$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: HgvHXqF6tUY2eus8x495KxsrIaJzNz6eM5ow3opXwoQ= Subject key identifier: E3:25:FB:07:DE:45:C2:B6:15:26:21:FD:21:01:5B:82:07:59:91:4D Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 01978244E0451E5AEF94961B25C90CF81E15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 15AA Signing time: Wed 18 Jun 2025 09:00:41 +0000 Manifest this update: Wed 18 Jun 2025 09:00:41 +0000 Manifest next update: Thu 19 Jun 2025 09:00:41 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: aBg82XFSHB/uGkfL4GkGswV0dOMUMZ+dcEMm2BtNuwQ=) 7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=) 10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:82:44:e0:45:1e:5a:ef:94:96:1b:25:c9:0c:f8:1e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Jun 18 09:00:41 2025 GMT Not After : Jun 19 09:00:41 2025 GMT Subject: CN=e325fb07de45c2b6152621fd21015b820759914d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:f8:ac:38:4c:2e:a7:fd:08:ec:56:74:64: 87:47:59:73:72:41:11:b9:90:66:27:e9:e0:f3:44: 86:eb:9b:0f:94:e0:f2:6a:7e:3b:0e:bb:a5:05:c3: 94:0c:53:cf:0d:dd:5f:51:46:b7:1c:07:8d:fb:cf: fd:4b:3e:34:84:5e:f8:1c:cf:3c:af:a1:8b:c0:03: 63:1f:9d:76:9d:e2:c4:3f:67:2e:72:e2:1e:01:41: ac:8d:f4:ed:e5:cd:ce:2c:bc:f8:88:36:9d:82:a3: ea:a6:af:9c:a7:88:02:c2:7f:63:38:3e:7a:93:ba: 0d:98:c3:d2:3d:d8:8f:b7:08:0a:fe:39:a3:c2:e6: da:74:6a:d0:3a:50:1f:54:25:ea:f6:16:e0:7f:63: 0b:8f:d3:90:ab:da:e9:b9:25:ca:d9:38:55:67:3a: f9:5c:f4:e6:8f:7c:fb:28:d1:35:ac:6c:c0:35:0c: f6:6b:ae:75:47:98:75:2f:79:f5:96:1e:aa:20:40: cf:66:aa:f0:36:ee:31:a4:f9:b2:40:b5:d2:b4:dd: bb:21:4b:ec:eb:e6:33:46:3a:1a:5d:b7:1c:f9:6c: 43:7b:49:73:ca:d3:f0:81:6a:02:62:d8:49:63:61: fa:7d:32:a8:78:22:c5:24:49:53:b1:25:23:c9:52: 09:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:25:FB:07:DE:45:C2:B6:15:26:21:FD:21:01:5B:82:07:59:91:4D X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ca:4d:bf:00:70:d0:cb:b8:ac:0c:b8:6d:94:9f:17:36:29: 64:a1:d3:1a:56:6c:01:50:e0:fa:90:32:4a:d0:c8:06:9b:ca: c1:eb:99:6b:b6:9b:17:d2:4a:c4:a7:d4:7d:60:88:23:8d:a4: cd:41:0a:6e:af:f0:e9:6c:d2:f7:1c:c2:cb:52:40:7e:98:21: f3:2f:66:bf:cd:28:ce:0b:07:3b:bd:7d:05:df:fd:92:44:0a: d3:95:33:1d:fa:90:da:c7:fd:23:b5:92:9f:5c:29:6a:75:89: 50:db:35:1d:85:03:e3:3a:a7:58:26:6b:05:0f:49:f7:41:07: e0:a4:6a:4f:44:11:10:19:74:12:a5:da:00:58:24:d6:92:5a: e0:b6:bc:62:45:8f:e6:a0:c0:b4:5e:5a:af:20:99:06:16:89: b6:2a:ae:19:7e:74:31:bd:ef:7e:93:e4:3c:c3:77:eb:22:fd: 1c:2c:04:90:c3:41:41:fd:9e:7d:5e:8b:df:5e:3f:15:d9:e6: c7:5c:32:2d:70:ca:c4:27:ca:cf:55:71:d5:a1:9c:13:f8:53: ca:ff:6f:74:a6:77:2e:da:6c:97:62:64:9b:78:5c:67:44:93: 18:bd:ea:cf:7a:3d:57:5f:dc:45:8d:72:86:b1:b2:68:1f:1d: 12:85:59:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeCROBFHlrvlJYbJckM+B4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUwNjE4MDkwMDQxWhcNMjUwNjE5MDkwMDQxWjAzMTEwLwYDVQQD EyhlMzI1ZmIwN2RlNDVjMmI2MTUyNjIxZmQyMTAxNWI4MjA3NTk5MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXr4rDhMLqf9COxWdGSHR1lzckER uZBmJ+ng80SG65sPlODyan47DrulBcOUDFPPDd1fUUa3HAeN+8/9Sz40hF74HM88 r6GLwANjH512neLEP2cucuIeAUGsjfTt5c3OLLz4iDadgqPqpq+cp4gCwn9jOD56 k7oNmMPSPdiPtwgK/jmjwubadGrQOlAfVCXq9hbgf2MLj9OQq9rpuSXK2ThVZzr5 XPTmj3z7KNE1rGzANQz2a651R5h1L3n1lh6qIEDPZqrwNu4xpPmyQLXStN27IUvs 6+YzRjoaXbcc+WxDe0lzytPwgWoCYthJY2H6fTKoeCLFJElTsSUjyVIJGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMl+wfeRcK2FSYh/SEBW4IHWZFNMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8pNvwBw 0Mu4rAy4bZSfFzYpZKHTGlZsAVDg+pAyStDIBpvKweuZa7abF9JKxKfUfWCII42k zUEKbq/w6WzS9xzCy1JAfpgh8y9mv80ozgsHO719Bd/9kkQK05UzHfqQ2sf9I7WS n1wpanWJUNs1HYUD4zqnWCZrBQ9J90EH4KRqT0QREBl0EqXaAFgk1pJa4La8YkWP 5qDAtF5aryCZBhaJtiquGX50Mb3vfpPkPMN36yL9HCwEkMNBQf2efV6L314/Fdnm x1wyLXDKxCfKz1Vx1aGcE/hTyv9vdKZ3Ltpsl2Jkm3hcZ0STGL3qz3o9V1/cRY1y hrGyaB8dEoVZKA== -----END CERTIFICATE-----Generated at Wed Jun 18 18:07:45 2025 by rpki-client