$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft File: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json) Hash identifier: oihMXPBJ8rYn7DpfedoppwtXZ9xPuG/+V4QkrCs5XNk= Subject key identifier: B5:68:8F:77:56:3D:4D:49:7A:62:05:C7:2B:26:A2:00:2C:94:97:A1 Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Certificate serial: 0199FB0F0841BB187CBA5F705F4822E4F4F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft Manifest number: 16FF Signing time: Sun 19 Oct 2025 06:01:30 +0000 Manifest this update: Sun 19 Oct 2025 06:01:30 +0000 Manifest next update: Mon 20 Oct 2025 06:01:30 +0000 Files and hashes: 1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=) 2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=) 3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=) 4: FEemRqWNX5xhq2yBrzr1C3dcawc.roa (hash: zrzqLUFgS0O6VfPSR/q7YlCpjaLeDHcdItec7nZ4p/I=) 5: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=) 6: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=) 7: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: NrV6MenJiNJIEWBK0HY3hSq/deTww3GXfgJdX8elWNo=) 8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=) 9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=) 10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=) 11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=) 12: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=) 13: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=) 14: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=) 15: fCgmJ5doD3FbIucqbIpGMlmtVvM.roa (hash: SfDUMiHPovragI5UdBifWGkDZRcp8pAn1e8WMKiD3hU=) 16: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=) 17: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=) 18: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=) 19: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=) 20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=) 21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=) 22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0f:08:41:bb:18:7c:ba:5f:70:5f:48:22:e4:f4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3 Validity Not Before: Oct 19 06:01:30 2025 GMT Not After : Oct 20 06:01:30 2025 GMT Subject: CN=b5688f77563d4d497a6205c72b26a2002c9497a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:a3:e3:3f:42:ba:6f:5d:82:aa:fe:90:fc: 0d:c8:56:7f:75:34:6a:a2:41:5e:9f:f2:d4:0e:dd: 83:a3:9c:f9:16:9d:b1:1e:6c:e8:55:10:f9:62:13: a6:b4:6d:b1:71:46:cb:a7:3d:2f:e8:88:99:91:0e: a6:f6:71:a4:4c:e4:98:e8:2f:6f:e4:aa:6f:ed:f3: 9e:c3:af:29:1e:cf:c6:38:7a:1a:a5:35:4e:3f:b6: 58:4c:cc:9e:9f:3b:92:8a:a0:d4:24:d3:6e:38:e7: 4b:d8:78:4e:54:63:d3:75:5f:bc:bb:8c:0d:65:e1: cd:69:01:12:21:53:16:87:60:28:ab:6a:d4:d7:c7: d5:23:b4:62:b2:0e:a3:59:8d:00:96:0e:21:07:6f: 06:e4:8b:4b:32:70:4f:d6:56:3f:3e:6f:40:9c:32: cd:2f:ea:00:32:ac:cc:99:32:bd:56:68:e7:68:cf: f0:56:a3:89:3a:10:77:eb:0b:e3:ea:23:85:dc:4b: 5e:0c:54:b9:71:6b:03:82:10:21:11:2d:5c:eb:eb: 66:c3:95:0e:84:a6:69:96:71:d2:1b:ab:c3:6a:da: bc:71:c0:bb:ce:70:bb:39:c4:61:21:51:1a:c4:55: 12:e4:80:01:f8:1b:29:87:ca:95:33:a3:13:44:1d: ce:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:68:8F:77:56:3D:4D:49:7A:62:05:C7:2B:26:A2:00:2C:94:97:A1 X509v3 Authority Key Identifier: keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d4:9e:49:5d:cc:ff:e2:bd:f5:2c:8c:b7:b0:fe:57:92:6f: 1e:17:d7:74:5b:81:88:2d:60:85:e9:cc:34:fd:f0:23:d4:00: 04:68:ac:7f:34:21:9f:e3:54:62:f2:92:92:30:01:a5:b5:8b: a1:b2:ee:1a:71:0e:fd:8b:e8:df:6b:a3:e1:90:d9:2a:2b:c0: 64:96:6f:54:92:ea:b7:12:4b:bb:69:b2:c6:e3:fc:9b:82:ea: ed:9d:1f:30:b1:4a:64:75:bd:1a:d5:25:59:85:60:f7:13:8a: 3f:af:54:d9:ba:e9:9e:e7:db:0e:72:76:11:8b:f8:d6:b2:71: 82:35:41:9b:63:8d:c6:f6:3c:14:3a:47:f4:cf:e5:a2:8c:d0: d8:5a:65:2c:c1:c7:a5:f8:97:ac:9f:9b:96:01:af:a2:1e:4c: d1:39:4b:49:f8:78:aa:5e:ae:b9:c1:d3:46:8f:a8:71:62:21: 7c:17:83:b6:4d:ae:d5:8c:26:9f:5f:60:40:d2:28:ab:c1:99: 27:79:3c:f0:b1:5f:83:66:3a:76:55:d4:ae:e9:ed:01:dc:9e: 38:a6:53:b9:05:01:7d:70:8d:fb:dc:5a:9e:7d:5d:76:97:20: e4:1a:3a:1d:66:b7:e4:a0:59:8e:1e:96:91:0f:84:19:b8:8f: f6:05:3f:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7DwhBuxh8ul9wX0gi5PT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYwZjVmZjYyMGUwZGI1MzExZjY0NzM2OTA5OTczYWM2 MGY2ZjMwHhcNMjUxMDE5MDYwMTMwWhcNMjUxMDIwMDYwMTMwWjAzMTEwLwYDVQQD EyhiNTY4OGY3NzU2M2Q0ZDQ5N2E2MjA1YzcyYjI2YTIwMDJjOTQ5N2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRSj4z9Cum9dgqr+kPwNyFZ/dTRq okFen/LUDt2Do5z5Fp2xHmzoVRD5YhOmtG2xcUbLpz0v6IiZkQ6m9nGkTOSY6C9v 5Kpv7fOew68pHs/GOHoapTVOP7ZYTMyenzuSiqDUJNNuOOdL2HhOVGPTdV+8u4wN ZeHNaQESIVMWh2Aoq2rU18fVI7Risg6jWY0Alg4hB28G5ItLMnBP1lY/Pm9AnDLN L+oAMqzMmTK9VmjnaM/wVqOJOhB36wvj6iOF3EteDFS5cWsDghAhES1c6+tmw5UO hKZplnHSG6vDatq8ccC7znC7OcRhIVEaxFUS5IAB+Bsph8qVM6MTRB3OTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVoj3dWPU1JemIFxysmogAslJehMB8GA1UdIwQY MBaAFDWfD1/2IODbUxH2RzaQmXOsYPbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvTlo4UFhfWWc0TnRURWZaSE5wQ1pjNnhnOXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9SeSV3M /+K99SyMt7D+V5JvHhfXdFuBiC1ghenMNP3wI9QABGisfzQhn+NUYvKSkjABpbWL obLuGnEO/Yvo32uj4ZDZKivAZJZvVJLqtxJLu2myxuP8m4Lq7Z0fMLFKZHW9GtUl WYVg9xOKP69U2brpnufbDnJ2EYv41rJxgjVBm2ONxvY8FDpH9M/loozQ2FplLMHH pfiXrJ+blgGvoh5M0TlLSfh4ql6uucHTRo+ocWIhfBeDtk2u1Ywmn19gQNIoq8GZ J3k88LFfg2Y6dlXUruntAdyeOKZTuQUBfXCN+9xann1ddpcg5Bo6HWa35KBZjh6W kQ+EGbiP9gU/XA== -----END CERTIFICATE-----Generated at Sun Oct 19 15:11:25 2025 by rpki-client