$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: CYIYl0JZH2zJVEH19bgLovDDeSuNdydp//UbgY97G/s= Subject key identifier: 08:2E:C8:32:54:91:E0:AB:7E:A5:EE:17:42:AD:8F:EE:42:41:E0:99 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019673E6E65D758DB3F236595CFC7AF42362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 151E Signing time: Sat 26 Apr 2025 21:00:34 +0000 Manifest this update: Sat 26 Apr 2025 21:00:34 +0000 Manifest next update: Sun 27 Apr 2025 21:00:34 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: OqKTLyNXFWhMraKSSYUaxDnpfr6nwPYJs3OX4pLJ5Lk=) 7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=) 10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:e6:e6:5d:75:8d:b3:f2:36:59:5c:fc:7a:f4:23:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Apr 26 21:00:34 2025 GMT Not After : Apr 27 21:00:34 2025 GMT Subject: CN=082ec8325491e0ab7ea5ee1742ad8fee4241e099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:5d:28:85:13:c8:47:8f:f5:a6:17:81:8b: 0e:00:78:ec:55:e2:ce:10:55:57:71:5e:cf:73:61: e4:01:b0:f7:a5:d7:d0:33:50:23:97:b7:c6:0d:6a: b1:4b:a1:67:af:1c:f7:70:71:25:3f:47:ca:dc:49: 0f:ad:f0:74:da:09:8e:4b:34:a7:72:f4:e6:c7:dc: 17:5c:1b:a9:fd:b0:c1:cc:ff:c8:4c:70:ab:ac:dc: 65:6e:5a:c6:7f:c9:08:ae:3d:93:13:a1:76:f6:4a: d0:16:a8:bc:c3:f3:c6:c8:42:e5:3a:0c:c6:39:6d: 32:62:07:36:2d:60:ab:43:d3:d9:70:b9:aa:47:66: 46:16:75:bf:1b:5c:65:5e:00:63:f9:99:30:ea:fb: 0b:81:91:78:aa:27:f5:14:7b:c4:13:de:25:d1:9c: 52:0c:ae:6b:5e:3c:5d:31:50:35:bc:5b:37:81:96: 54:20:00:fb:bb:2c:bb:7f:a3:50:c3:f5:3f:6f:cd: 94:f1:6c:88:3e:da:3c:9c:db:60:a7:ec:d1:9c:4f: 53:07:94:55:ce:fb:b6:28:5b:dc:f5:70:79:6c:1f: 28:0d:dd:17:73:2f:c0:1f:1e:70:a1:1b:5a:20:6c: 83:8f:63:6f:1c:a4:2a:f0:ec:b3:c1:f4:3b:7e:5e: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2E:C8:32:54:91:E0:AB:7E:A5:EE:17:42:AD:8F:EE:42:41:E0:99 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:74:b5:a0:91:2f:c5:8a:c3:1f:1f:b7:09:fa:4c:4b:55:8c: f6:7d:b1:44:2c:e2:44:77:3d:c1:72:07:41:66:5a:02:4f:e8: a5:0a:7c:40:de:11:f7:6c:86:1a:ef:50:5f:ae:fe:4f:d8:ef: a1:42:98:5c:c5:4b:a0:0b:64:c6:49:8a:c2:05:ba:fd:ba:61: d9:f3:75:7a:04:f3:6a:c7:83:69:e9:3a:21:f6:ad:c1:04:b3: 07:db:02:df:3a:99:f5:3b:96:f6:3e:02:21:02:13:aa:2c:b2: e4:19:bb:3e:bb:6e:ce:6d:7c:04:29:b8:bb:b1:76:2c:9b:78: 5a:7c:cc:a8:0b:86:d0:89:e9:4a:4b:fd:13:a0:b8:de:8c:f1: 31:b1:4c:a5:1b:8c:6a:4c:65:e6:07:6e:34:04:01:5c:8a:3e: 1a:0a:9a:af:6e:70:76:57:4d:2b:f4:da:ba:55:e5:b7:2a:a0: cf:4d:1b:19:36:99:17:bf:19:e7:0b:ac:9a:93:30:ab:2d:65: 36:6a:e5:f7:d8:1b:ef:6d:65:9f:3c:28:8a:06:ca:4a:99:d7: 02:54:42:03:a5:26:35:36:d3:ad:df:89:31:cc:c5:36:0b:5f: e7:55:8e:c1:29:2a:cb:dd:fb:91:ee:f3:fd:52:8c:12:27:ab: fa:13:9f:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZz5uZddY2z8jZZXPx69CNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUwNDI2MjEwMDM0WhcNMjUwNDI3MjEwMDM0WjAzMTEwLwYDVQQD EygwODJlYzgzMjU0OTFlMGFiN2VhNWVlMTc0MmFkOGZlZTQyNDFlMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj61dKIUTyEeP9aYXgYsOAHjsVeLO EFVXcV7Pc2HkAbD3pdfQM1Ajl7fGDWqxS6Fnrxz3cHElP0fK3EkPrfB02gmOSzSn cvTmx9wXXBup/bDBzP/ITHCrrNxlblrGf8kIrj2TE6F29krQFqi8w/PGyELlOgzG OW0yYgc2LWCrQ9PZcLmqR2ZGFnW/G1xlXgBj+Zkw6vsLgZF4qif1FHvEE94l0ZxS DK5rXjxdMVA1vFs3gZZUIAD7uyy7f6NQw/U/b82U8WyIPto8nNtgp+zRnE9TB5RV zvu2KFvc9XB5bB8oDd0Xcy/AHx5woRtaIGyDj2NvHKQq8OyzwfQ7fl7v9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAguyDJUkeCrfqXuF0Ktj+5CQeCZMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnS1oJEv xYrDHx+3CfpMS1WM9n2xRCziRHc9wXIHQWZaAk/opQp8QN4R92yGGu9QX67+T9jv oUKYXMVLoAtkxkmKwgW6/bph2fN1egTzaseDaek6IfatwQSzB9sC3zqZ9TuW9j4C IQITqiyy5Bm7Prtuzm18BCm4u7F2LJt4WnzMqAuG0InpSkv9E6C43ozxMbFMpRuM akxl5gduNAQBXIo+Ggqar25wdldNK/TaulXltyqgz00bGTaZF78Z5wusmpMwqy1l Nmrl99gb721lnzwoigbKSpnXAlRCA6UmNTbTrd+JMczFNgtf51WOwSkqy937ke7z /VKMEier+hOfMA== -----END CERTIFICATE-----Generated at Sun Apr 27 04:14:12 2025 by rpki-client