$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: h6XOaMIoQk+QPoKIr99ErKr5aQ3EbAJFqygPcKtQes0= Subject key identifier: 35:1C:64:B2:C3:94:76:59:88:41:DB:5E:5E:6F:C1:F4:1A:C3:A0:A7 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 0196B7EC310AB5AE42AADB3818385F58F543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 154D Signing time: Sat 10 May 2025 02:00:31 +0000 Manifest this update: Sat 10 May 2025 02:00:31 +0000 Manifest next update: Sun 11 May 2025 02:00:31 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: 8WGRZkNEYFMu-kcidCtbE6vw1Zk.roa (hash: n1Lhy9XEPKEe+j669dQmLRH6LE6uXI6LSgOV96sUj88=) 5: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 6: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 7: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: 0O4J9lQgol7FULSz7n6Wl3yQSpi0zYFNALcwPafdPSo=) 8: PkUBswB6akpRoaWoY8idhiZO-0s.roa (hash: FTb6NXOjB3gAzHYZQp3OqT2aASeT3Lw8OwXcNy1cX04=) 9: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 10: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 11: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 12: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 13: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 14: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 15: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 16: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 17: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 18: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 19: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 02:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b7:ec:31:0a:b5:ae:42:aa:db:38:18:38:5f:58:f5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: May 10 02:00:31 2025 GMT Not After : May 11 02:00:31 2025 GMT Subject: CN=351c64b2c39476598841db5e5e6fc1f41ac3a0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:60:6c:65:64:09:9b:5e:09:e2:b0:72:00:c1: 01:5f:57:fb:ce:f9:d2:14:53:16:15:cb:23:ef:4a: 38:8e:98:c2:fe:8b:4b:f9:4b:f9:75:d5:a4:8b:52: b3:95:61:d0:ea:0a:05:31:5e:7e:35:92:91:f6:bf: 2a:99:ec:21:1a:2c:7a:e0:3e:32:3a:aa:38:74:8d: 1f:72:7f:f3:cb:ca:94:33:2c:2f:24:61:e1:16:08: 32:d5:bb:09:16:7d:40:26:62:ea:32:8e:7b:0c:c6: 88:72:2f:60:0f:c3:fe:da:c0:94:2d:41:c6:71:e6: 24:e4:f2:3e:3e:33:5d:79:6f:60:dc:04:9d:ad:a3: 2e:14:3c:80:48:87:a7:d7:d2:ba:16:06:1d:c3:dc: 93:1b:61:6a:db:c2:bd:34:f7:23:cd:f3:c1:32:d9: 26:1b:6c:22:76:f7:94:f2:c7:ef:f9:f7:6d:4a:ae: fb:3d:f1:e2:4c:3d:f4:8f:f3:35:45:01:cd:b5:fe: aa:97:08:64:e3:d4:a7:00:48:a8:73:ce:7f:76:0a: d2:87:e4:cd:ca:15:b7:59:f0:0b:cc:8b:33:24:0d: fe:ec:0f:14:6c:6b:c2:86:9f:9b:2a:68:65:5e:67: af:52:23:de:b1:41:71:90:fd:d9:fc:c8:24:37:18: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1C:64:B2:C3:94:76:59:88:41:DB:5E:5E:6F:C1:F4:1A:C3:A0:A7 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:fb:8c:f7:81:6b:5b:31:d9:5c:59:50:a7:f8:56:81:dd:58: 7e:be:4b:54:b3:14:c7:df:34:bb:87:7b:19:1c:b4:59:0e:7c: de:12:0e:ab:23:79:77:14:cb:87:e0:10:a8:c3:dd:0c:c2:ee: 8b:88:8e:2d:7f:9c:d6:e9:7f:75:21:77:af:6c:88:c4:81:8d: 6a:e2:59:ba:49:76:db:ed:51:bd:a8:2a:23:27:93:6f:1c:c3: ec:b2:cf:12:55:12:d2:e8:67:29:ce:43:d8:30:f5:b6:ca:2b: 66:dc:02:d7:84:2b:1f:1c:45:c7:ee:cc:d0:53:2f:7e:9c:8b: 21:af:af:ae:b4:2c:59:dc:a4:b4:79:f8:36:1f:30:5f:19:55: a4:b4:d9:6e:07:16:82:0e:38:6d:3d:dc:be:fe:cd:53:fa:94: 49:a1:92:0e:0b:7b:d8:7a:14:98:1d:ae:19:ca:ae:1c:0c:c9: 24:76:82:f1:84:3a:0b:fb:2c:31:20:42:5b:c9:cb:f7:3e:b7: 0c:3f:79:fe:fe:fc:47:c2:4a:15:4d:43:5e:8f:36:f7:9e:08: 0a:29:41:3f:d2:ee:c4:2b:67:44:4c:51:3d:59:20:09:d9:f5: 76:2d:39:6d:af:a2:9c:8a:fc:3d:89:0e:39:2c:f5:31:76:ef: cc:9c:3d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa37DEKta5Cqts4GDhfWPVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUwNTEwMDIwMDMxWhcNMjUwNTExMDIwMDMxWjAzMTEwLwYDVQQD EygzNTFjNjRiMmMzOTQ3NjU5ODg0MWRiNWU1ZTZmYzFmNDFhYzNhMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mBsZWQJm14J4rByAMEBX1f7zvnS FFMWFcsj70o4jpjC/otL+Uv5ddWki1KzlWHQ6goFMV5+NZKR9r8qmewhGix64D4y Oqo4dI0fcn/zy8qUMywvJGHhFggy1bsJFn1AJmLqMo57DMaIci9gD8P+2sCULUHG ceYk5PI+PjNdeW9g3ASdraMuFDyASIen19K6FgYdw9yTG2Fq28K9NPcjzfPBMtkm G2widveU8sfv+fdtSq77PfHiTD30j/M1RQHNtf6qlwhk49SnAEioc85/dgrSh+TN yhW3WfALzIszJA3+7A8UbGvChp+bKmhlXmevUiPesUFxkP3Z/MgkNxi8XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUcZLLDlHZZiEHbXl5vwfQaw6CnMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/uM94Fr WzHZXFlQp/hWgd1Yfr5LVLMUx980u4d7GRy0WQ583hIOqyN5dxTLh+AQqMPdDMLu i4iOLX+c1ul/dSF3r2yIxIGNauJZukl22+1RvagqIyeTbxzD7LLPElUS0uhnKc5D 2DD1tsorZtwC14QrHxxFx+7M0FMvfpyLIa+vrrQsWdyktHn4Nh8wXxlVpLTZbgcW gg44bT3cvv7NU/qUSaGSDgt72HoUmB2uGcquHAzJJHaC8YQ6C/ssMSBCW8nL9z63 DD95/v78R8JKFU1DXo82954ICilBP9LuxCtnRExRPVkgCdn1di05ba+inIr8PYkO OSz1MXbvzJw9oQ== -----END CERTIFICATE-----Generated at Sat May 10 07:34:15 2025 by rpki-client