$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: e+fxK/oGRmN95clxYdSEr0MF540GTcTvGDZXBgA/aeU= Subject key identifier: C6:A8:BF:8C:FC:F4:FE:37:B2:4D:6F:A5:30:67:13:8B:33:F1:A9:2E Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 0197B6D75DFF13C592E824D2774BC4632DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 15D3 Signing time: Sat 28 Jun 2025 14:00:56 +0000 Manifest this update: Sat 28 Jun 2025 14:00:56 +0000 Manifest next update: Sun 29 Jun 2025 14:00:56 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 5: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 6: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 7: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 8: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: THdN9NoN5SXHT8RPVWErjD88WBuFcQaPxG7Z5LeaIAc=) 10: QBb9KaF0cIXBem__XFHTxdHk0-g.roa (hash: /YyDhbAPnvtDPEPid9fWMtl8pnQeWOykKx8WROxiL+M=) 11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 12: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 13: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:d7:5d:ff:13:c5:92:e8:24:d2:77:4b:c4:63:2d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jun 28 14:00:56 2025 GMT Not After : Jun 29 14:00:56 2025 GMT Subject: CN=c6a8bf8cfcf4fe37b24d6fa53067138b33f1a92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0a:6d:d7:92:d1:66:83:fe:4d:78:01:c9:a9: 05:4d:09:2b:cf:8f:a1:98:d3:0f:f1:55:1d:ea:a9: ef:bf:96:9e:ba:40:b3:76:90:36:11:dd:c0:31:6f: 94:65:e9:6c:94:89:45:2e:f5:b9:59:a7:63:60:36: 34:28:08:48:a6:3c:e6:8f:0b:1f:1e:9c:5a:f4:ce: e1:c2:c7:ef:b3:83:10:8d:00:d7:05:8c:53:30:f6: 1f:b3:f2:e4:48:40:88:b2:8a:ce:e3:a8:df:e6:60: de:1c:86:86:76:5c:16:e6:11:e8:4f:c7:3f:7e:cf: 27:cd:a3:a3:b4:aa:e2:f8:50:7b:c8:2c:d2:db:c6: 79:e1:95:be:37:0b:a3:ec:bc:6c:04:ec:5f:d6:b5: 7e:c4:70:ae:9f:57:87:46:22:4d:23:c0:e2:9f:8e: 6e:63:fa:92:31:46:68:59:1a:e7:7a:de:89:20:6c: 80:8a:38:d7:d1:de:7b:be:80:b5:e3:ec:4b:89:f6: 11:96:77:bc:d2:02:57:7a:56:52:2f:64:2a:b6:0f: f7:f7:18:66:ba:71:44:2b:0e:a8:69:3c:18:90:2a: 7d:eb:f1:ee:38:6c:63:fb:a9:53:4b:ae:5d:33:e4: 8b:20:c7:18:70:db:6f:14:31:fc:9f:9c:d9:75:59: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A8:BF:8C:FC:F4:FE:37:B2:4D:6F:A5:30:67:13:8B:33:F1:A9:2E X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:8a:d1:5e:ef:7b:92:f5:be:f0:56:4e:fe:8e:23:8a:57:6a: 96:89:08:f1:e3:05:8d:b7:7d:11:a0:d3:a1:ac:69:52:44:45: ff:b8:71:d9:9f:13:ba:33:84:df:c9:a2:f1:6d:fc:e8:68:40: a2:bc:1a:02:db:02:35:ec:5c:7a:cc:50:7d:a1:85:db:c6:c5: b6:54:14:27:41:96:f6:ce:f2:af:73:ff:ca:cc:49:cb:71:53: c2:1d:1d:42:b0:22:b5:63:f2:6c:ff:c8:b5:b8:51:7e:a9:aa: 7c:86:48:1c:7e:ea:20:d6:14:ae:63:6f:8c:f2:05:cd:68:d7: e1:f6:f9:95:28:09:6d:a4:c5:78:64:5f:b5:57:3e:ec:e7:6b: 60:d9:02:e9:4c:2e:f3:c1:63:b0:3e:87:e1:ef:62:a1:3e:b0: 17:02:c0:7a:02:5f:b1:c9:b2:f0:af:6a:56:69:20:cd:a8:d5: b7:36:c0:c2:aa:45:5b:38:a1:a8:57:ed:8c:22:48:c0:67:0f: 75:53:99:ed:a5:d8:4d:47:2d:91:c4:cb:8a:b1:a6:22:e8:88: b1:f3:ed:04:02:9e:1b:96:02:08:8f:5b:1c:ba:42:0e:ce:b0: 42:45:7a:7d:d4:c0:77:08:f2:b4:0b:f8:c8:78:5a:74:91:c4: a4:08:9b:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2113/E8WS6CTSd0vEYy2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwNjI4MTQwMDU2WhcNMjUwNjI5MTQwMDU2WjAzMTEwLwYDVQQD EyhjNmE4YmY4Y2ZjZjRmZTM3YjI0ZDZmYTUzMDY3MTM4YjMzZjFhOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wpt15LRZoP+TXgByakFTQkrz4+h mNMP8VUd6qnvv5aeukCzdpA2Ed3AMW+UZelslIlFLvW5WadjYDY0KAhIpjzmjwsf Hpxa9M7hwsfvs4MQjQDXBYxTMPYfs/LkSECIsorO46jf5mDeHIaGdlwW5hHoT8c/ fs8nzaOjtKri+FB7yCzS28Z54ZW+Nwuj7LxsBOxf1rV+xHCun1eHRiJNI8Din45u Y/qSMUZoWRrnet6JIGyAijjX0d57voC14+xLifYRlne80gJXelZSL2Qqtg/39xhm unFEKw6oaTwYkCp96/HuOGxj+6lTS65dM+SLIMcYcNtvFDH8n5zZdVkpawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaov4z89P43sk1vpTBnE4sz8akuMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYrRXu97 kvW+8FZO/o4jildqlokI8eMFjbd9EaDToaxpUkRF/7hx2Z8TujOE38mi8W386GhA orwaAtsCNexcesxQfaGF28bFtlQUJ0GW9s7yr3P/ysxJy3FTwh0dQrAitWPybP/I tbhRfqmqfIZIHH7qINYUrmNvjPIFzWjX4fb5lSgJbaTFeGRftVc+7OdrYNkC6Uwu 88FjsD6H4e9ioT6wFwLAegJfscmy8K9qVmkgzajVtzbAwqpFWzihqFftjCJIwGcP dVOZ7aXYTUctkcTLirGmIuiIsfPtBAKeG5YCCI9bHLpCDs6wQkV6fdTAdwjytAv4 yHhadJHEpAibyA== -----END CERTIFICATE-----Generated at Sat Jun 28 22:41:33 2025 by rpki-client