$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: Yjw/BzizoEryY2+zVlQgpM/d2PiH7MpJNbsP51A2QEc= Subject key identifier: C1:B6:FE:BF:59:81:7F:A8:DE:DF:18:55:BD:52:60:D8:53:1B:47:DD Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 01A16C7FF976F017BE5364351874196043CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 17D7 Signing time: Sat 24 Oct 2026 06:01:28 +0000 Manifest this update: Sat 24 Oct 2026 06:01:28 +0000 Manifest next update: Sun 25 Oct 2026 06:01:28 +0000 Files and hashes: 1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=) 2: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 3: 0ktKC-f4nDyI1i5cUIWyitRoyGM.roa (hash: pRXCJVbRDGRpG1mXoJ+u7IH5zOUK6pPz7zPKHQVprAA=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 6: EOLDzUvXAvh5SLRYdfXCIeQEs5Y.roa (hash: mjKUq3coahQ3IfA1rnEImIZLxnr8LwSHjRCQitgeHJA=) 7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 8: Hq7KSfGbAabjKZnXngUy09CKrlo.roa (hash: iLEIXofURIxZfA42GaocsCdFXbCIkXKJ+whds6C0PiU=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: MTfYuDupOZ8EKCi-cknXFTLRkO0.roa (hash: RTLFO/MqJcOk7O9hGvJVoHZCD/NBbtH1miZAgX+NBmY=) 13: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: +6WvV4K/4vE7i9hf/QFI61l6e5HIkwCiwCMKsScSGOY=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: U0WYCTLb3BL8Dcqp9joVtMgVw-g.roa (hash: p+ru4cW+r6HSaCaeHZW8AaCBmqzOtYP77c4DAVcoILk=) 16: UWRpSa8c3Oh0mUYHXzQ6Q0qiIEs.roa (hash: 7iN0psfk1zyhVafop58DDcr20Feix7iaz6X07bxtzdE=) 17: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=) 18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 19: Ytt0jYNmkblrHESNXtlptNtOzDw.roa (hash: TMGwUiyiBkKlSglO5vEWcjFMC3nFicpzZMzW+qYVWSQ=) 20: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 21: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 22: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 23: ndjowxfAoyYeMp0r3Sv0cUgWMrc.roa (hash: t3U5a9jeFTpwLqazJteiTXIy8kMtT9VQPKdjkLgNQ/w=) 24: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 25: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=) 26: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 04:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6c:7f:f9:76:f0:17:be:53:64:35:18:74:19:60:43:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Oct 24 06:01:28 2026 GMT Not After : Oct 25 06:01:28 2026 GMT Subject: CN=c1b6febf59817fa8dedf1855bd5260d8531b47dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:d4:3d:e3:3f:91:a6:71:82:13:c4:93:e5: 74:77:08:56:08:96:0c:81:d8:85:b6:57:8e:40:80: 31:3e:49:a3:80:f0:01:1f:7b:b0:82:a5:db:23:ea: 5f:4e:e9:d8:29:d2:1b:b7:70:b1:59:ae:c1:ed:04: ad:3c:59:e5:4f:99:e9:05:2f:3a:62:6c:ea:1e:4d: 38:f2:a4:50:f7:5a:bc:94:e4:47:4f:35:77:09:17: d4:13:c2:03:47:68:be:ce:a2:aa:2c:12:af:e9:e1: ae:02:77:95:a7:e4:c7:c3:39:a8:02:61:85:c5:e0: a3:a9:89:eb:0c:71:ed:a8:96:8f:f2:54:ac:f7:fe: f8:7b:94:b4:ec:eb:5b:3d:bb:60:e7:6b:f2:87:4b: a7:ab:a1:51:de:07:10:e4:e3:75:43:da:c8:c3:5e: bb:46:b8:01:93:20:1e:70:8a:17:86:2e:e9:b0:9e: 29:28:50:d3:97:ed:34:b0:4b:9b:84:10:ad:bc:55: 75:d6:51:04:b7:8f:09:4f:8a:b0:19:54:73:b3:3a: 80:5a:9f:86:a8:28:8e:04:84:0b:9c:dd:f2:7b:cb: ca:8f:c6:96:da:82:9b:0c:5d:de:5c:4e:d6:da:b9: 72:70:9c:80:23:19:3b:58:b6:7b:7a:ee:e1:56:77: 70:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B6:FE:BF:59:81:7F:A8:DE:DF:18:55:BD:52:60:D8:53:1B:47:DD X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:01:47:ad:68:e2:a2:f4:2c:7d:64:89:92:30:de:2f:b9:f1: 91:70:3c:37:2d:82:e9:8e:df:6f:e8:9c:62:25:84:dc:ca:01: f6:c4:f1:d4:6e:c9:f5:f4:72:69:b3:c5:54:c2:38:9a:9a:6e: 5d:ad:58:02:c1:83:bc:29:ee:c5:c7:f9:ee:4f:0e:8a:66:ff: ed:c0:fd:40:a5:8d:6c:28:94:c9:3e:73:29:9d:1d:06:c4:d6: 2d:f9:c3:31:89:2a:01:19:ad:b9:f4:a2:35:be:68:4b:e2:45: 71:06:e2:a7:e7:eb:4b:ad:54:bf:78:2f:f6:82:26:89:4b:2b: 1b:94:74:91:b2:37:d7:29:c4:87:66:a1:52:5a:b7:af:e8:cd: fa:9f:2a:29:c4:f8:02:be:3b:63:c6:f5:8b:ed:ea:98:4c:c0: f4:ae:c4:ec:34:bc:40:bd:ee:3e:f5:4f:89:5e:c6:bd:38:36: aa:22:ec:37:49:14:15:fa:af:63:e0:2c:28:96:ee:85:41:72: cc:0c:28:a2:ce:e8:89:d3:6d:5f:af:45:61:f5:5f:8b:e8:cb: f8:fb:72:90:15:a0:7a:67:35:28:0a:49:73:4b:bd:cd:6f:b7: 44:7b:f3:f3:8b:69:51:32:1d:48:e8:30:e8:3f:45:29:91:5b: 9d:25:e9:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFsf/l28Be+U2Q1GHQZYEPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYxMDI0MDYwMTI4WhcNMjYxMDI1MDYwMTI4WjAzMTEwLwYDVQQD EyhjMWI2ZmViZjU5ODE3ZmE4ZGVkZjE4NTViZDUyNjBkODUzMWI0N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdzUPeM/kaZxghPEk+V0dwhWCJYM gdiFtleOQIAxPkmjgPABH3uwgqXbI+pfTunYKdIbt3CxWa7B7QStPFnlT5npBS86 YmzqHk048qRQ91q8lORHTzV3CRfUE8IDR2i+zqKqLBKv6eGuAneVp+THwzmoAmGF xeCjqYnrDHHtqJaP8lSs9/74e5S07OtbPbtg52vyh0unq6FR3gcQ5ON1Q9rIw167 RrgBkyAecIoXhi7psJ4pKFDTl+00sEubhBCtvFV11lEEt48JT4qwGVRzszqAWp+G qCiOBIQLnN3ye8vKj8aW2oKbDF3eXE7W2rlycJyAIxk7WLZ7eu7hVndwxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMG2/r9ZgX+o3t8YVb1SYNhTG0fdMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAFHrWji ovQsfWSJkjDeL7nxkXA8Ny2C6Y7fb+icYiWE3MoB9sTx1G7J9fRyabPFVMI4mppu Xa1YAsGDvCnuxcf57k8Oimb/7cD9QKWNbCiUyT5zKZ0dBsTWLfnDMYkqARmtufSi Nb5oS+JFcQbip+frS61Uv3gv9oImiUsrG5R0kbI31ynEh2ahUlq3r+jN+p8qKcT4 Ar47Y8b1i+3qmEzA9K7E7DS8QL3uPvVPiV7GvTg2qiLsN0kUFfqvY+AsKJbuhUFy zAwoos7oidNtX69FYfVfi+jL+PtykBWgemc1KApJc0u9zW+3RHvz84tpUTIdSOgw 6D9FKZFbnSXpqQ== -----END CERTIFICATE-----Generated at Sat Oct 24 10:10:37 2026 by rpki-client