$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: 5JCqV7ziy9TciAoOVIpZeHVlS7s1kyuy3m5z2Yw3UXE= Subject key identifier: CC:DC:74:C6:9D:24:EB:6F:BC:C4:A5:4A:2B:2C:01:DE:66:96:6E:99 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 0197B96B20295C8EBEA411469D7546FD3DF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 15AD Signing time: Sun 29 Jun 2025 02:01:34 +0000 Manifest this update: Sun 29 Jun 2025 02:01:34 +0000 Manifest next update: Mon 30 Jun 2025 02:01:34 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: BICN0zNCuHEzIcgocQpcY/IhTZHuuuKiF04DOADBlLo=) 9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 11: cVvRDlFeixczJTqCXcYlQV8jbs4.roa (hash: HdjTlGqisKFCHucis0QwNwMDwyNde7NA3CJ0MQRIDug=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b9:6b:20:29:5c:8e:be:a4:11:46:9d:75:46:fd:3d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jun 29 02:01:34 2025 GMT Not After : Jun 30 02:01:34 2025 GMT Subject: CN=ccdc74c69d24eb6fbcc4a54a2b2c01de66966e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:54:5f:2c:0b:34:7f:26:47:23:b8:a7:f9:74: 4b:d2:f7:b4:74:22:d5:6d:ff:d0:cc:d1:08:0a:ee: 4a:db:03:f5:04:6c:05:92:d7:bd:0e:6c:f9:d9:e3: 67:f3:b0:32:5a:eb:cf:62:4c:61:cb:a0:0a:d1:89: 21:41:25:e4:cf:ee:14:aa:16:3a:cf:96:81:5c:cb: 18:7f:0e:f8:56:3b:ec:83:ff:e5:97:ea:85:f8:6d: cc:53:46:6c:50:35:ef:91:95:4d:85:8a:f3:6a:45: bc:44:f1:91:96:41:53:d2:3d:4a:6a:da:16:c0:ed: bd:51:0e:69:50:16:07:15:a7:a0:5f:39:fa:48:5c: fb:35:19:c1:57:98:6a:02:54:08:fc:bc:93:ce:74: 9e:ea:2d:7d:52:8a:5a:38:ac:95:85:bb:58:18:d8: e5:fb:e1:90:e1:0b:33:34:78:43:92:8b:55:5e:4e: f8:43:bb:3a:45:a4:fd:8d:54:ea:72:d3:da:17:b0: 0b:70:56:f5:b6:40:0f:bd:a9:ad:77:73:d9:13:1f: 60:30:94:5f:ce:7a:a0:91:0e:45:3f:0b:ae:0c:4c: 49:f3:d9:cf:95:c7:d1:ef:7c:0b:25:b4:ca:b0:fd: b2:eb:2d:df:31:16:82:d5:26:e7:69:39:55:40:69: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:74:C6:9D:24:EB:6F:BC:C4:A5:4A:2B:2C:01:DE:66:96:6E:99 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:24:78:c9:ac:cf:85:eb:9b:2a:6d:d6:06:a8:85:63:63:56: 09:dc:f8:76:46:17:99:c2:e9:23:72:16:9b:c9:29:5f:e3:79: 43:6f:6a:89:56:47:27:b5:dc:e0:ce:14:67:79:ce:62:f0:54: 66:bf:68:37:eb:cf:05:c9:e7:ab:e3:8f:23:55:0a:08:64:a5: bb:53:d4:a8:dc:25:96:b3:a8:04:53:14:b2:3e:98:d6:5d:cd: dd:47:fd:52:64:8f:8b:7d:a5:9e:44:46:69:ae:8f:f3:b3:fd: e9:65:92:4b:41:3d:ed:b6:96:fe:fc:69:a1:c9:ed:7f:d9:e8: 98:10:b6:20:0a:21:98:6d:28:bb:41:9c:e7:8e:5d:41:21:b1: e4:56:30:29:8f:7c:2e:fd:03:1c:27:07:0d:14:b8:86:66:4f: d8:cd:4b:34:73:55:b9:59:a8:77:f3:17:42:7c:5a:5c:77:80: d4:c3:1e:1b:8a:82:37:d8:b1:be:61:19:e7:1f:98:f4:53:bc: 0d:02:13:0b:1f:c1:b8:7f:d0:d1:d7:2a:97:7d:75:b1:2c:f1: fc:e5:bd:44:76:c7:b3:5d:3f:4f:40:b2:36:2f:53:57:7e:bd: 05:29:aa:d9:1e:c7:ea:7b:e8:af:58:a7:50:d1:3e:62:70:69: e9:6d:f3:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe5ayApXI6+pBFGnXVG/T31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUwNjI5MDIwMTM0WhcNMjUwNjMwMDIwMTM0WjAzMTEwLwYDVQQD EyhjY2RjNzRjNjlkMjRlYjZmYmNjNGE1NGEyYjJjMDFkZTY2OTY2ZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lRfLAs0fyZHI7in+XRL0ve0dCLV bf/QzNEICu5K2wP1BGwFkte9Dmz52eNn87AyWuvPYkxhy6AK0YkhQSXkz+4UqhY6 z5aBXMsYfw74Vjvsg//ll+qF+G3MU0ZsUDXvkZVNhYrzakW8RPGRlkFT0j1KatoW wO29UQ5pUBYHFaegXzn6SFz7NRnBV5hqAlQI/LyTznSe6i19UopaOKyVhbtYGNjl ++GQ4QszNHhDkotVXk74Q7s6RaT9jVTqctPaF7ALcFb1tkAPvamtd3PZEx9gMJRf znqgkQ5FPwuuDExJ89nPlcfR73wLJbTKsP2y6y3fMRaC1SbnaTlVQGm8/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzcdMadJOtvvMSlSissAd5mlm6ZMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvSR4yazP heubKm3WBqiFY2NWCdz4dkYXmcLpI3IWm8kpX+N5Q29qiVZHJ7Xc4M4UZ3nOYvBU Zr9oN+vPBcnnq+OPI1UKCGSlu1PUqNwllrOoBFMUsj6Y1l3N3Uf9UmSPi32lnkRG aa6P87P96WWSS0E97baW/vxpocntf9nomBC2IAohmG0ou0Gc545dQSGx5FYwKY98 Lv0DHCcHDRS4hmZP2M1LNHNVuVmod/MXQnxaXHeA1MMeG4qCN9ixvmEZ5x+Y9FO8 DQITCx/BuH/Q0dcql311sSzx/OW9RHbHs10/T0CyNi9TV369BSmq2R7H6nvor1in UNE+YnBp6W3z+g== -----END CERTIFICATE-----Generated at Sun Jun 29 04:45:10 2025 by rpki-client