$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: qGhYcPrJcaSbzrND6zbih7FmSU8JTGjeQQjW+V6KeVY= Subject key identifier: 10:92:85:64:10:A1:A2:0A:75:1A:E3:E0:CC:EC:DE:54:F4:32:D5:4A Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019A4DE1C5467EA446C115905B7400820AC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 172D Signing time: Tue 04 Nov 2025 08:00:32 +0000 Manifest this update: Tue 04 Nov 2025 08:00:32 +0000 Manifest next update: Wed 05 Nov 2025 08:00:32 +0000 Files and hashes: 1: 2m1N1n8a6sBF2PUXhuGsuoiReZg.roa (hash: 3Dbmnt0dYpxDOuq/MDalzY9XQCZQAKi7zCoPTN73rDE=) 2: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 5: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 6: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 7: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 8: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: CYpCGTDDXx+XrbGadmMGZyeQF4q2UBMf/cP7zMaM3bk=) 10: NRsmmESxlwOZ9E_FA7G05km4PzY.roa (hash: gj7FhRBAZvoKHYNfOr+mSSSV4JbsWKf5GeUgXwnq8h4=) 11: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 12: ZilTqGeKBQ2tryG8q3trVBCr-kw.roa (hash: PwgBz8bW1BvrcChPP0zRLTeusRgOrK5lGOMisutfo94=) 13: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:e1:c5:46:7e:a4:46:c1:15:90:5b:74:00:82:0a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Nov 4 08:00:32 2025 GMT Not After : Nov 5 08:00:32 2025 GMT Subject: CN=1092856410a1a20a751ae3e0ccecde54f432d54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:29:4c:37:2e:e9:ef:47:6a:7d:0f:e6:e0: 1b:ef:92:7b:37:ae:3e:d9:6c:38:12:08:b1:b3:24: 18:2e:4c:55:3e:9a:c8:c8:f2:7e:fa:b0:21:75:73: 65:fa:41:0d:35:62:ab:3f:31:3c:6e:ae:07:9c:23: e2:a9:85:f4:79:28:ee:aa:f0:40:a6:66:98:70:ef: 8d:ef:1c:1f:da:4f:c2:e2:b5:67:16:e0:ba:8a:4c: 8f:28:db:91:c8:a0:53:d1:6b:df:03:a0:50:ad:09: 7b:36:be:b3:2c:3f:9e:f2:85:9f:ef:af:8c:65:6a: 16:e0:79:55:63:ca:00:36:7b:93:91:8d:03:69:17: 53:8c:14:9b:1a:e9:13:e8:16:35:bc:f5:5e:ab:41: ed:2b:90:d4:80:fb:d4:57:eb:8e:5c:db:af:38:ae: 04:0b:bf:59:ea:00:10:9d:fe:15:3e:cd:73:b5:75: 4c:b2:d6:a0:33:0a:69:66:32:c6:d8:e1:bb:14:4f: e2:ce:02:8a:f9:1b:6a:48:e2:c1:37:32:a5:9b:bc: 7e:d5:2b:ec:77:6c:b6:fa:04:87:5c:d9:bd:bb:3d: f1:f2:90:8a:f5:a0:c4:25:b8:21:26:a2:20:36:56: 19:fc:c9:cf:f6:82:cb:8d:62:eb:59:8d:31:65:15: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:92:85:64:10:A1:A2:0A:75:1A:E3:E0:CC:EC:DE:54:F4:32:D5:4A X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:67:32:bf:45:ca:f1:4e:77:9c:5b:6d:ab:b3:02:89:b0:7c: f2:c9:52:4e:a0:00:61:b4:ad:c5:ca:f8:f0:2d:57:8c:0e:13: b7:9b:8b:9f:3d:5b:11:db:63:0b:14:7b:19:a3:dd:99:68:76: e2:98:2d:ca:5d:7a:44:54:40:64:08:7f:6d:11:b3:e5:b6:5a: 78:5d:98:ef:f3:d2:76:0e:46:13:48:9d:1a:0c:c5:9b:d3:f0: 74:c9:a3:3b:20:d0:05:db:86:ea:fa:cd:85:28:61:5a:61:29: 41:ac:89:a0:28:3c:ca:28:4b:b3:66:35:b8:49:19:c0:2a:1c: db:d8:dc:67:8d:be:6c:72:b4:f8:34:4d:15:ae:cb:28:8f:46: 16:32:3b:47:37:69:96:0f:82:79:75:a4:e8:17:cc:8a:ea:9a: e4:1e:5f:c4:b2:b6:b3:d2:61:18:97:59:d3:c2:9e:bc:05:79: 5c:94:71:ff:9a:dc:48:4e:5e:bb:39:97:26:a1:23:d1:d4:9b: 1e:74:a7:05:ee:e9:24:84:ea:71:63:e2:5c:7c:0e:29:c4:32: 5d:91:fe:72:24:18:78:ac:99:30:43:93:23:29:9b:0f:60:9b: 0c:cb:23:49:69:66:07:b4:0f:e3:92:be:a6:8c:7e:43:5d:b0: dd:91:aa:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpN4cVGfqRGwRWQW3QAggrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMTA0MDgwMDMyWhcNMjUxMTA1MDgwMDMyWjAzMTEwLwYDVQQD EygxMDkyODU2NDEwYTFhMjBhNzUxYWUzZTBjY2VjZGU1NGY0MzJkNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCYpTDcu6e9Han0P5uAb75J7N64+ 2Ww4EgixsyQYLkxVPprIyPJ++rAhdXNl+kENNWKrPzE8bq4HnCPiqYX0eSjuqvBA pmaYcO+N7xwf2k/C4rVnFuC6ikyPKNuRyKBT0WvfA6BQrQl7Nr6zLD+e8oWf76+M ZWoW4HlVY8oANnuTkY0DaRdTjBSbGukT6BY1vPVeq0HtK5DUgPvUV+uOXNuvOK4E C79Z6gAQnf4VPs1ztXVMstagMwppZjLG2OG7FE/izgKK+RtqSOLBNzKlm7x+1Svs d2y2+gSHXNm9uz3x8pCK9aDEJbghJqIgNlYZ/MnP9oLLjWLrWY0xZRVLtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCShWQQoaIKdRrj4Mzs3lT0MtVKMB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2cyv0XK 8U53nFttq7MCibB88slSTqAAYbStxcr48C1XjA4Tt5uLnz1bEdtjCxR7GaPdmWh2 4pgtyl16RFRAZAh/bRGz5bZaeF2Y7/PSdg5GE0idGgzFm9PwdMmjOyDQBduG6vrN hShhWmEpQayJoCg8yihLs2Y1uEkZwCoc29jcZ42+bHK0+DRNFa7LKI9GFjI7Rzdp lg+CeXWk6BfMiuqa5B5fxLK2s9JhGJdZ08KevAV5XJRx/5rcSE5euzmXJqEj0dSb HnSnBe7pJITqcWPiXHwOKcQyXZH+ciQYeKyZMEOTIymbD2CbDMsjSWlmB7QP45K+ pox+Q12w3ZGqXQ== -----END CERTIFICATE-----Generated at Tue Nov 4 15:08:02 2025 by rpki-client