$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: OjUShWwIF9c7uDcD6vbWzdFLHgi3eSb5ZhPjYqjbBfE= Subject key identifier: 05:A1:30:97:50:58:C4:CF:DE:E0:F9:0E:0E:B8:85:C9:BF:EB:DE:D8 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 0197B8C5F27313DE374D4623C83853952F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 1207 Signing time: Sat 28 Jun 2025 23:01:09 +0000 Manifest this update: Sat 28 Jun 2025 23:01:09 +0000 Manifest next update: Sun 29 Jun 2025 23:01:09 +0000 Files and hashes: 1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=) 2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: K39JiB+qbjw1yWCNxzuRabw+RHoJT6VvXfi/SoWBI9o=) 8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=) 10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b8:c5:f2:73:13:de:37:4d:46:23:c8:38:53:95:2f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jun 28 23:01:09 2025 GMT Not After : Jun 29 23:01:09 2025 GMT Subject: CN=05a130975058c4cfdee0f90e0eb885c9bfebded8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:a1:ed:0f:84:9f:c8:aa:08:62:1b:98:34: 6f:4b:36:e4:9b:f8:95:8a:31:a1:fc:5c:d5:d9:d0: 48:cc:a1:80:0a:04:90:c1:9e:30:16:42:09:96:0e: c3:c4:7a:61:58:35:72:7f:b2:1a:1e:68:ea:5b:40: 23:d0:12:77:a0:0e:3e:2c:0a:5a:4c:55:03:2c:91: 63:51:38:1f:cf:6e:38:62:c6:bc:61:68:6e:5c:7d: 8b:6d:52:c6:1d:52:b0:e3:14:bf:a2:7f:9b:1b:3a: 44:28:80:4c:2b:dc:bd:25:58:8b:13:9b:fa:f3:5e: 6e:f9:45:44:0c:c4:41:f9:73:00:b6:18:06:61:c9: 10:ef:3d:59:6e:b3:c0:45:84:a3:0d:3c:6b:79:68: 6d:1f:71:c1:2c:d2:a5:f5:03:21:ca:b3:fd:0c:da: 86:63:07:a8:50:50:8f:88:4b:b4:78:2a:57:3e:cd: 3c:52:53:c1:81:76:f8:cb:1f:80:31:97:10:92:db: 7c:4d:6b:24:79:c8:2a:42:4e:5a:85:d5:ff:78:90: 7c:b8:b7:47:19:3d:31:49:ba:6d:c8:f4:ed:dd:e0: 09:30:2b:cb:8f:4c:fe:e3:e0:6b:61:22:1a:f8:58: a3:fe:5e:ab:3c:6e:8f:9a:2d:f8:2c:86:a1:4f:73: d4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A1:30:97:50:58:C4:CF:DE:E0:F9:0E:0E:B8:85:C9:BF:EB:DE:D8 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fb:ba:12:a4:42:35:a3:bd:25:03:a6:c6:a4:cf:7d:35:0d: 3d:cf:f5:c1:70:f1:be:d9:b4:e5:9c:55:05:91:e2:3b:15:52: e3:ec:a2:5e:8a:0e:c5:68:9f:e0:a3:b0:83:79:38:12:80:70: eb:f0:8e:57:57:7d:9d:14:61:bb:6a:85:fd:bc:e0:19:ba:60: a7:aa:13:d5:23:f6:98:d6:fa:a9:61:25:da:30:0c:5e:42:43: 67:fb:09:d4:bd:d0:60:46:44:51:18:b5:05:5d:50:63:e7:84: 9c:6c:50:9d:86:ac:27:b0:e5:8f:23:a8:ff:80:5c:b1:70:8c: a3:7e:91:3e:4f:0c:7b:bf:f4:72:10:46:49:0d:89:46:13:e1: d5:e6:bf:6e:cf:c0:de:a1:0d:f8:0d:a3:e4:92:6e:3b:94:3d: 62:dd:d5:ae:fd:17:a2:aa:8a:04:45:91:93:93:49:60:75:b8: d9:46:ed:5b:32:be:12:f7:e8:88:9a:47:28:d4:4f:fd:5a:65: 29:0f:f8:bb:ac:9d:f9:4c:12:41:f5:26:9b:84:a5:d9:77:ac: 4d:df:af:77:94:88:8f:a2:4e:d1:9d:3b:d3:c2:a5:23:a6:10: 4e:a8:f3:7d:e6:ab:d3:ba:7d:e4:45:0b:d4:d9:d4:bf:a4:96: 43:ba:a2:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe4xfJzE943TUYjyDhTlS90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUwNjI4MjMwMTA5WhcNMjUwNjI5MjMwMTA5WjAzMTEwLwYDVQQD EygwNWExMzA5NzUwNThjNGNmZGVlMGY5MGUwZWI4ODVjOWJmZWJkZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1mh7Q+En8iqCGIbmDRvSzbkm/iV ijGh/FzV2dBIzKGACgSQwZ4wFkIJlg7DxHphWDVyf7IaHmjqW0Aj0BJ3oA4+LApa TFUDLJFjUTgfz244Ysa8YWhuXH2LbVLGHVKw4xS/on+bGzpEKIBMK9y9JViLE5v6 815u+UVEDMRB+XMAthgGYckQ7z1ZbrPARYSjDTxreWhtH3HBLNKl9QMhyrP9DNqG YweoUFCPiEu0eCpXPs08UlPBgXb4yx+AMZcQktt8TWskecgqQk5ahdX/eJB8uLdH GT0xSbptyPTt3eAJMCvLj0z+4+BrYSIa+Fij/l6rPG6Pmi34LIahT3PU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWhMJdQWMTP3uD5Dg64hcm/697YMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfu6EqRC NaO9JQOmxqTPfTUNPc/1wXDxvtm05ZxVBZHiOxVS4+yiXooOxWif4KOwg3k4EoBw 6/COV1d9nRRhu2qF/bzgGbpgp6oT1SP2mNb6qWEl2jAMXkJDZ/sJ1L3QYEZEURi1 BV1QY+eEnGxQnYasJ7DljyOo/4BcsXCMo36RPk8Me7/0chBGSQ2JRhPh1ea/bs/A 3qEN+A2j5JJuO5Q9Yt3Vrv0XoqqKBEWRk5NJYHW42UbtWzK+EvfoiJpHKNRP/Vpl KQ/4u6yd+UwSQfUmm4Sl2XesTd+vd5SIj6JO0Z0708KlI6YQTqjzfear07p95EUL 1NnUv6SWQ7qizA== -----END CERTIFICATE-----Generated at Sun Jun 29 01:46:14 2025 by rpki-client