRsQXu71YF4STBCtDCdq NC11F6pMpahBgj1Sm8MthxN/jYHaBeVF3em8zJewp8Flwa8jxfuobZsLRhFgvJ6o 8xj/N4CJNIOpfwLDqRNtxbq8AoSyGbMF+eg2f7QeM2fpB4MZ3J0iElNwdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPh3sTttLeXBNQIUv0pAKnBEFY2ZMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDSLUqku QqckK4n2KmS7Bz3N+5qrRoa2X2Y42v1/wPzh/K+hCDjlRO0rvaxvi4f+XBrSv6RE xD/hwh0zReG4o5EzqBi49lUFNWdyIRZBayQ6+my2zFN27r8ov+UaZ87AV19KMLqV Ybvrd8fsyfDCtcgkK61jM6XavFlQ3oZzs+U4PY8CBW6Gfp62K5xNaNr7tuVznW5q GN++d8sMoE1gBjJCLsrPM8+8fBZQO2OuhJCUib7p+1Htondd4vT6WnuL2RwO9tC9 tcbMzKGt6oK/Mvc2dI3UcUFeiz0s+pYGLuH942+UGYXzpymV1D2HJ3eVuIGd34IX NiJ2rWRN4aOTOw== -----END CERTIFICATE-----Generated at Sat Jun 7 14:46:29 2025 by rpki-client