$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: xQqnH5SjgyrbBdLFpC7E0myWGQdxFris89iLvsNe5BI= Subject key identifier: A2:E2:45:96:5D:FA:05:C3:4B:09:3A:41:1A:D9:F5:43:C4:54:35:F7 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019A92FAC0C8C8FBC2226927C90EB4E769ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1425 Signing time: Mon 17 Nov 2025 18:01:38 +0000 Manifest this update: Mon 17 Nov 2025 18:01:38 +0000 Manifest next update: Tue 18 Nov 2025 18:01:38 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: guXCB4a/IuzehFCF1HmIk2dLUQaNAtsG6xnvEbVSz2g=) 19: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 20: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 21: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 22: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 23: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 24: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 25: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 26: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 27: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 28: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 29: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 30: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 31: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 32: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Nov 2025 18:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:fa:c0:c8:c8:fb:c2:22:69:27:c9:0e:b4:e7:69:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 17 18:01:38 2025 GMT Not After : Nov 18 18:01:38 2025 GMT Subject: CN=a2e245965dfa05c34b093a411ad9f543c45435f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:a5:d2:57:18:81:3f:29:92:6e:2d:56:bc: a4:a2:c0:66:90:69:35:f3:a6:fa:43:58:3e:81:ea: bd:7c:b7:77:b9:eb:cc:a7:f9:19:b1:95:20:25:2c: 76:87:59:92:d1:2b:ca:db:05:6f:29:87:06:c2:29: bf:aa:f8:9d:97:d3:72:22:b1:b6:14:4f:f6:a9:ec: 8c:b5:27:6e:02:86:82:0e:21:17:ed:63:17:6e:0f: 56:27:40:24:6c:e7:c0:c5:29:ca:f4:88:60:cd:a2: 7c:bd:04:a2:90:10:25:8a:c0:1c:dd:5e:51:a4:a6: b8:b8:cd:01:b3:af:da:3f:a5:1d:cf:fa:fd:70:0c: bd:5d:21:ee:93:64:ce:f3:f7:91:5e:07:5c:bc:38: eb:4e:0a:3d:bb:79:f5:28:55:a9:e4:89:d7:79:12: 8a:aa:26:a5:e9:14:f0:6c:12:31:c0:99:5e:ba:f2: f0:61:07:37:8d:da:9f:aa:aa:9a:cd:69:d6:63:2c: f5:73:9f:db:70:44:03:09:87:4a:3e:3f:b5:ee:e5: fc:89:ab:de:94:51:b3:17:08:ff:50:87:f6:d3:60: 07:17:f6:3b:24:de:a9:77:03:5a:aa:ea:61:a2:ed: be:e6:a1:44:42:f0:02:4c:85:e7:87:9f:fa:f4:e5: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E2:45:96:5D:FA:05:C3:4B:09:3A:41:1A:D9:F5:43:C4:54:35:F7 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d2:4a:20:d3:cf:09:1d:b5:f7:d3:c4:e5:d3:f0:50:cf:d9: 3c:c5:03:29:19:a9:12:9e:2f:9f:61:d2:81:5c:e0:c3:e2:29: 12:a4:5c:71:5f:02:12:b6:50:f4:de:a4:b8:9b:6b:9d:7e:2b: 4d:3b:46:14:38:6c:9f:66:34:a6:e4:b0:8c:b3:a5:e6:e4:82: 5c:a9:59:03:c9:7f:8b:d0:fd:51:c7:f3:ab:02:35:07:fd:df: 1e:0e:03:04:f6:82:1a:d3:20:39:41:f3:c6:a4:b6:6d:24:60: 18:8e:51:61:1a:f4:71:9f:a5:36:6e:ff:49:21:1b:89:42:0d: f9:43:5f:02:06:a5:6d:41:d8:dd:2b:e0:73:2c:38:06:70:1e: f2:3a:db:6d:4a:be:b0:4c:f9:30:c9:79:d4:42:77:ed:77:89: 6d:ce:d9:c5:f8:50:ea:9e:64:2f:7e:eb:1a:c3:16:6c:f6:86: 3c:12:93:6d:fb:a9:61:38:76:7d:40:70:d8:93:b6:0d:f7:6d: 7e:81:38:60:a9:43:dc:da:00:4d:71:9b:65:1a:63:95:8f:7b: e3:4e:17:93:a0:2f:17:ce:eb:06:85:2b:ab:6f:90:d9:ca:73: 34:f2:5c:48:e3:88:2f:d6:4a:b2:7a:54:53:ff:4f:4f:54:b1: 7b:90:4c:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqS+sDIyPvCImknyQ6052ntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTE3MTgwMTM4WhcNMjUxMTE4MTgwMTM4WjAzMTEwLwYDVQQD EyhhMmUyNDU5NjVkZmEwNWMzNGIwOTNhNDExYWQ5ZjU0M2M0NTQzNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfKl0lcYgT8pkm4tVrykosBmkGk1 86b6Q1g+geq9fLd3uevMp/kZsZUgJSx2h1mS0SvK2wVvKYcGwim/qvidl9NyIrG2 FE/2qeyMtSduAoaCDiEX7WMXbg9WJ0AkbOfAxSnK9IhgzaJ8vQSikBAlisAc3V5R pKa4uM0Bs6/aP6Udz/r9cAy9XSHuk2TO8/eRXgdcvDjrTgo9u3n1KFWp5InXeRKK qial6RTwbBIxwJleuvLwYQc3jdqfqqqazWnWYyz1c5/bcEQDCYdKPj+17uX8iave lFGzFwj/UIf202AHF/Y7JN6pdwNaquphou2+5qFEQvACTIXnh5/69OVMmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLiRZZd+gXDSwk6QRrZ9UPEVDX3MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNJKINPP CR2199PE5dPwUM/ZPMUDKRmpEp4vn2HSgVzgw+IpEqRccV8CErZQ9N6kuJtrnX4r TTtGFDhsn2Y0puSwjLOl5uSCXKlZA8l/i9D9UcfzqwI1B/3fHg4DBPaCGtMgOUHz xqS2bSRgGI5RYRr0cZ+lNm7/SSEbiUIN+UNfAgalbUHY3Svgcyw4BnAe8jrbbUq+ sEz5MMl51EJ37XeJbc7ZxfhQ6p5kL37rGsMWbPaGPBKTbfupYTh2fUBw2JO2Dfdt foE4YKlD3NoATXGbZRpjlY97404Xk6AvF87rBoUrq2+Q2cpzNPJcSOOIL9ZKsnpU U/9PT1Sxe5BMdw== -----END CERTIFICATE-----Generated at Tue Nov 18 01:25:58 2025 by rpki-client