$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: sN1egORMCQDoibmlUl3j4+fPgmjPwafK84EBcYvn2L8= Subject key identifier: 9A:A9:2C:51:BF:AD:88:FA:86:78:6E:BD:9C:44:39:46:66:FE:86:16 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 0196BF37B757E79C03CF60314E47BE176344 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 1545 Signing time: Sun 11 May 2025 12:00:21 +0000 Manifest this update: Sun 11 May 2025 12:00:21 +0000 Manifest next update: Mon 12 May 2025 12:00:21 +0000 Files and hashes: 1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=) 2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=) 3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=) 4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=) 5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=) 6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: llBWfrGeuhdt8QQcJ2LHlHn9t9nbhzIHqoq/FEq50JU=) 7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=) 8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=) 9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=) 10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=) 11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 12:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:37:b7:57:e7:9c:03:cf:60:31:4e:47:be:17:63:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: May 11 12:00:21 2025 GMT Not After : May 12 12:00:21 2025 GMT Subject: CN=9aa92c51bfad88fa86786ebd9c44394666fe8616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:ec:61:3f:d9:c4:fb:9e:ce:3a:41:42:d1: 2b:e9:53:1c:27:14:d0:89:7b:49:f3:d4:68:f4:1f: 41:fd:3d:86:48:ba:31:61:79:77:18:78:8a:39:bc: af:e5:49:59:98:40:de:22:f3:71:70:d4:4b:36:37: 65:c7:32:55:45:b3:a4:de:ad:17:a1:2a:b7:6f:c9: f8:aa:38:b5:61:da:14:85:28:c9:8d:7d:63:3e:a4: b3:df:be:b8:a6:1f:95:49:b6:7b:22:cf:1c:4c:c4: a3:e4:c3:5d:23:ee:8e:99:82:93:f1:48:1e:0f:e2: d3:28:57:26:fa:7b:0e:23:9d:64:77:75:c1:09:29: 10:07:51:09:2e:e4:f4:dd:6e:fa:c5:74:9d:11:1d: 8a:f6:f8:e4:96:e2:d1:e8:bf:6e:66:9b:10:60:29: f6:20:b1:06:f2:f9:72:84:9b:00:ee:49:5e:5b:cd: a5:16:0e:2c:a8:2e:f2:08:ed:de:02:74:f6:19:4c: da:64:9c:d0:a3:3d:6f:5e:09:2e:60:39:15:47:2d: a1:18:8b:36:d5:3a:82:62:e4:76:4e:9a:a6:bf:97: b8:66:ff:86:ca:25:50:4b:85:36:da:c1:86:4b:e6: dd:1f:ef:b2:a5:88:04:ec:9b:93:2f:81:c2:f7:6c: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A9:2C:51:BF:AD:88:FA:86:78:6E:BD:9C:44:39:46:66:FE:86:16 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6c:aa:22:4b:50:81:4a:be:78:bb:b1:2e:2d:3a:6e:e4:95: c8:5e:b8:30:87:33:fc:bf:04:9b:2a:0b:6f:d8:8e:f4:b8:24: 66:1a:27:fc:fa:7a:30:88:5e:c6:bb:44:75:e7:33:98:a2:87: fd:e5:cb:3d:3f:b7:92:b3:63:50:55:a0:e1:5a:2d:e9:72:11: 68:b0:cf:4a:d8:e9:3e:0f:7e:bf:f3:8c:d8:23:ab:3e:1e:10: a7:a9:63:ee:ad:68:b7:ef:3c:a3:8f:05:5e:5b:ef:2c:58:b0: ec:22:64:d8:ea:a6:fc:b8:8d:38:b4:2c:25:ae:d2:8b:fe:f5: bc:d6:f1:ae:74:c9:02:0c:8c:c4:c9:81:73:a1:65:ef:b2:29: 31:1c:9c:39:7f:21:7a:d6:0e:00:fe:09:23:d0:2f:b7:b9:b7: fb:e0:22:f6:51:33:63:8d:64:56:98:11:e6:17:4c:6b:f8:32: 9e:69:54:85:11:0c:42:f0:e1:8c:e6:7d:66:7e:15:ab:57:77: 8b:f9:28:89:75:fb:30:51:1c:10:73:da:08:82:f0:3a:c3:f8: f5:1f:5b:f9:4c:3c:c9:4d:0f:b9:a4:e9:53:11:13:2b:3c:ec: 8e:16:6e:12:27:51:11:40:74:fe:ff:4f:46:0b:61:ce:b8:19: a0:6b:4d:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/N7dX55wDz2AxTke+F2NEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjUwNTExMTIwMDIxWhcNMjUwNTEyMTIwMDIxWjAzMTEwLwYDVQQD Eyg5YWE5MmM1MWJmYWQ4OGZhODY3ODZlYmQ5YzQ0Mzk0NjY2ZmU4NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRjsYT/ZxPuezjpBQtEr6VMcJxTQ iXtJ89Ro9B9B/T2GSLoxYXl3GHiKObyv5UlZmEDeIvNxcNRLNjdlxzJVRbOk3q0X oSq3b8n4qji1YdoUhSjJjX1jPqSz3764ph+VSbZ7Is8cTMSj5MNdI+6OmYKT8Uge D+LTKFcm+nsOI51kd3XBCSkQB1EJLuT03W76xXSdER2K9vjkluLR6L9uZpsQYCn2 ILEG8vlyhJsA7kleW82lFg4sqC7yCO3eAnT2GUzaZJzQoz1vXgkuYDkVRy2hGIs2 1TqCYuR2Tpqmv5e4Zv+GyiVQS4U22sGGS+bdH++ypYgE7JuTL4HC92z4iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqpLFG/rYj6hnhuvZxEOUZm/oYWMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWyqIktQ gUq+eLuxLi06buSVyF64MIcz/L8EmyoLb9iO9LgkZhon/Pp6MIhexrtEdeczmKKH /eXLPT+3krNjUFWg4Vot6XIRaLDPStjpPg9+v/OM2COrPh4Qp6lj7q1ot+88o48F XlvvLFiw7CJk2Oqm/LiNOLQsJa7Si/71vNbxrnTJAgyMxMmBc6Fl77IpMRycOX8h etYOAP4JI9Avt7m3++Ai9lEzY41kVpgR5hdMa/gynmlUhREMQvDhjOZ9Zn4Vq1d3 i/koiXX7MFEcEHPaCILwOsP49R9b+Uw8yU0PuaTpUxETKzzsjhZuEidREUB0/v9P RgthzrgZoGtN+A== -----END CERTIFICATE-----Generated at Sun May 11 19:22:13 2025 by rpki-client