$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: HW7z/1fAF8AwAQdRAlWvjAbPcfLnieouJbJSzH8d2TE= Subject key identifier: F2:AD:C1:EB:57:30:C1:3B:33:FD:8D:81:57:68:5F:E3:D7:0B:F6:EC Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 01995454D7BFF74C1DCA95ED3C0D25A9E232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1377 Signing time: Tue 16 Sep 2025 21:01:10 +0000 Manifest this update: Tue 16 Sep 2025 21:01:10 +0000 Manifest next update: Wed 17 Sep 2025 21:01:10 +0000 Files and hashes: 1: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 2: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 3: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 4: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 5: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 6: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 7: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 8: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 9: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 10: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 11: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 12: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 13: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: ZA5w79IxzVgubr1R934eo8H2JfB9TdMU+bkJr/2CpzA=) 15: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 16: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 17: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 18: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 19: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 20: ZGQz0tsigUD9Q_FNeNUn6ogaHqg.roa (hash: K6ZZnIzxkzbl1qwYVTj7m0h9gsdaSWPnwrSd9T7K9Qs=) 21: ZnbzYHRBvUTbEjCixu-51iq0NfI.roa (hash: H6eoYf0qoCchu+RJjza0539v8DwbGRsxOIQiPaH7Gsc=) 22: lVIbFm_wDujNHQrLp4z_9cRLbpo.roa (hash: 5m3dAM048fUyaG3wEFv0hfm99ni4pAhEeAvnZGtVAic=) 23: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 24: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 25: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 26: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 27: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Sep 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:54:54:d7:bf:f7:4c:1d:ca:95:ed:3c:0d:25:a9:e2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Sep 16 21:01:10 2025 GMT Not After : Sep 17 21:01:10 2025 GMT Subject: CN=f2adc1eb5730c13b33fd8d8157685fe3d70bf6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:70:b7:dc:18:d3:5c:15:bf:bd:cd:37:1a:cf: 44:60:60:c9:70:79:b6:64:ae:fd:3e:e9:64:ce:dd: 43:a1:77:3c:0f:83:99:7a:02:09:ae:42:9d:8f:7a: 7f:50:3b:1f:22:51:c6:20:b4:da:6f:2f:b3:31:5a: 9d:67:b7:bd:d1:ee:21:45:7f:e6:e4:87:2c:96:99: 07:2a:d5:4a:7e:8f:a3:f5:00:eb:0f:a5:72:82:73: 09:44:1f:cf:2e:0d:e1:82:06:ba:ae:42:e3:23:af: 24:c6:8e:62:66:92:21:c5:8f:50:43:8e:f3:09:1f: 5c:7f:72:58:3b:9d:bb:6f:3d:43:cf:5d:92:40:a7: a3:20:4a:85:9b:c0:ed:d9:2c:3e:52:38:7c:35:04: 94:c1:0d:29:4b:ae:41:28:ff:44:31:36:af:4c:f5: 4b:1e:7d:a9:ab:ef:2d:d1:5a:5d:5b:fb:d7:d7:f9: bf:6f:5e:fc:de:41:65:eb:c5:8c:5f:57:9f:7e:a4: f9:cb:6e:52:cc:4d:75:b7:9f:09:a7:bc:58:c2:9e: d7:be:15:59:ef:df:02:fe:8c:ae:9f:32:aa:e5:58: 08:46:0e:4e:3c:9b:3c:60:8a:18:33:07:ed:25:2c: 78:82:04:bf:df:ff:93:07:20:3f:a2:80:0a:ef:ea: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AD:C1:EB:57:30:C1:3B:33:FD:8D:81:57:68:5F:E3:D7:0B:F6:EC X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9b:80:40:ae:39:24:7e:b8:58:2e:11:51:05:64:30:de:50: 7b:dc:d5:b9:af:da:bf:c1:2d:10:47:3a:21:30:45:6a:64:f9: ac:d5:54:d6:ac:09:36:84:19:3f:c8:db:23:c0:86:fa:b6:02: 7e:57:c0:ab:ea:d3:8a:7e:3b:a0:67:95:35:f9:f8:bc:28:61: d9:d0:44:0a:75:da:1c:3f:4f:b4:51:be:fe:09:28:98:ed:c0: 49:5d:a3:e8:ad:0c:ae:8a:03:79:de:a1:cc:c8:19:29:2f:d7: 41:6c:0c:b6:aa:08:8a:2f:ef:32:b1:a4:0b:cf:5d:a8:2c:7e: 81:8e:c1:4f:40:e4:70:20:13:5c:de:27:1d:74:39:d4:7d:cf: 4a:2f:d8:81:1f:d4:ae:96:77:88:86:dc:06:10:77:1e:d8:f2: 17:64:79:b8:55:7c:d9:bd:b2:57:78:5b:75:dd:28:6e:06:f6: 04:42:a2:14:2d:c6:95:3f:28:34:a8:bc:59:1a:8e:ef:c9:37: 4e:97:09:0d:a1:82:af:4c:92:c7:d6:14:f1:5e:11:2b:52:d3: 82:30:92:39:2b:7e:ef:4f:fe:b3:0a:69:72:6a:6e:ec:69:a8: 41:c0:67:07:f7:4c:d0:2a:50:ed:5b:3d:3e:70:57:37:e2:71: c7:0d:35:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlUVNe/90wdypXtPA0lqeIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUwOTE2MjEwMTEwWhcNMjUwOTE3MjEwMTEwWjAzMTEwLwYDVQQD EyhmMmFkYzFlYjU3MzBjMTNiMzNmZDhkODE1NzY4NWZlM2Q3MGJmNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHC33BjTXBW/vc03Gs9EYGDJcHm2 ZK79Pulkzt1DoXc8D4OZegIJrkKdj3p/UDsfIlHGILTaby+zMVqdZ7e90e4hRX/m 5IcslpkHKtVKfo+j9QDrD6VygnMJRB/PLg3hgga6rkLjI68kxo5iZpIhxY9QQ47z CR9cf3JYO527bz1Dz12SQKejIEqFm8Dt2Sw+Ujh8NQSUwQ0pS65BKP9EMTavTPVL Hn2pq+8t0VpdW/vX1/m/b1783kFl68WMX1effqT5y25SzE11t58Jp7xYwp7XvhVZ 798C/oyunzKq5VgIRg5OPJs8YIoYMwftJSx4ggS/3/+TByA/ooAK7+qBEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKtwetXMME7M/2NgVdoX+PXC/bsMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpuAQK45 JH64WC4RUQVkMN5Qe9zVua/av8EtEEc6ITBFamT5rNVU1qwJNoQZP8jbI8CG+rYC flfAq+rTin47oGeVNfn4vChh2dBECnXaHD9PtFG+/gkomO3ASV2j6K0MrooDed6h zMgZKS/XQWwMtqoIii/vMrGkC89dqCx+gY7BT0DkcCATXN4nHXQ51H3PSi/YgR/U rpZ3iIbcBhB3HtjyF2R5uFV82b2yV3hbdd0obgb2BEKiFC3GlT8oNKi8WRqO78k3 TpcJDaGCr0ySx9YU8V4RK1LTgjCSOSt+70/+swppcmpu7GmoQcBnB/dM0CpQ7Vs9 PnBXN+Jxxw01Ew== -----END CERTIFICATE-----Generated at Wed Sep 17 06:44:57 2025 by rpki-client