$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 9dbrzaqFdAVRXv3Fki7Ua0O0jxRBhQLMcBlMiNbLv7Q= Subject key identifier: 43:4D:BC:1C:76:6A:9B:70:5C:01:4E:9C:29:41:12:6E:D6:2F:39:69 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 0198C8DD997B4AB07CA5D40A857FB5FF7051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 132B Signing time: Wed 20 Aug 2025 19:03:42 +0000 Manifest this update: Wed 20 Aug 2025 19:03:42 +0000 Manifest next update: Thu 21 Aug 2025 19:03:42 +0000 Files and hashes: 1: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 2: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 3: 1-mVwC91y2gjxzZ49ECJKeMBNsxM.roa (hash: U559gzASGhlXQBS0hGV4xF3kH8STm7I07VZJO2H7/G4=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 7: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 8: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 9: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 10: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 11: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 12: F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa (hash: vUOE0EzW5wlVnmrKCdNEm67M3EqZb+A0EvhCnOtIuZM=) 13: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 14: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 15: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: sNdLbVEN0+VPVz6YI3OVqxpayf0smVr4gA0lpOZkPjk=) 16: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 17: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 18: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 19: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 20: ZGQz0tsigUD9Q_FNeNUn6ogaHqg.roa (hash: K6ZZnIzxkzbl1qwYVTj7m0h9gsdaSWPnwrSd9T7K9Qs=) 21: ZnbzYHRBvUTbEjCixu-51iq0NfI.roa (hash: H6eoYf0qoCchu+RJjza0539v8DwbGRsxOIQiPaH7Gsc=) 22: _xC1kXcH_xnBrp3zmmeFMgFE7KI.roa (hash: lnLioS9m0wvQKnvleqYpOpwLrz8qz8X99uptw34wSFs=) 23: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 24: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 25: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 26: vo2rUhudHaghMCW2SmvX6-xlrgc.roa (hash: FZASucIaZ1aOelFRR50cfT704K1hG/2FvzdrgPSdXmY=) 27: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 28: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Aug 2025 19:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:c8:dd:99:7b:4a:b0:7c:a5:d4:0a:85:7f:b5:ff:70:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Aug 20 19:03:42 2025 GMT Not After : Aug 21 19:03:42 2025 GMT Subject: CN=434dbc1c766a9b705c014e9c2941126ed62f3969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:36:c9:7d:2a:65:6b:92:af:ed:4e:a3:05: 30:b9:4b:d4:4f:82:dc:78:e0:04:82:8c:15:fc:ec: cb:6f:34:bc:2f:b1:dd:b1:fc:7d:a3:e6:68:6b:c4: db:0b:a7:3b:91:c6:76:b6:ec:14:29:aa:1b:68:13: 40:16:d3:dd:37:f5:fe:ec:89:66:7a:0f:34:95:16: 05:2e:37:50:a1:06:99:18:1b:61:ed:13:1b:bf:40: a6:2c:b0:fe:ab:77:c6:12:fa:8a:4a:c0:cd:16:45: 42:5f:86:9b:4c:41:c6:78:0e:ac:ba:0b:bd:45:dc: ff:e9:04:a2:6b:d0:8b:71:ee:a1:da:58:17:fc:13: 52:12:9a:ab:f0:bf:19:ce:eb:87:53:f0:a4:7a:a1: da:de:a0:86:50:2a:57:51:03:31:d8:6b:38:9d:e2: 81:b6:80:f8:b4:b0:41:48:e1:5a:6f:56:0d:81:33: f0:a3:d4:08:25:3f:c0:76:10:b2:95:c3:61:a0:77: 61:ea:03:75:df:4e:74:b5:a7:bb:00:eb:a4:4d:d3: a3:1c:fc:7a:1a:cd:8b:64:e5:cb:a8:a0:5a:87:d1: 3f:d3:cc:41:ad:f3:3b:56:f1:b4:92:c2:2f:4e:8d: f8:da:98:83:3f:6d:43:61:f1:f0:92:85:fc:1e:79: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4D:BC:1C:76:6A:9B:70:5C:01:4E:9C:29:41:12:6E:D6:2F:39:69 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:64:ee:df:bc:ad:e6:12:4a:1d:a3:7b:c4:b6:ee:e4:3f:68: 38:3b:65:81:20:c7:49:bc:5f:9d:e2:45:f6:4e:07:0f:52:ad: b1:a9:2f:8b:20:c5:67:33:67:74:09:84:9b:12:5b:2c:ef:34: 8d:41:10:6d:f7:da:61:18:1e:54:ae:cf:9e:f7:bb:a3:15:11: 85:61:bf:8e:5c:11:55:02:2e:0b:17:af:9e:f9:eb:3b:ec:40: da:d8:3b:ca:16:01:67:dd:25:aa:7f:ea:b2:4c:95:1a:78:ba: da:62:66:f2:7b:a7:c4:9f:7c:88:04:c6:54:a6:59:84:d4:c5: 02:ed:bc:66:ea:1a:91:1e:e8:5e:3f:44:53:d1:c5:46:7e:f0: de:56:20:ca:90:b9:10:e9:0a:91:a1:c1:f1:a1:8a:5b:10:9b: b2:60:4c:1d:7a:35:42:b8:4c:23:25:1c:33:fd:14:5e:f4:f5: ca:c9:af:df:f5:32:9a:e7:1a:c6:30:81:e4:2b:c3:25:c3:04: 84:72:bc:f0:c7:fc:ad:ca:c3:bd:01:6e:5c:d5:b9:24:96:44: 94:24:1f:5f:34:2d:a9:e4:f1:79:f5:f0:b6:b1:e9:9e:fc:5a: a7:5e:61:38:bf:34:9a:a9:a9:9f:0b:ea:87:ad:9d:11:e4:f0: b3:f9:bf:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjI3Zl7SrB8pdQKhX+1/3BRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUwODIwMTkwMzQyWhcNMjUwODIxMTkwMzQyWjAzMTEwLwYDVQQD Eyg0MzRkYmMxYzc2NmE5YjcwNWMwMTRlOWMyOTQxMTI2ZWQ2MmYzOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDI2yX0qZWuSr+1OowUwuUvUT4Lc eOAEgowV/OzLbzS8L7Hdsfx9o+Zoa8TbC6c7kcZ2tuwUKaobaBNAFtPdN/X+7Ilm eg80lRYFLjdQoQaZGBth7RMbv0CmLLD+q3fGEvqKSsDNFkVCX4abTEHGeA6sugu9 Rdz/6QSia9CLce6h2lgX/BNSEpqr8L8ZzuuHU/CkeqHa3qCGUCpXUQMx2Gs4neKB toD4tLBBSOFab1YNgTPwo9QIJT/AdhCylcNhoHdh6gN13050tae7AOukTdOjHPx6 Gs2LZOXLqKBah9E/08xBrfM7VvG0ksIvTo342piDP21DYfHwkoX8HnnYrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENNvBx2aptwXAFOnClBEm7WLzlpMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWTu37yt 5hJKHaN7xLbu5D9oODtlgSDHSbxfneJF9k4HD1KtsakviyDFZzNndAmEmxJbLO80 jUEQbffaYRgeVK7Pnve7oxURhWG/jlwRVQIuCxevnvnrO+xA2tg7yhYBZ90lqn/q skyVGni62mJm8nunxJ98iATGVKZZhNTFAu28ZuoakR7oXj9EU9HFRn7w3lYgypC5 EOkKkaHB8aGKWxCbsmBMHXo1QrhMIyUcM/0UXvT1ysmv3/UymucaxjCB5CvDJcME hHK88Mf8rcrDvQFuXNW5JJZElCQfXzQtqeTxefXwtrHpnvxap15hOL80mqmpnwvq h62dEeTws/m/wg== -----END CERTIFICATE-----Generated at Thu Aug 21 01:28:20 2025 by rpki-client