$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: A+J/F0+tB3oJ/6Gr9tqTMdbjtWCcijMHALp8/drLfFQ= Subject key identifier: 96:71:D0:65:67:C9:43:66:8C:82:36:0B:68:F1:B9:11:07:0C:3D:81 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 0199FBEBFC8C52AFF898989BCAD1693DEBD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 141D Signing time: Sun 19 Oct 2025 10:02:50 +0000 Manifest this update: Sun 19 Oct 2025 10:02:50 +0000 Manifest next update: Mon 20 Oct 2025 10:02:50 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: 5qeMd96yTIIGdZ0LWZ9L4SuYq/a19V0qqhIF9gpsYTE=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 10:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:eb:fc:8c:52:af:f8:98:98:9b:ca:d1:69:3d:eb:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Oct 19 10:02:50 2025 GMT Not After : Oct 20 10:02:50 2025 GMT Subject: CN=9671d06567c943668c82360b68f1b911070c3d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:88:77:aa:10:6a:da:f4:b0:7d:a2:4c:f9: 13:63:6a:7b:23:e9:56:35:49:06:a0:f2:91:e7:17: 0f:38:5e:b8:00:dd:ab:f8:f9:68:fa:d1:b3:33:27: 18:e0:c1:bd:82:62:86:a2:2c:c6:bf:3b:2b:65:b4: 7c:b2:77:6e:91:49:af:73:89:57:6c:7c:2c:06:78: 49:aa:2a:a9:9e:f6:e9:9d:82:74:46:ad:73:16:44: 01:4c:ad:4d:c1:fd:4e:a6:84:c1:b8:4e:b5:dd:5a: 5d:0b:b6:34:ef:fb:65:86:10:2e:9a:ed:51:31:c4: b8:47:65:99:64:f9:db:68:6a:f0:cd:01:6f:97:14: c1:2b:f0:bb:64:85:a7:76:be:c6:46:4f:1b:31:e5: 1b:70:50:98:93:4b:f4:cb:b5:ae:25:fb:75:86:d9: 5e:01:32:fb:d7:d0:59:34:54:1c:76:ec:b4:60:57: 82:80:c0:32:61:30:90:ce:1d:1b:09:c9:7d:34:f5: 84:fb:22:df:aa:ed:37:6a:cf:2d:40:a3:96:e0:67: 9b:85:8d:9a:68:62:b7:e3:60:0e:88:ef:ff:0e:87: 6b:68:4a:af:19:64:e4:f1:fc:ef:70:55:43:24:b2: 69:34:8b:c8:90:c0:be:03:9f:e3:0a:91:b8:ee:19: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:71:D0:65:67:C9:43:66:8C:82:36:0B:68:F1:B9:11:07:0C:3D:81 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:9e:f9:75:0c:fd:5c:fa:0d:45:23:df:19:f1:8a:12:ce:d8: 88:71:45:36:9d:ec:13:22:0e:83:cb:79:14:b8:34:f7:fd:d5: 93:eb:00:28:b3:c7:bd:2d:42:fa:5f:13:2e:ab:5e:93:a9:90: a0:68:24:05:f7:38:b1:5d:51:6a:8d:7a:ff:cf:97:d4:54:7d: 50:b9:21:5a:a7:bb:f8:9f:d8:d2:22:56:34:7f:c5:91:0d:6f: 82:5d:e8:83:b1:93:4f:41:14:88:3c:93:5b:8d:47:cb:a5:ce: ae:83:b9:e2:80:07:c8:54:2f:db:cf:23:7d:9f:1e:1f:1e:5e: 45:04:7a:41:6b:7f:ce:95:42:19:b6:37:75:bc:b1:9b:bb:22: a0:b7:cd:57:34:ba:b8:d0:45:f5:35:77:9b:fa:f1:38:d2:67: f6:18:0e:86:ff:c1:db:5a:f4:df:ce:3e:51:84:d5:d6:a9:c3: 45:7c:82:cb:01:c8:62:aa:24:7e:d1:fa:5c:33:2a:ff:41:49: da:cb:c5:a6:8c:4e:19:6b:fd:36:d9:20:4e:e1:f4:30:e2:4b: 3f:9c:35:a1:49:55:66:4c:b9:81:64:2f:42:27:38:32:57:58: 4a:3c:10:2d:30:a2:82:d2:f3:1b:5f:a7:d8:1d:5d:5d:16:1b: 6b:65:03:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn76/yMUq/4mJibytFpPevWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUxMDE5MTAwMjUwWhcNMjUxMDIwMTAwMjUwWjAzMTEwLwYDVQQD Eyg5NjcxZDA2NTY3Yzk0MzY2OGM4MjM2MGI2OGYxYjkxMTA3MGMzZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx6Id6oQatr0sH2iTPkTY2p7I+lW NUkGoPKR5xcPOF64AN2r+Plo+tGzMycY4MG9gmKGoizGvzsrZbR8sndukUmvc4lX bHwsBnhJqiqpnvbpnYJ0Rq1zFkQBTK1Nwf1OpoTBuE613VpdC7Y07/tlhhAumu1R McS4R2WZZPnbaGrwzQFvlxTBK/C7ZIWndr7GRk8bMeUbcFCYk0v0y7WuJft1htle ATL719BZNFQcduy0YFeCgMAyYTCQzh0bCcl9NPWE+yLfqu03as8tQKOW4GebhY2a aGK342AOiO//DodraEqvGWTk8fzvcFVDJLJpNIvIkMC+A5/jCpG47hlxUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZx0GVnyUNmjII2C2jxuREHDD2BMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ75dQz9 XPoNRSPfGfGKEs7YiHFFNp3sEyIOg8t5FLg09/3Vk+sAKLPHvS1C+l8TLqtek6mQ oGgkBfc4sV1Rao16/8+X1FR9ULkhWqe7+J/Y0iJWNH/FkQ1vgl3og7GTT0EUiDyT W41Hy6XOroO54oAHyFQv288jfZ8eHx5eRQR6QWt/zpVCGbY3dbyxm7sioLfNVzS6 uNBF9TV3m/rxONJn9hgOhv/B21r0384+UYTV1qnDRXyCywHIYqokftH6XDMq/0FJ 2svFpoxOGWv9NtkgTuH0MOJLP5w1oUlVZky5gWQvQic4MldYSjwQLTCigtLzG1+n 2B1dXRYba2UDxw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:56 2025 by rpki-client