$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: Wgr0Pobyll5xYhFrRh696FTUrKNXsVPjKJCHc0Gs9JE= Subject key identifier: 65:39:BE:CB:8C:DE:4E:CA:3A:88:68:78:AC:3B:61:CB:C5:6A:97:87 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 0197B6A0AB6F9DFEBB3A72A3A55CC6519F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 12F0 Signing time: Sat 28 Jun 2025 13:01:12 +0000 Manifest this update: Sat 28 Jun 2025 13:01:12 +0000 Manifest next update: Sun 29 Jun 2025 13:01:12 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: zW25azHjG1C5YKjUuy8MBxqZ3ALVU80MCBKWZNtdqIo=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:ab:6f:9d:fe:bb:3a:72:a3:a5:5c:c6:51:9f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jun 28 13:01:12 2025 GMT Not After : Jun 29 13:01:12 2025 GMT Subject: CN=6539becb8cde4eca3a886878ac3b61cbc56a9787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:a3:5f:c2:35:1a:ac:03:c7:96:0c:52:ec: 8d:81:f0:a2:b7:d4:b0:6f:74:c0:33:88:66:51:bc: f3:89:38:8d:8c:64:b8:bd:e1:1e:81:8e:b8:a5:47: c4:37:10:e6:8c:4e:c2:3a:7f:7d:b9:e0:38:22:ea: 94:5f:34:ea:b7:2f:ab:96:99:2c:5b:65:ba:68:1a: 99:a4:49:82:ea:cd:ec:24:96:f6:1f:a1:c7:55:ce: 48:35:61:95:81:08:27:c1:bf:e6:d0:68:3d:0c:30: 3e:54:05:68:d5:04:8b:1b:57:36:34:0b:84:ea:c1: 97:7d:3e:4c:a2:69:0c:13:a6:95:73:0f:5f:84:a5: b1:b4:22:b1:da:13:3e:ad:58:0e:70:1a:14:4e:ee: f9:dd:7d:e3:6a:6d:ce:9b:f2:fd:cd:1f:bd:a5:59: 0a:56:69:3b:93:82:e5:4d:51:a8:d6:5f:18:65:d5: 34:cf:b8:ce:93:0b:73:02:b2:6b:f0:33:e2:73:56: 34:43:5a:78:b9:8b:02:53:ad:0c:9b:33:84:02:86: 0a:c7:c6:14:84:cb:c8:c2:cf:62:f5:c4:99:9f:1e: 90:ac:0c:6d:11:c1:19:a2:d5:f3:a5:01:9f:3a:82: 58:02:43:27:64:38:9d:51:39:1b:ce:69:ec:68:59: d2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:39:BE:CB:8C:DE:4E:CA:3A:88:68:78:AC:3B:61:CB:C5:6A:97:87 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a5:08:45:d5:ad:ef:d8:c8:80:41:81:2b:09:08:8b:ce:0d: 0b:00:1f:95:3e:a3:e0:5f:c7:00:64:19:50:45:44:d9:3c:ad: 64:cf:7b:25:d7:28:06:f8:4c:ce:aa:73:d2:31:62:ce:07:6f: 44:fc:c7:4e:e3:fd:9b:1d:d9:47:80:20:12:5d:84:93:8f:ff: 95:70:1e:d1:56:e8:de:57:72:88:83:d4:28:e1:76:a4:ca:d4: d9:f6:75:b1:a6:36:cf:6d:85:b9:48:7f:2c:fc:cb:51:cb:b1: c4:6d:1a:0f:0b:3e:94:19:64:c6:08:25:de:22:c1:9c:e5:b5: ea:d3:52:99:50:ae:18:c6:4d:8a:cf:ac:d6:1f:70:17:6b:69: 21:d3:0c:af:04:cb:15:fb:20:21:ae:2b:2a:0b:a6:9f:aa:5e: 89:99:0f:3b:2e:c8:59:5f:99:ee:7a:c5:4f:58:1a:d2:8a:c7: f0:c2:6c:fe:83:59:23:65:03:8a:35:64:47:f0:a6:9a:5c:89: 7e:1d:b2:76:98:da:dd:49:b6:73:78:f3:cd:4d:f4:a2:69:f4: 33:12:f8:76:73:ab:71:8e:04:c1:e8:9a:01:dc:e5:dd:20:0e: 3a:dd:f7:ea:aa:a7:bb:0b:ce:a4:27:06:ca:e2:a6:62:4e:87: 14:5e:a8:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oKtvnf67OnKjpVzGUZ83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUwNjI4MTMwMTEyWhcNMjUwNjI5MTMwMTEyWjAzMTEwLwYDVQQD Eyg2NTM5YmVjYjhjZGU0ZWNhM2E4ODY4NzhhYzNiNjFjYmM1NmE5Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPejX8I1GqwDx5YMUuyNgfCit9Sw b3TAM4hmUbzziTiNjGS4veEegY64pUfENxDmjE7COn99ueA4IuqUXzTqty+rlpks W2W6aBqZpEmC6s3sJJb2H6HHVc5INWGVgQgnwb/m0Gg9DDA+VAVo1QSLG1c2NAuE 6sGXfT5MomkME6aVcw9fhKWxtCKx2hM+rVgOcBoUTu753X3jam3Om/L9zR+9pVkK Vmk7k4LlTVGo1l8YZdU0z7jOkwtzArJr8DPic1Y0Q1p4uYsCU60MmzOEAoYKx8YU hMvIws9i9cSZnx6QrAxtEcEZotXzpQGfOoJYAkMnZDidUTkbzmnsaFnSiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU5vsuM3k7KOohoeKw7YcvFapeHMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6UIRdWt 79jIgEGBKwkIi84NCwAflT6j4F/HAGQZUEVE2TytZM97JdcoBvhMzqpz0jFizgdv RPzHTuP9mx3ZR4AgEl2Ek4//lXAe0Vbo3ldyiIPUKOF2pMrU2fZ1saY2z22FuUh/ LPzLUcuxxG0aDws+lBlkxggl3iLBnOW16tNSmVCuGMZNis+s1h9wF2tpIdMMrwTL FfsgIa4rKgumn6peiZkPOy7IWV+Z7nrFT1ga0orH8MJs/oNZI2UDijVkR/CmmlyJ fh2ydpja3Um2c3jzzU30omn0MxL4dnOrcY4EweiaAdzl3SAOOt336qqnuwvOpCcG yuKmYk6HFF6oMw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:11:00 2025 by rpki-client