$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: VWvdA3wbr3x4IZWJs1dkeE0GTs1mkbIKkumxH2kAa8w= Subject key identifier: 6C:A7:48:05:70:40:79:83:F4:54:60:57:1A:DF:3A:1C:D7:C7:FF:77 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019A7CE031685FFCD1B68E22C25333EA49CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1419 Signing time: Thu 13 Nov 2025 11:00:58 +0000 Manifest this update: Thu 13 Nov 2025 11:00:58 +0000 Manifest next update: Fri 14 Nov 2025 11:00:58 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 17: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 3bs0Tw/lSOUHfns95fLYw/dk/U7AYHCko18UvUmGH0s=) 18: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 19: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 20: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 21: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 22: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 23: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 24: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 25: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 26: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 27: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 28: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 29: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 30: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 31: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Nov 2025 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:e0:31:68:5f:fc:d1:b6:8e:22:c2:53:33:ea:49:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 13 11:00:58 2025 GMT Not After : Nov 14 11:00:58 2025 GMT Subject: CN=6ca7480570407983f45460571adf3a1cd7c7ff77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:a4:ce:43:b5:1a:91:ff:bc:3f:b3:77:41: 17:05:be:ca:df:11:b9:c1:54:6c:22:7c:d1:97:c4: b0:08:37:4f:e4:1a:77:35:2a:5d:3a:c6:a3:2b:2b: 1b:a5:01:1f:21:1f:5d:0a:c4:20:74:e3:2c:b8:56: db:8a:82:ec:68:72:51:9c:a7:a7:82:e0:af:ae:6e: 73:e5:03:99:e1:02:a9:c4:a6:93:65:d1:8f:a2:f2: ca:3a:70:ec:7f:6c:c8:c2:5b:91:88:bc:2f:57:7f: 48:01:35:7b:54:3c:99:84:61:db:db:0b:4b:51:6f: 0f:3a:dc:8c:b3:18:20:2c:86:02:ef:85:ab:be:a1: c3:ba:b4:9b:a1:c4:db:30:d3:58:74:72:17:ee:7d: 36:85:e1:2b:ae:00:b5:56:72:a9:73:a7:7a:f7:4a: a5:58:ba:6b:1c:f8:c4:c3:0c:40:4b:f7:9e:9c:da: d7:31:e5:4f:81:0b:49:89:59:e6:f9:af:60:39:b1: bb:4f:d5:e9:12:d4:d3:f4:41:79:e0:cb:36:7c:a9: df:c6:60:64:b5:86:6c:a1:40:3d:f2:dc:77:3a:55: be:8e:ae:8b:29:bd:3a:bf:de:f4:4d:cc:ff:d5:02: 37:46:37:51:1c:84:52:0d:fc:19:0e:08:0d:a0:9f: 7c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A7:48:05:70:40:79:83:F4:54:60:57:1A:DF:3A:1C:D7:C7:FF:77 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:61:20:6b:ed:41:f9:e5:69:9d:8e:a3:01:2b:d9:0f:29:d8: 96:3a:3b:32:58:4a:59:73:b6:40:31:6f:81:ce:97:38:8e:4d: ce:38:0c:87:bd:23:49:c5:df:b7:8f:f4:20:49:f7:83:c4:7e: d9:3f:e8:4d:97:5c:b7:a6:64:91:98:50:61:82:c0:4c:04:45: a7:d0:b7:51:cf:b7:53:89:ba:04:44:04:9d:15:45:2d:3b:c1: ff:8e:3e:97:73:f1:c6:db:e9:87:57:6b:0c:57:d5:f6:3c:ca: 73:2b:e1:42:42:ac:0a:a6:ac:79:22:2f:f6:d0:32:8e:cc:41: ed:d2:37:bb:9f:49:46:08:52:3c:c9:ed:e1:3a:3a:f8:ba:42: 2d:a9:33:f3:86:a0:db:10:fa:98:d5:04:af:f4:60:1a:62:5b: a0:cc:a3:a4:21:c0:96:6a:fd:1f:e6:09:11:22:df:92:42:f9: 21:9f:48:ff:b3:e6:79:5a:e9:b0:12:6a:69:67:a1:9a:ba:2e: cd:0b:8a:b7:4f:d6:f4:d2:d9:a4:d2:36:bc:34:30:b2:0f:d2: 3f:c7:a5:e0:d7:e5:14:42:70:eb:64:fe:c1:48:24:7c:c8:08: f2:dc:74:32:d2:ff:aa:dc:c2:ec:d1:2f:c5:ce:97:19:52:6a: 5f:a6:35:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZp84DFoX/zRto4iwlMz6knLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTEzMTEwMDU4WhcNMjUxMTE0MTEwMDU4WjAzMTEwLwYDVQQD Eyg2Y2E3NDgwNTcwNDA3OTgzZjQ1NDYwNTcxYWRmM2ExY2Q3YzdmZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJSkzkO1GpH/vD+zd0EXBb7K3xG5 wVRsInzRl8SwCDdP5Bp3NSpdOsajKysbpQEfIR9dCsQgdOMsuFbbioLsaHJRnKen guCvrm5z5QOZ4QKpxKaTZdGPovLKOnDsf2zIwluRiLwvV39IATV7VDyZhGHb2wtL UW8POtyMsxggLIYC74WrvqHDurSbocTbMNNYdHIX7n02heErrgC1VnKpc6d690ql WLprHPjEwwxAS/eenNrXMeVPgQtJiVnm+a9gObG7T9XpEtTT9EF54Ms2fKnfxmBk tYZsoUA98tx3OlW+jq6LKb06v970Tcz/1QI3RjdRHIRSDfwZDggNoJ98lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGynSAVwQHmD9FRgVxrfOhzXx/93MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2Ega+1B +eVpnY6jASvZDynYljo7MlhKWXO2QDFvgc6XOI5NzjgMh70jScXft4/0IEn3g8R+ 2T/oTZdct6ZkkZhQYYLATARFp9C3Uc+3U4m6BEQEnRVFLTvB/44+l3Pxxtvph1dr DFfV9jzKcyvhQkKsCqaseSIv9tAyjsxB7dI3u59JRghSPMnt4To6+LpCLakz84ag 2xD6mNUEr/RgGmJboMyjpCHAlmr9H+YJESLfkkL5IZ9I/7PmeVrpsBJqaWehmrou zQuKt0/W9NLZpNI2vDQwsg/SP8el4NflFEJw62T+wUgkfMgI8tx0MtL/qtzC7NEv xc6XGVJqX6Y12w== -----END CERTIFICATE-----Generated at Thu Nov 13 18:38:55 2025 by rpki-client