$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: 2+kFvKkyPen7h0AXBcFRXTMmaq1XW33yVwrDPdSt8y0= Subject key identifier: C5:EC:7C:99:2D:15:E5:61:EE:99:74:EF:F8:6C:EC:19:CE:40:B2:70 Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 0196A6F855C53D01C52310496B098766A47C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1147 Signing time: Tue 06 May 2025 19:00:14 +0000 Manifest this update: Tue 06 May 2025 19:00:14 +0000 Manifest next update: Wed 07 May 2025 19:00:14 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: dkiQBvopfftnNuD9hAZ5eokuajfbHEtjCbnIBfM3emQ=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 14:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a6:f8:55:c5:3d:01:c5:23:10:49:6b:09:87:66:a4:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: May 6 19:00:14 2025 GMT Not After : May 7 19:00:14 2025 GMT Subject: CN=c5ec7c992d15e561ee9974eff86cec19ce40b270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:38:33:b9:19:bc:a7:bb:c7:a6:67:8d:4d: ff:01:74:d5:b7:9c:df:3b:bb:52:43:13:b4:c5:05: 84:c9:2c:16:6b:6f:4e:9f:80:ea:ff:93:24:85:6b: b0:a7:78:24:d2:92:8a:1b:f9:97:d4:48:8c:2e:03: ef:10:c3:a9:d0:44:d8:2e:7b:0c:49:ad:11:ab:b9: e8:0b:cd:80:31:b4:72:22:21:63:a8:16:67:c0:90: 95:de:8a:2a:fa:95:53:09:e8:5c:04:48:99:e5:fb: 02:b8:c4:fb:d1:7f:fe:e5:d1:b9:a7:3b:79:d2:f6: 5c:2d:30:0f:fc:89:a5:4c:ab:94:86:bd:a7:6e:2f: a1:bc:34:c3:03:c6:56:60:f1:08:68:a8:1f:d7:42: 0b:20:49:0d:d3:42:71:7d:5d:a6:2d:a6:79:26:ca: 8f:77:0b:01:c9:c7:f5:f5:da:f2:e9:58:58:3d:d1: 31:48:4d:19:57:a8:4c:48:fa:1e:00:84:7e:a1:01: 65:91:b9:f6:90:a7:76:e3:e7:ef:ee:c9:f8:c3:0a: 31:e8:55:08:83:34:0d:35:8d:29:96:87:1f:15:36: 38:95:6f:5d:e0:f6:af:79:c5:1c:ec:b7:ea:8c:1f: db:69:bd:96:a6:42:c7:bd:bb:74:93:b9:0f:bf:a1: f7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EC:7C:99:2D:15:E5:61:EE:99:74:EF:F8:6C:EC:19:CE:40:B2:70 X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:33:8f:4d:11:7e:7e:f4:0d:0a:de:e6:5e:04:1c:6f:3c:3e: 17:46:3f:8a:e7:51:21:2a:a8:b9:41:d3:a6:94:21:e0:17:f6: 3c:c4:c7:70:83:55:5c:9e:e1:68:94:65:a3:be:9f:7c:77:04: ca:4f:df:64:e6:98:35:e4:99:5e:e3:20:70:c9:f8:81:37:32: df:de:a6:d7:fe:97:3c:a7:28:7b:ed:a1:5d:d8:ec:ce:5f:25: 10:7d:e3:c6:4f:df:7e:2f:1c:81:a7:06:de:bb:01:70:b9:d0: 43:43:89:0f:3c:f3:31:2a:19:85:a0:63:6c:0f:fb:ca:20:5c: ab:dc:49:b3:f3:e2:72:a3:dd:63:de:e4:e0:65:5e:73:7a:7a: c7:a3:9f:e5:05:55:27:04:d0:17:54:de:71:6b:2b:75:ca:5b: 1b:6b:ea:df:03:2c:12:21:9e:f2:3f:c7:ac:27:5c:4f:2e:a3: 05:ab:8e:c1:b8:b2:d8:fe:a4:6f:66:0c:59:b3:e9:8e:09:c0: f5:43:5f:5e:a2:6a:1e:3b:92:e6:42:d0:37:9a:c3:64:40:5e: ed:42:da:d4:48:38:9d:b6:77:6f:15:33:f4:bf:d1:46:13:2a: f3:65:63:d3:f7:8a:37:19:71:d9:18:2f:85:24:0b:72:52:21: c4:f9:1d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZam+FXFPQHFIxBJawmHZqR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwNTA2MTkwMDE0WhcNMjUwNTA3MTkwMDE0WjAzMTEwLwYDVQQD EyhjNWVjN2M5OTJkMTVlNTYxZWU5OTc0ZWZmODZjZWMxOWNlNDBiMjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8U4M7kZvKe7x6ZnjU3/AXTVt5zf O7tSQxO0xQWEySwWa29On4Dq/5MkhWuwp3gk0pKKG/mX1EiMLgPvEMOp0ETYLnsM Sa0Rq7noC82AMbRyIiFjqBZnwJCV3ooq+pVTCehcBEiZ5fsCuMT70X/+5dG5pzt5 0vZcLTAP/ImlTKuUhr2nbi+hvDTDA8ZWYPEIaKgf10ILIEkN00JxfV2mLaZ5JsqP dwsBycf19dry6VhYPdExSE0ZV6hMSPoeAIR+oQFlkbn2kKd24+fv7sn4wwox6FUI gzQNNY0plocfFTY4lW9d4PavecUc7LfqjB/bab2WpkLHvbt0k7kPv6H3jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXsfJktFeVh7pl07/hs7BnOQLJwMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzOPTRF+ fvQNCt7mXgQcbzw+F0Y/iudRISqouUHTppQh4Bf2PMTHcINVXJ7haJRlo76ffHcE yk/fZOaYNeSZXuMgcMn4gTcy396m1/6XPKcoe+2hXdjszl8lEH3jxk/ffi8cgacG 3rsBcLnQQ0OJDzzzMSoZhaBjbA/7yiBcq9xJs/PicqPdY97k4GVec3p6x6Of5QVV JwTQF1TecWsrdcpbG2vq3wMsEiGe8j/HrCdcTy6jBauOwbiy2P6kb2YMWbPpjgnA 9UNfXqJqHjuS5kLQN5rDZEBe7ULa1Eg4nbZ3bxUz9L/RRhMq82Vj0/eKNxlx2Rgv hSQLclIhxPkdYg== -----END CERTIFICATE-----Generated at Tue May 6 23:57:20 2025 by rpki-client