$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft File: NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft (raw, json) Hash identifier: 0sjkDHOHq35cV+94X+J2ZqvVnMrneyBFC/w4iuS+91E= Subject key identifier: 8C:AC:2B:19:E8:A2:71:F4:23:FB:96:CA:23:0C:AC:B3:17:F8:33:7E Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 0199FC21B3705D76C3D0A7E1E8B3BCD3EFD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft Manifest number: 1701 Signing time: Sun 19 Oct 2025 11:01:31 +0000 Manifest this update: Sun 19 Oct 2025 11:01:31 +0000 Manifest next update: Mon 20 Oct 2025 11:01:31 +0000 Files and hashes: 1: 4Kndf8f0K38NeByF4eDeojFEkWc.roa (hash: z9ZWxvxCc7vC5TAiLfa7y9gNN02jk+BIQEMSzkn78Bk=) 2: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (hash: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=) 3: 8sgH-ZOMo18VOXKP7ZiwbPqCqiQ.roa (hash: eGf/pzyBqq1cxIFxS42rOeSUvmat4xHxNvblptUlpg4=) 4: CSQPKu-qpPTqg1yhCPEmsJhRnzI.roa (hash: auSoLSfduR8C0x2bAUZMvWJdtjGO1f6pjFPhEJiTFRA=) 5: Fm18RFfmtw-ty_MOYt1iAF-NS08.roa (hash: pq2vFSrbuWCHpjKgD2s5D798cXhhJkM/C70Aaa/iCuA=) 6: GPRtp5xOkeL5cFbOcLZLwwHI9s8.roa (hash: qEFXixGocvZk8lkNUHp2R4rSCKUt6DKkNZt4rBzX0SY=) 7: HiKOjaGmDxpi59kezYj2Aw_UxJE.roa (hash: IDFiNaoIwOJrP6SVw5rUJ9NDJDF8ucwCpy8kzd1Ucqk=) 8: Lr0nKbirlPmBX-3lvJsCJOROKJM.roa (hash: TqdXd4s2N+H906Qbg6lObKToYZQaynILZEigcrAh59E=) 9: NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl (hash: bPGYczNiUM4U1odsPG1Cw6NcVu5Euj6h5aIQt9daSeI=) 10: VWhVpICVoAdzB9EQIkXWDcCWifs.roa (hash: QRblW0tqls+p82T8xFTpIjMYlVKizBoeE6qJKM11/3k=) 11: VxIXaWwLkBGkjZQeWWd_ibEhp60.roa (hash: QCpkMwaTbzamZ/SOTvV5UxFRlb2vNax+YKBEOMySN+E=) 12: ZilTqGeKBQ2tryG8q3trVBCr-kw.roa (hash: PwgBz8bW1BvrcChPP0zRLTeusRgOrK5lGOMisutfo94=) 13: bmgQpI-VIkGKEdb2NDjhfJ-ov18.roa (hash: MOydOwWb+ZNvRmMLEPCFgu1thwKEQGRA70pBvfHH5qM=) 14: e-v0jP0Yr1s-j_LETXIOOzdyLGk.roa (hash: xcWMYa3OgNb5AY/zol6hl7sqGF74VxIwNPjPwmEIM7U=) 15: fKVs2lzJco8yky1RgsvfRpsERwg.roa (hash: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=) 16: i9SX3nWo4NzvcKgFdy_Fb9U00JU.roa (hash: 1YuxocoriVhQ/l4n2Sas0LfPCL7SyxG7duq+UXS6TBU=) 17: lYSlQ-4feryLZZTaUJ-AJBOZotM.roa (hash: Z1Weo02vp6uD0aD+NKaCNak3b37ID56s/v4nECqj3gE=) 18: m0n-EeeEBvd94sdHj2oT-Qvcf9M.roa (hash: thErL0hsxuW8JBkWuUQgnCtldZunPMy1NfMos+CWV7s=) 19: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (hash: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=) 20: vzHyhh5HbyybH8e2L2p6WLWrTAs.roa (hash: pemGMurs9tSXdm3CozX4NApOqx3owIuQ7I2ySxitcuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:b3:70:5d:76:c3:d0:a7:e1:e8:b3:bc:d3:ef:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Oct 19 11:01:31 2025 GMT Not After : Oct 20 11:01:31 2025 GMT Subject: CN=8cac2b19e8a271f423fb96ca230cacb317f8337e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5d:6f:1f:35:db:29:04:5a:1b:aa:8a:ac:c3: 0b:ef:d5:4d:04:44:bb:52:a4:06:2f:1e:2d:68:64: 95:e1:fd:73:01:1b:f7:f3:71:5e:2d:29:aa:65:cb: d6:ac:74:b2:fb:b0:bf:75:31:46:87:ab:ff:ac:7a: 6c:88:c8:e2:2b:b7:e5:23:02:75:d6:ec:ae:02:4d: 89:9f:8a:24:48:76:de:56:c0:e5:d0:6c:50:85:dc: f4:4d:c1:c2:2c:d1:8b:49:31:db:8c:6c:a2:17:8e: 26:56:53:76:40:c7:fa:0d:ec:be:56:1d:a0:77:6c: d8:5f:5c:f7:ce:f9:37:79:03:82:e2:0a:bc:e6:d3: 5c:69:d1:48:09:41:b4:d4:9d:1b:7c:00:30:2e:0d: 27:38:1d:b3:f2:88:8d:40:4f:ba:4c:5c:ca:89:6f: 57:d3:c7:58:d5:31:69:84:ca:19:41:61:ad:14:35: 5c:3e:f3:82:c4:ec:27:4a:7d:e3:42:66:05:d2:d5: 08:bc:eb:9c:1a:21:a7:bd:fd:20:95:cb:65:99:4a: 13:e7:a9:bd:11:8c:e7:f4:bd:b8:52:ea:87:c4:f0: af:58:ce:88:de:9e:65:3b:d4:34:61:b3:a2:90:23: cd:a6:c7:51:da:76:66:13:64:72:5b:de:46:3c:f3: e0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AC:2B:19:E8:A2:71:F4:23:FB:96:CA:23:0C:AC:B3:17:F8:33:7E X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:90:58:d7:de:e1:87:24:93:65:1b:84:28:4b:80:b4:12:35: a6:d5:7d:1c:82:a4:04:91:92:7a:49:8a:05:be:58:06:34:6b: 42:d7:93:df:ac:b2:79:a9:e8:ff:34:88:45:8d:fe:9d:5c:ea: 90:1b:2b:36:63:8f:9e:55:bd:e9:6f:f3:f6:7c:63:6a:56:f8: 78:eb:77:68:82:eb:26:97:a4:f8:fe:4a:2f:1a:ca:01:f9:2f: 14:b3:73:52:07:46:1f:44:6b:95:f7:0c:f3:18:47:ed:a8:6d: 94:9f:8c:07:95:04:1e:4f:97:92:b4:7a:05:56:68:04:57:82: 71:b6:2f:b9:0c:79:c6:b6:f6:a4:42:bc:be:7e:ed:9e:ea:83: 1d:d5:c8:19:fe:e3:2a:41:00:63:47:19:c2:1a:5a:5b:9f:41: 77:22:7d:76:26:cf:f2:22:17:90:2d:f5:4f:12:51:12:ce:78: ae:17:82:49:0b:e9:fa:08:96:0f:09:39:53:9e:d5:ff:fb:34: f8:b8:ef:f6:e9:fb:56:35:49:dd:ca:20:11:47:c5:e2:b3:5b: af:2d:1f:34:56:67:ea:64:8d:b4:9a:98:f8:b7:90:2d:25:54: f3:c1:85:7e:4e:1d:72:ed:c1:0f:f4:e4:e2:d0:65:8d:dc:8d: 9c:0e:4d:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IbNwXXbD0Kfh6LO80+/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjUxMDE5MTEwMTMxWhcNMjUxMDIwMTEwMTMxWjAzMTEwLwYDVQQD Eyg4Y2FjMmIxOWU4YTI3MWY0MjNmYjk2Y2EyMzBjYWNiMzE3ZjgzMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7l1vHzXbKQRaG6qKrMML79VNBES7 UqQGLx4taGSV4f1zARv383FeLSmqZcvWrHSy+7C/dTFGh6v/rHpsiMjiK7flIwJ1 1uyuAk2Jn4okSHbeVsDl0GxQhdz0TcHCLNGLSTHbjGyiF44mVlN2QMf6Dey+Vh2g d2zYX1z3zvk3eQOC4gq85tNcadFICUG01J0bfAAwLg0nOB2z8oiNQE+6TFzKiW9X 08dY1TFphMoZQWGtFDVcPvOCxOwnSn3jQmYF0tUIvOucGiGnvf0glctlmUoT56m9 EYzn9L24UuqHxPCvWM6I3p5lO9Q0YbOikCPNpsdR2nZmE2RyW95GPPPg9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIysKxnoonH0I/uWyiMMrLMX+DN+MB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpBY197h hySTZRuEKEuAtBI1ptV9HIKkBJGSekmKBb5YBjRrQteT36yyeano/zSIRY3+nVzq kBsrNmOPnlW96W/z9nxjalb4eOt3aILrJpek+P5KLxrKAfkvFLNzUgdGH0RrlfcM 8xhH7ahtlJ+MB5UEHk+XkrR6BVZoBFeCcbYvuQx5xrb2pEK8vn7tnuqDHdXIGf7j KkEAY0cZwhpaW59BdyJ9dibP8iIXkC31TxJREs54rheCSQvp+giWDwk5U57V//s0 +Ljv9un7VjVJ3cogEUfF4rNbry0fNFZn6mSNtJqY+LeQLSVU88GFfk4dcu3BD/Tk 4tBljdyNnA5N4Q== -----END CERTIFICATE-----Generated at Sun Oct 19 17:56:40 2025 by rpki-client