$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft File: NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json) Hash identifier: M5E9jn+LVlP5pSnXRwOqv2DUXCIAhu6B37iMeKPbaSI= Subject key identifier: C9:D3:3D:8D:74:6C:E5:65:10:30:D8:7D:61:A9:61:65:48:E5:5F:D2 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019A03DA53E0A85DCC1B0EC5684AD569A432 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft Manifest number: 1875 Signing time: Mon 20 Oct 2025 23:00:31 +0000 Manifest this update: Mon 20 Oct 2025 23:00:31 +0000 Manifest next update: Tue 21 Oct 2025 23:00:31 +0000 Files and hashes: 1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=) 2: 2D7BkJ2uS8eaQi0tUoSNEy2C_Qs.roa (hash: 6UliecSbmyd+GheOL3Qj1KpFcgUOmb4o9MBbBJHjs7g=) 3: 3GpFaqQcQN9oMifABgrQUFoG0kE.roa (hash: WY/ivhDoFD/EbNKAvaxEqHPsDCFDZM/+fS+MHyM0i7w=) 4: 67Mxj3KpQWipNpMlLApfSyTCvC0.roa (hash: Fv9QcoJhLdt0inevu/XCAdGmMRCdZt4H9qb4Kzk/RZ4=) 5: 6I5lT77tINLa2tAFzIKdxBUfZOY.roa (hash: XJgZ7FSKAHc+Qdclhb6uD5MNen9bjsZ0E6qGnEqSr1g=) 6: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=) 7: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=) 8: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=) 9: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=) 10: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=) 11: IyhEJLFmNQPxm2gpkAgvGCTuwi4.roa (hash: H8aNjsawyRJ3qfGLXUbKrOWvZMg41HXkBJpftI8uVjM=) 12: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=) 13: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: y5yFdmiNF+19dAQNwPRG92bhPmIEOjhXxRLKYdKFI8c=) 14: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=) 15: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=) 16: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=) 17: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=) 18: SdAO5znpfdFPK3Hqe-_r4_nJ8qY.roa (hash: 0t61EacIVCgeyWoWNgl6pkppBifI3GCHVv8rPuzvXjg=) 19: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=) 20: YboMhCcJstKJLHmryBstvAc5aZc.roa (hash: u/gxCUCoqsgS01TZF0mszEtlLhY6+L1clteDdKf6jws=) 21: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=) 22: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=) 23: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=) 24: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=) 25: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=) 26: dbVfA_fXprSS4i2QZkFruITo2AE.roa (hash: rakhWVMFHWlUieRihs0aD8m0Lp0z1R0bTv8p0JLqNxw=) 27: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=) 28: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=) 29: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=) 30: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=) 31: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=) 32: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=) 33: p5fOAj13O-8C6VVCmQWMZlH3Jl0.roa (hash: fnDhIuo9lowvmM1vEPfnQ/U7JNE5xCEXzEKbsMm8PPI=) 34: pOIWxKcdmhqjCV5w5POl9_2JyY4.roa (hash: n0yy3OyjCswMBJj55eSTCAuqwQeLoykODrZnbzLuaaU=) 35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=) 36: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=) 37: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=) 38: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:03:da:53:e0:a8:5d:cc:1b:0e:c5:68:4a:d5:69:a4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Oct 20 23:00:31 2025 GMT Not After : Oct 21 23:00:31 2025 GMT Subject: CN=c9d33d8d746ce5651030d87d61a9616548e55fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3d:6c:c2:68:0d:5e:37:62:a7:ed:7a:b7:d6: 6d:d5:e1:70:8a:87:05:07:84:d5:00:9b:01:7c:9d: 90:93:f1:66:d2:8e:a8:90:01:b3:9e:df:92:38:a1: 9d:b8:04:f0:aa:2a:3d:d4:12:23:f8:18:40:f9:c4: bd:9e:2e:e1:d1:99:e0:8f:8c:e8:93:34:6d:16:6f: e1:7d:65:c9:47:38:fa:f9:de:82:f3:b7:36:59:ef: b7:72:ac:2e:45:a7:6a:cb:4e:c3:01:a7:da:15:d5: e6:33:ec:ba:21:4d:6c:87:45:b2:71:ef:3f:ea:0f: 6f:38:c6:1e:67:e3:d8:62:d3:cd:47:83:a1:51:b5: f9:c7:ba:35:5c:91:1d:ed:11:41:48:91:bb:f7:7a: bd:4e:13:57:f7:02:bf:e4:4c:dd:8e:98:3e:1f:04: 7a:86:cd:1f:b4:fa:d5:cb:2e:97:c1:e4:83:b8:29: 8a:18:ac:35:5a:cf:e8:21:17:30:81:34:ed:96:a9: 4f:32:d3:b8:22:cc:15:8d:ac:44:da:18:51:cd:02: 9c:9f:5a:25:fc:d1:3f:87:11:dd:09:de:45:c3:a3: f4:45:79:4e:f6:cd:0e:a2:7d:2e:84:ab:7e:c0:de: c6:79:0e:d1:56:e3:fb:89:b2:09:8c:2f:eb:de:b5: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D3:3D:8D:74:6C:E5:65:10:30:D8:7D:61:A9:61:65:48:E5:5F:D2 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:48:b8:d7:86:95:ef:8a:fd:12:10:a0:62:99:b1:9e:9a:c0: 61:09:80:7d:e3:84:79:5c:29:c7:9a:c9:aa:91:cb:68:38:16: a1:43:a6:f9:12:f0:c3:bd:97:41:99:8a:b8:e7:3b:24:3c:1b: d6:d6:be:bd:84:c9:71:3e:fd:9f:84:a5:50:2a:d7:9b:49:55: 9f:43:b7:b9:4b:4f:51:f1:05:57:40:71:7f:19:13:45:ee:ea: 33:9d:94:8e:00:cd:30:9a:9c:14:df:cc:9c:aa:87:ef:49:77: 3e:30:87:1f:71:09:9e:8f:ce:ee:87:a0:d8:fc:4e:4c:6a:01: 89:b8:ff:f7:56:ca:d0:90:48:32:de:a3:1f:12:54:f2:78:bf: a2:48:cb:c7:99:f6:c1:a9:20:9b:82:45:88:0d:34:1a:0e:1f: 9b:87:85:3b:da:7e:34:a3:bd:ae:11:e1:34:06:4f:ee:4f:16: cd:65:74:f9:90:e2:19:3e:0c:5f:6f:ef:95:cb:73:e1:01:12: 22:28:33:3c:a9:e1:24:8d:33:11:2d:6f:a3:4b:b8:79:d5:52: ae:37:ff:4b:ce:6b:fb:71:ff:12:a2:e2:1e:73:d1:f9:c7:7d: 13:93:32:f9:df:22:ac:b3:6f:d4:24:aa:74:de:bd:6a:c4:3a: 7a:27:5c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoD2lPgqF3MGw7FaErVaaQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjUxMDIwMjMwMDMxWhcNMjUxMDIxMjMwMDMxWjAzMTEwLwYDVQQD EyhjOWQzM2Q4ZDc0NmNlNTY1MTAzMGQ4N2Q2MWE5NjE2NTQ4ZTU1ZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj1swmgNXjdip+16t9Zt1eFwiocF B4TVAJsBfJ2Qk/Fm0o6okAGznt+SOKGduATwqio91BIj+BhA+cS9ni7h0Zngj4zo kzRtFm/hfWXJRzj6+d6C87c2We+3cqwuRadqy07DAafaFdXmM+y6IU1sh0Wyce8/ 6g9vOMYeZ+PYYtPNR4OhUbX5x7o1XJEd7RFBSJG793q9ThNX9wK/5Ezdjpg+HwR6 hs0ftPrVyy6XweSDuCmKGKw1Ws/oIRcwgTTtlqlPMtO4IswVjaxE2hhRzQKcn1ol /NE/hxHdCd5Fw6P0RXlO9s0Oon0uhKt+wN7GeQ7RVuP7ibIJjC/r3rVFsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnTPY10bOVlEDDYfWGpYWVI5V/SMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEi414aV 74r9EhCgYpmxnprAYQmAfeOEeVwpx5rJqpHLaDgWoUOm+RLww72XQZmKuOc7JDwb 1ta+vYTJcT79n4SlUCrXm0lVn0O3uUtPUfEFV0BxfxkTRe7qM52UjgDNMJqcFN/M nKqH70l3PjCHH3EJno/O7oeg2PxOTGoBibj/91bK0JBIMt6jHxJU8ni/okjLx5n2 wakgm4JFiA00Gg4fm4eFO9p+NKO9rhHhNAZP7k8WzWV0+ZDiGT4MX2/vlctz4QES IigzPKnhJI0zES1vo0u4edVSrjf/S85r+3H/EqLiHnPR+cd9E5My+d8irLNv1CSq dN69asQ6eidcaQ== -----END CERTIFICATE-----Generated at Tue Oct 21 06:24:01 2025 by rpki-client