$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: dhJHhivDHF/mgM7PL0XxlsZMGotiOKFnb1a2lTuVXhA= Subject key identifier: B2:D2:C3:03:09:CF:DB:73:E1:09:27:FA:84:92:D2:23:41:86:4F:05 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 0196B4EB5E54BBF44B922BAAACEE23D3D7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1526 Signing time: Fri 09 May 2025 12:00:46 +0000 Manifest this update: Fri 09 May 2025 12:00:46 +0000 Manifest next update: Sat 10 May 2025 12:00:46 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: RBKlQsF4vY2Hpm+aJLyz7NlOWuxk7OpArycKuN4sso8=) 9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 11: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 12: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 13: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 14: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 15: lzfdj3sYjKwxJ-lEm4PMRG_z-x0.roa (hash: k0S/RTqMQtMqoYVsegJF/SGrW/zlHJLMymOnkkPiIpo=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b4:eb:5e:54:bb:f4:4b:92:2b:aa:ac:ee:23:d3:d7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: May 9 12:00:46 2025 GMT Not After : May 10 12:00:46 2025 GMT Subject: CN=b2d2c30309cfdb73e10927fa8492d22341864f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fc:4f:6b:c9:32:c2:13:93:64:94:81:bd:fb: 04:75:d2:26:f3:6b:31:2e:a7:60:c2:96:32:2e:ad: 5d:a8:5e:6d:5b:41:41:79:d7:a8:cd:60:db:05:79: 83:13:3e:63:23:df:49:93:e9:6b:5c:27:ff:ad:05: 69:2f:ea:22:e8:6a:b7:15:5c:8d:3a:9b:ab:c9:6e: 50:8d:d0:32:d7:f0:27:ff:d6:30:5d:c9:fc:0f:b5: e5:84:38:1c:6f:29:58:64:0b:21:fe:c1:fe:0e:ea: 57:f3:a1:ff:c0:0f:03:e0:c0:ea:06:e4:0b:39:33: 79:de:32:2d:b2:d7:4c:a6:3b:be:45:15:8b:2f:ea: 14:74:ab:a2:ec:b3:16:c8:81:a7:f5:cc:d8:3f:06: 49:fa:c2:88:9e:44:4a:86:19:89:8f:7c:dd:ce:88: bb:ce:4b:d3:6f:76:e1:1d:7d:6f:78:46:3e:97:8e: 9a:36:ef:f5:04:d7:90:ed:96:9d:a0:5d:38:51:82: cf:9e:d4:b1:61:98:1b:12:ac:8d:c0:09:fe:85:55: 48:3a:ef:0a:3f:13:90:b3:a7:0a:f7:88:71:cf:d4: 1e:cc:2d:09:07:6b:6e:1a:9f:70:3b:ad:f1:b9:9e: a0:93:6a:76:5a:05:65:6c:14:bd:68:9a:1d:65:94: 2e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D2:C3:03:09:CF:DB:73:E1:09:27:FA:84:92:D2:23:41:86:4F:05 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:91:e0:20:a2:b4:7f:1a:c0:1c:5d:39:5a:c3:4c:a6:31:a3: 0d:ab:2b:a4:b2:29:57:2c:1b:09:91:a6:53:5f:93:93:37:a4: ae:db:d8:06:df:b2:e4:ff:d2:9a:9e:3c:0b:2d:81:67:72:d2: 6b:8a:4c:7d:d1:12:8a:be:5f:5d:9e:af:f2:b3:38:bf:d7:22: 4f:db:22:45:8c:e4:33:44:5d:db:fa:2d:b2:68:64:94:15:bc: 0c:23:c5:f5:83:39:80:02:2d:1c:17:aa:57:82:d7:39:4a:48: ec:8d:7c:8a:56:96:41:da:3d:b0:1c:99:52:2a:03:1c:ee:11: be:03:de:26:91:86:f7:59:96:6e:53:f7:83:dc:4d:b7:6a:e7: 56:30:1f:c2:a0:0b:28:4e:8e:cb:16:1f:03:a2:65:33:ce:1f: a3:7d:4e:24:8a:6f:81:43:bb:75:19:eb:91:c3:01:d2:90:9d: 18:04:56:72:3e:28:e9:2c:ac:41:c1:60:87:c0:83:57:ed:33: 0e:e5:08:8d:9c:ac:bb:74:a4:4d:7a:f7:4c:fa:db:77:25:83: 58:27:8f:1e:be:01:02:1e:ce:eb:47:c8:35:65:6a:72:64:a4: 42:92:61:f9:7c:c3:f7:e8:53:50:f0:ed:c7:6b:07:0f:b1:3e: 70:5c:2e:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa0615Uu/RLkiuqrO4j09eqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwNTA5MTIwMDQ2WhcNMjUwNTEwMTIwMDQ2WjAzMTEwLwYDVQQD EyhiMmQyYzMwMzA5Y2ZkYjczZTEwOTI3ZmE4NDkyZDIyMzQxODY0ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPxPa8kywhOTZJSBvfsEddIm82sx LqdgwpYyLq1dqF5tW0FBedeozWDbBXmDEz5jI99Jk+lrXCf/rQVpL+oi6Gq3FVyN OpuryW5QjdAy1/An/9YwXcn8D7XlhDgcbylYZAsh/sH+DupX86H/wA8D4MDqBuQL OTN53jItstdMpju+RRWLL+oUdKui7LMWyIGn9czYPwZJ+sKInkRKhhmJj3zdzoi7 zkvTb3bhHX1veEY+l46aNu/1BNeQ7ZadoF04UYLPntSxYZgbEqyNwAn+hVVIOu8K PxOQs6cK94hxz9QezC0JB2tuGp9wO63xuZ6gk2p2WgVlbBS9aJodZZQujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLSwwMJz9tz4Qkn+oSS0iNBhk8FMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZHgIKK0 fxrAHF05WsNMpjGjDasrpLIpVywbCZGmU1+TkzekrtvYBt+y5P/Smp48Cy2BZ3LS a4pMfdESir5fXZ6v8rM4v9ciT9siRYzkM0Rd2/otsmhklBW8DCPF9YM5gAItHBeq V4LXOUpI7I18ilaWQdo9sByZUioDHO4RvgPeJpGG91mWblP3g9xNt2rnVjAfwqAL KE6OyxYfA6JlM84fo31OJIpvgUO7dRnrkcMB0pCdGARWcj4o6SysQcFgh8CDV+0z DuUIjZysu3SkTXr3TPrbdyWDWCePHr4BAh7O60fINWVqcmSkQpJh+XzD9+hTUPDt x2sHD7E+cFwuDQ== -----END CERTIFICATE-----Generated at Fri May 9 19:58:35 2025 by rpki-client