$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: rl35m0T1vm2illE4Cdt+LQBODMexrPt2My9Xr7hLS40= Subject key identifier: DE:4A:37:D4:9B:42:BB:DD:39:D7:52:50:71:D2:5F:15:E8:F0:0C:43 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 0198D5F151248ED29F95FA0B548297E46B03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1641 Signing time: Sat 23 Aug 2025 08:00:18 +0000 Manifest this update: Sat 23 Aug 2025 08:00:18 +0000 Manifest next update: Sun 24 Aug 2025 08:00:18 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: B5JdwhCZUT3lsFT5EglSAa6IujCeRXIJxU12i+Yc/0E=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:f1:51:24:8e:d2:9f:95:fa:0b:54:82:97:e4:6b:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Aug 23 08:00:18 2025 GMT Not After : Aug 24 08:00:18 2025 GMT Subject: CN=de4a37d49b42bbdd39d7525071d25f15e8f00c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:7a:c9:33:39:8d:43:a2:b0:2c:8a:0d:eb: 65:6d:08:3c:dc:ce:fa:92:a3:ef:8c:fb:48:c2:a0: a0:d4:4e:ab:58:29:d0:c6:3e:c7:f9:50:a9:f4:01: 15:3d:6f:36:55:17:d2:47:42:44:63:ef:59:d6:31: d3:2e:d8:3c:3f:2b:4c:9b:8c:db:00:5d:cf:5f:e4: e5:b8:2c:b2:ff:a2:b5:2a:32:b1:eb:c0:53:14:42: a3:ee:1b:76:2a:51:04:43:a2:d9:1f:be:4e:4f:bf: 66:16:54:aa:a8:13:9c:01:98:6e:35:90:5c:72:e9: 3e:30:0e:6e:7b:21:6b:f4:db:08:83:3a:fd:bf:14: 18:d5:bc:22:01:61:6c:11:1f:b4:88:c6:bd:63:32: da:db:0f:b1:95:59:94:01:e8:41:30:9d:ab:5f:79: 63:d1:37:1e:fd:9a:6b:9e:3b:fb:a5:33:b1:36:54: 4e:e3:b8:14:bd:35:f4:d6:36:a7:0f:1f:2c:db:dc: 1f:ef:ce:9d:52:9d:a7:1f:53:d4:9a:78:53:93:ff: 35:4e:51:67:3f:9b:e5:bc:86:ef:fd:e7:d6:89:4c: fd:14:95:f4:45:7f:8e:17:7b:1a:d7:f8:4f:e7:13: 64:8c:ec:e3:ec:cc:ab:89:4a:6f:ee:60:9c:f5:ee: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:37:D4:9B:42:BB:DD:39:D7:52:50:71:D2:5F:15:E8:F0:0C:43 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:52:b1:5c:1e:df:8d:22:a6:92:a4:ec:d0:ed:30:e5:b3:32: ad:a4:de:b3:c8:cc:45:d6:18:5a:2f:23:a1:e4:86:1a:54:98: 36:6f:04:98:ea:21:af:06:aa:5e:78:e8:ce:29:6b:e6:1e:e9: fc:5e:67:e8:a5:6c:c3:96:45:83:e1:95:a0:54:d1:45:6a:fd: e3:2a:2c:f2:c1:04:63:24:71:82:be:87:a5:bd:a5:5c:86:e9: 30:06:4b:c6:51:00:50:cf:b0:a9:8e:e4:56:e7:de:a1:7e:a6: 89:d2:5b:27:5e:30:3d:d4:e8:2a:1d:c2:2e:ee:d0:d8:2a:23: a7:ba:b8:f0:44:b7:31:16:f2:e2:67:3b:c0:35:f5:0b:8f:f6: 83:1b:18:fd:2a:57:c1:05:92:be:e3:fe:85:29:2c:c9:1f:95: 1f:57:ef:e1:83:c8:67:3e:81:79:4b:6f:de:41:a6:2e:48:cc: f0:9b:5d:5d:e2:ca:18:9f:bc:8c:4d:51:6a:80:d7:31:56:d9: 45:de:fe:dc:12:f6:cc:c6:59:77:75:2b:46:0e:3a:1e:f7:fe: 33:34:3b:5a:95:4a:68:8b:82:7e:04:9d:5d:7b:cf:f9:ba:6e: c4:96:1e:6b:95:43:dc:70:9c:51:4e:12:8f:8e:4c:0c:4d:d3: 7b:aa:8a:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjV8VEkjtKflfoLVIKX5GsDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwODIzMDgwMDE4WhcNMjUwODI0MDgwMDE4WjAzMTEwLwYDVQQD EyhkZTRhMzdkNDliNDJiYmRkMzlkNzUyNTA3MWQyNWYxNWU4ZjAwYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bl6yTM5jUOisCyKDetlbQg83M76 kqPvjPtIwqCg1E6rWCnQxj7H+VCp9AEVPW82VRfSR0JEY+9Z1jHTLtg8PytMm4zb AF3PX+TluCyy/6K1KjKx68BTFEKj7ht2KlEEQ6LZH75OT79mFlSqqBOcAZhuNZBc cuk+MA5ueyFr9NsIgzr9vxQY1bwiAWFsER+0iMa9YzLa2w+xlVmUAehBMJ2rX3lj 0Tce/Zprnjv7pTOxNlRO47gUvTX01janDx8s29wf786dUp2nH1PUmnhTk/81TlFn P5vlvIbv/efWiUz9FJX0RX+OF3sa1/hP5xNkjOzj7MyriUpv7mCc9e688QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5KN9SbQrvdOddSUHHSXxXo8AxDMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFKxXB7f jSKmkqTs0O0w5bMyraTes8jMRdYYWi8joeSGGlSYNm8EmOohrwaqXnjozilr5h7p /F5n6KVsw5ZFg+GVoFTRRWr94yos8sEEYyRxgr6Hpb2lXIbpMAZLxlEAUM+wqY7k VufeoX6midJbJ14wPdToKh3CLu7Q2Cojp7q48ES3MRby4mc7wDX1C4/2gxsY/SpX wQWSvuP+hSksyR+VH1fv4YPIZz6BeUtv3kGmLkjM8JtdXeLKGJ+8jE1RaoDXMVbZ Rd7+3BL2zMZZd3UrRg46Hvf+MzQ7WpVKaIuCfgSdXXvP+bpuxJYea5VD3HCcUU4S j45MDE3Te6qKeg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:12 2025 by rpki-client