$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: njnPlhsod+RJToi7o0gNDPuMuSb81/pEDIIhOvz9V1w= Subject key identifier: F1:D8:9D:89:39:9F:8B:79:E6:2D:FD:60:62:39:1B:6C:D4:33:EA:7B Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019A202D37FFDAE73CA24B8D7CF7C5D0BA6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 16EC Signing time: Sun 26 Oct 2025 11:00:25 +0000 Manifest this update: Sun 26 Oct 2025 11:00:25 +0000 Manifest next update: Mon 27 Oct 2025 11:00:25 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: Ec5a4eo2M63HfaJuPBR14qEtdNxRzM/WNT2lMCQWQ8I=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 03:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:20:2d:37:ff:da:e7:3c:a2:4b:8d:7c:f7:c5:d0:ba:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Oct 26 11:00:25 2025 GMT Not After : Oct 27 11:00:25 2025 GMT Subject: CN=f1d89d89399f8b79e62dfd6062391b6cd433ea7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:a2:b1:97:86:5f:ca:a8:26:a5:d2:ef:45: f6:91:61:90:fe:39:1b:f1:6e:cc:bb:50:49:44:18: 7f:b3:12:10:8e:e5:dd:fa:b3:b1:1d:dc:03:a1:ef: 22:af:80:59:ef:dc:28:e2:fa:1a:ae:ba:59:df:5a: e1:3c:69:a6:2b:19:c0:12:18:7e:52:b6:39:2b:73: 2e:98:6e:9c:c2:af:9b:e8:3b:ac:1c:91:27:92:be: aa:f0:75:9b:bb:e0:24:ae:e4:d3:65:66:a8:2e:61: 43:21:48:be:ab:50:d8:d4:64:6a:cc:d2:0f:51:9b: 89:b3:5e:79:be:85:16:79:a8:ac:91:da:43:c2:ee: a2:00:98:0a:a6:24:f1:c2:b4:c0:1e:a6:d6:44:9c: 69:ec:1e:26:4c:dc:ca:a4:be:bb:5a:6b:6f:99:74: 80:8c:d4:f0:b1:8d:14:a7:1a:b0:9b:11:8b:7e:59: db:45:dc:05:2d:e1:d6:7e:b9:b4:0c:4d:bc:c6:4d: a7:56:16:3b:d6:37:ad:11:42:23:e8:47:ba:69:54: f9:cd:33:9f:73:15:68:55:bc:c6:3f:35:2a:52:ec: 8c:3d:a0:52:30:a5:6f:dd:ef:27:a0:cd:e1:6a:e5: 55:ba:60:6d:dc:f0:50:e3:39:9b:e1:66:f4:62:d7: 27:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D8:9D:89:39:9F:8B:79:E6:2D:FD:60:62:39:1B:6C:D4:33:EA:7B X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9d:f3:a4:02:b2:7b:39:11:f0:7e:23:62:1e:6f:8b:36:fd: 03:a3:c1:f8:36:66:28:ed:76:8a:8c:1b:77:c7:66:33:ca:d2: 1f:4e:c7:e8:b7:c0:28:1e:31:82:cf:ff:af:a2:a6:db:89:d1: b3:2b:75:5f:49:20:1c:ae:fa:cc:fa:91:7b:01:fe:91:c1:91: 00:67:b5:a4:df:a9:eb:aa:04:8d:df:9e:63:04:db:1e:81:ec: ef:d4:4f:8c:92:4e:45:b5:51:a5:35:d5:57:d4:59:35:06:d4: 60:ff:97:81:dc:87:f7:c6:a1:2e:96:33:07:59:1f:9d:c8:46: 83:40:5e:6e:df:8a:dd:ca:76:52:c0:64:0d:72:25:20:45:b3: be:7d:4f:ad:52:36:dd:7d:57:31:d3:df:ce:43:f9:98:59:ca: 09:14:88:68:7f:ad:a6:46:58:cf:ef:90:66:d5:01:3e:22:d8: 0b:fa:57:8b:69:d7:1a:0a:ad:20:ec:3f:c4:ec:e8:5f:3f:ce: bc:e7:3f:ee:7b:2f:6a:b8:80:c7:c2:71:c2:03:f8:20:86:1e: b7:b6:1b:ca:0a:0d:ec:7e:b4:92:d3:c5:10:0e:8f:10:99:c8: 81:07:73:80:94:1b:93:f9:54:aa:e3:b2:72:21:18:0d:17:8b: 91:70:55:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZogLTf/2uc8okuNfPfF0LpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUxMDI2MTEwMDI1WhcNMjUxMDI3MTEwMDI1WjAzMTEwLwYDVQQD EyhmMWQ4OWQ4OTM5OWY4Yjc5ZTYyZGZkNjA2MjM5MWI2Y2Q0MzNlYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkGisZeGX8qoJqXS70X2kWGQ/jkb 8W7Mu1BJRBh/sxIQjuXd+rOxHdwDoe8ir4BZ79wo4voarrpZ31rhPGmmKxnAEhh+ UrY5K3MumG6cwq+b6DusHJEnkr6q8HWbu+AkruTTZWaoLmFDIUi+q1DY1GRqzNIP UZuJs155voUWeaiskdpDwu6iAJgKpiTxwrTAHqbWRJxp7B4mTNzKpL67WmtvmXSA jNTwsY0UpxqwmxGLflnbRdwFLeHWfrm0DE28xk2nVhY71jetEUIj6Ee6aVT5zTOf cxVoVbzGPzUqUuyMPaBSMKVv3e8noM3hauVVumBt3PBQ4zmb4Wb0YtcnEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHYnYk5n4t55i39YGI5G2zUM+p7MB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZ3zpAKy ezkR8H4jYh5vizb9A6PB+DZmKO12iowbd8dmM8rSH07H6LfAKB4xgs//r6Km24nR syt1X0kgHK76zPqRewH+kcGRAGe1pN+p66oEjd+eYwTbHoHs79RPjJJORbVRpTXV V9RZNQbUYP+XgdyH98ahLpYzB1kfnchGg0Bebt+K3cp2UsBkDXIlIEWzvn1PrVI2 3X1XMdPfzkP5mFnKCRSIaH+tpkZYz++QZtUBPiLYC/pXi2nXGgqtIOw/xOzoXz/O vOc/7nsvariAx8JxwgP4IIYet7YbygoN7H60ktPFEA6PEJnIgQdzgJQbk/lUquOy ciEYDReLkXBVQg== -----END CERTIFICATE-----Generated at Sun Oct 26 13:03:44 2025 by rpki-client