$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: GWa/5nD3txvZqB2kEXW3VkmH9a5lYb29F8BcdEv01Zc= Subject key identifier: A6:D3:4C:10:60:AB:A8:77:B2:C7:2E:7A:F0:7D:42:70:CE:C8:36:AB Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 0196BB91BAFA0DECCB26BDFEDDDA3B1D532B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 126E Signing time: Sat 10 May 2025 19:00:12 +0000 Manifest this update: Sat 10 May 2025 19:00:12 +0000 Manifest next update: Sun 11 May 2025 19:00:12 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: xbIeY5XlxxT7IjbCZoEx4YA9ux+rgym8vjqrl+d4MYM=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 19:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bb:91:ba:fa:0d:ec:cb:26:bd:fe:dd:da:3b:1d:53:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: May 10 19:00:12 2025 GMT Not After : May 11 19:00:12 2025 GMT Subject: CN=a6d34c1060aba877b2c72e7af07d4270cec836ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:38:52:2d:6f:71:25:d4:82:9b:b5:dc:ab: 38:4e:12:46:5d:13:eb:10:f1:43:cd:90:48:81:7e: 76:92:4e:d8:76:ba:52:12:7f:00:54:3d:c7:6b:94: 39:48:60:3b:df:63:e8:fe:7e:a0:4c:13:f0:46:8c: 33:ab:88:0e:2d:38:1e:98:96:e4:83:26:52:94:aa: 8f:8f:01:fa:5e:7a:39:18:bc:64:2a:29:e0:21:6b: a2:83:e2:a2:22:b3:8c:00:51:d1:74:fc:2e:05:a7: f0:36:ce:3e:50:a3:6b:6b:39:e5:6e:a0:0d:39:f8: 49:70:6e:08:93:1d:e3:ae:7b:bb:1e:b1:24:5f:2d: f6:f4:93:0a:8a:db:96:d8:79:9c:21:65:41:de:ae: 54:09:9b:86:1f:35:23:93:48:ee:b6:46:6c:90:ad: 6a:a1:ac:d6:0b:a9:bb:c9:0d:73:2f:8d:ab:22:b2: 41:ee:d8:58:eb:b4:0e:43:c3:b4:ce:6a:99:fa:2c: 65:80:6d:70:d6:b3:14:dc:76:70:9e:15:e6:ca:b2: 70:c2:cd:de:de:fe:72:09:25:4c:2f:46:2e:98:f7: e5:a7:c2:51:1e:80:02:e0:4f:97:fe:af:10:2a:f9: c7:b1:ef:1b:85:b8:e4:b2:36:8a:a8:d7:3f:f4:a7: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D3:4C:10:60:AB:A8:77:B2:C7:2E:7A:F0:7D:42:70:CE:C8:36:AB X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2d:4e:d1:9c:08:00:91:02:1f:d0:44:f9:34:3d:1d:0e:ed: 54:62:85:fc:2b:96:0e:c4:63:42:fd:b6:81:0a:cb:8e:83:e9: 4a:c5:f3:52:f8:d1:ec:15:93:71:6d:36:6c:03:43:4d:ae:24: 2c:cb:7d:12:7e:19:1d:46:aa:37:49:42:61:68:c0:45:8b:46: cd:7f:bf:04:4b:c0:88:39:af:b7:00:43:80:84:94:ba:eb:d9: 59:d7:5e:c5:57:25:b9:c2:a0:08:61:4b:56:bf:de:06:ca:61: 12:7d:16:9f:de:32:ba:e9:57:b5:5d:c7:3a:cb:fa:cf:a6:c6: 0e:7f:bb:02:2e:5e:66:f6:42:65:09:75:ef:28:d9:80:c1:e2: 83:93:2c:8a:82:ed:cc:55:f6:e7:80:e5:b9:5f:54:34:51:b6: 14:9e:ea:65:95:87:5a:13:71:84:b1:d8:70:9d:7a:c6:64:cc: 95:bb:da:28:8d:51:0c:03:57:2e:ab:54:bd:8d:7a:c1:d0:89: 56:57:3f:a6:58:67:52:c3:da:7b:b4:43:c4:c0:ef:d1:9a:65: eb:30:ed:ec:51:86:02:de:0d:bc:ed:1a:3a:3e:f1:b2:6b:fa: a9:fc:40:1f:de:63:5d:f2:32:cc:26:9e:f9:b6:d6:50:6d:db: 23:f9:aa:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa7kbr6DezLJr3+3do7HVMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUwNTEwMTkwMDEyWhcNMjUwNTExMTkwMDEyWjAzMTEwLwYDVQQD EyhhNmQzNGMxMDYwYWJhODc3YjJjNzJlN2FmMDdkNDI3MGNlYzgzNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBU4Ui1vcSXUgpu13Ks4ThJGXRPr EPFDzZBIgX52kk7YdrpSEn8AVD3Ha5Q5SGA732Po/n6gTBPwRowzq4gOLTgemJbk gyZSlKqPjwH6Xno5GLxkKingIWuig+KiIrOMAFHRdPwuBafwNs4+UKNraznlbqAN OfhJcG4Ikx3jrnu7HrEkXy329JMKituW2HmcIWVB3q5UCZuGHzUjk0jutkZskK1q oazWC6m7yQ1zL42rIrJB7thY67QOQ8O0zmqZ+ixlgG1w1rMU3HZwnhXmyrJwws3e 3v5yCSVML0YumPflp8JRHoAC4E+X/q8QKvnHse8bhbjksjaKqNc/9KfroQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbTTBBgq6h3sscuevB9QnDOyDarMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS1O0ZwI AJECH9BE+TQ9HQ7tVGKF/CuWDsRjQv22gQrLjoPpSsXzUvjR7BWTcW02bANDTa4k LMt9En4ZHUaqN0lCYWjARYtGzX+/BEvAiDmvtwBDgISUuuvZWddexVclucKgCGFL Vr/eBsphEn0Wn94yuulXtV3HOsv6z6bGDn+7Ai5eZvZCZQl17yjZgMHig5MsioLt zFX254DluV9UNFG2FJ7qZZWHWhNxhLHYcJ16xmTMlbvaKI1RDANXLqtUvY16wdCJ Vlc/plhnUsPae7RDxMDv0Zpl6zDt7FGGAt4NvO0aOj7xsmv6qfxAH95jXfIyzCae +bbWUG3bI/mq+g== -----END CERTIFICATE-----Generated at Sun May 11 04:01:41 2025 by rpki-client