$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft File: N1GNGAkjp_PABlPsErxwK5WquQc.mft (raw, json) Hash identifier: 8X80AZi6Qcq3qDNRN9eSMNXiU/ZhZmMueNbbVRoRkSU= Subject key identifier: 8E:7D:62:A5:00:65:11:B8:13:2C:42:E6:E0:82:18:49:EE:A8:15:F1 Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019A503E61C458D00E7FA866E272E61EA129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft Manifest number: 1722 Signing time: Tue 04 Nov 2025 19:00:56 +0000 Manifest this update: Tue 04 Nov 2025 19:00:56 +0000 Manifest next update: Wed 05 Nov 2025 19:00:56 +0000 Files and hashes: 1: 2Mh_TFJedBaslxcz94noGA2Qytc.roa (hash: i1Zh/xLaGj0PGJC85bKgW/jpsDzYBRvPQzKlGbY0Jqc=) 2: 2co2CWHyAEWUlmkNDLU4f8jPJQg.roa (hash: 46ReLpCYncpSiDnrC/4ChfPtfL50ZK29XsrvXazEWSQ=) 3: 3-lCwXyhs7gijBnZJRUSuPJM_Pw.roa (hash: YQ/z+1V67b2+kazhrsP+LNf7uo8cgh4S0hNLSnP+da8=) 4: 3J7eyLG1r0nHWXtJOZKA52KcUTg.roa (hash: Qw/zK727tZ2i+s7UgVjOi/B+jPQRYCV/ax9zZA4jS0U=) 5: 4A0zWJ4NV28Aj54h6zY-IluB6Do.roa (hash: rfedrAjMllNAlqGJ74GuEiVJe7oNxWX2+pz2+IYq280=) 6: 6EHcMUdIhjJoUv7tuo2VFFavj1I.roa (hash: sOTV8LIX47DYFqhd5/wOFwCvjRBSj+Fylzp4Tl0JsxE=) 7: 8187awHmnLaq2Hx0gBdgfAzL-UI.roa (hash: EvBmaW5Fp3fVZ/1i18IIju/5N2XLJrzEU8mo3jrLMqw=) 8: 8erVUpFu_SWhnDZ0_l1Vtu2sHPw.roa (hash: 9WQMcrHYwxyep2DR6oFwYC8VDui4KgN0q3L7C72HEVI=) 9: 9kL7_n6oe34Z8vviGq3YICiBLSs.roa (hash: Qoh6yw8Pp+9Lcz6TEmDxMm/MIOz5l9NoByWV46axgEE=) 10: N1GNGAkjp_PABlPsErxwK5WquQc.crl (hash: VcrA0QPNsaQaP933t2HXIpmfDfbMjgH6Ta9DE95Vqqo=) 11: NfqSWbJdJXxqFxN8cBz_Qs2JCHY.roa (hash: lveW/dgSbzQIqR2OETitUQrTBS86brQw8N0Uo5SrheM=) 12: SQyeIvS9IJP7UtMmTGW_fvUq864.roa (hash: sgFHxWCX6mlZtvFOm2lRUSak5BQz5+xj75/uzN5NnSo=) 13: Sl3rfOJQgGeoDh7qWVaOpWCVQK0.roa (hash: 72TNI/so/3OBFMFfxfO7UTaQUiPfe9aZZStTUL4m1WM=) 14: X0DytevtLn_tD-UIlvCY6CSOdKg.roa (hash: Th1+P8gx4BoI3AyiSLEceUjwPmG4/h5mNLTNI2Ql9CI=) 15: X0jFPtY61yWZFoZOpWbF-Hyf-qQ.roa (hash: 2XoYX0A8zLDob5+URwsqSsqDCm+UXdsFMFbNsUpLWeo=) 16: _X4xd1Q30ZWzt-lph0b6j7vMA_k.roa (hash: uHtxYdqdcHIDWS2VWJdQOofw/WLe+SAxyZ6U6AhTufo=) 17: c_hgrXwWiFyz3nd6PwDsHDYvJRc.roa (hash: 6BkjtBIpdAnW6zBv64Dj5gD6rhB2Up+LHmHdfpuN1D4=) 18: hR4dKEJ2ZMW9mv8zjaNAAKFA_Vk.roa (hash: CKCvaIuVw4us1yulbZrSQYv83SdDJvRhRtZIcvdKG4w=) 19: hYdlQZoJApaUrpLPSwRpF_Alth8.roa (hash: lAjo+84ZROUk28Kp0cwaSeeA7ssn2GU1agYTVX8INPc=) 20: hmcTq0ht51TAQ68lvBQEzSS9f_g.roa (hash: 8ukBXow/FuwryekZQZF1ufn8k0YeF/kCXA4kwvSaupY=) 21: lLOh6luqTBaLKuTZsKHpgvacIKo.roa (hash: FnwAvD4mCWsVQIEAvPejFhFzmC8kaFOk2uZReTeDf58=) 22: lzlK41JQdrC3BzutFzinXaQwgTI.roa (hash: rW30YIBySW9XT5Gur57+peTfdydQoKgfK8aumZY63vE=) 23: pYif-zRR213byCwtfAGYu1zMZeM.roa (hash: UUApk8H7qjC7v+fLxh+GD5xcNm7fiKpLQIro+hZI89M=) 24: szzET8_PcbYHrkv0DjCX2K6Wsnc.roa (hash: /zyW+8rn7EZekTQXTlSNLl868eRIf0RZNeXPcokMeG4=) 25: trnquIeGzcsfUn-ICQYKFCSwTXU.roa (hash: CEyHyDW+VNifYLkT7DvsOiT1GMhHaNzGkMztPVekgpc=) 26: uFdxf9d4cK91TAE3KExcKlZ4dHk.roa (hash: V0SLGkXn3ckVtmcHZZRHQ7llTtRwmxdYvYnh4fPZT7A=) 27: ujLBX7H6OIZKRstz5qmvgA1EITQ.roa (hash: mWYbMp79+CfYCZ0EUKPeEq7x+MnCVwTn2DiLjbeMu9Q=) 28: x-aWmx9xt3UlN8LTKHOaep8nb1E.roa (hash: URKvcIolbNVwyMOId7LzopRA4aL+b5mPWmLF3PC5lbw=) 29: yG32tlHODIhV5vCLTDAj-FshTBg.roa (hash: PYArFpTe7F7o6/CCQVcEtf2E3kR9UBX3etNSz7nmqCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:50:3e:61:c4:58:d0:0e:7f:a8:66:e2:72:e6:1e:a1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Nov 4 19:00:56 2025 GMT Not After : Nov 5 19:00:56 2025 GMT Subject: CN=8e7d62a5006511b8132c42e6e0821849eea815f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:15:04:e6:e5:5f:fa:fe:53:33:c6:fa:8c:81: 72:9b:da:e8:13:5d:5d:dc:62:88:2c:a0:61:54:44: 0a:36:71:25:49:be:9e:17:dc:36:31:f2:a4:99:3c: 72:a3:68:ba:0a:a2:aa:3b:ea:70:91:fa:d3:e8:7d: 95:69:c1:52:dc:3a:56:e3:46:b6:da:5d:7c:f6:e5: 2e:bf:a0:ac:19:f1:16:94:4f:3d:8d:9b:cf:fa:06: ca:f2:27:19:6e:a8:0e:2d:6b:66:47:5b:e0:92:4f: 88:06:c7:cb:6c:fc:1a:15:f3:53:e1:e5:d6:bd:d9: 44:a6:6f:b1:a8:84:cb:07:3c:70:ee:d1:59:08:88: 87:63:96:d1:c7:97:56:e5:c7:58:d9:b9:37:cb:08: 8f:db:2c:c0:a7:66:7d:5e:d7:a3:15:ac:ac:a2:16: 20:7c:6a:db:cc:b8:d9:f8:b0:2d:7a:af:61:f4:e2: f3:23:93:95:cd:62:33:32:2e:4a:f8:24:7f:d6:19: a6:40:f4:fc:f6:2f:18:9b:12:57:07:fb:d4:74:a2: 5f:6b:3a:ba:0a:f5:8f:c9:6c:f8:4d:10:0a:99:8e: bd:61:10:8d:ca:ba:82:ed:bd:12:76:51:db:6d:72: f5:65:97:95:4a:1c:22:d2:3c:5d:49:f2:bb:1e:1c: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7D:62:A5:00:65:11:B8:13:2C:42:E6:E0:82:18:49:EE:A8:15:F1 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:61:4d:f5:65:a8:3a:ed:8c:c6:b1:56:9c:71:ad:64:dd:ff: f2:6e:e7:e9:fc:aa:06:33:2a:8f:50:84:9a:5a:bc:8c:86:c8: de:86:57:23:0f:3f:40:38:37:22:3d:7f:a8:15:50:c8:4d:7f: be:19:40:25:aa:d1:d8:f4:bd:d7:40:08:57:62:27:a0:b7:6a: 1a:11:28:75:74:b1:e2:64:2a:00:ca:90:92:1c:e2:fc:7f:d7: 2d:35:c5:a2:5d:f5:f7:c6:bd:56:ee:cd:c2:14:39:a9:f8:ab: 75:b5:67:3f:08:1b:42:3a:32:4d:63:56:b1:14:d3:e3:33:27: c0:b9:17:a6:69:5e:36:cd:81:13:38:9c:b3:ed:25:d7:9d:a4: c8:20:ea:a0:9f:d2:f6:fb:06:88:e0:fc:72:f4:d3:fc:5e:f5: 60:1f:52:bb:28:b4:6a:cd:c8:81:11:3a:ef:cc:dd:ad:c9:50: 12:39:a8:93:07:08:6c:d2:0b:63:7d:68:e6:9b:ba:d6:89:0e: 10:12:a6:98:cb:2c:81:f1:16:3d:81:5b:fe:30:b6:51:4c:0c: cd:b9:ee:ea:df:42:0f:e1:15:8a:6c:2d:c8:5d:67:ae:0e:93: ec:dc:19:35:73:7f:e4:56:4e:8b:35:88:bd:43:b7:8a:06:7b: 77:95:d9:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpQPmHEWNAOf6hm4nLmHqEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjUxMTA0MTkwMDU2WhcNMjUxMTA1MTkwMDU2WjAzMTEwLwYDVQQD Eyg4ZTdkNjJhNTAwNjUxMWI4MTMyYzQyZTZlMDgyMTg0OWVlYTgxNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BUE5uVf+v5TM8b6jIFym9roE11d 3GKILKBhVEQKNnElSb6eF9w2MfKkmTxyo2i6CqKqO+pwkfrT6H2VacFS3DpW40a2 2l189uUuv6CsGfEWlE89jZvP+gbK8icZbqgOLWtmR1vgkk+IBsfLbPwaFfNT4eXW vdlEpm+xqITLBzxw7tFZCIiHY5bRx5dW5cdY2bk3ywiP2yzAp2Z9XtejFaysohYg fGrbzLjZ+LAteq9h9OLzI5OVzWIzMi5K+CR/1hmmQPT89i8YmxJXB/vUdKJfazq6 CvWPyWz4TRAKmY69YRCNyrqC7b0SdlHbbXL1ZZeVShwi0jxdSfK7HhzUiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI59YqUAZRG4EyxC5uCCGEnuqBXxMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWFN9WWo Ou2MxrFWnHGtZN3/8m7n6fyqBjMqj1CEmlq8jIbI3oZXIw8/QDg3Ij1/qBVQyE1/ vhlAJarR2PS910AIV2InoLdqGhEodXSx4mQqAMqQkhzi/H/XLTXFol3198a9Vu7N whQ5qfirdbVnPwgbQjoyTWNWsRTT4zMnwLkXpmleNs2BEzics+0l152kyCDqoJ/S 9vsGiOD8cvTT/F71YB9Suyi0as3IgRE678zdrclQEjmokwcIbNILY31o5pu61okO EBKmmMssgfEWPYFb/jC2UUwMzbnu6t9CD+EVimwtyF1nrg6T7NwZNXN/5FZOizWI vUO3igZ7d5XZdA== -----END CERTIFICATE-----Generated at Tue Nov 4 20:43:00 2025 by rpki-client