$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: koH7++asYUTS5rz1p+AqwMzzNwbtvQ/Kbn+HRANKNMM= Subject key identifier: E5:7F:54:4F:FC:C4:94:CA:61:13:70:60:B9:54:46:86:AE:D4:C5:70 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019A0B259C3E31EC81B1E9F33C7C2989D915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 13DD Signing time: Wed 22 Oct 2025 09:00:05 +0000 Manifest this update: Wed 22 Oct 2025 09:00:05 +0000 Manifest next update: Thu 23 Oct 2025 09:00:05 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 17: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 6Y61IikimDLyUN1S7tYEQaGGpGMzc8nFrk6jBARHl98=) 18: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 19: QckeBKMJh1BMnZ4ggic7riQ2nos.roa (hash: PamlZ5g3cWGlPRPXTTD6iPe1z0pCGfOT1CE1MB2hQhQ=) 20: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 21: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 22: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 23: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 24: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 25: YQyoZSZ38L_KFryMEYkBnAZJoIU.roa (hash: rlsyW+kzGTKRfz2CZKaaatgyY9ylPHrd5KVR/xTE2Pc=) 26: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 27: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 28: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 29: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 30: tVNklZT96j0o2vM1vFyzeOT8bDo.roa (hash: X8HwNTOIYXkyadyS3xbX6x0xWEuSl2cwCWxlE5a5tY0=) 31: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 32: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 Oct 2025 08:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:25:9c:3e:31:ec:81:b1:e9:f3:3c:7c:29:89:d9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Oct 22 09:00:05 2025 GMT Not After : Oct 23 09:00:05 2025 GMT Subject: CN=e57f544ffcc494ca61137060b9544686aed4c570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:61:3d:76:0b:f0:36:d4:4c:ea:3c:a8:96: cb:c9:5a:b3:f3:7c:41:93:5c:d6:1e:ed:8f:1e:e9: b3:ba:b1:ac:fc:06:cc:26:77:23:be:79:4e:a6:7a: ec:6a:2e:d3:46:76:e4:96:5e:db:2c:ee:b6:56:79: 8c:4e:d1:c8:84:da:b6:10:c1:15:e6:30:92:64:e0: 1f:e5:32:4a:48:57:1c:4d:f1:b7:3f:05:cb:07:27: 04:54:96:d2:32:95:71:de:9b:5e:56:a7:f9:4a:48: b9:91:c1:1a:b9:34:ba:3e:2b:47:3a:ac:f5:ed:d6: 52:17:1f:59:0c:98:fe:0e:82:e9:e0:67:16:ff:e0: cb:32:16:09:39:35:9e:f8:8b:d3:cf:3b:88:1c:dc: 07:ac:de:dd:82:ec:72:a7:b5:1e:cc:85:75:40:ab: c0:50:32:b3:12:c3:d6:13:86:14:64:ef:29:1d:13: 3e:92:64:0e:15:f8:fb:22:96:c9:6c:a6:87:f8:31: e2:6e:c3:5c:99:d3:f9:0b:38:dc:63:4a:7e:94:31: b1:67:95:36:27:6a:27:e2:77:b7:61:f7:02:fe:ab: f0:54:ef:f5:0a:ca:33:28:88:d0:0b:66:ca:32:4d: a8:7f:0a:e7:2b:2c:d9:4c:55:ff:7f:34:ba:83:90: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7F:54:4F:FC:C4:94:CA:61:13:70:60:B9:54:46:86:AE:D4:C5:70 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e8:ea:21:00:d6:26:b5:76:5a:ee:8b:36:21:7c:ae:00:87: e5:e1:0c:06:86:06:48:8a:15:60:47:4c:05:64:05:d2:1e:e4: 0f:c3:f1:f6:9c:66:da:b0:23:86:5e:cf:6f:61:b9:d2:28:27: 93:c8:07:9e:c8:49:3c:9c:0d:e0:5f:9b:41:87:0d:a0:37:2b: 1d:6f:37:22:9a:81:03:54:26:9c:27:cd:c3:51:59:9d:1f:54: 2d:84:69:67:68:20:b1:bd:e6:33:94:a5:83:ba:28:3b:3d:82: 30:de:84:24:8f:7d:aa:4e:64:28:2c:5c:4f:ea:11:6d:1d:eb: a9:4d:b2:9a:7b:f7:3d:2a:1e:68:f2:64:6d:90:d7:ba:ec:70: ee:84:c8:5b:e1:e6:55:42:79:c0:25:0d:de:b0:5a:ff:e9:28: b0:d7:c6:c7:ed:e7:a7:5e:df:2e:6d:0a:df:f9:65:af:bc:a6: 64:46:82:e5:b6:8d:0a:0f:83:53:b9:13:3c:40:ff:d9:a5:27: 21:0b:a5:20:41:22:3e:25:38:d2:8a:24:80:16:86:4d:04:c5: 91:86:80:48:b6:46:bd:fb:5b:0b:92:66:64:1a:69:13:3d:e6: f7:45:e9:a9:d4:10:73:da:58:f2:12:57:fa:09:7c:49:90:4b: 29:f8:6b:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoLJZw+MeyBsenzPHwpidkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMDIyMDkwMDA1WhcNMjUxMDIzMDkwMDA1WjAzMTEwLwYDVQQD EyhlNTdmNTQ0ZmZjYzQ5NGNhNjExMzcwNjBiOTU0NDY4NmFlZDRjNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfNhPXYL8DbUTOo8qJbLyVqz83xB k1zWHu2PHumzurGs/AbMJncjvnlOpnrsai7TRnbkll7bLO62VnmMTtHIhNq2EMEV 5jCSZOAf5TJKSFccTfG3PwXLBycEVJbSMpVx3pteVqf5Ski5kcEauTS6PitHOqz1 7dZSFx9ZDJj+DoLp4GcW/+DLMhYJOTWe+IvTzzuIHNwHrN7dguxyp7UezIV1QKvA UDKzEsPWE4YUZO8pHRM+kmQOFfj7IpbJbKaH+DHibsNcmdP5CzjcY0p+lDGxZ5U2 J2on4ne3YfcC/qvwVO/1CsozKIjQC2bKMk2ofwrnKyzZTFX/fzS6g5AAFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOV/VE/8xJTKYRNwYLlURoau1MVwMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlujqIQDW JrV2Wu6LNiF8rgCH5eEMBoYGSIoVYEdMBWQF0h7kD8Px9pxm2rAjhl7Pb2G50ign k8gHnshJPJwN4F+bQYcNoDcrHW83IpqBA1QmnCfNw1FZnR9ULYRpZ2ggsb3mM5Sl g7ooOz2CMN6EJI99qk5kKCxcT+oRbR3rqU2ymnv3PSoeaPJkbZDXuuxw7oTIW+Hm VUJ5wCUN3rBa/+kosNfGx+3np17fLm0K3/llr7ymZEaC5baNCg+DU7kTPED/2aUn IQulIEEiPiU40ookgBaGTQTFkYaASLZGvftbC5JmZBppEz3m90XpqdQQc9pY8hJX +gl8SZBLKfhrBA== -----END CERTIFICATE-----Generated at Wed Oct 22 13:42:25 2025 by rpki-client