$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: /JOMuEa6dgL7h6V35haxFGZ7ozvJboyb2iFcANqGZys= Subject key identifier: BB:1F:87:3A:ED:4D:FF:5D:D8:5B:48:58:DE:BF:63:26:74:3A:2A:67 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019A8D2FACAAF155586B7650CC7E11DF95AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1422 Signing time: Sun 16 Nov 2025 15:01:42 +0000 Manifest this update: Sun 16 Nov 2025 15:01:42 +0000 Manifest next update: Mon 17 Nov 2025 15:01:42 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: M-ojeGybXwIQoh1p9O97lh6oY18.roa (hash: JWFJYSOW0tho3d67l6qdIRATMTEnu0UKJHzSDeSSyBE=) 17: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 18: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: YrV/bb6ow0cptVxBqVD/BQcPA4ZDPRzf6B104qh4WP4=) 19: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 20: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 21: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 22: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 23: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 24: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 25: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 26: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 27: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 28: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 29: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 30: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 31: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 32: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Nov 2025 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8d:2f:ac:aa:f1:55:58:6b:76:50:cc:7e:11:df:95:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 16 15:01:42 2025 GMT Not After : Nov 17 15:01:42 2025 GMT Subject: CN=bb1f873aed4dff5dd85b4858debf6326743a2a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:82:e6:0c:f5:f7:94:ed:68:62:b9:bc:49: 18:78:67:9b:ee:7f:0e:5d:fd:9a:1d:07:71:25:3f: 52:cb:3d:ed:9c:4c:a1:50:99:bf:85:33:8c:4b:58: e5:d9:59:05:45:8e:b9:25:31:b6:53:15:26:87:24: cf:df:03:a7:02:3d:34:d8:b2:ec:82:2b:7c:5f:fe: d0:7c:ca:b8:07:08:7e:7d:f4:07:d8:65:50:99:f8: 03:5a:e8:05:8a:2e:29:0e:1b:84:2b:7f:1a:63:dd: ca:47:f6:22:85:e1:08:ad:f2:a4:b5:aa:5c:0d:f9: 34:ba:12:45:f4:c9:ef:55:39:1a:f3:f9:e9:d9:4c: 9d:2f:2e:66:c9:f3:8d:9c:f1:6c:a8:4b:90:c1:fa: 7e:55:53:54:ac:89:2b:48:20:72:d1:33:b1:fc:91: 24:32:d2:57:8a:fe:fa:35:6f:50:54:e6:f0:ba:77: bf:3e:83:86:c1:b8:87:c9:f2:36:b4:75:85:f1:d2: a7:3b:fe:49:45:20:49:a2:cd:ce:2e:ec:7a:77:b7: 12:d3:fa:ae:4c:1c:c2:10:6f:fa:b1:49:61:10:4d: c0:6f:c3:88:8f:d5:3e:63:48:fe:44:10:65:f9:d7: 91:ec:e4:29:bf:68:41:d9:46:36:58:7e:cd:2e:e6: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1F:87:3A:ED:4D:FF:5D:D8:5B:48:58:DE:BF:63:26:74:3A:2A:67 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7d:47:99:0b:57:39:e7:e6:b2:92:2d:23:40:e1:81:06:6c: 39:ef:9e:c1:3a:36:72:5f:93:84:9f:9f:c3:bd:2e:35:0b:e8: 56:4c:b4:de:b5:7b:61:1e:fa:ba:37:44:0e:ed:05:57:ae:a7: f9:7e:ae:2e:56:1a:b1:cb:8a:8f:44:3b:d2:9f:e9:78:fb:61: ef:3f:7c:7c:85:3f:73:3a:3c:12:e2:c9:23:2b:dc:4a:93:0b: 1d:18:8f:54:05:14:73:6d:64:75:fe:aa:f5:2a:2c:b5:d1:4a: a9:9d:fb:7d:8e:05:3f:3a:3c:40:27:41:f3:a3:5a:3a:7e:59: 16:42:6e:c9:32:d5:ef:c9:ec:de:1d:af:4d:44:db:24:aa:97: 42:3f:2e:24:0f:d7:c0:63:36:44:41:48:30:bd:f9:9d:a1:79: 1a:52:d5:f7:75:d2:a2:8b:38:cf:23:04:6b:ae:63:90:d6:92: 6c:4a:40:8e:20:45:f7:b3:d7:5f:55:a4:3d:29:c5:73:00:67: 64:60:c2:93:39:52:86:df:66:82:a6:94:ad:71:53:17:78:e9: 0d:65:6c:e3:1b:0b:c5:83:9d:84:b9:32:47:d4:fb:0b:2f:9c: 79:e6:a8:19:f0:7d:42:cf:bb:56:7f:cb:a1:13:ce:e9:db:c7: 5c:b6:a4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqNL6yq8VVYa3ZQzH4R35WqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTE2MTUwMTQyWhcNMjUxMTE3MTUwMTQyWjAzMTEwLwYDVQQD EyhiYjFmODczYWVkNGRmZjVkZDg1YjQ4NThkZWJmNjMyNjc0M2EyYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGOC5gz195TtaGK5vEkYeGeb7n8O Xf2aHQdxJT9Syz3tnEyhUJm/hTOMS1jl2VkFRY65JTG2UxUmhyTP3wOnAj002LLs git8X/7QfMq4Bwh+ffQH2GVQmfgDWugFii4pDhuEK38aY93KR/YiheEIrfKktapc Dfk0uhJF9MnvVTka8/np2UydLy5myfONnPFsqEuQwfp+VVNUrIkrSCBy0TOx/JEk MtJXiv76NW9QVObwune/PoOGwbiHyfI2tHWF8dKnO/5JRSBJos3OLux6d7cS0/qu TBzCEG/6sUlhEE3Ab8OIj9U+Y0j+RBBl+deR7OQpv2hB2UY2WH7NLuYKZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsfhzrtTf9d2FtIWN6/YyZ0OipnMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk31HmQtX OefmspItI0DhgQZsOe+ewTo2cl+ThJ+fw70uNQvoVky03rV7YR76ujdEDu0FV66n +X6uLlYascuKj0Q70p/pePth7z98fIU/czo8EuLJIyvcSpMLHRiPVAUUc21kdf6q 9SostdFKqZ37fY4FPzo8QCdB86NaOn5ZFkJuyTLV78ns3h2vTUTbJKqXQj8uJA/X wGM2REFIML35naF5GlLV93XSoos4zyMEa65jkNaSbEpAjiBF97PXX1WkPSnFcwBn ZGDCkzlSht9mgqaUrXFTF3jpDWVs4xsLxYOdhLkyR9T7Cy+ceeaoGfB9Qs+7Vn/L oRPO6dvHXLakPw== -----END CERTIFICATE-----Generated at Mon Nov 17 00:02:54 2025 by rpki-client