$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: lefMLP55GRX2VUXQBOxdgPRSN/Jz6tdiVV28li2kyC4= Subject key identifier: C7:B5:6A:6B:C9:1E:AE:38:CE:55:C2:EE:53:C9:49:AE:8E:65:15:61 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 0197D99A8C6E54A6673111741FA432183307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 12AB Signing time: Sat 05 Jul 2025 08:01:13 +0000 Manifest this update: Sat 05 Jul 2025 08:01:13 +0000 Manifest next update: Sun 06 Jul 2025 08:01:13 +0000 Files and hashes: 1: 0hshT3NJf3ZcExZUQYc5nmNlGaY.roa (hash: JsM+BK5pxCs2yQ1uCb8EQL/4Y9VORNiVl/v1CM9RYLo=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-mVwC91y2gjxzZ49ECJKeMBNsxM.roa (hash: U559gzASGhlXQBS0hGV4xF3kH8STm7I07VZJO2H7/G4=) 5: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 6: 59BM3cmIoy1MoFuz148y_WZgCKA.roa (hash: b8nLw7Sod/Ce2ZRbJw+OEbeY/YeQr8JvhOn6OiPAFJE=) 7: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 8: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 9: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 10: 94zx2Hk-WlNFvqXHoA07AsfQ3tc.roa (hash: Nk+m+YVGx7gj/COWKuN73LASLzDxNz2N629l6tregGQ=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 13: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 14: F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa (hash: vUOE0EzW5wlVnmrKCdNEm67M3EqZb+A0EvhCnOtIuZM=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: C2q4cQ7X1YfWnzPt7CFUabs03T9DDKiLq/K3f69GwJ0=) 17: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 18: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 19: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 20: ZnbzYHRBvUTbEjCixu-51iq0NfI.roa (hash: H6eoYf0qoCchu+RJjza0539v8DwbGRsxOIQiPaH7Gsc=) 21: dc7y4-j6l8uoBJyYyBNjuWyNHr8.roa (hash: VDSSVJFB7a9g+BUqFW01QjbDjiWar99akOtbmMtWJbE=) 22: gAy2L-yq3jv5ULydsY0WjO758DY.roa (hash: kDdF7XHhC12P2H5eVodHGu1h34gE1iEE5luu7KRRUlE=) 23: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 24: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 25: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 26: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 27: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Jul 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:d9:9a:8c:6e:54:a6:67:31:11:74:1f:a4:32:18:33:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jul 5 08:01:13 2025 GMT Not After : Jul 6 08:01:13 2025 GMT Subject: CN=c7b56a6bc91eae38ce55c2ee53c949ae8e651561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:71:e4:e8:a7:a9:bf:84:28:ca:f7:0a:0d: a6:c6:30:2c:ae:d8:33:c9:97:03:32:14:f5:18:33: 47:05:75:80:0a:f3:77:4a:3d:63:ff:bb:1e:1e:e2: 08:66:dc:6c:c1:68:1f:0c:32:b1:8d:78:35:39:7c: a5:7b:5f:08:2d:f5:5f:f8:42:43:e5:9c:6e:f8:1c: f3:a6:df:49:63:06:b9:eb:c3:07:3a:27:15:b3:7a: cd:16:25:d9:36:ad:90:38:80:1c:fa:39:e0:80:5d: 18:68:e9:32:b0:ab:37:13:3b:5b:fe:b1:7b:5d:6f: 19:ef:51:96:c6:eb:0e:a4:e0:c7:dc:f2:a2:9e:6c: 42:45:77:26:ce:8a:5b:49:7a:2f:63:39:3e:17:88: 95:79:5d:3a:8e:09:79:5d:ee:9a:b2:91:ee:3b:f0: 0b:a1:c0:ea:e9:8f:93:74:2d:02:b6:6c:ec:e0:7e: 30:14:eb:3d:30:9c:ea:a4:88:c0:97:6e:16:24:31: 1c:b4:86:b0:21:63:dd:c7:2f:bc:c5:0e:88:63:af: be:bc:47:a7:bd:3b:36:2f:08:23:bb:9a:1f:ef:1f: a7:23:fd:95:98:c2:d1:68:01:26:23:b6:d3:09:bc: dd:6b:7d:02:57:4c:68:21:56:d9:7d:0f:79:97:19: cb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B5:6A:6B:C9:1E:AE:38:CE:55:C2:EE:53:C9:49:AE:8E:65:15:61 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5f:a1:b0:7c:32:83:71:97:be:d9:8f:e2:f4:f7:c2:5a:d0: 76:93:ff:66:3f:d6:09:0a:51:2e:8f:c0:da:da:6c:06:85:3b: d5:fb:b1:ab:77:06:c0:50:d7:cb:10:08:31:11:90:dc:0c:1b: 8e:fa:ff:6c:c9:11:6b:8d:20:a2:55:0a:f4:cf:b6:98:39:67: c6:a7:62:b4:4c:3b:4d:c4:14:ba:e3:e6:ec:75:a9:8c:9b:98: 54:90:56:61:fb:1a:e4:b4:23:04:f1:83:f3:71:d2:fb:f8:f7: d9:88:5f:37:96:d7:aa:17:ed:7f:45:95:eb:e4:64:80:4b:29: 7d:29:24:c0:d5:eb:97:ae:16:a4:60:1c:0d:d5:63:59:a0:54: 81:fe:a8:04:a5:6c:4f:c8:a0:26:87:11:72:ea:c9:58:66:a2: 85:d7:1e:2f:82:26:15:de:86:50:aa:d5:1e:07:bd:8a:ba:cd: d1:13:0b:7c:1b:ac:47:fa:91:bb:50:ca:e3:22:4c:41:03:f1: b2:45:31:68:23:c2:2e:22:2d:57:80:34:33:5e:b6:29:89:f2: 42:48:ce:93:e1:b4:2f:3a:c4:63:3c:18:e5:41:70:33:70:34: ca:6f:b1:03:b4:1a:03:3a:f8:a6:dc:8d:48:17:61:f5:5a:ea: 36:3a:eb:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfZmoxuVKZnMRF0H6QyGDMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUwNzA1MDgwMTEzWhcNMjUwNzA2MDgwMTEzWjAzMTEwLwYDVQQD EyhjN2I1NmE2YmM5MWVhZTM4Y2U1NWMyZWU1M2M5NDlhZThlNjUxNTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVdx5Oinqb+EKMr3Cg2mxjAsrtgz yZcDMhT1GDNHBXWACvN3Sj1j/7seHuIIZtxswWgfDDKxjXg1OXyle18ILfVf+EJD 5Zxu+Bzzpt9JYwa568MHOicVs3rNFiXZNq2QOIAc+jnggF0YaOkysKs3Eztb/rF7 XW8Z71GWxusOpODH3PKinmxCRXcmzopbSXovYzk+F4iVeV06jgl5Xe6aspHuO/AL ocDq6Y+TdC0Ctmzs4H4wFOs9MJzqpIjAl24WJDEctIawIWPdxy+8xQ6IY6++vEen vTs2Lwgju5of7x+nI/2VmMLRaAEmI7bTCbzda30CV0xoIVbZfQ95lxnLOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMe1amvJHq44zlXC7lPJSa6OZRVhMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHl+hsHwy g3GXvtmP4vT3wlrQdpP/Zj/WCQpRLo/A2tpsBoU71fuxq3cGwFDXyxAIMRGQ3Awb jvr/bMkRa40golUK9M+2mDlnxqditEw7TcQUuuPm7HWpjJuYVJBWYfsa5LQjBPGD 83HS+/j32YhfN5bXqhftf0WV6+RkgEspfSkkwNXrl64WpGAcDdVjWaBUgf6oBKVs T8igJocRcurJWGaihdceL4ImFd6GUKrVHge9irrN0RMLfBusR/qRu1DK4yJMQQPx skUxaCPCLiItV4A0M162KYnyQkjOk+G0LzrEYzwY5UFwM3A0ym+xA7QaAzr4ptyN SBdh9VrqNjrrbg== -----END CERTIFICATE-----Generated at Sat Jul 5 17:38:34 2025 by rpki-client