$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: Uk4VyMG1vrl0ctFLG5Uj9F6hGBbBZOwxTX1Liy8taiI= Subject key identifier: 4C:1B:9B:D7:B7:A4:E4:07:17:B3:9F:2C:E6:A4:96:48:3C:9E:E6:0B Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019872987D74896537B0B5E792EC7003B8DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 12FE Signing time: Mon 04 Aug 2025 01:00:52 +0000 Manifest this update: Mon 04 Aug 2025 01:00:52 +0000 Manifest next update: Tue 05 Aug 2025 01:00:52 +0000 Files and hashes: 1: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=) 2: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=) 3: 1-mVwC91y2gjxzZ49ECJKeMBNsxM.roa (hash: U559gzASGhlXQBS0hGV4xF3kH8STm7I07VZJO2H7/G4=) 4: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=) 5: 1WFTW_XNP-qj9QwtLvnY8K90GHo.roa (hash: TT0O/NxdJaHvvJ9dp0/GHhMEHYZPpkP2KSw3SR8SILQ=) 6: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=) 7: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=) 8: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=) 9: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=) 10: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=) 11: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=) 12: F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa (hash: vUOE0EzW5wlVnmrKCdNEm67M3EqZb+A0EvhCnOtIuZM=) 13: F44rSxYHWvCn92sHFFQUEeoKyqw.roa (hash: 8AXZMSZO+E7+SkVr6YrOqE49BwMU7g4OcVzs14+WP+A=) 14: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=) 15: NmpssQUEcEZNKaoW0BQiwNAoyOM.roa (hash: umT/ksYC6kbCYRycfHE77LtnW64FjufV8F+An3q8R18=) 16: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: abDpCgohtS0J543q5PUupmSuIX+kBmw9gIWNLqdC8Jg=) 17: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=) 18: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=) 19: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=) 20: Y93UFuH00_cFjyT9h0x-Xo3LsRA.roa (hash: KbxPfOmyChm+trCvOnFCPUXdRLZulWQI+556HaiOtUM=) 21: ZnbzYHRBvUTbEjCixu-51iq0NfI.roa (hash: H6eoYf0qoCchu+RJjza0539v8DwbGRsxOIQiPaH7Gsc=) 22: _xC1kXcH_xnBrp3zmmeFMgFE7KI.roa (hash: lnLioS9m0wvQKnvleqYpOpwLrz8qz8X99uptw34wSFs=) 23: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=) 24: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=) 25: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=) 26: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=) 27: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:98:7d:74:89:65:37:b0:b5:e7:92:ec:70:03:b8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Aug 4 01:00:52 2025 GMT Not After : Aug 5 01:00:52 2025 GMT Subject: CN=4c1b9bd7b7a4e40717b39f2ce6a496483c9ee60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:95:6a:48:e3:68:eb:69:5c:03:0c:4f:67: 99:e0:ce:92:f4:14:2a:38:44:08:ba:fa:bd:dc:08: ea:e2:61:e3:34:5c:fd:d9:05:c6:ae:2f:97:e1:c5: ad:e1:7a:e4:90:2c:b8:b8:92:6c:fd:80:44:bd:f9: 43:a3:2f:96:cc:55:d3:fe:88:60:6d:46:51:b4:28: 96:27:27:3c:9c:73:4a:e1:42:cf:10:81:21:c0:1a: c4:65:95:62:b0:65:19:47:cc:0c:8c:2c:17:f0:a6: 06:2b:aa:cd:8e:aa:3b:ad:90:cb:28:d3:c8:15:30: c8:e5:6d:55:e4:07:77:70:22:e3:86:59:d0:a0:4e: 86:e3:5d:1d:bb:62:c6:c5:fc:04:dc:95:26:dd:78: 5b:d5:74:f5:67:5e:ae:1e:50:ac:25:0f:46:b7:24: ce:f3:2d:e6:05:6f:09:4f:73:fc:71:5b:84:0f:28: 7b:09:31:68:09:77:ac:93:f3:95:e2:e2:2b:d2:38: 3b:de:13:52:94:5d:0e:f8:62:e0:a6:f8:76:be:7c: 3a:6e:6b:1b:a7:21:5c:93:5c:88:17:30:58:c9:c1: 5a:cb:10:45:30:19:ce:39:6c:6b:50:b7:2a:d9:fa: 75:96:f4:35:e4:4e:d5:ef:7a:6a:ee:bd:ff:bb:16: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1B:9B:D7:B7:A4:E4:07:17:B3:9F:2C:E6:A4:96:48:3C:9E:E6:0B X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3f:b7:68:ed:08:13:b3:d7:58:4a:8c:f6:09:58:e7:b6:20: ca:3a:be:2b:9a:13:40:d9:e4:32:55:2b:fe:e9:90:e1:70:f3: 97:30:12:c3:08:0a:61:95:c2:dd:b0:d3:0b:a6:e5:9a:8e:d3: c0:52:54:44:f5:5e:56:ae:4a:1f:62:09:02:9a:bf:7f:51:47: 57:e8:4c:e3:a7:70:ae:dc:06:07:9b:6f:cc:70:d6:29:08:c9: fb:b8:58:11:4f:5f:f7:17:67:ad:f6:7b:a8:cb:a7:03:26:f7: 2c:e8:3d:65:67:e7:1e:d9:b9:37:1a:3c:5e:aa:79:28:a1:36: dc:2c:47:ce:75:45:21:ee:5b:58:01:02:d0:ca:66:ed:bc:4c: 0f:34:54:59:6d:81:c9:11:3a:2b:ab:ec:df:b2:89:3c:19:f5: 41:98:0d:75:61:bf:0c:b9:2a:60:9a:b9:16:e1:f5:1d:18:89: 7b:6a:86:50:8a:3f:6e:3b:c4:90:68:e0:df:9e:42:83:d6:6b: 3f:70:c3:41:ae:b3:60:25:bb:70:a3:0b:ca:58:f8:e3:41:71: 5e:c2:d7:cf:bc:ba:63:f8:16:15:82:d8:e8:23:95:05:c7:7d: bb:42:28:ba:eb:d4:c5:0c:c3:7c:cc:7c:fb:e5:55:e9:39:65: ac:71:a1:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhymH10iWU3sLXnkuxwA7jdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUwODA0MDEwMDUyWhcNMjUwODA1MDEwMDUyWjAzMTEwLwYDVQQD Eyg0YzFiOWJkN2I3YTRlNDA3MTdiMzlmMmNlNmE0OTY0ODNjOWVlNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxKVakjjaOtpXAMMT2eZ4M6S9BQq OEQIuvq93Ajq4mHjNFz92QXGri+X4cWt4XrkkCy4uJJs/YBEvflDoy+WzFXT/ohg bUZRtCiWJyc8nHNK4ULPEIEhwBrEZZVisGUZR8wMjCwX8KYGK6rNjqo7rZDLKNPI FTDI5W1V5Ad3cCLjhlnQoE6G410du2LGxfwE3JUm3Xhb1XT1Z16uHlCsJQ9GtyTO 8y3mBW8JT3P8cVuEDyh7CTFoCXesk/OV4uIr0jg73hNSlF0O+GLgpvh2vnw6bmsb pyFck1yIFzBYycFayxBFMBnOOWxrULcq2fp1lvQ15E7V73pq7r3/uxbl1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwbm9e3pOQHF7OfLOaklkg8nuYLMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD+3aO0I E7PXWEqM9glY57Ygyjq+K5oTQNnkMlUr/umQ4XDzlzASwwgKYZXC3bDTC6blmo7T wFJURPVeVq5KH2IJApq/f1FHV+hM46dwrtwGB5tvzHDWKQjJ+7hYEU9f9xdnrfZ7 qMunAyb3LOg9ZWfnHtm5Nxo8Xqp5KKE23CxHznVFIe5bWAEC0Mpm7bxMDzRUWW2B yRE6K6vs37KJPBn1QZgNdWG/DLkqYJq5FuH1HRiJe2qGUIo/bjvEkGjg355Cg9Zr P3DDQa6zYCW7cKMLylj440FxXsLXz7y6Y/gWFYLY6COVBcd9u0IouuvUxQzDfMx8 ++VV6TllrHGhsg== -----END CERTIFICATE-----Generated at Mon Aug 4 07:41:43 2025 by rpki-client