$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: t4uyDtm1AW5nTBHf+wJTceuw+LMiSxy9dlPG0X0zQUc= Subject key identifier: F0:B7:CB:24:24:FC:F4:B4:AF:3D:C5:AC:35:76:25:58:A6:1B:3C:C4 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 01967679F689531B1E2464EBEA6C2C72B3EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 11EE Signing time: Sun 27 Apr 2025 09:00:26 +0000 Manifest this update: Sun 27 Apr 2025 09:00:26 +0000 Manifest next update: Mon 28 Apr 2025 09:00:26 +0000 Files and hashes: 1: 0hshT3NJf3ZcExZUQYc5nmNlGaY.roa (hash: JsM+BK5pxCs2yQ1uCb8EQL/4Y9VORNiVl/v1CM9RYLo=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 296qqy7kvfAkbbvvyNWRYZEL0WE.roa (hash: flEq8pydCRK29TEAw8P6HsMLJ//zJVIgEvoq5jA1vEs=) 6: 59BM3cmIoy1MoFuz148y_WZgCKA.roa (hash: b8nLw7Sod/Ce2ZRbJw+OEbeY/YeQr8JvhOn6OiPAFJE=) 7: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 8: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 9: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 10: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 11: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 12: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 13: F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa (hash: vUOE0EzW5wlVnmrKCdNEm67M3EqZb+A0EvhCnOtIuZM=) 14: Gw8m4F71Ro8bNrJZTCfniFi9UXg.roa (hash: Kpelzl11O9E/pATLbGmCA+Qw1l2yU3K1pSi3l/TT1n8=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 9pRN3tUFvfjlZS7WhE7VqNBHmtWZhXgi5OLbC9hKx6o=) 17: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 18: SKTIyHXtcBSWgsqArOetabgC6Iw.roa (hash: wlTzqtL7XXgCSVJcIXH5FrXlb2kC7qEyd0/a19pmV6M=) 19: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 20: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 21: V2yuW3JJ20RvCluN3rXCUUMiG7w.roa (hash: x17gUm0KUeJAMk7xHzgBZEWB6s9JGa50PPNlB66G6AI=) 22: ZnbzYHRBvUTbEjCixu-51iq0NfI.roa (hash: H6eoYf0qoCchu+RJjza0539v8DwbGRsxOIQiPaH7Gsc=) 23: eJ3E9XnGtpfzBI0mAyeOooTW3C4.roa (hash: m4EDzP2Zgwr05uh9kd0BdNEFSOO3f9gIF6N0RB8tmPI=) 24: gAy2L-yq3jv5ULydsY0WjO758DY.roa (hash: kDdF7XHhC12P2H5eVodHGu1h34gE1iEE5luu7KRRUlE=) 25: iuZIYZ0Q_9xllOx0JShQ49jTsMQ.roa (hash: e6DjFwBCGOrJwzBM1pVGgmVe+0POPsOMUBPxv2SOmLA=) 26: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 27: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 28: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 29: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 30: x3gx9ZmWcqYUYgwfNJ2-ikitNlU.roa (hash: PoBxEk65XDNrDKrSzgJ3WZEqYfdrz8UsTQyDZWKAGW8=) 31: yNNBP2CYZiCkNUVUsBEkdKlDfd8.roa (hash: vCmsgqUye/JQpQ9Ozf04BYmInQnymLIG2O0wE02K/Wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:79:f6:89:53:1b:1e:24:64:eb:ea:6c:2c:72:b3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 27 09:00:26 2025 GMT Not After : Apr 28 09:00:26 2025 GMT Subject: CN=f0b7cb2424fcf4b4af3dc5ac35762558a61b3cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:72:59:41:c6:d5:86:3e:13:ee:42:fd:08: 34:ee:7b:55:a3:3a:8e:c3:42:4e:42:17:dc:32:de: bc:9d:6c:80:7d:3f:58:16:f5:dc:1e:e2:bf:0a:27: 7c:5a:b8:d1:03:a7:06:1c:30:e5:e6:1b:76:65:ab: b8:93:e1:52:a0:5f:aa:f3:44:c4:8b:c0:f8:14:c1: 34:07:94:5f:d2:2c:a8:8a:6c:50:65:8b:7e:50:a3: ef:29:f5:81:fa:e5:69:bb:fb:ec:a6:e6:ca:f2:81: 25:4e:c0:f2:a1:56:63:2a:63:e1:c9:47:6c:c5:e9: 00:49:a7:db:8b:15:c2:00:4f:dd:f9:16:19:6c:78: 30:2b:8d:05:20:fa:98:8e:5a:09:bc:e6:de:89:0f: 61:14:00:31:50:1d:eb:c5:93:7e:55:50:29:03:80: 59:5f:c4:40:68:c0:68:88:b1:04:af:2e:90:c3:52: 6d:1b:18:69:7f:bd:ec:e1:1b:7c:fc:f5:05:43:1a: bb:0a:b0:df:9f:fe:bb:c8:75:0c:ec:20:1f:98:fe: 02:aa:31:b1:f9:aa:cf:89:f2:7a:9f:a8:88:98:b8: 14:51:8a:34:95:f6:b7:ed:46:87:77:02:e9:c8:bf: bf:9a:c6:ec:0e:0b:64:e9:b2:68:bd:3d:ac:65:3a: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B7:CB:24:24:FC:F4:B4:AF:3D:C5:AC:35:76:25:58:A6:1B:3C:C4 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f6:04:09:65:1c:72:2b:bd:d7:1b:49:0f:dd:0d:dd:94:df: 76:57:fa:2f:44:7c:a3:9a:69:fb:a6:a9:04:dd:25:43:f8:e9: a4:20:15:9b:a5:b6:bb:84:22:83:0b:14:5d:13:67:ad:34:25: 43:be:7e:f5:fa:ed:04:2f:d2:d3:19:96:02:fd:f9:b4:b2:1d: 42:be:ea:d3:86:79:bd:8a:11:db:a1:7f:b0:df:21:e2:7c:5a: 11:28:f8:a5:c8:d6:2a:70:48:48:8a:c1:15:11:11:28:de:2a: 5c:35:f4:05:d5:e0:31:35:48:73:f4:1d:1c:66:00:36:82:0f: a5:1a:38:e9:fc:d5:d3:ed:cc:62:3a:c8:e0:e0:38:d2:03:eb: 7f:3c:42:47:1c:a9:2a:6d:4f:20:e7:59:54:1d:ef:37:68:c6: 35:41:0c:ef:a1:4f:ae:27:96:59:f8:be:fa:62:42:ec:33:6b: db:21:b4:ae:dd:ad:53:82:d0:23:c1:60:d3:37:9a:79:57:e7: 39:9b:60:ae:92:53:18:e1:4a:41:a5:89:ab:16:50:bf:48:8f: 9d:dc:e0:5c:87:b6:b6:9b:8a:bc:14:41:24:3b:1f:ba:ec:95: 9d:78:ad:e7:8f:35:e9:81:66:1f:71:1f:df:3e:fc:13:2d:2a: 19:ba:5b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2efaJUxseJGTr6mwscrPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUwNDI3MDkwMDI2WhcNMjUwNDI4MDkwMDI2WjAzMTEwLwYDVQQD EyhmMGI3Y2IyNDI0ZmNmNGI0YWYzZGM1YWMzNTc2MjU1OGE2MWIzY2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskVyWUHG1YY+E+5C/Qg07ntVozqO w0JOQhfcMt68nWyAfT9YFvXcHuK/Cid8WrjRA6cGHDDl5ht2Zau4k+FSoF+q80TE i8D4FME0B5Rf0iyoimxQZYt+UKPvKfWB+uVpu/vspubK8oElTsDyoVZjKmPhyUds xekASafbixXCAE/d+RYZbHgwK40FIPqYjloJvObeiQ9hFAAxUB3rxZN+VVApA4BZ X8RAaMBoiLEEry6Qw1JtGxhpf73s4Rt8/PUFQxq7CrDfn/67yHUM7CAfmP4CqjGx +arPifJ6n6iImLgUUYo0lfa37UaHdwLpyL+/msbsDgtk6bJovT2sZTpW/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPC3yyQk/PS0rz3FrDV2JVimGzzEMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/YECWUc ciu91xtJD90N3ZTfdlf6L0R8o5pp+6apBN0lQ/jppCAVm6W2u4QigwsUXRNnrTQl Q75+9frtBC/S0xmWAv35tLIdQr7q04Z5vYoR26F/sN8h4nxaESj4pcjWKnBISIrB FRERKN4qXDX0BdXgMTVIc/QdHGYANoIPpRo46fzV0+3MYjrI4OA40gPrfzxCRxyp Km1PIOdZVB3vN2jGNUEM76FPrieWWfi++mJC7DNr2yG0rt2tU4LQI8Fg0zeaeVfn OZtgrpJTGOFKQaWJqxZQv0iPndzgXIe2tpuKvBRBJDsfuuyVnXit54816YFmH3Ef 3z78Ey0qGbpbOA== -----END CERTIFICATE-----Generated at Sun Apr 27 12:17:33 2025 by rpki-client