$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft File: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json) Hash identifier: eAfegRRcxEPoJANR3lM1+Y3962kAGzSpSU/OXjURlPA= Subject key identifier: 03:FD:40:D2:D5:B9:9D:74:65:BE:26:3D:AF:66:BC:16:89:B1:CF:D3 Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Certificate serial: 0199FE7D908555756BB66E0749626907C6A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft Manifest number: 1302 Signing time: Sun 19 Oct 2025 22:01:05 +0000 Manifest this update: Sun 19 Oct 2025 22:01:05 +0000 Manifest next update: Mon 20 Oct 2025 22:01:05 +0000 Files and hashes: 1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=) 2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=) 3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=) 4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=) 5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=) 6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=) 7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=) 8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=) 9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=) 10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=) 11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=) 12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=) 13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: pl+0fNl9VHMvJo8LxtwGNcdXqTBlj14bSk0XlVUEs9k=) 14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=) 15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=) 16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=) 17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=) 18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=) 19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=) 20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=) 21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=) 22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=) 23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=) 24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=) 25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=) 26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:7d:90:85:55:75:6b:b6:6e:07:49:62:69:07:c6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7 Validity Not Before: Oct 19 22:01:05 2025 GMT Not After : Oct 20 22:01:05 2025 GMT Subject: CN=03fd40d2d5b99d7465be263daf66bc1689b1cfd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:e2:18:fe:a7:b4:3f:43:db:ba:8a:f8:46: 3b:db:a5:f7:81:a2:8e:4c:ee:08:13:ff:6d:65:54: 7d:38:d5:2d:09:f8:60:9c:ee:35:db:39:d0:a0:42: fe:0d:d1:1c:97:9e:a9:a3:11:d1:78:a8:0f:7d:22: c8:7c:c2:d7:80:9d:9c:cf:03:df:c6:e6:3d:b4:90: 1d:71:87:45:b7:69:48:ee:70:9b:ba:ce:75:99:31: 29:f2:fa:7a:6c:98:5a:81:21:11:8e:cb:f3:b4:59: bf:74:51:a9:84:af:e8:ab:cb:5c:39:9a:50:4c:b9: ce:83:7b:c4:06:a8:22:9a:b8:13:6e:04:9b:9d:a4: 7d:82:67:04:8b:0a:49:c0:b2:3c:5d:bc:0d:a2:c1: 97:15:ca:a9:8a:48:e6:03:cc:9a:b2:e5:ae:43:37: f3:2d:31:3c:61:7c:8d:55:ab:52:5e:43:67:80:f4: 05:90:87:e4:a3:db:fc:65:c6:6d:7e:d1:a3:78:26: a3:48:5e:93:dc:43:82:0c:f6:24:20:df:a8:6a:5c: 55:c6:57:a8:17:34:71:af:fe:9e:47:3b:1d:49:ac: a3:c9:f8:10:4f:05:88:de:db:dc:e5:e1:48:82:fa: 1c:b5:e2:e4:e7:6b:d6:eb:20:d3:bd:6c:f1:10:a6: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FD:40:D2:D5:B9:9D:74:65:BE:26:3D:AF:66:BC:16:89:B1:CF:D3 X509v3 Authority Key Identifier: keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:04:51:a5:64:2a:b2:bb:ae:77:91:25:be:30:81:dc:2c:25: e1:b8:32:d7:c8:f8:3d:e1:17:9f:67:d1:7b:20:7e:23:b5:13: 80:1a:b7:db:db:dc:f4:99:4f:dc:da:9e:57:dd:a3:2e:1d:52: bc:29:fc:37:ef:fd:c6:34:88:b9:54:45:4a:43:81:97:ad:a4: 01:13:fe:0e:8e:b0:6b:43:83:f8:48:0c:3e:43:e3:41:1a:89: 80:4d:e5:69:a8:b7:ac:41:b8:c0:40:ec:88:b1:d8:a8:26:3e: 1c:c0:27:15:b7:a0:a6:24:4c:2d:ea:e4:57:7e:36:3c:7e:34: e1:49:36:f1:f2:69:16:70:37:63:f1:35:21:d6:37:4b:c7:5c: 7f:79:d9:62:a8:12:a9:3b:36:b3:9d:ae:c8:8a:ae:b8:86:7e: 03:97:4e:70:57:2b:32:e7:de:a1:79:53:28:63:2f:f2:a5:09: 16:58:21:65:74:61:40:41:8e:54:f4:d4:3d:69:c4:cc:2b:98: 19:72:18:ae:9a:81:89:b5:8d:cc:b8:0e:e8:43:c1:13:40:3e: 59:99:06:c0:d4:e1:f8:3b:14:0f:7a:25:15:59:00:17:88:f1: 9d:8c:00:ee:8a:79:0b:97:d5:8e:c2:29:c3:dd:f1:c5:97:88: c1:55:09:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+fZCFVXVrtm4HSWJpB8apMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm MGI0ZjcwHhcNMjUxMDE5MjIwMTA1WhcNMjUxMDIwMjIwMTA1WjAzMTEwLwYDVQQD EygwM2ZkNDBkMmQ1Yjk5ZDc0NjViZTI2M2RhZjY2YmMxNjg5YjFjZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxTiGP6ntD9D27qK+EY726X3gaKO TO4IE/9tZVR9ONUtCfhgnO412znQoEL+DdEcl56poxHReKgPfSLIfMLXgJ2czwPf xuY9tJAdcYdFt2lI7nCbus51mTEp8vp6bJhagSERjsvztFm/dFGphK/oq8tcOZpQ TLnOg3vEBqgimrgTbgSbnaR9gmcEiwpJwLI8XbwNosGXFcqpikjmA8yasuWuQzfz LTE8YXyNVatSXkNngPQFkIfko9v8ZcZtftGjeCajSF6T3EOCDPYkIN+oalxVxleo FzRxr/6eRzsdSayjyfgQTwWI3tvc5eFIgvocteLk52vW6yDTvWzxEKbZwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP9QNLVuZ10Zb4mPa9mvBaJsc/TMB8GA1UdIwQY MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt ODU4ZGNlNTdmY2RiLzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwRRpWQq sruud5ElvjCB3Cwl4bgy18j4PeEXn2fReyB+I7UTgBq329vc9JlP3NqeV92jLh1S vCn8N+/9xjSIuVRFSkOBl62kARP+Do6wa0OD+EgMPkPjQRqJgE3laai3rEG4wEDs iLHYqCY+HMAnFbegpiRMLerkV342PH404Uk28fJpFnA3Y/E1IdY3S8dcf3nZYqgS qTs2s52uyIquuIZ+A5dOcFcrMufeoXlTKGMv8qUJFlghZXRhQEGOVPTUPWnEzCuY GXIYrpqBibWNzLgO6EPBE0A+WZkGwNTh+DsUD3olFVkAF4jxnYwA7op5C5fVjsIp w93xxZeIwVUJ0Q== -----END CERTIFICATE-----Generated at Mon Oct 20 02:45:54 2025 by rpki-client