$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: CMGfuXLrybjWzLaQzOQSFK1MK0s3KpBEYSR1SEMk6TY= Subject key identifier: 96:98:F1:AC:1D:A4:89:18:F7:C6:27:10:C5:FA:53:E0:1F:6A:FC:92 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019A1986A0F18B85917C2BF29D1602D2711D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 1343 Signing time: Sat 25 Oct 2025 04:00:44 +0000 Manifest this update: Sat 25 Oct 2025 04:00:44 +0000 Manifest next update: Sun 26 Oct 2025 04:00:44 +0000 Files and hashes: 1: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 2: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 3: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 4: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 5: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 6: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: 43A6Kg5lPZtIToY/Z9kKAwole7NNysYY+OtaDP3llMc=) 7: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 8: iVFWKpRKrZrvXfyBPCiicWzEtLc.roa (hash: ySfsYFD8sJUIiFlWUtE2uw6TxmR7ZrKTk3Ot39sI2WQ=) 9: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 10: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 11: nqKarluaIBxurSOLKoj0fda_I6o.roa (hash: 0igWebpYrmPU5dIZIocnzzs4+9GsDMulHYWmTIL37ig=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:86:a0:f1:8b:85:91:7c:2b:f2:9d:16:02:d2:71:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Oct 25 04:00:44 2025 GMT Not After : Oct 26 04:00:44 2025 GMT Subject: CN=9698f1ac1da48918f7c62710c5fa53e01f6afc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:9f:9f:74:10:a4:9c:c9:2b:f1:7e:4e:0b: e5:68:88:bd:e3:18:a7:64:31:75:4d:ca:2b:e3:76: b3:34:66:50:d2:f5:38:9c:3c:09:31:0f:ce:2e:80: 6c:be:25:97:97:b3:63:48:28:9f:7e:3c:bb:08:55: 53:d0:4d:af:7c:f4:f4:3d:0d:51:41:b7:6c:6c:da: 22:19:90:1e:49:5f:a2:4c:f9:9b:dc:bb:93:94:81: 57:31:52:c5:cf:82:7b:92:3a:56:e4:c0:d0:4b:59: 80:bf:a1:2c:45:de:c2:24:94:26:81:c5:84:56:f1: d4:fe:31:e6:c0:4f:ec:4f:25:86:7e:b7:99:b1:e3: bb:da:fe:65:fe:39:ac:fd:fa:fc:44:22:36:d3:83: 4d:1e:b9:da:d6:e4:c2:3f:ed:d4:ef:49:8f:56:dd: 6d:d4:c5:e1:e8:c7:39:c2:7f:6f:a4:8c:64:18:b9: ad:b1:2f:1d:0f:bc:96:54:09:98:21:d2:d1:96:b6: 00:a2:b1:44:69:af:8d:b5:e7:49:a6:95:d4:39:76: c5:90:b3:b7:cb:da:11:53:bd:13:8c:40:9d:6e:03: 6f:e2:fb:b4:d7:c2:6d:77:e2:f8:bd:4e:0f:b4:39: fc:df:be:df:b2:49:c4:74:5a:3f:fb:d4:43:a0:4c: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:98:F1:AC:1D:A4:89:18:F7:C6:27:10:C5:FA:53:E0:1F:6A:FC:92 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:28:13:95:99:0f:5a:26:40:84:bb:6e:92:75:3c:25:50:04: 9a:36:fa:1d:e7:d7:15:98:05:98:c6:6b:c8:a8:b5:3d:d4:20: c7:91:58:47:eb:7f:0b:d3:33:9f:9f:10:6c:56:e9:9d:91:38: 47:82:27:5b:86:d4:59:a4:8c:9d:10:ae:00:02:05:50:b8:ef: af:f7:1a:68:fd:93:30:30:5c:75:0a:4b:95:1a:b5:b2:e7:4b: d0:fa:02:be:b7:94:8f:ca:b3:25:84:0f:4f:e1:28:6a:63:b7: 50:25:34:24:a3:d8:14:a0:27:c1:84:fa:aa:7d:60:c1:52:75: 47:7a:e3:aa:e2:8d:bf:0a:8a:cc:e8:3e:34:ad:24:a6:8f:18: 1a:36:a3:2d:0e:3a:64:35:52:a7:e6:53:a2:e7:f0:20:48:09: d2:2d:37:84:82:84:24:2b:fd:ff:a1:77:2e:a4:64:46:8b:45: 6a:5c:6a:88:9f:7d:bc:e2:e5:38:3b:3d:d6:62:85:7a:19:07: 16:ae:ba:2d:84:2e:03:9c:3f:f4:27:79:02:2c:03:b4:8e:ce: 40:2c:55:65:f9:6f:ce:6b:bc:5a:08:77:ae:1b:5f:c8:a6:d9: a1:19:92:d3:0c:30:29:b8:df:0d:7b:e7:19:ef:02:08:70:0e: 90:35:5a:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZhqDxi4WRfCvynRYC0nEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUxMDI1MDQwMDQ0WhcNMjUxMDI2MDQwMDQ0WjAzMTEwLwYDVQQD Eyg5Njk4ZjFhYzFkYTQ4OTE4ZjdjNjI3MTBjNWZhNTNlMDFmNmFmYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvufn3QQpJzJK/F+TgvlaIi94xin ZDF1Tcor43azNGZQ0vU4nDwJMQ/OLoBsviWXl7NjSCiffjy7CFVT0E2vfPT0PQ1R QbdsbNoiGZAeSV+iTPmb3LuTlIFXMVLFz4J7kjpW5MDQS1mAv6EsRd7CJJQmgcWE VvHU/jHmwE/sTyWGfreZseO72v5l/jms/fr8RCI204NNHrna1uTCP+3U70mPVt1t 1MXh6Mc5wn9vpIxkGLmtsS8dD7yWVAmYIdLRlrYAorFEaa+NtedJppXUOXbFkLO3 y9oRU70TjECdbgNv4vu018Jtd+L4vU4PtDn8377fsknEdFo/+9RDoEw3wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaY8awdpIkY98YnEMX6U+AfavySMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEigTlZkP WiZAhLtuknU8JVAEmjb6HefXFZgFmMZryKi1PdQgx5FYR+t/C9Mzn58QbFbpnZE4 R4InW4bUWaSMnRCuAAIFULjvr/caaP2TMDBcdQpLlRq1sudL0PoCvreUj8qzJYQP T+EoamO3UCU0JKPYFKAnwYT6qn1gwVJ1R3rjquKNvwqKzOg+NK0kpo8YGjajLQ46 ZDVSp+ZToufwIEgJ0i03hIKEJCv9/6F3LqRkRotFalxqiJ99vOLlODs91mKFehkH Fq66LYQuA5w/9Cd5AiwDtI7OQCxVZflvzmu8Wgh3rhtfyKbZoRmS0wwwKbjfDXvn Ge8CCHAOkDVa+Q== -----END CERTIFICATE-----Generated at Sat Oct 25 08:53:32 2025 by rpki-client