$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft File: NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json) Hash identifier: 7tXc32n4y5uvFbY7eUze4M/HbtjuCFHSPuk1yA0Q/zk= Subject key identifier: 86:1C:5E:85:4C:72:DC:4D:76:B4:2A:1B:D8:0B:70:B6:77:C9:F0:D9 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 0199FB7CC6A7FD11392361676B40745FC0DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft Manifest number: 16D9 Signing time: Sun 19 Oct 2025 08:01:22 +0000 Manifest this update: Sun 19 Oct 2025 08:01:22 +0000 Manifest next update: Mon 20 Oct 2025 08:01:22 +0000 Files and hashes: 1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=) 2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=) 3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=) 4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=) 5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=) 6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=) 7: Fd_HUYvmrfFxU0xnwaPyXbD6xtg.roa (hash: b876kIBlXdXsqGX/hdy6VCgbkX80WbO1c9Al1yyM/IY=) 8: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=) 9: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: pv4IWzUcIVA619fhMBGZ2VxF4baBgVnVCQKod9Ok2sk=) 10: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=) 11: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=) 12: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=) 13: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=) 14: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=) 15: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=) 16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=) 17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=) 18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=) 19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=) 20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:7c:c6:a7:fd:11:39:23:61:67:6b:40:74:5f:c0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Oct 19 08:01:22 2025 GMT Not After : Oct 20 08:01:22 2025 GMT Subject: CN=861c5e854c72dc4d76b42a1bd80b70b677c9f0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:7b:a3:d6:c3:1d:38:71:f8:c9:17:94:14: c9:47:80:8d:e3:13:0a:8e:2d:a2:e1:ae:21:07:c5: 1e:be:86:2a:16:2f:3f:53:37:ed:33:0e:7a:a4:1f: cf:99:75:da:80:13:6a:04:68:d5:85:4a:b1:1f:ed: 16:bf:ed:13:e9:a3:5b:2d:d7:fb:b6:86:d1:ec:70: 85:51:83:27:12:0c:c6:e4:37:f1:d8:b8:01:3e:aa: 22:02:86:33:1d:f3:75:08:57:22:7e:6a:b5:85:03: bb:53:a5:64:68:c4:2c:89:22:17:54:f8:17:74:b6: 55:7c:3d:99:c5:9c:46:bf:a5:f3:79:04:2a:82:a8: b3:94:99:3b:af:50:6e:70:ee:40:a9:72:68:76:25: 0a:98:7f:7c:b0:57:e9:06:e0:4c:48:00:ce:25:fa: af:06:91:0d:86:96:ec:b4:09:d0:e8:91:25:13:a3: fd:fb:d3:74:28:e8:74:5e:44:49:cf:c2:49:7d:98: 13:23:cd:70:de:43:65:89:6f:dd:83:34:57:8e:04: f5:52:64:44:0c:55:00:0e:de:a0:fc:e5:dc:5b:50: 6c:43:9d:4d:fc:81:61:b3:0e:c0:71:bc:7d:f5:d1: 72:80:55:de:74:de:90:54:6d:11:21:e4:e9:63:68: 48:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:5E:85:4C:72:DC:4D:76:B4:2A:1B:D8:0B:70:B6:77:C9:F0:D9 X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:32:fc:09:34:26:c7:61:fd:4b:64:10:27:5e:95:d1:f6:7b: 00:34:76:52:96:07:60:95:03:f7:c6:5a:2a:08:36:16:e6:3a: 71:98:90:c6:f2:e7:b0:94:d5:e6:a4:cd:f4:cf:b6:c8:ff:1b: 24:bf:b8:16:ee:9f:fc:d2:6e:35:08:6e:fc:47:ef:52:72:5d: 95:63:64:df:23:c8:57:f9:6e:8a:21:53:96:15:2c:dc:35:52: cf:e6:78:c6:53:92:fc:9c:63:fe:11:38:b5:d7:d9:ba:66:33: 2c:43:5d:94:64:d8:80:cc:80:67:59:37:b8:0f:f2:60:0e:6f: ba:b7:26:82:f3:7e:3b:a1:eb:0c:d6:70:ce:4a:c4:24:2c:72: e7:a2:43:d2:95:4d:57:b2:f1:80:13:a3:d5:da:74:13:22:17: 5b:37:eb:88:75:07:20:72:89:b9:26:25:f8:49:40:16:e3:0a: 7a:af:63:96:1e:82:50:44:e9:a4:ec:bf:d4:b7:70:20:6f:38: fe:49:db:61:25:89:d0:22:98:cc:6a:7f:f2:51:db:06:41:6b: bf:5b:58:7a:ae:38:3f:66:cc:fb:32:02:01:f4:0b:eb:ee:73: e1:54:8c:49:50:73:c9:b6:98:d6:3b:b3:75:47:0f:3a:c7:7a: 52:19:d6:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7fMan/RE5I2Fna0B0X8DdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjUxMDE5MDgwMTIyWhcNMjUxMDIwMDgwMTIyWjAzMTEwLwYDVQQD Eyg4NjFjNWU4NTRjNzJkYzRkNzZiNDJhMWJkODBiNzBiNjc3YzlmMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD97o9bDHThx+MkXlBTJR4CN4xMK ji2i4a4hB8UevoYqFi8/UzftMw56pB/PmXXagBNqBGjVhUqxH+0Wv+0T6aNbLdf7 tobR7HCFUYMnEgzG5Dfx2LgBPqoiAoYzHfN1CFcifmq1hQO7U6VkaMQsiSIXVPgX dLZVfD2ZxZxGv6XzeQQqgqizlJk7r1BucO5AqXJodiUKmH98sFfpBuBMSADOJfqv BpENhpbstAnQ6JElE6P9+9N0KOh0XkRJz8JJfZgTI81w3kNliW/dgzRXjgT1UmRE DFUADt6g/OXcW1BsQ51N/IFhsw7Acbx99dFygFXedN6QVG0RIeTpY2hI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYcXoVMctxNdrQqG9gLcLZ3yfDZMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjL8CTQm x2H9S2QQJ16V0fZ7ADR2UpYHYJUD98ZaKgg2FuY6cZiQxvLnsJTV5qTN9M+2yP8b JL+4Fu6f/NJuNQhu/EfvUnJdlWNk3yPIV/luiiFTlhUs3DVSz+Z4xlOS/Jxj/hE4 tdfZumYzLENdlGTYgMyAZ1k3uA/yYA5vurcmgvN+O6HrDNZwzkrEJCxy56JD0pVN V7LxgBOj1dp0EyIXWzfriHUHIHKJuSYl+ElAFuMKeq9jlh6CUETppOy/1LdwIG84 /knbYSWJ0CKYzGp/8lHbBkFrv1tYeq44P2bM+zICAfQL6+5z4VSMSVBzybaY1juz dUcPOsd6UhnWzA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:07:05 2025 by rpki-client