$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: qGJU6abL6pp1imOJiVueDuDgBPWR1UPFnNrKLuefze4= Subject key identifier: 8C:19:A5:F4:8F:03:4D:8E:65:4D:78:88:BA:2C:7D:8D:3B:8D:F4:F6 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019A209B47EEF8239E99E548CF39D01B1D00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1430 Signing time: Sun 26 Oct 2025 13:00:38 +0000 Manifest this update: Sun 26 Oct 2025 13:00:38 +0000 Manifest next update: Mon 27 Oct 2025 13:00:38 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: VWktVetFgNmLIN54AQAwyONH8znPpMois3PK1dPbNUs=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 05:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:20:9b:47:ee:f8:23:9e:99:e5:48:cf:39:d0:1b:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Oct 27 13:00:38 2025 GMT Subject: CN=8c19a5f48f034d8e654d7888ba2c7d8d3b8df4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7b:3c:b1:c8:78:27:e6:93:42:33:4d:cd:90: cd:d0:ce:2c:fe:37:74:72:8b:66:a3:1b:d4:fe:1f: 00:f6:8e:f9:40:1a:f8:f5:47:76:d7:52:20:7d:74: 73:d1:57:b1:d4:b3:f6:11:20:72:9c:b3:63:ea:d5: 84:3d:8c:d0:7b:87:e2:14:51:cd:61:d5:23:53:cb: 4e:53:96:2f:c5:6c:01:1e:af:fb:04:3f:c8:fe:0b: f9:da:fe:ef:93:68:ee:68:8c:32:d4:97:e3:00:33: 3e:9c:b3:a1:d3:47:ae:e8:d8:52:75:46:9e:3f:75: aa:b5:a4:c6:a3:a2:d3:3e:03:11:26:e7:9a:5c:b1: ea:8b:df:5a:d2:8d:37:c9:74:84:90:83:4d:bf:c3: ff:1a:16:63:ad:2e:56:4f:82:41:a0:5c:98:2a:9d: 6f:19:c5:39:79:46:63:9e:8b:1f:fc:ee:b7:42:c5: fe:95:d5:49:b7:5e:86:83:29:12:40:be:22:52:0b: e1:35:d4:76:63:3f:2c:b3:cd:09:f5:ad:e8:d1:0b: 88:12:7c:5f:d4:bc:b4:00:1b:5e:72:fc:f9:eb:e7: 84:f8:1e:f7:f1:b6:36:5a:5c:94:4b:48:3d:87:ac: 95:b5:7d:00:3b:3a:06:0d:90:d4:03:ed:6a:11:08: 7e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:19:A5:F4:8F:03:4D:8E:65:4D:78:88:BA:2C:7D:8D:3B:8D:F4:F6 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:df:5b:ab:fa:00:e0:ba:c7:5f:b3:ba:21:e4:79:e7:40:50: 88:5b:fd:83:f1:ce:22:0f:c0:03:76:64:a3:12:fc:50:dc:7a: d2:80:29:a6:63:af:ad:82:f6:7f:ed:0e:f0:c7:be:94:14:5a: 69:d5:59:93:84:5a:5e:84:cc:63:a3:d4:50:c3:b6:92:17:65: 52:3e:c6:cb:e2:0b:69:8f:e1:7b:55:1d:60:fb:73:76:74:ef: 44:69:db:90:41:5d:57:f4:de:11:63:a9:3c:4e:74:2c:63:8e: f2:84:e9:bd:f5:c2:c9:b7:6a:38:13:24:fd:8d:cb:80:ac:40: 13:41:27:e4:63:44:60:a0:91:f0:b5:5b:fc:08:fa:c0:a6:99: f6:20:4b:c0:55:fd:4d:37:e6:40:d9:da:99:a1:41:5d:e2:83: 98:85:0e:d7:e4:3a:0b:dd:10:5f:30:ec:73:3d:df:be:5b:48: 4b:c1:64:d9:01:dc:e9:6a:51:00:4f:e3:08:aa:89:85:e9:ea: b0:82:ad:8f:c6:1b:dd:2d:9e:dc:56:a0:38:99:6c:51:4d:07: f1:ce:a9:54:85:b5:95:d5:3e:ee:a1:5c:fb:f4:20:45:b0:e9: 1c:2e:94:0c:8e:c4:5f:1a:42:23:21:93:ec:95:0a:40:7f:45: c7:25:1c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZogm0fu+COemeVIzznQGx0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUxMDI2MTMwMDM4WhcNMjUxMDI3MTMwMDM4WjAzMTEwLwYDVQQD Eyg4YzE5YTVmNDhmMDM0ZDhlNjU0ZDc4ODhiYTJjN2Q4ZDNiOGRmNGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXs8sch4J+aTQjNNzZDN0M4s/jd0 cotmoxvU/h8A9o75QBr49Ud211IgfXRz0Vex1LP2ESBynLNj6tWEPYzQe4fiFFHN YdUjU8tOU5YvxWwBHq/7BD/I/gv52v7vk2juaIwy1JfjADM+nLOh00eu6NhSdUae P3WqtaTGo6LTPgMRJueaXLHqi99a0o03yXSEkINNv8P/GhZjrS5WT4JBoFyYKp1v GcU5eUZjnosf/O63QsX+ldVJt16GgykSQL4iUgvhNdR2Yz8ss80J9a3o0QuIEnxf 1Ly0ABtecvz56+eE+B738bY2WlyUS0g9h6yVtX0AOzoGDZDUA+1qEQh+3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwZpfSPA02OZU14iLosfY07jfT2MB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeN9bq/oA 4LrHX7O6IeR550BQiFv9g/HOIg/AA3ZkoxL8UNx60oAppmOvrYL2f+0O8Me+lBRa adVZk4RaXoTMY6PUUMO2khdlUj7Gy+ILaY/he1UdYPtzdnTvRGnbkEFdV/TeEWOp PE50LGOO8oTpvfXCybdqOBMk/Y3LgKxAE0En5GNEYKCR8LVb/Aj6wKaZ9iBLwFX9 TTfmQNnamaFBXeKDmIUO1+Q6C90QXzDscz3fvltIS8Fk2QHc6WpRAE/jCKqJhenq sIKtj8Yb3S2e3FagOJlsUU0H8c6pVIW1ldU+7qFc+/QgRbDpHC6UDI7EXxpCIyGT 7JUKQH9FxyUcgw== -----END CERTIFICATE-----Generated at Sun Oct 26 15:01:37 2025 by rpki-client