$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: QutA0b82AlqdtWGMWI4B1uSDZk6gf/BB59Bwbv7WaxE= Subject key identifier: 68:27:EB:4C:ED:20:38:4D:BD:01:E9:08:BA:77:4E:C0:F7:E5:A3:9E Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019A4E867E67F1E31C30DB02D30C6B8CB67D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 1704 Signing time: Tue 04 Nov 2025 11:00:28 +0000 Manifest this update: Tue 04 Nov 2025 11:00:28 +0000 Manifest next update: Wed 05 Nov 2025 11:00:28 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: fXE+gfy6nhiFxRdZOCLVS7EpKCZJsp44FfWxw55WoHY=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:86:7e:67:f1:e3:1c:30:db:02:d3:0c:6b:8c:b6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Nov 4 11:00:28 2025 GMT Not After : Nov 5 11:00:28 2025 GMT Subject: CN=6827eb4ced20384dbd01e908ba774ec0f7e5a39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:33:1d:2c:39:45:3e:5d:12:df:84:da:af: 03:c1:d7:90:0b:d2:c1:c2:58:af:8b:28:af:d3:c5: d1:cd:ed:e3:31:5c:51:4f:76:cd:02:df:02:ad:66: b6:d8:e0:cb:ec:b4:55:b4:3f:88:93:52:d5:d5:45: 76:26:ce:2f:f7:51:f0:6b:e5:a1:6b:7a:2e:fd:80: 39:43:ba:01:8c:57:5b:9a:1e:ef:40:5f:a2:a1:a8: 3a:1b:a0:f8:21:2b:20:e0:02:91:81:00:70:91:02: 83:cd:4f:95:14:af:bb:10:75:b1:96:1a:d1:7b:8b: 03:21:53:a1:6e:c7:e6:f1:73:b6:a5:ce:96:fe:8c: c8:8a:52:45:aa:6b:37:5a:0e:6d:3a:d7:49:05:56: 2e:79:e9:93:2f:cb:3d:8a:89:b4:6d:0f:3d:58:60: 5e:9c:97:dd:71:2c:91:37:bc:e6:98:95:70:90:88: 99:67:fb:8e:26:d6:39:21:bb:d9:fe:bf:c6:12:52: 4c:b4:7e:20:83:7e:a2:0b:6c:9e:a1:77:e7:96:24: 86:2e:bf:ec:a7:41:c7:b7:67:9e:fc:d0:da:98:fe: 56:34:6d:8a:c6:31:00:45:cd:49:2b:c3:3d:5a:b6: 34:a6:6c:26:1d:18:b5:06:c5:65:c0:00:c9:5f:1c: 16:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:27:EB:4C:ED:20:38:4D:BD:01:E9:08:BA:77:4E:C0:F7:E5:A3:9E X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:eb:0e:b5:bb:8d:5c:1c:7e:c7:83:f9:35:48:c7:e4:a6:18: af:be:4d:03:af:bf:0a:66:48:58:43:b6:36:2d:da:c7:f3:ca: 4e:f9:17:47:ba:25:48:be:f1:38:9b:cc:12:98:79:f5:da:3e: a7:0b:be:30:e2:2d:3d:5d:ab:fe:a2:50:de:ef:43:b2:28:6b: 1d:72:7c:ea:a0:ff:1a:b3:8e:26:59:d0:6c:35:be:46:cc:17: e0:25:ab:6d:9f:2b:98:9f:63:c1:d5:a0:75:62:36:14:7b:0a: 16:ff:eb:11:4e:ff:57:6b:64:46:9b:cd:c0:74:f1:05:42:a4: 33:c4:5b:4b:3e:43:94:a5:65:fa:c6:53:08:e6:a1:ab:2f:d5: 50:14:bd:31:eb:20:a5:11:f1:be:87:2e:09:6e:8b:b3:a5:c8: b1:0c:5e:0d:29:f9:45:48:18:5a:aa:a8:90:3f:bf:18:ff:54: be:0b:61:c8:72:5f:41:99:e8:40:9e:07:80:d6:8c:36:28:50: 0b:0e:fd:e3:d4:2d:44:90:99:f4:41:be:02:f7:6c:7b:3a:55: 8c:8d:71:14:6f:de:be:8d:d8:0a:8b:22:45:3f:e4:58:89:43: 1d:54:42:31:7d:72:7a:15:f3:4f:e2:4b:63:46:49:d5:ff:c3: 8f:36:3f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOhn5n8eMcMNsC0wxrjLZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUxMTA0MTEwMDI4WhcNMjUxMTA1MTEwMDI4WjAzMTEwLwYDVQQD Eyg2ODI3ZWI0Y2VkMjAzODRkYmQwMWU5MDhiYTc3NGVjMGY3ZTVhMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YUzHSw5RT5dEt+E2q8DwdeQC9LB wliviyiv08XRze3jMVxRT3bNAt8CrWa22ODL7LRVtD+Ik1LV1UV2Js4v91Hwa+Wh a3ou/YA5Q7oBjFdbmh7vQF+ioag6G6D4ISsg4AKRgQBwkQKDzU+VFK+7EHWxlhrR e4sDIVOhbsfm8XO2pc6W/ozIilJFqms3Wg5tOtdJBVYueemTL8s9iom0bQ89WGBe nJfdcSyRN7zmmJVwkIiZZ/uOJtY5IbvZ/r/GElJMtH4gg36iC2yeoXfnliSGLr/s p0HHt2ee/NDamP5WNG2KxjEARc1JK8M9WrY0pmwmHRi1BsVlwADJXxwWNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgn60ztIDhNvQHpCLp3TsD35aOeMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+sOtbuN XBx+x4P5NUjH5KYYr75NA6+/CmZIWEO2Ni3ax/PKTvkXR7olSL7xOJvMEph59do+ pwu+MOItPV2r/qJQ3u9DsihrHXJ86qD/GrOOJlnQbDW+RswX4CWrbZ8rmJ9jwdWg dWI2FHsKFv/rEU7/V2tkRpvNwHTxBUKkM8RbSz5DlKVl+sZTCOahqy/VUBS9Mesg pRHxvocuCW6Ls6XIsQxeDSn5RUgYWqqokD+/GP9UvgthyHJfQZnoQJ4HgNaMNihQ Cw7949QtRJCZ9EG+AvdsezpVjI1xFG/evo3YCosiRT/kWIlDHVRCMX1yehXzT+JL Y0ZJ1f/DjzY//A== -----END CERTIFICATE-----Generated at Tue Nov 4 15:08:30 2025 by rpki-client