$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: 5ekh+a8oq94zyYNgHHJFH2vREPOn9Y5nBW9pfxasjdE= Subject key identifier: FC:A7:ED:7D:12:B5:BB:38:58:EB:1D:76:3F:85:F2:50:8A:F9:20:A8 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 0197741B52E4BF81C6DE83BB8D0CB98C1F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1589 Signing time: Sun 15 Jun 2025 15:00:37 +0000 Manifest this update: Sun 15 Jun 2025 15:00:37 +0000 Manifest next update: Mon 16 Jun 2025 15:00:37 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: b2izLpZxNzWF76WGK5xDRI1Cq1R/z8nrysbEVrI35oI=) 9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 11: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 12: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 13: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 14: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 15: lzfdj3sYjKwxJ-lEm4PMRG_z-x0.roa (hash: k0S/RTqMQtMqoYVsegJF/SGrW/zlHJLMymOnkkPiIpo=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:74:1b:52:e4:bf:81:c6:de:83:bb:8d:0c:b9:8c:1f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jun 15 15:00:37 2025 GMT Not After : Jun 16 15:00:37 2025 GMT Subject: CN=fca7ed7d12b5bb3858eb1d763f85f2508af920a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:53:0e:ce:6d:63:fe:df:95:30:e0:32:93:d0: 06:73:c0:9b:a6:ea:93:08:fa:8c:f1:a8:bb:ce:94: af:6d:76:aa:c6:61:a7:b5:20:7a:6d:06:9d:f0:f5: f7:6d:a3:d1:20:30:2b:1f:ca:3c:e5:f9:40:51:9f: 7c:9e:2a:de:6f:de:c4:81:49:c6:6b:ad:08:fb:37: 98:e7:f4:0b:70:1f:a0:a8:e8:6c:b3:c7:8b:b8:01: 7e:64:d6:e4:d3:dc:1f:cc:92:27:ea:47:df:08:77: f9:83:2b:88:28:ad:9f:f4:0f:44:93:76:7f:47:7d: d9:7e:46:ca:68:e3:6a:e7:9b:92:12:d1:e0:9c:f4: aa:ef:03:46:3d:e1:79:75:ea:ee:5c:6a:c5:7e:df: 3c:9a:01:64:25:76:ec:5f:da:79:4e:cf:65:37:93: 4e:71:74:26:e8:47:60:7c:b1:19:01:9e:c6:46:8d: cb:82:c0:94:e6:8d:29:c6:02:55:94:5a:26:27:3e: 3d:17:e5:f8:fb:69:32:5b:13:de:24:3d:77:bc:15: 52:27:ef:18:e5:97:64:89:e0:15:31:aa:dc:23:98: d6:6f:5e:a6:fc:d5:e6:86:ee:ac:a0:65:cf:b8:a0: f9:48:d4:b5:c8:b5:db:67:7f:30:98:81:b9:e7:04: 9d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A7:ED:7D:12:B5:BB:38:58:EB:1D:76:3F:85:F2:50:8A:F9:20:A8 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:d4:f0:20:51:eb:39:4c:f5:dd:86:b5:ad:63:8e:3f:10:65: a5:44:5f:77:25:ed:a6:65:74:ba:10:71:66:32:f4:a0:6f:ba: 3f:62:25:1e:22:26:6b:cc:7f:ff:44:c3:d6:f8:f1:2c:32:66: b7:ea:a9:98:45:db:29:c2:6e:5f:5d:ad:90:84:dd:d9:a1:05: 9a:5c:e6:56:96:ea:5f:c4:c8:cd:11:5a:83:88:1b:97:30:3e: 63:da:b5:72:d2:c7:5f:21:c7:e8:59:2b:cf:e8:62:07:5f:23: ca:31:15:8f:54:7b:19:d5:f2:f0:0f:6c:2c:e0:82:d6:0b:cd: c2:9e:4a:0a:05:b5:5c:10:12:32:1f:bf:e6:80:37:50:bd:1e: 49:5b:be:49:6b:79:7e:3c:a2:47:a4:15:7a:62:bd:d2:7d:14: 0a:b5:55:58:30:15:86:33:6f:6a:db:c6:ee:cc:fd:d2:4b:03: a9:01:1b:8a:d0:87:92:01:79:3a:32:b8:9c:c3:71:eb:04:d9: d3:19:6d:5c:51:93:fa:95:c4:77:2f:5f:bd:94:23:b5:18:34: 39:13:4f:f0:92:b4:bc:f8:5d:91:11:12:b8:a9:ec:b7:33:91: dd:59:d4:cb:8f:5a:5a:33:3e:13:9e:51:a0:c4:3c:94:7b:bf: 8f:af:74:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZd0G1Lkv4HG3oO7jQy5jB9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwNjE1MTUwMDM3WhcNMjUwNjE2MTUwMDM3WjAzMTEwLwYDVQQD EyhmY2E3ZWQ3ZDEyYjViYjM4NThlYjFkNzYzZjg1ZjI1MDhhZjkyMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61MOzm1j/t+VMOAyk9AGc8CbpuqT CPqM8ai7zpSvbXaqxmGntSB6bQad8PX3baPRIDArH8o85flAUZ98nireb97EgUnG a60I+zeY5/QLcB+gqOhss8eLuAF+ZNbk09wfzJIn6kffCHf5gyuIKK2f9A9Ek3Z/ R33ZfkbKaONq55uSEtHgnPSq7wNGPeF5deruXGrFft88mgFkJXbsX9p5Ts9lN5NO cXQm6EdgfLEZAZ7GRo3LgsCU5o0pxgJVlFomJz49F+X4+2kyWxPeJD13vBVSJ+8Y 5ZdkieAVMarcI5jWb16m/NXmhu6soGXPuKD5SNS1yLXbZ38wmIG55wSdsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyn7X0Stbs4WOsddj+F8lCK+SCoMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAydTwIFHr OUz13Ya1rWOOPxBlpURfdyXtpmV0uhBxZjL0oG+6P2IlHiIma8x//0TD1vjxLDJm t+qpmEXbKcJuX12tkITd2aEFmlzmVpbqX8TIzRFag4gblzA+Y9q1ctLHXyHH6Fkr z+hiB18jyjEVj1R7GdXy8A9sLOCC1gvNwp5KCgW1XBASMh+/5oA3UL0eSVu+SWt5 fjyiR6QVemK90n0UCrVVWDAVhjNvatvG7sz90ksDqQEbitCHkgF5OjK4nMNx6wTZ 0xltXFGT+pXEdy9fvZQjtRg0ORNP8JK0vPhdkRESuKnstzOR3VnUy49aWjM+E55R oMQ8lHu/j690dg== -----END CERTIFICATE-----Generated at Sun Jun 15 19:48:46 2025 by rpki-client