$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: OHFFm3ehPg3YQ3lLQJ4f55uI4IX5jyPjcANn+GhjZac= Subject key identifier: 16:64:5B:23:F6:88:2A:DC:16:DE:C9:A3:A9:A6:72:82:EF:36:74:39 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 0198793F529EC6F348FFD469B8A1062D0E4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1611 Signing time: Tue 05 Aug 2025 08:00:49 +0000 Manifest this update: Tue 05 Aug 2025 08:00:49 +0000 Manifest next update: Wed 06 Aug 2025 08:00:49 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: QZD8u0mVv2uH5qkf7P7e63ijp3TlnZd0j2jztmRSyVQ=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:3f:52:9e:c6:f3:48:ff:d4:69:b8:a1:06:2d:0e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Aug 5 08:00:49 2025 GMT Not After : Aug 6 08:00:49 2025 GMT Subject: CN=16645b23f6882adc16dec9a3a9a67282ef367439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:5e:67:65:ca:20:34:e8:78:7a:9b:3e:b0: c2:2b:e6:33:38:46:55:27:8c:ac:ba:38:0e:d4:cf: ec:01:68:58:64:56:8b:31:3b:bf:9e:9e:4e:6c:a3: 96:5a:fc:6e:f7:e1:16:6d:ad:57:1c:ff:44:b5:42: 88:ee:a7:6d:42:ca:22:37:97:82:a5:5a:5a:df:45: 3a:ad:9a:29:bc:7f:8a:35:bf:7f:8c:e0:4f:a1:bf: 7b:ba:32:47:3c:86:ee:89:97:82:8f:72:17:45:ef: 4f:32:a6:1e:3a:07:fa:bf:f8:88:88:99:31:33:59: e5:50:18:53:79:e1:ea:cb:d9:41:68:da:50:9e:a2: e2:cf:8e:e7:57:04:6c:d8:dd:9e:17:69:29:0c:0a: 16:8c:60:1c:94:38:c8:9d:92:12:cc:b1:6c:70:f3: 0c:76:eb:5c:18:dd:87:ac:d0:23:c3:ef:58:2e:2b: 82:95:93:22:89:8d:ce:8d:76:84:2a:89:fe:21:e2: 6c:90:e4:d4:94:78:63:36:52:0a:9c:cf:11:38:41: bd:31:02:ce:23:95:f9:ad:f9:f3:3e:15:3d:93:17: b7:8c:4f:ca:b0:52:4a:85:ac:ad:8a:d3:11:be:69: 66:12:e1:56:19:8e:fd:bd:49:70:13:be:87:8b:a8: 1a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:64:5B:23:F6:88:2A:DC:16:DE:C9:A3:A9:A6:72:82:EF:36:74:39 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:88:eb:34:3a:cd:f1:8f:b7:6b:ab:ba:e3:b9:3e:6a:27:74: b4:93:f7:4f:85:83:2a:56:f9:61:30:f4:81:77:22:36:53:aa: e2:a9:c2:87:43:a3:d6:f1:88:d5:11:17:f8:ae:5a:4b:8b:0a: 6e:69:26:6d:a4:64:86:8c:cd:bb:64:f2:23:22:e8:1d:7c:6b: 5d:bb:a3:b5:95:81:27:99:55:4e:e9:97:07:b0:b6:03:07:60: 38:f4:26:1e:05:26:d4:52:33:d0:4f:49:44:7d:7a:95:6d:9b: 25:2f:76:e4:ea:47:36:d2:9f:07:bd:c2:03:92:8c:ea:3b:37: a1:e4:e3:a0:37:91:47:4a:36:63:0c:b6:54:e6:b0:0c:e5:20: 2a:53:65:dd:81:83:ae:f7:3e:57:18:e2:18:9e:58:68:68:6b: a8:5d:ce:f0:9e:1b:55:0a:5a:dc:7e:3c:82:3b:28:09:b7:f5: 31:80:6f:34:d8:8c:06:2f:14:a0:88:b1:f4:cb:6c:83:21:b3: f7:73:f1:0b:20:d4:38:aa:4c:ff:1f:dd:b0:c5:ef:ba:f9:c6: ca:39:41:bd:d5:50:ea:7a:84:86:fa:09:30:1c:37:db:97:5a: 95:19:5c:d7:1e:9a:c8:54:ff:2e:f1:09:36:76:c0:1a:a7:96: 47:7c:81:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh5P1KexvNI/9RpuKEGLQ5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwODA1MDgwMDQ5WhcNMjUwODA2MDgwMDQ5WjAzMTEwLwYDVQQD EygxNjY0NWIyM2Y2ODgyYWRjMTZkZWM5YTNhOWE2NzI4MmVmMzY3NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn79eZ2XKIDToeHqbPrDCK+YzOEZV J4ysujgO1M/sAWhYZFaLMTu/np5ObKOWWvxu9+EWba1XHP9EtUKI7qdtQsoiN5eC pVpa30U6rZopvH+KNb9/jOBPob97ujJHPIbuiZeCj3IXRe9PMqYeOgf6v/iIiJkx M1nlUBhTeeHqy9lBaNpQnqLiz47nVwRs2N2eF2kpDAoWjGAclDjInZISzLFscPMM dutcGN2HrNAjw+9YLiuClZMiiY3OjXaEKon+IeJskOTUlHhjNlIKnM8ROEG9MQLO I5X5rfnzPhU9kxe3jE/KsFJKhaytitMRvmlmEuFWGY79vUlwE76Hi6gaEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZkWyP2iCrcFt7Jo6mmcoLvNnQ5MB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYjrNDrN 8Y+3a6u647k+aid0tJP3T4WDKlb5YTD0gXciNlOq4qnCh0Oj1vGI1REX+K5aS4sK bmkmbaRkhozNu2TyIyLoHXxrXbujtZWBJ5lVTumXB7C2AwdgOPQmHgUm1FIz0E9J RH16lW2bJS925OpHNtKfB73CA5KM6js3oeTjoDeRR0o2Ywy2VOawDOUgKlNl3YGD rvc+VxjiGJ5YaGhrqF3O8J4bVQpa3H48gjsoCbf1MYBvNNiMBi8UoIix9MtsgyGz 93PxCyDUOKpM/x/dsMXvuvnGyjlBvdVQ6nqEhvoJMBw325dalRlc1x6ayFT/LvEJ NnbAGqeWR3yBKQ== -----END CERTIFICATE-----Generated at Tue Aug 5 17:30:09 2025 by rpki-client