$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: /JgspyNZpW+4KE77xkAa2fvuoKbigmAU/qa7dzrAtwA= Subject key identifier: 07:8E:F4:CC:58:A0:A2:8D:5F:B2:40:2C:4C:3F:7E:6C:F4:FA:21:79 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019A5A1D750099C7BC390B6C8CF18641BB4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1407 Signing time: Thu 06 Nov 2025 17:01:11 +0000 Manifest this update: Thu 06 Nov 2025 17:01:11 +0000 Manifest next update: Fri 07 Nov 2025 17:01:11 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 17: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: vgOIGitby4k0PoIlBddRe8LqBzZmJPdNe5peJIuTLmk=) 18: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 19: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 20: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 21: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 22: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 23: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 24: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 25: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 26: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 27: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 28: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 29: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 30: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 31: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 07 Nov 2025 14:56:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5a:1d:75:00:99:c7:bc:39:0b:6c:8c:f1:86:41:bb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 6 17:01:11 2025 GMT Not After : Nov 7 17:01:11 2025 GMT Subject: CN=078ef4cc58a0a28d5fb2402c4c3f7e6cf4fa2179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:84:bf:26:d4:5c:c6:cb:16:75:03:2a:35: c7:c9:9c:3d:fe:83:38:a2:e4:49:6d:62:2e:0f:b2: f7:67:5c:ff:8b:c1:95:05:4a:be:02:7a:c3:5a:3f: 9a:a3:72:bb:f2:41:9f:1b:64:aa:d7:6a:48:0c:c6: 68:84:5d:e5:af:eb:77:bf:e9:7b:90:05:83:b8:5b: cc:2e:f1:25:ab:ba:36:2c:5a:51:61:dc:01:2e:db: 1b:86:5b:7b:7b:15:2d:41:f9:63:82:13:05:bf:55: 41:b1:be:98:82:73:57:db:9a:d2:b9:8a:b1:5f:95: d2:79:cd:fb:4c:90:7e:9d:99:99:1b:83:8d:f0:e8: 09:09:bd:a9:65:66:83:f1:ee:79:07:6e:24:7c:0f: 3b:a6:15:2c:56:99:b6:4b:d6:5c:ff:14:c2:bb:b1: 7f:34:37:e3:33:9d:0e:59:ef:d9:3b:3f:2c:a2:3a: a9:0e:55:1f:fd:89:72:8a:b0:6e:a9:20:c2:6f:ca: 6f:c1:93:b9:aa:22:96:52:c7:e4:ca:de:92:3b:2a: ec:47:fa:eb:3c:0b:f6:07:8f:f8:bb:0f:f1:da:11: 10:f7:9d:5d:67:b1:9e:d8:4f:0e:30:66:46:0f:28: 0b:09:62:5e:a2:d7:4f:af:30:63:c0:34:e4:50:b5: a6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8E:F4:CC:58:A0:A2:8D:5F:B2:40:2C:4C:3F:7E:6C:F4:FA:21:79 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3f:c6:5e:bc:8f:d1:63:b6:de:38:64:d6:9b:ce:aa:e5:d3: 46:82:a5:c2:15:55:10:8c:c5:b0:2c:83:47:2d:e7:0d:4d:7e: e3:97:1c:5f:8c:15:53:5b:05:12:bb:2e:49:59:63:bd:17:ef: 45:d7:3f:71:ab:21:95:f2:00:86:cb:9d:52:37:6a:b8:8c:ac: db:80:ac:e0:20:9c:1b:3a:bd:b6:95:72:a7:c9:90:4a:00:98: 92:dc:93:5b:fa:09:fe:ee:73:f5:43:b0:30:8a:06:78:2b:4b: 87:82:a3:94:6b:86:2d:db:90:84:95:5a:f7:5d:d9:1a:0b:46: 32:29:e7:c3:b1:0e:e8:f4:de:54:85:29:ba:65:74:8f:74:65: 8c:48:66:eb:c0:f1:cd:f6:4e:f0:a0:ad:52:9d:d0:5c:25:aa: b7:e8:66:ab:1c:13:d0:09:92:f4:62:fd:40:c9:78:9c:79:4c: 02:00:2f:69:2b:04:63:6f:78:4f:7d:7e:1d:57:25:31:99:ab: bd:60:50:26:c8:93:ea:ee:32:e4:0c:bd:6e:12:4b:e8:d0:25: 56:4b:b5:0b:a5:78:8f:3c:b1:5d:f4:f9:19:bb:c7:a4:e9:82: 70:79:e8:9d:6c:34:c3:b7:7f:fd:e1:1e:2d:03:db:8e:3c:ec: d5:d3:c3:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpaHXUAmce8OQtsjPGGQbtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTA2MTcwMTExWhcNMjUxMTA3MTcwMTExWjAzMTEwLwYDVQQD EygwNzhlZjRjYzU4YTBhMjhkNWZiMjQwMmM0YzNmN2U2Y2Y0ZmEyMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkGEvybUXMbLFnUDKjXHyZw9/oM4 ouRJbWIuD7L3Z1z/i8GVBUq+AnrDWj+ao3K78kGfG2Sq12pIDMZohF3lr+t3v+l7 kAWDuFvMLvElq7o2LFpRYdwBLtsbhlt7exUtQfljghMFv1VBsb6YgnNX25rSuYqx X5XSec37TJB+nZmZG4ON8OgJCb2pZWaD8e55B24kfA87phUsVpm2S9Zc/xTCu7F/ NDfjM50OWe/ZOz8sojqpDlUf/YlyirBuqSDCb8pvwZO5qiKWUsfkyt6SOyrsR/rr PAv2B4/4uw/x2hEQ951dZ7Ge2E8OMGZGDygLCWJeotdPrzBjwDTkULWmzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeO9MxYoKKNX7JALEw/fmz0+iF5MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAT/GXryP 0WO23jhk1pvOquXTRoKlwhVVEIzFsCyDRy3nDU1+45ccX4wVU1sFErsuSVljvRfv Rdc/cashlfIAhsudUjdquIys24Cs4CCcGzq9tpVyp8mQSgCYktyTW/oJ/u5z9UOw MIoGeCtLh4KjlGuGLduQhJVa913ZGgtGMinnw7EO6PTeVIUpumV0j3RljEhm68Dx zfZO8KCtUp3QXCWqt+hmqxwT0AmS9GL9QMl4nHlMAgAvaSsEY294T31+HVclMZmr vWBQJsiT6u4y5Ay9bhJL6NAlVku1C6V4jzyxXfT5GbvHpOmCcHnonWw0w7d//eEe LQPbjjzs1dPD6A== -----END CERTIFICATE-----Generated at Thu Nov 6 18:09:59 2025 by rpki-client