$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: C5RM0mFFtnyjxPjR960sloGCPIikbyPrsaMGcMO6hTc= Subject key identifier: 7D:30:C5:9C:89:17:64:3C:42:26:CA:4F:EA:5F:3B:3E:EA:F6:E9:A2 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 019A21ADE61895498B17A5074F010A0C118B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 1713 Signing time: Sun 26 Oct 2025 18:00:35 +0000 Manifest this update: Sun 26 Oct 2025 18:00:35 +0000 Manifest next update: Mon 27 Oct 2025 18:00:35 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: FEemRqWNX5xhq2yBrzr1C3dcawc.roa (hash: zrzqLUFgS0O6VfPSR/q7YlCpjaLeDHcdItec7nZ4p/I=) 5: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 6: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 7: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: NhdjgDTQBpLNsnZdAD5mmT5VGt3UOWuPYSqs5ko2ifY=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 12: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 13: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 14: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 15: fCgmJ5doD3FbIucqbIpGMlmtVvM.roa (hash: SfDUMiHPovragI5UdBifWGkDZRcp8pAn1e8WMKiD3hU=) 16: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 17: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 18: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 19: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=) 22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:21:ad:e6:18:95:49:8b:17:a5:07:4f:01:0a:0c:11:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Oct 26 18:00:35 2025 GMT Not After : Oct 27 18:00:35 2025 GMT Subject: CN=7d30c59c8917643c4226ca4fea5f3b3eeaf6e9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dd:23:53:05:49:e4:1f:a5:35:6f:d5:f9:9a: 51:3c:5d:13:c4:57:49:36:a2:d8:c1:38:68:b5:d8: 73:cb:9d:47:d0:26:be:f4:03:f1:4e:e2:89:eb:77: ec:91:44:d6:c4:56:ae:4e:9a:55:cd:cc:cb:ec:02: 63:4f:29:c5:34:22:5b:55:72:e1:aa:0c:64:6c:61: de:e8:81:a5:c6:33:d9:f2:fd:ce:42:50:30:06:93: 61:ef:2d:af:1f:50:48:d8:bf:94:f0:13:88:9a:c5: 1d:7c:63:19:cf:7d:ed:37:87:80:46:7e:a8:62:dd: e4:8a:fd:37:0e:f4:21:95:53:e2:69:9c:8a:1d:f7: 60:2a:bf:e3:1e:eb:90:fe:75:30:3c:01:ea:a2:31: 13:4e:83:d1:28:bf:70:d3:b0:f8:01:06:13:55:20: 73:ae:f1:55:dc:d5:01:04:e7:54:8c:63:1b:c0:7b: f9:02:f8:3e:d5:04:b8:8d:5d:2c:77:e2:9f:d2:cb: 55:38:5a:f1:d9:37:49:cc:80:2e:6e:df:2d:ae:8d: ff:c4:6f:43:0c:f1:09:d1:02:79:85:3c:41:94:2a: 62:8d:28:13:d0:b1:65:e3:9f:6c:3b:ab:32:fa:30: c6:80:b3:af:95:ae:85:ed:f9:c2:0b:67:67:f4:5f: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:30:C5:9C:89:17:64:3C:42:26:CA:4F:EA:5F:3B:3E:EA:F6:E9:A2 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e0:06:54:f2:b3:10:8c:47:a2:58:c4:ea:1b:56:56:25:2a: be:65:2e:67:b9:23:06:ea:f6:0a:c3:54:e7:4f:3e:e6:4e:7b: 13:42:75:f2:e7:1b:99:39:16:75:b1:d4:92:05:e6:d6:1c:8a: 2a:9b:51:8b:2c:31:a5:85:16:d7:ad:2f:95:53:14:7b:31:5e: 87:be:c5:21:0e:17:dc:19:73:78:85:67:49:1c:93:a2:38:f8: 81:c0:ac:73:1f:c7:51:d9:4a:cc:fc:9c:89:72:d0:d5:68:20: e3:21:ca:ef:11:f6:9c:e5:3a:ad:81:1d:a7:3a:c1:6d:20:db: bb:dc:7f:97:c5:0b:a7:4b:0f:46:ba:8c:9d:09:69:2f:25:ed: 8e:95:2d:94:a8:68:a2:53:22:b3:d1:55:15:b9:63:fb:34:e6: 6f:18:b9:fd:e1:8d:b5:12:67:01:9e:8c:af:ef:b0:93:f2:4b: 77:4e:81:8d:9b:5a:07:94:eb:2a:15:b1:f1:08:c1:0a:15:21: 94:c9:fc:a4:6a:a7:ee:8d:a1:52:ec:66:88:73:e3:29:6e:9b: 48:bc:e7:5b:72:6e:2a:10:1c:6c:4b:ea:e0:f2:38:03:48:98: ee:f0:b7:b4:3e:d6:69:15:bc:4f:94:39:82:5b:8f:be:f8:68: 8f:89:9b:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZohreYYlUmLF6UHTwEKDBGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUxMDI2MTgwMDM1WhcNMjUxMDI3MTgwMDM1WjAzMTEwLwYDVQQD Eyg3ZDMwYzU5Yzg5MTc2NDNjNDIyNmNhNGZlYTVmM2IzZWVhZjZlOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt0jUwVJ5B+lNW/V+ZpRPF0TxFdJ NqLYwThotdhzy51H0Ca+9APxTuKJ63fskUTWxFauTppVzczL7AJjTynFNCJbVXLh qgxkbGHe6IGlxjPZ8v3OQlAwBpNh7y2vH1BI2L+U8BOImsUdfGMZz33tN4eARn6o Yt3kiv03DvQhlVPiaZyKHfdgKr/jHuuQ/nUwPAHqojETToPRKL9w07D4AQYTVSBz rvFV3NUBBOdUjGMbwHv5Avg+1QS4jV0sd+Kf0stVOFrx2TdJzIAubt8tro3/xG9D DPEJ0QJ5hTxBlCpijSgT0LFl459sO6sy+jDGgLOvla6F7fnCC2dn9F/icQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0wxZyJF2Q8QibKT+pfOz7q9umiMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+AGVPKz EIxHoljE6htWViUqvmUuZ7kjBur2CsNU508+5k57E0J18ucbmTkWdbHUkgXm1hyK KptRiywxpYUW160vlVMUezFeh77FIQ4X3BlzeIVnSRyTojj4gcCscx/HUdlKzPyc iXLQ1Wgg4yHK7xH2nOU6rYEdpzrBbSDbu9x/l8ULp0sPRrqMnQlpLyXtjpUtlKho olMis9FVFblj+zTmbxi5/eGNtRJnAZ6Mr++wk/JLd06BjZtaB5TrKhWx8QjBChUh lMn8pGqn7o2hUuxmiHPjKW6bSLznW3JuKhAcbEvq4PI4A0iY7vC3tD7WaRW8T5Q5 gluPvvhoj4mbgg== -----END CERTIFICATE-----Generated at Mon Oct 27 01:35:22 2025 by rpki-client