$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: aBDw6ND8W9Bn4Ms1WaQtA/EfcPyuDyxwY8w94nz3Xfw= Subject key identifier: DF:70:B7:EE:85:97:73:30:56:86:D3:9F:7E:EF:7E:8D:F3:2D:EC:91 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019E736507B8B6499F539B9B32E7FED3EE9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1636 Signing time: Fri 29 May 2026 11:01:01 +0000 Manifest this update: Fri 29 May 2026 11:01:01 +0000 Manifest next update: Sat 30 May 2026 11:01:01 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: tEAB9j6QT9zFJZL4Tw+NHrGuOnfy+9jv0inJWNVuYY0=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 30 May 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:73:65:07:b8:b6:49:9f:53:9b:9b:32:e7:fe:d3:ee:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: May 29 11:01:01 2026 GMT Not After : May 30 11:01:01 2026 GMT Subject: CN=df70b7ee859773305686d39f7eef7e8df32dec91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:37:cb:5e:1e:36:6f:86:39:fb:b9:9a:3e: db:24:3f:b7:e3:14:21:69:06:5b:bf:67:62:48:de: da:8d:7b:ab:33:e7:97:e8:38:14:50:68:f9:82:8d: b2:5b:81:45:7f:1c:5f:d5:ba:4e:ae:8a:d3:7d:75: 17:c2:e1:3b:77:99:de:77:de:68:20:dd:c7:bb:c2: e3:14:6d:7a:39:c5:e7:a3:70:28:2d:87:55:f8:a5: c9:8c:db:22:df:54:91:f8:53:2e:dd:d2:61:27:1c: 5a:53:37:b5:42:6b:38:97:27:3b:f5:c8:a0:10:0d: 17:e1:58:45:33:4b:40:2b:a5:fe:ea:ff:b4:7f:8e: 42:79:c3:33:27:01:b5:75:9d:49:ea:27:fc:80:17: 54:68:0d:1b:b5:f8:5a:3b:05:d4:f0:ba:87:23:3f: a5:18:c6:22:07:dc:9c:05:20:04:cc:7d:0e:cc:34: f5:b8:72:98:ec:ce:11:60:22:a2:9a:97:68:0a:eb: 53:e4:d2:e8:c4:94:73:c9:a3:ad:ab:0f:43:2c:d5: e7:0a:fd:3e:b8:0c:21:17:16:f8:b0:59:dd:73:b1: fb:16:b2:a8:d3:ec:cb:50:1b:65:f7:d5:56:11:6e: 97:c5:fa:3c:8d:95:2f:dc:fd:c7:f2:1c:33:9e:12: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:70:B7:EE:85:97:73:30:56:86:D3:9F:7E:EF:7E:8D:F3:2D:EC:91 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fb:9f:07:53:91:65:a0:02:4e:cf:28:43:8f:08:f4:75:3c: 8b:4b:58:06:b7:eb:96:64:97:5b:b9:1d:da:e1:a6:86:8b:82: 48:52:b0:37:21:8b:0e:45:2f:b9:33:dd:53:ef:a0:08:1c:c5: 3f:72:41:6c:92:b5:52:fd:28:5e:94:7d:11:d5:49:62:97:c3: 47:2d:11:74:fc:d1:08:d6:75:02:e8:ed:fa:df:72:89:e2:f5: 40:ae:36:ef:b7:eb:fd:06:e8:2b:41:d2:2e:28:6c:df:9d:55: 6f:fb:8f:2a:f1:77:f5:05:2f:32:c4:b2:c9:a9:d3:ef:a6:5a: 86:60:6c:ad:80:39:4b:e7:28:64:14:d4:6c:61:49:0d:59:86: c8:d0:56:13:f2:a4:ba:e5:8b:cd:9d:5e:3b:18:f8:da:1c:33: 5e:d3:76:f9:f7:20:51:7f:a0:72:d2:ca:0c:ed:f8:e8:c0:89: bd:21:0e:da:90:2a:48:32:c3:21:8c:86:56:0a:71:93:12:27: e8:a9:7b:ef:e2:b9:b0:f3:95:90:dc:54:e2:9e:19:53:ce:76: dc:c1:da:5c:6d:d8:78:b6:8a:b0:c4:4f:22:24:06:f5:dc:3d: bd:11:46:93:07:de:ce:a9:c7:17:51:2e:d8:2f:d7:ec:83:63: ab:20:25:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5zZQe4tkmfU5ubMuf+0+6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNTI5MTEwMTAxWhcNMjYwNTMwMTEwMTAxWjAzMTEwLwYDVQQD EyhkZjcwYjdlZTg1OTc3MzMwNTY4NmQzOWY3ZWVmN2U4ZGYzMmRlYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNs3y14eNm+GOfu5mj7bJD+34xQh aQZbv2diSN7ajXurM+eX6DgUUGj5go2yW4FFfxxf1bpOrorTfXUXwuE7d5ned95o IN3Hu8LjFG16OcXno3AoLYdV+KXJjNsi31SR+FMu3dJhJxxaUze1Qms4lyc79cig EA0X4VhFM0tAK6X+6v+0f45CecMzJwG1dZ1J6if8gBdUaA0btfhaOwXU8LqHIz+l GMYiB9ycBSAEzH0OzDT1uHKY7M4RYCKimpdoCutT5NLoxJRzyaOtqw9DLNXnCv0+ uAwhFxb4sFndc7H7FrKo0+zLUBtl99VWEW6Xxfo8jZUv3P3H8hwznhIagwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9wt+6Fl3MwVobTn37vfo3zLeyRMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/ufB1OR ZaACTs8oQ48I9HU8i0tYBrfrlmSXW7kd2uGmhouCSFKwNyGLDkUvuTPdU++gCBzF P3JBbJK1Uv0oXpR9EdVJYpfDRy0RdPzRCNZ1Aujt+t9yieL1QK4277fr/QboK0HS Lihs351Vb/uPKvF39QUvMsSyyanT76ZahmBsrYA5S+coZBTUbGFJDVmGyNBWE/Kk uuWLzZ1eOxj42hwzXtN2+fcgUX+gctLKDO346MCJvSEO2pAqSDLDIYyGVgpxkxIn 6Kl77+K5sPOVkNxU4p4ZU8523MHaXG3YeLaKsMRPIiQG9dw9vRFGkwfezqnHF1Eu 2C/X7INjqyAluw== -----END CERTIFICATE-----Generated at Fri May 29 15:26:09 2026 by rpki-client