$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: w6VAM7oY4YWyGr8Vjo4ilr5hd/lKn6+jNzmK0/JDH/A= Subject key identifier: E0:46:C0:52:B5:19:A9:D2:2F:9F:7D:E4:0C:A0:2A:86:ED:82:DA:D0 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 0197B7B346DBB82082CDA73936A3F4855646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 15D2 Signing time: Sat 28 Jun 2025 18:01:08 +0000 Manifest this update: Sat 28 Jun 2025 18:01:08 +0000 Manifest next update: Sun 29 Jun 2025 18:01:08 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 5: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 6: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: wu2xd4ces1VgFZ3P9vEB9PJRnVYH73NpXNRj2kwPIKU=) 7: PkUBswB6akpRoaWoY8idhiZO-0s.roa (hash: FTb6NXOjB3gAzHYZQp3OqT2aASeT3Lw8OwXcNy1cX04=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 12: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 13: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 14: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 15: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 16: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 17: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 18: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 19: u2jjT9a7gurHsCBuG6MLd36hk6U.roa (hash: 5ifFXhTaQ0rt9DDM8OyMYLPCzUHaKXbmifUQMc2oMtc=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=) 22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:b3:46:db:b8:20:82:cd:a7:39:36:a3:f4:85:56:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Jun 28 18:01:08 2025 GMT Not After : Jun 29 18:01:08 2025 GMT Subject: CN=e046c052b519a9d22f9f7de40ca02a86ed82dad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:76:64:11:2b:53:00:eb:30:b3:62:2b:5d: e9:27:25:68:05:bd:1c:cd:de:b5:9b:13:4f:fc:10: f8:0e:ed:05:22:b5:18:4a:63:11:bc:0d:2a:d4:53: a3:e7:bf:b6:b5:13:8b:80:db:74:c2:1a:d5:cf:45: 64:16:f6:8c:1a:0d:fd:df:f3:db:e0:61:4c:72:12: 34:0f:d5:00:80:3a:56:e7:81:8b:49:70:77:02:4b: d7:aa:fb:97:43:90:53:b2:3b:52:c9:35:40:36:f6: 1e:7b:a6:49:0f:ec:1a:06:59:43:f7:88:4a:59:c8: a4:57:da:c6:a7:b4:b7:40:5f:9c:8d:b4:6f:2f:32: 57:1c:a1:81:39:20:36:49:b0:b1:56:43:ed:ef:bd: 78:07:2c:b5:3e:6e:49:b0:e5:91:77:86:4c:c4:40: 52:43:b3:9f:7c:be:5f:59:6c:1c:5c:3d:21:7d:83: 96:11:ef:09:b4:57:7b:df:f7:b4:08:f4:5d:0a:d1: af:7f:9f:5f:47:f4:ab:09:8a:43:19:ec:dc:9a:58: a0:54:85:ea:d8:87:6c:47:8b:50:ee:77:02:c1:43: 21:21:12:bd:77:1a:66:01:51:79:0f:0c:6f:08:e8: 5e:04:03:41:ac:11:66:b3:2f:fc:4c:a9:a3:d5:0e: 99:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:C0:52:B5:19:A9:D2:2F:9F:7D:E4:0C:A0:2A:86:ED:82:DA:D0 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ce:63:b8:19:18:41:39:29:2d:30:90:bd:c8:08:32:6f:4d: 3b:97:c5:3f:98:45:7e:a4:41:74:aa:e5:1f:e8:c4:ba:51:8b: 59:71:40:c1:bf:5b:87:eb:d9:3d:37:ec:f4:72:34:39:2d:ec: 2c:ee:97:b5:cc:2e:db:76:0e:70:27:27:d9:ee:64:5d:37:37: 09:4d:ce:44:aa:c1:52:47:c6:5b:df:0e:af:af:88:b7:b4:68: a8:af:c8:ee:c9:1b:6c:27:40:2a:20:87:b7:96:1e:28:46:ff: 28:2f:e1:78:05:66:c9:4f:b0:e3:94:bc:54:b6:bb:ba:92:c9: 3c:04:93:f0:2d:01:ba:1c:98:fa:e1:df:ea:e8:cd:bf:f9:0e: ac:fb:96:58:3c:f2:6a:71:df:3f:a5:4f:f8:26:92:f8:68:92: 15:1a:2b:ee:50:2d:6c:6e:e0:46:f7:6d:9f:2b:4c:e5:da:ef: f0:1f:90:60:14:6c:a8:eb:a7:ef:b2:93:fb:4f:89:6a:fa:3b: 28:38:e8:e7:6c:e4:93:c5:db:ea:ee:dd:5d:1a:38:1d:54:d8: 43:a9:d2:0d:fb:91:18:be:fa:5e:8b:28:aa:22:bc:48:1b:fd: ce:68:df:8b:8c:d4:af:76:c6:19:0e:b3:08:09:b1:ee:2e:10: 94:09:3f:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3s0bbuCCCzac5NqP0hVZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUwNjI4MTgwMTA4WhcNMjUwNjI5MTgwMTA4WjAzMTEwLwYDVQQD EyhlMDQ2YzA1MmI1MTlhOWQyMmY5ZjdkZTQwY2EwMmE4NmVkODJkYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IV2ZBErUwDrMLNiK13pJyVoBb0c zd61mxNP/BD4Du0FIrUYSmMRvA0q1FOj57+2tROLgNt0whrVz0VkFvaMGg393/Pb 4GFMchI0D9UAgDpW54GLSXB3AkvXqvuXQ5BTsjtSyTVANvYee6ZJD+waBllD94hK WcikV9rGp7S3QF+cjbRvLzJXHKGBOSA2SbCxVkPt7714Byy1Pm5JsOWRd4ZMxEBS Q7OffL5fWWwcXD0hfYOWEe8JtFd73/e0CPRdCtGvf59fR/SrCYpDGezcmligVIXq 2IdsR4tQ7ncCwUMhIRK9dxpmAVF5DwxvCOheBANBrBFmsy/8TKmj1Q6ZsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBGwFK1GanSL5995AygKobtgtrQMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACM5juBkY QTkpLTCQvcgIMm9NO5fFP5hFfqRBdKrlH+jEulGLWXFAwb9bh+vZPTfs9HI0OS3s LO6Xtcwu23YOcCcn2e5kXTc3CU3ORKrBUkfGW98Or6+It7RoqK/I7skbbCdAKiCH t5YeKEb/KC/heAVmyU+w45S8VLa7upLJPAST8C0BuhyY+uHf6ujNv/kOrPuWWDzy anHfP6VP+CaS+GiSFRor7lAtbG7gRvdtnytM5drv8B+QYBRsqOun77KT+0+Javo7 KDjo52zkk8Xb6u7dXRo4HVTYQ6nSDfuRGL76XosoqiK8SBv9zmjfi4zUr3bGGQ6z CAmx7i4QlAk/vQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:55:38 2025 by rpki-client