$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: BkZswI34HKFYXPPX5G23MmKiDvGNDKgvLbaGpDQrx0E= Subject key identifier: EA:75:29:7F:E5:9E:16:CC:75:78:AA:A0:11:8A:A7:C3:BC:34:3C:C7 Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 0197B7452655A6FE1FBCF0EB96587A3ABB1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 11D4 Signing time: Sat 28 Jun 2025 16:00:51 +0000 Manifest this update: Sat 28 Jun 2025 16:00:51 +0000 Manifest next update: Sun 29 Jun 2025 16:00:51 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: I6dCON1HaH84oxjggEYm99gL4PJMHgFteetK3th3EyA=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:45:26:55:a6:fe:1f:bc:f0:eb:96:58:7a:3a:bb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Jun 28 16:00:51 2025 GMT Not After : Jun 29 16:00:51 2025 GMT Subject: CN=ea75297fe59e16cc7578aaa0118aa7c3bc343cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:16:d8:85:fc:7d:15:c8:4d:39:f4:6d:d5:4d: 5b:69:10:1d:23:d3:b2:5f:19:09:b7:6d:df:9c:d6: 8a:20:c5:22:7b:0a:f0:89:a0:ab:0f:50:1e:76:74: d5:7c:4d:87:f5:30:64:1b:1a:0a:50:5b:95:44:e1: 08:d1:af:32:37:09:32:9c:c1:ff:b2:76:9f:07:00: e7:fa:14:ec:e3:f2:1e:07:92:1b:03:2a:5b:e6:37: 71:9b:37:52:d3:37:8f:61:46:dc:16:28:c1:5a:9c: 11:ca:de:f9:5a:2e:c1:61:e0:b1:39:b9:f4:20:9a: ea:81:94:0e:a2:ca:0d:3a:e3:2e:43:ba:56:58:73: 5c:a1:0e:0e:0d:df:90:34:66:f8:b1:63:7b:79:f5: 1c:87:d6:5a:d3:8e:88:ad:bb:b1:1b:34:90:fb:4f: 1a:08:9e:63:44:21:ec:68:57:3b:f6:78:b2:c3:70: 12:76:0b:6b:1e:b7:f0:1c:c4:60:20:d8:33:4d:c9: fc:e5:6f:3f:8e:7d:fd:a8:75:40:4f:b5:67:40:c2: de:8d:7f:6a:4c:fb:04:4d:11:d4:2d:92:13:3f:b0: 0c:c6:db:87:ee:14:a8:1a:46:9b:fa:d3:30:06:35: fc:23:b5:f1:84:09:00:2e:2c:31:53:5a:bd:32:71: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:75:29:7F:E5:9E:16:CC:75:78:AA:A0:11:8A:A7:C3:BC:34:3C:C7 X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b1:2f:50:5f:f5:82:ca:67:78:6d:5f:4c:39:a4:7f:51:b7: 1c:1c:63:7f:1c:01:9a:b1:f5:7d:43:0e:95:6f:42:b7:88:32: 75:4f:92:89:5a:67:0c:d3:3d:f0:af:91:28:61:7e:58:2a:e5: 51:3b:21:65:2f:d2:dd:14:fd:b8:cd:d4:2f:0e:ba:5c:da:da: ad:b6:73:7f:e1:59:06:8b:97:52:48:23:14:0a:92:36:e9:9f: 58:3b:f4:d3:b7:51:e7:11:b1:39:4e:b7:f2:13:b7:90:11:0e: a5:c0:1e:f0:4e:a8:30:e8:83:d4:03:3c:6e:9e:3b:ca:f3:9b: c3:96:2b:c5:65:6e:e5:ea:d0:24:2b:a1:dd:54:47:50:89:92: 0c:92:4f:9e:bc:ee:f0:bb:f7:25:a1:59:a9:62:7e:bf:2b:70: 9e:7b:86:d6:8e:40:ac:65:e8:51:19:7b:ef:34:d9:85:28:e5: 15:51:35:47:a9:f4:58:bd:16:99:6b:39:f2:05:47:e0:fc:e6: 2d:6d:a8:a5:80:e5:30:34:6a:36:11:d8:ff:0d:1c:45:e7:ba: 51:7a:04:cd:b2:2b:3c:73:ca:33:9c:d1:b1:38:3a:b4:c1:14: 66:6b:76:6d:e7:70:bc:c2:9d:8d:76:bf:ab:f4:a9:cf:c3:e0: 41:1e:4f:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3RSZVpv4fvPDrllh6OrsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUwNjI4MTYwMDUxWhcNMjUwNjI5MTYwMDUxWjAzMTEwLwYDVQQD EyhlYTc1Mjk3ZmU1OWUxNmNjNzU3OGFhYTAxMThhYTdjM2JjMzQzY2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xbYhfx9FchNOfRt1U1baRAdI9Oy XxkJt23fnNaKIMUiewrwiaCrD1AednTVfE2H9TBkGxoKUFuVROEI0a8yNwkynMH/ snafBwDn+hTs4/IeB5IbAypb5jdxmzdS0zePYUbcFijBWpwRyt75Wi7BYeCxObn0 IJrqgZQOosoNOuMuQ7pWWHNcoQ4ODd+QNGb4sWN7efUch9Za046IrbuxGzSQ+08a CJ5jRCHsaFc79niyw3ASdgtrHrfwHMRgINgzTcn85W8/jn39qHVAT7VnQMLejX9q TPsETRHULZITP7AMxtuH7hSoGkab+tMwBjX8I7XxhAkALiwxU1q9MnFGAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp1KX/lnhbMdXiqoBGKp8O8NDzHMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILEvUF/1 gspneG1fTDmkf1G3HBxjfxwBmrH1fUMOlW9Ct4gydU+SiVpnDNM98K+RKGF+WCrl UTshZS/S3RT9uM3ULw66XNrarbZzf+FZBouXUkgjFAqSNumfWDv007dR5xGxOU63 8hO3kBEOpcAe8E6oMOiD1AM8bp47yvObw5YrxWVu5erQJCuh3VRHUImSDJJPnrzu 8Lv3JaFZqWJ+vytwnnuG1o5ArGXoURl77zTZhSjlFVE1R6n0WL0WmWs58gVH4Pzm LW2opYDlMDRqNhHY/w0cRee6UXoEzbIrPHPKM5zRsTg6tMEUZmt2bedwvMKdjXa/ q/Spz8PgQR5PFw== -----END CERTIFICATE-----Generated at Sat Jun 28 18:57:22 2025 by rpki-client