$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: moGg4gCbi/5rc07y0dKaxD9VjeYYQB5Ojw3vyqZoOeo= Subject key identifier: 28:EA:5D:FE:B7:FB:EB:C1:07:15:72:51:9A:49:4B:84:F2:5A:32:60 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019A51878F9B1364854DB180AFC92BDBFA18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 1360 Signing time: Wed 05 Nov 2025 01:00:29 +0000 Manifest this update: Wed 05 Nov 2025 01:00:29 +0000 Manifest next update: Thu 06 Nov 2025 01:00:29 +0000 Files and hashes: 1: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 2: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 3: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 4: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 5: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 6: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: wP5SuamtwCXxaXH7EqK0e6vTN/a1gBosgDA6v5BApzk=) 7: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 8: iVFWKpRKrZrvXfyBPCiicWzEtLc.roa (hash: ySfsYFD8sJUIiFlWUtE2uw6TxmR7ZrKTk3Ot39sI2WQ=) 9: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 10: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 11: nqKarluaIBxurSOLKoj0fda_I6o.roa (hash: 0igWebpYrmPU5dIZIocnzzs4+9GsDMulHYWmTIL37ig=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 22:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:51:87:8f:9b:13:64:85:4d:b1:80:af:c9:2b:db:fa:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Nov 5 01:00:29 2025 GMT Not After : Nov 6 01:00:29 2025 GMT Subject: CN=28ea5dfeb7fbebc1071572519a494b84f25a3260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:40:82:ef:93:77:81:cb:50:c6:95:bc:4b: 55:4d:9a:bb:f8:f9:fd:a5:38:8d:c5:cb:c3:a9:6f: 00:68:44:c9:65:b0:b2:40:f1:f6:1e:e1:66:28:37: bb:1a:bd:3b:5b:32:04:24:3a:59:8b:2a:82:bb:66: 78:9d:f0:d7:b2:fe:be:ab:2a:64:fc:d2:db:11:4c: 6f:c1:9f:28:c8:e5:d2:44:eb:c9:1d:05:ad:91:24: 20:9b:52:b4:0c:41:41:9b:58:89:36:25:96:16:7c: 91:23:46:b2:3e:24:95:c2:30:10:b8:ae:ce:f3:0e: 05:fe:33:bb:14:ee:48:58:40:4c:71:ab:45:e8:c6: 84:23:db:6a:ca:b0:12:50:07:93:5e:d8:ac:e6:2d: 17:a9:4f:4d:83:7d:93:f2:4e:ee:60:22:13:3d:75: 3e:a4:cc:fe:1c:63:35:00:d2:bf:a9:bc:fe:32:d2: 5a:7b:37:cf:96:d5:d4:d1:a1:28:29:1a:8b:e8:ad: 25:23:8d:85:d4:3e:0e:6b:d0:92:a7:cf:d4:5e:2d: e9:25:ac:39:b0:49:fd:73:c8:5c:f3:24:f9:8d:2b: ce:21:82:3e:19:b1:b7:45:1f:91:0a:15:d4:a7:0e: dd:e3:2d:c7:d7:ca:fa:70:85:fa:45:02:36:9f:50: 62:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EA:5D:FE:B7:FB:EB:C1:07:15:72:51:9A:49:4B:84:F2:5A:32:60 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:18:85:b8:ae:d4:26:66:93:52:16:ef:4e:1a:7a:02:86:14: 5f:3a:87:7e:8d:d8:4f:77:c8:36:93:3f:73:1a:1d:dc:1f:0f: 05:59:98:86:27:27:7d:33:37:17:81:a1:86:bc:c6:f5:29:5c: ed:f3:40:6e:f9:a9:48:5d:2b:cc:b7:e2:e7:de:2f:70:46:cc: e4:b1:75:fd:97:ec:bb:fc:a4:1a:8b:a4:6b:a5:45:d1:3b:94: 46:1c:b5:3b:b9:e8:9e:0f:5f:90:39:e4:28:1a:ab:7b:9e:44: 41:0f:0b:ea:0d:3b:b4:d2:75:2c:b9:64:44:71:35:9b:01:e4: a1:33:dc:68:57:f4:6d:da:68:ee:6c:25:e9:1c:20:08:ee:41: 01:9a:6d:1e:2f:ba:63:f6:86:5b:a2:06:cd:d5:94:d9:26:91: 3c:07:2a:b1:d6:ad:08:31:9b:e1:56:31:7b:f2:2e:3d:d3:18: 98:0b:a4:a3:e2:78:8c:be:2e:71:5c:81:91:06:14:d9:85:c7: 9b:ab:f4:b7:60:fe:3a:a3:94:b7:f0:20:24:d7:a2:e4:0e:dd: 43:dd:71:b0:b6:21:9b:b7:4a:c5:7d:90:43:6e:e7:83:59:46: b7:16:e7:05:36:b5:9d:25:a3:5a:ce:f6:57:96:32:7e:52:35: 0a:8b:1c:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpRh4+bE2SFTbGAr8kr2/oYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUxMTA1MDEwMDI5WhcNMjUxMTA2MDEwMDI5WjAzMTEwLwYDVQQD EygyOGVhNWRmZWI3ZmJlYmMxMDcxNTcyNTE5YTQ5NGI4NGYyNWEzMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYpAgu+Td4HLUMaVvEtVTZq7+Pn9 pTiNxcvDqW8AaETJZbCyQPH2HuFmKDe7Gr07WzIEJDpZiyqCu2Z4nfDXsv6+qypk /NLbEUxvwZ8oyOXSROvJHQWtkSQgm1K0DEFBm1iJNiWWFnyRI0ayPiSVwjAQuK7O 8w4F/jO7FO5IWEBMcatF6MaEI9tqyrASUAeTXtis5i0XqU9Ng32T8k7uYCITPXU+ pMz+HGM1ANK/qbz+MtJaezfPltXU0aEoKRqL6K0lI42F1D4Oa9CSp8/UXi3pJaw5 sEn9c8hc8yT5jSvOIYI+GbG3RR+RChXUpw7d4y3H18r6cIX6RQI2n1Bi4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjqXf63++vBBxVyUZpJS4TyWjJgMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThiFuK7U JmaTUhbvThp6AoYUXzqHfo3YT3fINpM/cxod3B8PBVmYhicnfTM3F4GhhrzG9Slc 7fNAbvmpSF0rzLfi594vcEbM5LF1/Zfsu/ykGouka6VF0TuURhy1O7nong9fkDnk KBqre55EQQ8L6g07tNJ1LLlkRHE1mwHkoTPcaFf0bdpo7mwl6RwgCO5BAZptHi+6 Y/aGW6IGzdWU2SaRPAcqsdatCDGb4VYxe/IuPdMYmAuko+J4jL4ucVyBkQYU2YXH m6v0t2D+OqOUt/AgJNei5A7dQ91xsLYhm7dKxX2QQ27ng1lGtxbnBTa1nSWjWs72 V5YyflI1Coscew== -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:59 2025 by rpki-client