$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: /0vGMs0Wxeg59AkFRS+/JPBF6xL7kkEIMjDE4B8aq2Q= Subject key identifier: 46:B2:1B:BA:87:5D:BC:93:BA:06:91:FD:5D:88:3F:0A:ED:E4:51:41 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 0196B8C7EE840CE5B57921B2A8DE84D0047D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 154F Signing time: Sat 10 May 2025 06:00:32 +0000 Manifest this update: Sat 10 May 2025 06:00:32 +0000 Manifest next update: Sun 11 May 2025 06:00:32 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6-2qTlMtEZPzOHSAtmdNhcbE1qQ.roa (hash: F+2AAW+4AfT1GQuiFRv0wVbwu5zq2uVmbs9qsl8++uA=) 3: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 4: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 5: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 6: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 7: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 8: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 9: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 10: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: eA1saP26DFPXIDFscDMaXbtvEZe9nUH9UOZPbbXEOyI=) 11: QBb9KaF0cIXBem__XFHTxdHk0-g.roa (hash: /YyDhbAPnvtDPEPid9fWMtl8pnQeWOykKx8WROxiL+M=) 12: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 13: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 14: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 15: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 16: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 17: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 18: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:c7:ee:84:0c:e5:b5:79:21:b2:a8:de:84:d0:04:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: May 10 06:00:32 2025 GMT Not After : May 11 06:00:32 2025 GMT Subject: CN=46b21bba875dbc93ba0691fd5d883f0aede45141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:0c:60:e9:99:f1:77:46:54:71:cc:69:5b: d9:f6:65:f3:a1:ee:4c:81:4d:0d:8b:40:0b:e6:03: f2:76:33:ff:45:2b:80:53:50:7a:48:73:40:b5:18: ea:2a:b4:c3:56:bd:3b:2b:f8:3b:d1:18:45:a7:3f: d8:c4:a3:cb:b9:65:11:db:6b:fb:94:0d:61:80:f5: 8f:7e:5c:ed:2d:a6:f0:9b:7c:d1:54:33:45:28:4a: f4:c3:4b:ef:da:d9:04:19:94:12:d9:61:68:5e:45: d1:53:53:dd:8d:37:08:94:ec:26:3e:32:31:a1:ed: 53:ab:32:dd:8c:14:09:c2:12:70:8f:48:64:d1:06: 18:1e:26:be:91:32:fb:ab:f8:81:fe:fa:7f:bc:9d: 1c:6b:29:26:ec:b1:c0:0e:59:13:cd:ed:e6:1d:86: e6:e8:69:6f:c2:9d:dc:86:94:7a:09:b4:df:da:d2: 40:74:2d:29:9e:60:a8:8c:04:0f:26:ba:42:3e:1a: 0d:83:4c:90:32:b3:c3:b0:e6:cb:73:dc:f2:12:e7: cc:b3:c5:2a:e8:7b:7e:92:7e:b2:3b:4a:75:f6:3a: 44:f0:36:04:05:8c:b5:67:0c:af:be:78:3b:81:44: 49:df:a6:0a:7c:70:78:2b:96:ec:c6:bf:02:3e:2e: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B2:1B:BA:87:5D:BC:93:BA:06:91:FD:5D:88:3F:0A:ED:E4:51:41 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5d:08:f2:05:97:8c:c0:75:56:29:00:80:cf:7a:68:5c:6f: a4:39:4f:7b:75:67:05:99:a9:60:00:99:16:c8:1c:33:9f:f2: ed:24:14:cd:42:30:65:a5:d7:31:ae:2f:71:52:34:76:a5:b1: b1:c4:d2:09:6a:2d:89:76:16:7a:0a:ca:3c:f4:64:2e:48:82: 18:06:11:58:79:a0:f4:b8:4d:e8:60:8f:de:fe:8b:42:ba:57: 92:fe:a9:ab:9b:7d:53:35:69:82:49:65:2f:7f:43:e0:74:fb: 60:9f:93:65:ea:94:1e:23:f8:4d:d2:f9:75:68:d8:f7:d3:e7: b3:7c:68:f5:29:f5:b9:c4:8d:91:34:cc:cf:01:5a:a7:fc:62: 66:ca:7d:6c:83:ec:96:af:bc:a0:30:75:2f:21:48:1c:55:83: b0:1f:48:10:63:4a:13:cc:12:2f:d9:76:8f:49:f4:42:3e:31: bf:75:30:24:6c:c5:b7:6b:43:55:f2:67:45:e5:e5:3d:c4:de: 99:d5:99:95:0f:ea:34:0c:30:ad:f6:d1:51:9c:8d:96:d9:e3: 32:0b:82:ca:c8:18:a6:a0:c6:fa:e1:0a:0d:59:1d:3b:96:dd: af:34:86:92:ee:42:8f:1b:e0:0c:2e:b3:5d:91:27:35:ee:ab: f6:92:2a:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4x+6EDOW1eSGyqN6E0AR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUwNTEwMDYwMDMyWhcNMjUwNTExMDYwMDMyWjAzMTEwLwYDVQQD Eyg0NmIyMWJiYTg3NWRiYzkzYmEwNjkxZmQ1ZDg4M2YwYWVkZTQ1MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS0MYOmZ8XdGVHHMaVvZ9mXzoe5M gU0Ni0AL5gPydjP/RSuAU1B6SHNAtRjqKrTDVr07K/g70RhFpz/YxKPLuWUR22v7 lA1hgPWPflztLabwm3zRVDNFKEr0w0vv2tkEGZQS2WFoXkXRU1PdjTcIlOwmPjIx oe1TqzLdjBQJwhJwj0hk0QYYHia+kTL7q/iB/vp/vJ0caykm7LHADlkTze3mHYbm 6Glvwp3chpR6CbTf2tJAdC0pnmCojAQPJrpCPhoNg0yQMrPDsObLc9zyEufMs8Uq 6Ht+kn6yO0p19jpE8DYEBYy1Zwyvvng7gURJ36YKfHB4K5bsxr8CPi7A+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEayG7qHXbyTugaR/V2IPwrt5FFBMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe10I8gWX jMB1VikAgM96aFxvpDlPe3VnBZmpYACZFsgcM5/y7SQUzUIwZaXXMa4vcVI0dqWx scTSCWotiXYWegrKPPRkLkiCGAYRWHmg9LhN6GCP3v6LQrpXkv6pq5t9UzVpgkll L39D4HT7YJ+TZeqUHiP4TdL5dWjY99Pns3xo9Sn1ucSNkTTMzwFap/xiZsp9bIPs lq+8oDB1LyFIHFWDsB9IEGNKE8wSL9l2j0n0Qj4xv3UwJGzFt2tDVfJnReXlPcTe mdWZlQ/qNAwwrfbRUZyNltnjMguCysgYpqDG+uEKDVkdO5bdrzSGku5CjxvgDC6z XZEnNe6r9pIqTA== -----END CERTIFICATE-----Generated at Sat May 10 14:49:54 2025 by rpki-client