$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 2LS0P1pi8yd/pncdx9Dfnlb9mIFCmlzdvf66IqeisQY= Subject key identifier: EB:CA:D9:50:18:DC:BA:E0:32:DE:55:D1:9C:7A:2E:70:02:41:A9:20 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019A4C98512E127F0E004796C9AC45630BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1400 Signing time: Tue 04 Nov 2025 02:00:41 +0000 Manifest this update: Tue 04 Nov 2025 02:00:41 +0000 Manifest next update: Wed 05 Nov 2025 02:00:41 +0000 Files and hashes: 1: 0sTiQL9BpziNNFF9FacA7txFp4w.roa (hash: CLrdyx0Cg3S+QuOUt4e8L9WYyaGDex4K2YIa5CkZ86Q=) 2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 1lTFoj63RaNBPnsylzVDB0FbQcc.roa (hash: Wmsf3/BQIBuAue+polYHmV/g9lwEk/F7Z4SpbFZOF0o=) 7: 41NUtPFxhObk-wVR35VCAMgd6ew.roa (hash: PcHsWPaT2JkObS4lJVIC3b2jPWyUUdnpeoaDp23b2r0=) 8: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 9: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 10: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 11: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 12: C34TCWAAsuIM5LVygn6C7yQx3P0.roa (hash: M4OJhxeXZ34Zdg4oZ52MXUW46vr94WOQk28NV0lOpg4=) 13: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 14: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 16: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 17: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: kfhWKdsCY1JfIe1i7EIlI/zKIBojlBaB7Xf7a6/bSkA=) 18: P5MQT6daRbdr-R3pB7QOjSqAL4Q.roa (hash: xmGgGe1dwu3F4/Ddk90Hq6VDykeMQZvGcFQBtkOWLR8=) 19: QfrBASbGsV9PVtFSk_7UjwBcWEM.roa (hash: rNxthRgt1V+JwXg506MlnxTxTgZ9hC5VywiRjKQezCo=) 20: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 21: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 22: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 23: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 24: YdUZ5w6IAdGPiul5q5fOHhPzeoA.roa (hash: jbmYHn1SuSEyWGTrXJF0vJ+D0Wlz3KHQiDOE+gVO4Ts=) 25: Zk4BlJWRnOOEXvSWy79JFjGP6ds.roa (hash: SdogvnoK+ooQjSoYhkW00PpLxlDevb4pmfwk2gJXytQ=) 26: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 27: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 28: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 29: ukmVSYDCb9Jl4JxKXZBTnYu7mDg.roa (hash: M9zVx4mUz4O4QWCziZ5DwfpcCjVmQZC3ew4EDPjuQ3k=) 30: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 31: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4c:98:51:2e:12:7f:0e:00:47:96:c9:ac:45:63:0b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Nov 4 02:00:41 2025 GMT Not After : Nov 5 02:00:41 2025 GMT Subject: CN=ebcad95018dcbae032de55d19c7a2e700241a920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:38:c7:3c:4b:b5:c6:22:4f:f3:fd:37:bc: 91:0b:41:5d:2b:3f:68:f3:3d:a0:d7:3a:4f:7d:ae: a9:63:ed:59:29:5e:94:77:30:71:f3:05:e1:cf:0d: 6b:5b:94:d4:62:b5:0b:c1:ed:89:72:a5:23:c1:ce: b4:66:e4:f4:69:8c:07:27:b3:7f:c2:d3:4f:d7:60: a2:24:d5:74:01:f9:36:12:79:ad:16:d1:c9:df:b4: 5c:71:bc:ff:21:10:a1:9f:db:30:4c:34:1c:72:2c: 70:1a:f4:67:af:57:bf:57:dd:83:04:68:3a:17:ff: 0d:01:a3:a3:c3:40:32:51:b2:de:40:8e:2f:fe:78: cd:4b:26:3f:11:61:fb:86:8d:a3:f4:df:9a:ac:ff: 54:56:7e:fe:5d:27:a3:c6:3a:1a:18:9f:89:a9:c6: 66:f6:a4:56:ee:33:7d:1e:ef:72:3a:bd:34:4a:6a: 49:ce:e9:21:5a:4d:50:9a:23:77:8c:7b:4d:ae:88: e1:95:85:a0:36:8f:6d:9a:a0:c1:6e:e0:6a:9e:64: 7d:44:31:9e:6d:d5:4d:ab:9b:07:d4:1b:86:b3:6a: c4:43:dd:83:c4:7e:96:20:75:20:b5:7b:d1:c2:a5: 3a:b6:b6:21:93:4f:4c:7d:7f:a1:27:7f:c9:49:f1: f7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CA:D9:50:18:DC:BA:E0:32:DE:55:D1:9C:7A:2E:70:02:41:A9:20 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1e:ad:b6:dd:6a:4a:50:9f:86:61:46:d6:dc:5a:1d:63:85: 4d:5a:3c:95:b7:3f:56:75:46:aa:64:71:00:c2:04:bf:0d:18: ba:94:88:fc:64:c5:35:e0:9f:fe:eb:ea:5c:51:18:66:0b:d0: cf:eb:a8:d5:d2:9e:03:76:f5:8d:49:d9:4c:22:20:66:e3:e1: dd:d4:3b:a5:5d:97:7a:7b:e5:9f:9e:49:13:3a:ce:54:a7:e0: 7a:9f:4c:8b:d3:b7:b2:eb:ee:9d:40:ea:73:d0:84:e4:1d:b1: 98:c9:18:cb:43:c5:0a:1c:a2:26:00:98:45:b1:d2:96:40:2b: 1d:5d:c9:68:8b:48:be:97:b3:ff:db:f0:a1:37:84:a8:b6:6e: c4:ae:40:d7:a4:66:cb:ba:24:e1:c0:ce:85:a6:c2:4b:14:0b: cf:cd:a8:9e:df:2b:03:f4:c5:a3:7f:3a:c0:f3:31:34:1e:c1: 88:51:b1:27:43:a5:75:97:6a:3d:6c:b1:8f:b0:89:c0:26:c9: 2f:bb:e6:c5:94:50:48:78:a2:42:ee:b4:f5:38:3e:09:3e:a6: 5d:6b:b9:bb:ff:be:c9:77:65:52:08:a5:a5:a5:3a:3c:6c:bc: 34:d9:d3:58:be:06:7c:a1:6d:55:05:f3:26:18:f0:03:71:cd: 4e:66:6e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpMmFEuEn8OAEeWyaxFYwusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMTA0MDIwMDQxWhcNMjUxMTA1MDIwMDQxWjAzMTEwLwYDVQQD EyhlYmNhZDk1MDE4ZGNiYWUwMzJkZTU1ZDE5YzdhMmU3MDAyNDFhOTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfE4xzxLtcYiT/P9N7yRC0FdKz9o 8z2g1zpPfa6pY+1ZKV6UdzBx8wXhzw1rW5TUYrULwe2JcqUjwc60ZuT0aYwHJ7N/ wtNP12CiJNV0Afk2EnmtFtHJ37Rccbz/IRChn9swTDQccixwGvRnr1e/V92DBGg6 F/8NAaOjw0AyUbLeQI4v/njNSyY/EWH7ho2j9N+arP9UVn7+XSejxjoaGJ+JqcZm 9qRW7jN9Hu9yOr00SmpJzukhWk1QmiN3jHtNrojhlYWgNo9tmqDBbuBqnmR9RDGe bdVNq5sH1BuGs2rEQ92DxH6WIHUgtXvRwqU6trYhk09MfX+hJ3/JSfH3DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvK2VAY3LrgMt5V0Zx6LnACQakgMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh6ttt1q SlCfhmFG1txaHWOFTVo8lbc/VnVGqmRxAMIEvw0YupSI/GTFNeCf/uvqXFEYZgvQ z+uo1dKeA3b1jUnZTCIgZuPh3dQ7pV2Xenvln55JEzrOVKfgep9Mi9O3suvunUDq c9CE5B2xmMkYy0PFChyiJgCYRbHSlkArHV3JaItIvpez/9vwoTeEqLZuxK5A16Rm y7ok4cDOhabCSxQLz82ont8rA/TFo386wPMxNB7BiFGxJ0OldZdqPWyxj7CJwCbJ L7vmxZRQSHiiQu609Tg+CT6mXWu5u/++yXdlUgilpaU6PGy8NNnTWL4GfKFtVQXz JhjwA3HNTmZuIQ== -----END CERTIFICATE-----Generated at Tue Nov 4 10:47:43 2025 by rpki-client