$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: 6ObZ5Iz8IAV55zytIVaUrhS7JXj4E1uPd1HSlyay6Uk= Subject key identifier: AA:29:B9:12:32:C9:9D:98:3A:0B:58:E7:BE:24:AE:C2:7A:8A:8A:EF Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 019A0FDE3EC5D7381D618C91F32BB70B6E89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 130B Signing time: Thu 23 Oct 2025 07:00:14 +0000 Manifest this update: Thu 23 Oct 2025 07:00:14 +0000 Manifest next update: Fri 24 Oct 2025 07:00:14 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: JWMLAvhgEwUoCBJhNJzwyyPgt10aKAbP6KfW/OgNAO0=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0f:de:3e:c5:d7:38:1d:61:8c:91:f3:2b:b7:0b:6e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Oct 23 07:00:14 2025 GMT Not After : Oct 24 07:00:14 2025 GMT Subject: CN=aa29b91232c99d983a0b58e7be24aec27a8a8aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:b2:84:f7:4f:cc:c0:bb:71:e9:cc:f4:bb: fb:e5:37:15:e3:2c:7a:1e:dc:22:08:23:97:86:90: 35:f4:16:7c:46:e2:d0:70:cd:e0:22:18:76:2a:7a: 14:93:9d:07:7b:b1:85:fa:31:a7:ea:f6:c0:cb:38: 5b:b8:df:62:af:fb:00:10:df:45:a5:7f:0a:de:3f: 7e:ff:65:c2:97:aa:86:98:b3:f3:88:71:d0:9d:d3: 67:58:38:d0:26:49:75:2e:27:c8:67:61:d3:7e:64: d1:51:7e:bc:b9:23:af:16:5e:22:f7:ef:12:f3:c8: 52:6c:47:8a:7b:15:5c:89:64:ee:28:b5:42:da:ad: 46:a9:8b:31:35:c7:87:72:d1:e3:68:45:90:00:d3: 9f:bb:7b:5c:a8:1e:c4:33:8a:9b:68:f5:97:8a:72: eb:d6:cd:52:d9:6f:6d:11:a9:b0:35:d0:03:10:28: bc:88:31:72:59:85:1d:f3:f4:db:6f:98:98:42:43: 3d:a8:1b:93:0d:13:d6:f8:df:5b:97:f3:fb:dd:e0: 14:ce:81:ee:ce:b0:76:73:d4:e5:2b:df:94:1a:f9: 60:ac:22:df:46:c2:34:66:d2:74:8b:43:56:4a:66: 4d:b3:20:82:20:6b:43:80:1d:d5:4b:20:f2:91:f0: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:B9:12:32:C9:9D:98:3A:0B:58:E7:BE:24:AE:C2:7A:8A:8A:EF X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:78:7d:53:1e:2c:ec:1d:ab:7e:0d:5a:d5:49:f4:e5:80:08: 0d:69:1e:af:92:f6:ce:6b:75:27:f4:54:34:f2:89:6c:e3:23: 3d:fa:88:da:98:a5:6c:92:5e:aa:1f:3c:ca:9d:c2:a5:bc:c4: 73:02:75:da:a0:05:de:c4:25:45:c4:83:f0:ab:ce:d4:d4:a2: dd:77:b7:56:b1:9a:52:ff:3c:0b:ef:0b:5e:c9:de:ee:b3:e7: 98:52:1a:6f:03:d6:ab:a1:9d:1f:32:ea:06:cb:2c:1c:04:5e: 68:09:5e:86:28:81:30:b8:84:ea:b2:3d:6e:6b:67:d9:bd:77: fd:81:82:67:17:40:51:94:8a:cc:cd:98:61:a6:2e:87:86:d0: 1c:70:e4:2d:34:80:77:b0:43:b0:f6:8f:97:c8:2f:d3:39:95: b3:de:e2:0b:48:91:76:cd:5a:19:7a:ed:00:f3:69:ad:db:22: 7e:d0:66:1b:fd:c5:7e:3e:8e:74:42:f5:66:d6:10:9c:4e:95: e9:a4:2c:7c:5f:9f:58:e4:c4:1d:1c:24:ec:49:55:d6:8d:b3: a6:eb:cf:7a:15:05:b2:69:63:52:bb:cb:39:36:47:99:42:b5: f9:ec:f5:fb:93:21:94:58:03:09:59:d6:7f:3e:08:1f:c7:32: 0b:0d:a7:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoP3j7F1zgdYYyR8yu3C26JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUxMDIzMDcwMDE0WhcNMjUxMDI0MDcwMDE0WjAzMTEwLwYDVQQD EyhhYTI5YjkxMjMyYzk5ZDk4M2EwYjU4ZTdiZTI0YWVjMjdhOGE4YWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXayhPdPzMC7cenM9Lv75TcV4yx6 HtwiCCOXhpA19BZ8RuLQcM3gIhh2KnoUk50He7GF+jGn6vbAyzhbuN9ir/sAEN9F pX8K3j9+/2XCl6qGmLPziHHQndNnWDjQJkl1LifIZ2HTfmTRUX68uSOvFl4i9+8S 88hSbEeKexVciWTuKLVC2q1GqYsxNceHctHjaEWQANOfu3tcqB7EM4qbaPWXinLr 1s1S2W9tEamwNdADECi8iDFyWYUd8/Tbb5iYQkM9qBuTDRPW+N9bl/P73eAUzoHu zrB2c9TlK9+UGvlgrCLfRsI0ZtJ0i0NWSmZNsyCCIGtDgB3VSyDykfD1IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKopuRIyyZ2YOgtY574krsJ6iorvMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3h9Ux4s 7B2rfg1a1Un05YAIDWker5L2zmt1J/RUNPKJbOMjPfqI2pilbJJeqh88yp3CpbzE cwJ12qAF3sQlRcSD8KvO1NSi3Xe3VrGaUv88C+8LXsne7rPnmFIabwPWq6GdHzLq BsssHAReaAlehiiBMLiE6rI9bmtn2b13/YGCZxdAUZSKzM2YYaYuh4bQHHDkLTSA d7BDsPaPl8gv0zmVs97iC0iRds1aGXrtAPNprdsiftBmG/3Ffj6OdEL1ZtYQnE6V 6aQsfF+fWOTEHRwk7ElV1o2zpuvPehUFsmljUrvLOTZHmUK1+ez1+5MhlFgDCVnW fz4IH8cyCw2nAw== -----END CERTIFICATE-----Generated at Thu Oct 23 10:24:35 2025 by rpki-client