$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: fB1t+Tw5YpkbfjqT/LPahurM1oCbOtZ7aYsxmsr97Vo= Subject key identifier: 4B:FC:36:61:49:14:D0:43:59:79:33:4F:98:15:A7:5F:7F:9B:04:55 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 01A11BD0CE340362548B08C4EBB715EEB562 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 17A9 Signing time: Thu 08 Oct 2026 14:00:31 +0000 Manifest this update: Thu 08 Oct 2026 14:00:31 +0000 Manifest next update: Fri 09 Oct 2026 14:00:31 +0000 Files and hashes: 1: 06Sc0eMiZFBHUMpf5oZXoh19f3g.roa (hash: BZKXDhv9T9YgTMEVFOAxa+R6XbC5n20pfmCWfGD92es=) 2: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 4: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 5: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 6: HPQjZqZMBkLOO8wozmYFKEZ2KkA.roa (hash: jw170ILV6vDaQhmx+FfaYn4b4bXENzgLZdT2bz7qJJ8=) 7: HaVjO2FvJFOEvXio683i5OyDOl4.roa (hash: d+rI3YAlmUx135UsnhhTJm/AonOL3Py8rRvkCBB+1Xs=) 8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: GPOWLxsj9o/i2jY/Tci5i9m3Qymofub8htWvayW/4rE=) 12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 13: VRKIjvPa0gtt67cFQVRRyn2IAGQ.roa (hash: Aziyg0GRQuYpZXmjK7NQPwL2t9alHBDrTCxbCTvDJYI=) 14: XxesCyVYVVaPIRTpgem_CTm9ZKk.roa (hash: xanv4N1gYNPYLbJXTsbNvnyGPwQdB4ptqGSiKaCbTSs=) 15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 16: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 17: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 19: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 20: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=) 21: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1b:d0:ce:34:03:62:54:8b:08:c4:eb:b7:15:ee:b5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Oct 8 14:00:31 2026 GMT Not After : Oct 9 14:00:31 2026 GMT Subject: CN=4bfc36614914d0435979334f9815a75f7f9b0455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d8:b2:18:33:26:b8:be:c8:79:5d:35:e6:58: 4e:2b:37:1d:a7:32:83:d5:95:02:2a:44:7f:dd:fc: ff:b3:e8:cc:58:ab:3d:f2:d2:1a:bf:24:7c:6d:7e: 71:7e:ad:b0:da:48:90:60:3b:0e:2c:8a:04:43:b2: 57:6d:02:a0:e9:0f:06:3b:ee:e8:1f:85:0f:4c:fc: 61:3f:7c:4f:59:a2:6f:37:d4:5e:d8:ea:30:a9:88: 9c:1d:65:a7:e7:a0:81:3f:37:f1:ad:57:7d:6b:aa: ba:51:54:32:12:e3:0a:26:4e:d7:9f:8e:bb:c4:15: 69:fc:83:1d:89:73:a0:4d:31:f0:d1:5b:17:3a:2c: 19:25:1b:48:92:a4:bf:4a:95:23:2a:c0:de:de:35: 34:32:26:02:9b:46:71:b0:b7:a5:1b:ce:ef:be:9b: 53:6d:1f:83:f5:42:58:c9:03:20:69:d4:51:db:88: 75:2c:1f:37:34:c3:61:78:2d:82:11:ce:2f:93:51: 48:00:a9:fe:f1:56:31:87:86:cc:59:13:e7:dc:85: 09:b8:7b:0c:38:b8:a1:e7:6a:b6:1a:84:55:48:49: 49:2e:08:40:c2:75:9c:5d:21:1c:2c:52:49:f5:55: e0:1c:79:99:84:64:aa:c0:f1:57:76:0c:5c:20:14: b3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FC:36:61:49:14:D0:43:59:79:33:4F:98:15:A7:5F:7F:9B:04:55 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:32:13:d1:74:74:35:6f:73:96:c1:66:ae:a2:09:10:bb:11: 04:9b:57:98:75:e1:5f:1f:fd:f1:71:58:1d:57:81:68:8f:45: cd:43:d3:1d:d9:09:1a:e0:81:e8:91:40:6f:a7:8d:cd:c7:e7: 97:39:e9:0f:cf:aa:81:49:ad:60:1c:e1:3e:4e:bd:ed:d7:b6: e3:fe:93:63:b8:64:29:ba:b1:6e:45:b0:74:a9:58:db:11:e2: 89:2f:9d:e2:c9:62:11:86:ff:2f:ab:a3:d7:2e:31:3a:09:ba: a5:ed:40:27:d5:48:92:4e:70:05:5f:b8:75:31:89:d7:60:d4: 03:97:6c:2d:86:50:23:ee:2f:43:fc:30:3a:70:eb:5c:c6:74: 9d:ec:96:67:22:f5:e4:a6:57:a3:45:5c:ac:bd:85:e1:2b:08: ad:21:d4:39:e1:48:af:65:bb:7b:14:a3:62:dd:a9:b9:ef:85: e4:31:37:5a:cd:ce:bd:9f:4c:db:27:57:45:6e:56:b8:ad:80: 85:7c:07:7d:2c:1c:80:ff:47:3a:11:88:62:a4:c0:0c:ba:57: 9e:84:57:bd:c7:86:55:14:9c:cf:e1:3f:51:0a:28:96:c1:9d: e8:8f:fd:f7:0a:35:68:73:a5:02:58:02:2d:69:c8:89:2a:4f: d8:a2:f7:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEb0M40A2JUiwjE67cV7rViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYxMDA4MTQwMDMxWhcNMjYxMDA5MTQwMDMxWjAzMTEwLwYDVQQD Eyg0YmZjMzY2MTQ5MTRkMDQzNTk3OTMzNGY5ODE1YTc1ZjdmOWIwNDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39iyGDMmuL7IeV015lhOKzcdpzKD 1ZUCKkR/3fz/s+jMWKs98tIavyR8bX5xfq2w2kiQYDsOLIoEQ7JXbQKg6Q8GO+7o H4UPTPxhP3xPWaJvN9Re2OowqYicHWWn56CBPzfxrVd9a6q6UVQyEuMKJk7Xn467 xBVp/IMdiXOgTTHw0VsXOiwZJRtIkqS/SpUjKsDe3jU0MiYCm0ZxsLelG87vvptT bR+D9UJYyQMgadRR24h1LB83NMNheC2CEc4vk1FIAKn+8VYxh4bMWRPn3IUJuHsM OLih52q2GoRVSElJLghAwnWcXSEcLFJJ9VXgHHmZhGSqwPFXdgxcIBSz6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv8NmFJFNBDWXkzT5gVp19/mwRVMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczIT0XR0 NW9zlsFmrqIJELsRBJtXmHXhXx/98XFYHVeBaI9FzUPTHdkJGuCB6JFAb6eNzcfn lznpD8+qgUmtYBzhPk697de24/6TY7hkKbqxbkWwdKlY2xHiiS+d4sliEYb/L6uj 1y4xOgm6pe1AJ9VIkk5wBV+4dTGJ12DUA5dsLYZQI+4vQ/wwOnDrXMZ0neyWZyL1 5KZXo0VcrL2F4SsIrSHUOeFIr2W7exSjYt2pue+F5DE3Ws3OvZ9M2ydXRW5WuK2A hXwHfSwcgP9HOhGIYqTADLpXnoRXvceGVRScz+E/UQoolsGd6I/99wo1aHOlAlgC LWnIiSpP2KL3tA== -----END CERTIFICATE-----Generated at Thu Oct 8 20:55:29 2026 by rpki-client