$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: PBieNjhBL8LKIWN7sAb86qxxZNKZm86gkd4npzPXxUI= Subject key identifier: 30:5F:4C:2B:F2:EB:48:27:F8:F5:38:61:20:82:7B:C3:53:BA:55:61 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019A4EF42CC0CFC3EB925C332D85938A0508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 1448 Signing time: Tue 04 Nov 2025 13:00:16 +0000 Manifest this update: Tue 04 Nov 2025 13:00:16 +0000 Manifest next update: Wed 05 Nov 2025 13:00:16 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: o+mlDsqdUDfoodNj9ISNV3nl/ZngBapv7MaSj37FjDs=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:f4:2c:c0:cf:c3:eb:92:5c:33:2d:85:93:8a:05:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Nov 4 13:00:16 2025 GMT Not After : Nov 5 13:00:16 2025 GMT Subject: CN=305f4c2bf2eb4827f8f5386120827bc353ba5561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:37:12:0d:60:b0:e4:13:88:0d:fa:b5:09: 72:dd:f5:24:04:df:d7:aa:d9:ae:89:82:6e:68:0a: 58:3a:5d:2e:bc:fb:2e:a5:86:02:03:9f:66:f1:86: fc:c6:fd:e0:01:dd:9d:4d:51:6b:9a:9e:0b:67:88: c9:8e:a0:c2:a8:dd:42:8a:44:82:d0:b3:58:96:13: 5d:ea:82:2e:a6:48:ba:77:b0:a6:03:1d:1c:02:c2: 12:23:32:9d:2a:e4:4c:fa:8e:f1:ca:44:6f:f2:d8: 1d:81:72:26:c4:ac:3e:4e:b6:56:40:13:43:7a:31: be:7f:e9:3f:65:aa:ff:c7:33:1f:a4:f2:42:35:76: 31:80:27:e1:42:55:6e:c5:b3:5b:d8:ce:a6:a3:c2: 55:53:85:9c:77:b9:a4:d9:12:43:ef:4a:b5:d0:07: ef:8c:0a:4a:c6:50:69:66:b8:1c:47:7a:33:d6:41: 1e:ce:14:37:c0:93:0b:a4:47:c1:02:dc:e6:ad:d2: b6:20:f1:80:60:f3:86:ca:7c:3d:2b:68:f2:51:49: df:96:4d:63:bc:ab:6b:03:ad:b4:42:68:17:5f:5b: 43:cc:3f:6b:33:82:06:0b:a0:fd:40:87:75:c1:56: 13:f0:1e:08:4a:24:f3:9e:f3:e7:59:d0:85:26:a6: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5F:4C:2B:F2:EB:48:27:F8:F5:38:61:20:82:7B:C3:53:BA:55:61 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b7:b9:cf:69:ab:e3:39:d6:55:00:e2:3e:92:54:21:9a:6e: 8b:b3:eb:42:cb:c3:0b:fd:50:df:63:de:d5:c9:ad:43:1e:6c: a9:c8:98:56:a2:ff:38:39:1d:ef:b4:df:c5:6a:b0:8f:07:b2: fb:1d:33:2c:e5:1a:f3:de:f1:62:96:dc:8a:ed:15:b3:f6:ec: 9c:b4:76:37:4a:5d:ae:0a:b8:86:ca:83:1f:00:73:b5:03:e2: 80:df:05:9b:d1:e5:48:ca:a6:04:ed:25:b4:75:97:a6:4c:ac: 35:be:d1:5d:c8:08:3e:42:d7:4e:0c:5b:bc:71:dd:df:44:14: eb:01:71:78:5f:5f:cb:a2:46:ab:ba:49:c5:f5:6d:37:c8:3b: e6:65:f9:e6:2f:07:ee:a5:be:9a:8d:4d:9e:51:24:0a:19:f5: 45:83:50:17:19:fb:0b:dd:82:15:6a:03:3c:8e:19:f8:1c:29: ef:32:26:41:e8:36:cb:8e:91:2e:78:2c:01:8d:25:cc:78:1b: 90:b4:49:f8:3e:a2:e2:8a:9e:93:b3:eb:68:1f:f2:6a:39:d6: 78:78:d9:b6:2b:a0:87:03:70:b4:71:6c:ff:83:09:12:31:d6: 73:a6:f6:df:da:1f:57:57:97:58:1a:12:5c:f0:c3:10:b8:9e: 9d:8b:a9:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpO9CzAz8PrklwzLYWTigUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUxMTA0MTMwMDE2WhcNMjUxMTA1MTMwMDE2WjAzMTEwLwYDVQQD EygzMDVmNGMyYmYyZWI0ODI3ZjhmNTM4NjEyMDgyN2JjMzUzYmE1NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wg3Eg1gsOQTiA36tQly3fUkBN/X qtmuiYJuaApYOl0uvPsupYYCA59m8Yb8xv3gAd2dTVFrmp4LZ4jJjqDCqN1CikSC 0LNYlhNd6oIupki6d7CmAx0cAsISIzKdKuRM+o7xykRv8tgdgXImxKw+TrZWQBND ejG+f+k/Zar/xzMfpPJCNXYxgCfhQlVuxbNb2M6mo8JVU4Wcd7mk2RJD70q10Afv jApKxlBpZrgcR3oz1kEezhQ3wJMLpEfBAtzmrdK2IPGAYPOGynw9K2jyUUnflk1j vKtrA620QmgXX1tDzD9rM4IGC6D9QId1wVYT8B4ISiTznvPnWdCFJqYgNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBfTCvy60gn+PU4YSCCe8NTulVhMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7e5z2mr 4znWVQDiPpJUIZpui7PrQsvDC/1Q32Pe1cmtQx5sqciYVqL/ODkd77TfxWqwjwey +x0zLOUa897xYpbciu0Vs/bsnLR2N0pdrgq4hsqDHwBztQPigN8Fm9HlSMqmBO0l tHWXpkysNb7RXcgIPkLXTgxbvHHd30QU6wFxeF9fy6JGq7pJxfVtN8g75mX55i8H 7qW+mo1NnlEkChn1RYNQFxn7C92CFWoDPI4Z+Bwp7zImQeg2y46RLngsAY0lzHgb kLRJ+D6i4oqek7PraB/yajnWeHjZtiughwNwtHFs/4MJEjHWc6b239ofV1eXWBoS XPDDELienYupZg== -----END CERTIFICATE-----Generated at Tue Nov 4 14:49:45 2025 by rpki-client