$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft File: NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json) Hash identifier: eevZogFmCvg5kLNxIa074G6SkiQfJiGMn2yx5cfuxmg= Subject key identifier: 44:56:4D:BD:60:0E:8B:A7:FD:48:DF:CE:3F:F0:D7:06:C4:8F:C2:B1 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019A4E4F6A9589C5238D58B279AE1E153C16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft Manifest number: 18B0 Signing time: Tue 04 Nov 2025 10:00:18 +0000 Manifest this update: Tue 04 Nov 2025 10:00:18 +0000 Manifest next update: Wed 05 Nov 2025 10:00:18 +0000 Files and hashes: 1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=) 2: 2zSqcJ9Y-8gFEYLEn8boP0u6rS4.roa (hash: haGjzU6eyI1x756FuVAVNLEoh000mU3ZA/CDoJfpaAY=) 3: 3GpFaqQcQN9oMifABgrQUFoG0kE.roa (hash: WY/ivhDoFD/EbNKAvaxEqHPsDCFDZM/+fS+MHyM0i7w=) 4: 67Mxj3KpQWipNpMlLApfSyTCvC0.roa (hash: Fv9QcoJhLdt0inevu/XCAdGmMRCdZt4H9qb4Kzk/RZ4=) 5: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=) 6: 8eDdBsgY2IyhmucFkbHm5Vqa4dg.roa (hash: 4395eHok2K6kmkkM0vCUMdpi272lI5L2QlfvQJmQQ18=) 7: BpxpMqtX2BI2HvmcJUH48xghR8g.roa (hash: mXU7HG44i69F2PkGAd8XWDXPFOvH8VQ4AEhwr2wm/4A=) 8: C5OsBMz5fQykWMCwQdFhSa-dVME.roa (hash: VBECbuwyUI1l/OYWc21n03EPHCXetAxOxte4Dp1kyt0=) 9: CcLRGj42YfBnS-DSMVQ56Ed1ds8.roa (hash: p6KK3vhNlRrVRpgQjaHC47rAMguNzRk9ILNOwRtTjlE=) 10: EWzjzTnMnun7dm42dJGmvnyBoZ8.roa (hash: U4usoWTWTzR00G3EMoi9wIZBlXX+/pCkgzxPh9oloGk=) 11: Eflo_3d0ikDGp7ukpVhOINTx3_g.roa (hash: mJ4gMIcu0+nxbTSlBEyuBzWv45URexFlpi8POVPz4Yw=) 12: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=) 13: FHDgepgQrMHgp6ZemKClHBnTyFk.roa (hash: 1wn4Qh5DiYSN72ZmOop87rF5mtepTFFlXdUD4HUb+ec=) 14: LsXYjrjtcFruHy0Xsx-YzdXSSk0.roa (hash: dkMfT/u2kIwaZXzUHMjpU4ARix+vR+H4IPW7qIHRzPg=) 15: M714mkyeLGecG3CxD57_mFs1bVI.roa (hash: sWZ4L0BbCyDSxcxQBSHqJ3/DS0RNI5BibcEqYwkAaKY=) 16: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: zh39NTatQQ6KawWRe5ApeP1XeWR1GOgZup9u1/JGlmU=) 17: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=) 18: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=) 19: PYrj6Q-UxHtJwUeb_m9R8cqHKEE.roa (hash: Jl1qDKOhIHPhckL0Pr5e3wh24QkNWmFXDCd6nvl0ew4=) 20: QWYCXjPRwOA0N240TJ265a4Z_VY.roa (hash: MISdOk98xfsYVUHhbSa9VseYnCT528QSK0OmifOhA2o=) 21: WhGWPzS8xGDxCqrYjxVfnm6jt6Q.roa (hash: wsT36h4NahjqudtK9upbeMXxjGzvszhUfYQrxfMufBo=) 22: ZbSMtU36ykIrlVNp2VK8NgG5pVE.roa (hash: sH8ut9Rj+IdHM5ZsAXPpIAl8TDiv4KxH+jfISb7fbXA=) 23: _01k3y56cEMdQ42iOKunr2RMUeM.roa (hash: DGyUgtSPD/8CoWC86Wf/mLLAiyFkCUgpPiidGCEavaM=) 24: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=) 25: anRCvSGXJN-cP3l_C6L2k19y4zA.roa (hash: o5ciTWqaZzCbSMaIT6261kWGdGN0gxeTcqMlc5EBp70=) 26: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=) 27: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=) 28: dbqC1gfl12f35WYp8InH-gV02wk.roa (hash: EkpXoaMa0fy12pzt6OTS/PPrHhuvYU2fIVqKuLxv5vk=) 29: eks95w96IDU3y7FJtqpJE2ERD5g.roa (hash: L7xCEIYpGK6CRbHPIfP9mIdxc/3UabGk1gnSMBDQAsk=) 30: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=) 31: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=) 32: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=) 33: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=) 34: pOIWxKcdmhqjCV5w5POl9_2JyY4.roa (hash: n0yy3OyjCswMBJj55eSTCAuqwQeLoykODrZnbzLuaaU=) 35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=) 36: rBr9G__yg--ybJi7KjL0Na3qRHA.roa (hash: ItHH13EhHo4OE288cMXg6GiOrDY96SUMCagz0YFt5LI=) 37: rvxwWdPBwUEDeub1SKW47DVWEmI.roa (hash: 5Fz4NipysVwhza6RRmS7qJbBV/XzxV+pB0l2qBalJ28=) 38: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=) 39: yIyWnl3cvTDId_6ZmTKY5jJakPE.roa (hash: +1tONpNtNdDr07avb/OWCH56FfRCHMRObDGwSselHQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:6a:95:89:c5:23:8d:58:b2:79:ae:1e:15:3c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Nov 4 10:00:18 2025 GMT Not After : Nov 5 10:00:18 2025 GMT Subject: CN=44564dbd600e8ba7fd48dfce3ff0d706c48fc2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:f9:e0:ba:bd:6a:e0:ec:7f:ba:42:1f:f4: 23:c2:36:7f:45:2e:40:eb:5e:56:3d:73:6b:87:7e: bc:bb:9d:23:25:18:be:45:b5:94:11:98:87:4a:af: 54:4f:69:c7:88:35:58:7e:25:f5:75:54:a7:6d:a0: ea:06:ff:47:9e:9f:62:01:52:44:6a:18:df:10:4e: 0f:1e:cc:fa:ef:f0:9d:a9:7d:d5:4e:1a:4d:db:16: ad:d0:bd:fe:d1:bc:36:8d:e2:b8:93:d6:7c:a1:27: 18:ff:f6:cc:a3:b6:39:8e:c7:f4:31:5f:73:85:4a: 4c:d7:98:42:d2:08:dc:91:6e:bf:4f:23:53:bd:1b: ff:fb:cc:74:a2:9e:f5:4d:d5:e7:8a:71:ac:57:39: 7d:d5:28:a3:df:3c:f4:3d:5a:8e:b5:b9:52:5f:b4: d7:e2:0e:5e:0f:21:26:3d:25:04:30:ce:52:f5:f4: f6:9f:4c:03:e6:14:05:df:de:6a:1d:9a:d9:d1:f7: 9c:a3:40:b2:7e:bc:5d:62:0a:05:8b:4f:58:bf:bc: 51:c6:f2:7d:52:58:a7:bf:73:00:08:d5:b4:58:5e: 69:62:65:7d:11:c7:0d:26:cd:87:cf:1c:48:be:8f: d5:80:dc:5d:4e:00:4d:1d:82:61:71:bb:21:bb:57: 4b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:56:4D:BD:60:0E:8B:A7:FD:48:DF:CE:3F:F0:D7:06:C4:8F:C2:B1 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3c:57:52:b0:6b:90:2e:52:a4:35:0c:57:8c:5b:e8:f7:4f: ea:8c:83:fb:0b:ea:db:ac:64:19:54:3e:87:9d:cc:18:7b:ee: 0e:14:42:b4:df:57:b3:64:4e:2b:76:dd:0a:bb:21:71:69:40: 96:28:c2:dc:ac:58:03:60:ed:d6:da:0e:68:88:14:40:61:a3: 72:dc:66:e3:4e:52:73:ac:2e:0a:eb:25:d2:a3:82:aa:4c:79: bd:cf:3e:04:8b:f6:0e:9a:1b:12:1a:5e:c4:32:a6:d0:e6:ae: 23:e3:7b:fe:b4:b5:f9:5a:e9:3f:92:82:05:51:e6:68:a5:fc: f9:64:ff:49:13:40:91:7c:17:6f:fd:43:a8:44:e5:f4:bb:84: 1d:fe:2f:c6:1a:cf:14:4d:cd:2f:1c:f4:c5:a4:d1:86:2b:a9: 05:5d:d8:17:f0:47:03:9d:6c:ac:2e:c3:65:f0:70:d6:18:f6: fd:e9:eb:e8:dc:cc:6a:9c:b7:df:df:21:23:25:d5:81:14:4c: c4:af:7c:88:2f:39:8f:98:9b:a9:21:06:eb:f8:b5:7c:32:f2: 98:50:e8:92:15:de:ef:e5:8b:61:60:97:d5:b5:fc:49:1f:22: 41:2d:26:e2:95:10:01:78:2a:86:1e:b1:ee:ce:65:19:ec:7d: 28:ce:d3:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT2qVicUjjViyea4eFTwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjUxMTA0MTAwMDE4WhcNMjUxMTA1MTAwMDE4WjAzMTEwLwYDVQQD Eyg0NDU2NGRiZDYwMGU4YmE3ZmQ0OGRmY2UzZmYwZDcwNmM0OGZjMmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVX54Lq9auDsf7pCH/QjwjZ/RS5A 615WPXNrh368u50jJRi+RbWUEZiHSq9UT2nHiDVYfiX1dVSnbaDqBv9Hnp9iAVJE ahjfEE4PHsz67/CdqX3VThpN2xat0L3+0bw2jeK4k9Z8oScY//bMo7Y5jsf0MV9z hUpM15hC0gjckW6/TyNTvRv/+8x0op71TdXninGsVzl91Sij3zz0PVqOtblSX7TX 4g5eDyEmPSUEMM5S9fT2n0wD5hQF395qHZrZ0feco0CyfrxdYgoFi09Yv7xRxvJ9 Ulinv3MACNW0WF5pYmV9EccNJs2HzxxIvo/VgNxdTgBNHYJhcbshu1dL0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERWTb1gDoun/Ujfzj/w1wbEj8KxMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDxXUrBr kC5SpDUMV4xb6PdP6oyD+wvq26xkGVQ+h53MGHvuDhRCtN9Xs2ROK3bdCrshcWlA lijC3KxYA2Dt1toOaIgUQGGjctxm405Sc6wuCusl0qOCqkx5vc8+BIv2DpobEhpe xDKm0OauI+N7/rS1+VrpP5KCBVHmaKX8+WT/SRNAkXwXb/1DqETl9LuEHf4vxhrP FE3NLxz0xaTRhiupBV3YF/BHA51srC7DZfBw1hj2/enr6NzMapy3398hIyXVgRRM xK98iC85j5ibqSEG6/i1fDLymFDokhXe7+WLYWCX1bX8SR8iQS0m4pUQAXgqhh6x 7s5lGex9KM7TTg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:53:43 2025 by rpki-client