$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: iFXDkUitaUMQVk5FyXtaTbnULsaKLKsW6iAkPbr4Qs4= Subject key identifier: AD:1E:F1:3C:BF:46:A3:04:8D:D5:94:7C:B9:21:A3:5A:3C:51:A7:AC Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019A22C07A1AD3DDB8940FA3991D6E2BA902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1715 Signing time: Sun 26 Oct 2025 23:00:30 +0000 Manifest this update: Sun 26 Oct 2025 23:00:30 +0000 Manifest next update: Mon 27 Oct 2025 23:00:30 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 5: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 6: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 7: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 8: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: kCQpzHEf7Wiad/6JaFMZMTck/OkYjvxA7Qc54GMeQgU=) 10: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 11: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 12: ZilTqGeKBQ2tryG8q3trVBCr-kw.roa (hash: PwgBz8bW1BvrcChPP0zRLTeusRgOrK5lGOMisutfo94=) 13: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 19:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:22:c0:7a:1a:d3:dd:b8:94:0f:a3:99:1d:6e:2b:a9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Oct 26 23:00:30 2025 GMT Not After : Oct 27 23:00:30 2025 GMT Subject: CN=ad1ef13cbf46a3048dd5947cb921a35a3c51a7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:e6:72:1a:ac:41:c5:2b:49:7c:7e:9a:cb: 2e:b7:7d:ee:93:a4:78:5d:d6:ae:19:58:26:c9:69: 3c:76:da:e1:03:1a:be:45:2d:dc:3e:d5:80:89:f4: 7d:36:1b:92:9f:a2:79:93:33:f6:df:4a:17:34:81: 30:37:e1:f9:24:3d:7d:fd:64:55:57:db:e4:fa:be: c9:b2:77:93:49:de:e0:96:4e:1d:9e:28:3e:47:18: 08:7f:c6:4b:9b:80:0b:2d:1b:e0:49:b8:ca:e6:da: 31:17:8b:83:31:45:e3:c2:39:d7:2a:15:61:b3:4f: c4:42:a0:c3:8e:cd:fa:f3:a1:fc:36:80:f3:93:03: 28:68:94:d1:dc:a6:e2:82:e2:38:69:89:5c:08:77: 2d:ae:0f:90:fa:d5:9e:bf:41:ba:44:d3:1a:a0:01: f3:37:d1:11:ba:47:10:b6:ef:4f:1f:f6:12:ae:4f: 1e:11:2e:cc:06:f2:23:e9:ba:f6:f4:d7:e0:1a:99: 82:75:ba:16:16:dc:a1:ba:b6:8f:fd:a1:71:41:34: ec:31:24:95:e4:04:f0:3f:8f:ef:a1:95:84:d4:e3: ce:2f:c0:58:4f:96:40:d1:72:29:20:33:ed:d6:47: 7f:a4:d5:c2:a7:c3:5f:20:6c:57:dc:be:38:8c:54: 33:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1E:F1:3C:BF:46:A3:04:8D:D5:94:7C:B9:21:A3:5A:3C:51:A7:AC X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:40:b8:81:68:9e:c7:7d:5f:37:b5:f9:a9:9a:ed:d7:9f:6a: bb:2c:68:35:dc:49:2d:62:4d:5e:e3:6e:65:3f:f9:c8:a6:27: 91:d9:db:a8:ac:10:8c:93:b9:ff:1e:89:2f:c7:fe:c6:2e:dd: 56:7d:58:70:bf:cf:7c:82:63:71:a9:ae:f6:88:e7:af:5e:b4: 9b:4a:ab:e8:d8:65:66:78:83:36:b3:93:cf:1e:be:da:32:3c: 9a:42:d1:15:ba:8d:f8:56:e2:f4:3f:e3:1c:ef:8f:bb:3c:3c: 88:5e:fe:1b:80:0d:28:85:b5:4d:1b:4c:a6:8f:48:83:70:f3: 25:05:a4:53:56:b4:7d:75:6d:ad:af:a3:27:63:f4:94:16:7b: 61:40:55:fa:53:d1:72:36:ac:79:7d:00:d0:46:00:94:c4:98: af:12:59:3a:87:a3:67:10:8d:1e:75:0c:ab:0d:02:ee:8d:a3: 76:d7:7f:16:56:0a:92:95:67:39:b0:e1:2e:d1:99:e2:62:18: ba:94:2e:83:4d:d2:f3:de:00:8f:3b:9b:1c:b7:2d:25:0a:41: 5b:68:7d:f2:5f:1a:86:96:db:cc:dd:ba:bf:8a:16:b1:cd:8f: 53:1e:b5:21:c5:de:eb:67:47:77:bb:a7:ad:34:88:1a:eb:63: b3:12:94:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoiwHoa0924lA+jmR1uK6kCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMDI2MjMwMDMwWhcNMjUxMDI3MjMwMDMwWjAzMTEwLwYDVQQD EyhhZDFlZjEzY2JmNDZhMzA0OGRkNTk0N2NiOTIxYTM1YTNjNTFhN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRzmchqsQcUrSXx+mssut33uk6R4 XdauGVgmyWk8dtrhAxq+RS3cPtWAifR9NhuSn6J5kzP230oXNIEwN+H5JD19/WRV V9vk+r7JsneTSd7glk4dnig+RxgIf8ZLm4ALLRvgSbjK5toxF4uDMUXjwjnXKhVh s0/EQqDDjs3686H8NoDzkwMoaJTR3KbiguI4aYlcCHctrg+Q+tWev0G6RNMaoAHz N9ERukcQtu9PH/YSrk8eES7MBvIj6br29NfgGpmCdboWFtyhuraP/aFxQTTsMSSV 5ATwP4/voZWE1OPOL8BYT5ZA0XIpIDPt1kd/pNXCp8NfIGxX3L44jFQz8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0e8Ty/RqMEjdWUfLkho1o8UaesMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0C4gWie x31fN7X5qZrt159quyxoNdxJLWJNXuNuZT/5yKYnkdnbqKwQjJO5/x6JL8f+xi7d Vn1YcL/PfIJjcamu9ojnr160m0qr6NhlZniDNrOTzx6+2jI8mkLRFbqN+Fbi9D/j HO+Puzw8iF7+G4ANKIW1TRtMpo9Ig3DzJQWkU1a0fXVtra+jJ2P0lBZ7YUBV+lPR cjaseX0A0EYAlMSYrxJZOoejZxCNHnUMqw0C7o2jdtd/FlYKkpVnObDhLtGZ4mIY upQug03S894AjzubHLctJQpBW2h98l8ahpbbzN26v4oWsc2PUx61IcXe62dHd7un rTSIGutjsxKUaw== -----END CERTIFICATE-----Generated at Mon Oct 27 04:18:35 2025 by rpki-client