$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 7QE0GOLXJ4vy1ppsuPWurVGBdL/7goediCMAdCsBbHs= Subject key identifier: 6B:42:3A:F3:67:86:56:8A:D8:93:DF:97:E6:A8:A8:88:EC:3B:1E:9E Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 01A040BC9F172B6B8BD8D5B319F41273DB9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 172B Signing time: Thu 27 Aug 2026 01:01:38 +0000 Manifest this update: Thu 27 Aug 2026 01:01:38 +0000 Manifest next update: Fri 28 Aug 2026 01:01:38 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 6: BCUxpGIKyaMC-Q3G7NnrsAkzmCI.roa (hash: ryv2XJUFPiF4ko9Nol2Ry4OYS00zMIo0eJUnMWOCOKY=) 7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 9: J9YCSkM49BjnhiXXJKvmWQEJ4Ho.roa (hash: 4RZntlRk2dY9YToU9ls7G2Ny8ezvQ5iIruNNeLeodHo=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: zUQ+PR7MbTwHGMPzmgj85nOvD68TUvXnhILj1t5T3Hg=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 16: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 17: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 18: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 19: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 20: jUGUoMYUN3ZYoWwyz7MweD_DD8g.roa (hash: TwO/js2mCJinc13dOSDj9ill0w/sSJlMwVo+p9a4L5g=) 21: pEYKqh-HZTICIznuDDkvZQKOpQs.roa (hash: +6JOcYl0e7Kly90geVNRPtpifQQJN2SaFu3Bf0va6jA=) 22: tixQObx3uiV7eqywc2bJKMQFx8A.roa (hash: NvIyaOipBPDRx4VxCyXcPXusugDOKB1Bdd7bTanCRhw=) 23: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 24: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=) 25: wCMm-aenH_zuMJOSQuJWeb71NJ0.roa (hash: ayLqc4WWQljF7RYZ5IzvneWbkS5edMXjdGTG+Aa5QjQ=) 26: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 27: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Aug 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:40:bc:9f:17:2b:6b:8b:d8:d5:b3:19:f4:12:73:db:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Aug 27 01:01:38 2026 GMT Not After : Aug 28 01:01:38 2026 GMT Subject: CN=6b423af36786568ad893df97e6a8a888ec3b1e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:14:12:99:3e:33:c7:36:4b:bd:61:ca:e0: c4:ba:c7:36:fa:13:19:0c:34:cb:42:1a:4c:60:73: 82:06:bb:20:62:c5:06:59:0d:80:b0:a1:b6:75:7d: e0:d4:96:c7:f4:b3:8b:56:d9:7e:7f:70:79:94:db: 35:dc:91:7b:b9:c1:33:22:7d:62:5a:ee:ef:b5:60: 0e:d2:b6:9d:d8:9a:e4:cd:a5:ee:0e:92:43:ae:c8: 5b:71:1a:49:37:47:d4:7b:74:35:16:9b:10:76:47: d0:92:29:96:17:12:db:f5:0f:7e:76:90:09:5f:81: d1:f7:e1:3f:34:de:39:57:26:74:72:5f:24:e0:5a: b2:bd:41:b0:45:11:35:a7:70:b8:65:40:17:a8:e1: 70:6d:17:d9:4d:01:a0:fa:eb:25:8a:8b:64:41:1d: 5a:a9:9d:01:04:16:4e:48:e7:f9:6a:5b:87:b9:b0: 3f:17:30:19:28:a3:96:6a:8e:3e:b3:c6:d9:14:e1: d3:57:51:16:b1:da:97:d4:07:95:86:d2:ff:dc:66: f2:67:a0:50:d9:8c:51:d7:60:7f:46:3c:3f:c7:2c: 9c:b3:7e:58:c3:87:9d:a5:67:ba:f3:21:29:87:6a: d2:e9:cc:6c:42:a7:8a:fa:4f:a5:2a:61:87:04:d0: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:42:3A:F3:67:86:56:8A:D8:93:DF:97:E6:A8:A8:88:EC:3B:1E:9E X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0c:ab:64:fa:d0:b5:b7:d2:91:d5:40:0f:a0:b6:f5:ed:ff: 98:14:a3:53:a7:96:5e:59:da:14:33:2d:5d:04:dc:bd:f6:d0: 1a:aa:37:ed:4e:c1:e3:05:fa:ff:3a:d0:d5:87:99:54:5d:df: a3:74:89:33:ef:33:2b:fb:af:a3:5f:d3:9d:4c:96:e2:0c:1e: bd:dd:75:fe:29:7c:f0:d5:1f:be:74:a5:80:aa:5a:db:84:42: 78:1a:f8:8f:99:21:43:ef:4b:ef:ff:fe:d3:ca:db:e0:15:c0: da:0c:fe:90:2c:20:fa:f9:83:f3:1b:93:a5:cc:54:73:bd:39: 62:d3:57:21:96:02:22:0a:83:e2:e5:0c:be:56:d4:f0:22:16: 47:fd:cd:1e:9b:8a:1b:b5:c7:83:4c:9c:a0:34:85:20:12:6e: 06:a5:95:7f:d3:a4:01:0b:8f:6d:a9:b9:60:2f:00:af:1e:36: a0:35:e8:4c:56:a5:fd:ce:b8:77:d8:f3:5a:b6:a2:8d:8c:6c: 98:23:f7:da:e9:6d:b2:c3:c4:18:f5:4a:1a:13:04:ae:39:e0: 74:6c:73:9f:30:1c:76:c6:0c:eb:47:8d:de:a3:6b:66:6a:19: e9:22:b4:48:c4:99:9a:12:65:6d:ba:00:a2:83:10:1e:45:52: 70:e0:f5:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBAvJ8XK2uL2NWzGfQSc9ufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwODI3MDEwMTM4WhcNMjYwODI4MDEwMTM4WjAzMTEwLwYDVQQD Eyg2YjQyM2FmMzY3ODY1NjhhZDg5M2RmOTdlNmE4YTg4OGVjM2IxZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJkUEpk+M8c2S71hyuDEusc2+hMZ DDTLQhpMYHOCBrsgYsUGWQ2AsKG2dX3g1JbH9LOLVtl+f3B5lNs13JF7ucEzIn1i Wu7vtWAO0rad2JrkzaXuDpJDrshbcRpJN0fUe3Q1FpsQdkfQkimWFxLb9Q9+dpAJ X4HR9+E/NN45VyZ0cl8k4FqyvUGwRRE1p3C4ZUAXqOFwbRfZTQGg+usliotkQR1a qZ0BBBZOSOf5aluHubA/FzAZKKOWao4+s8bZFOHTV1EWsdqX1AeVhtL/3GbyZ6BQ 2YxR12B/Rjw/xyycs35Yw4edpWe68yEph2rS6cxsQqeK+k+lKmGHBNAGyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtCOvNnhlaK2JPfl+aoqIjsOx6eMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgyrZPrQ tbfSkdVAD6C29e3/mBSjU6eWXlnaFDMtXQTcvfbQGqo37U7B4wX6/zrQ1YeZVF3f o3SJM+8zK/uvo1/TnUyW4gwevd11/il88NUfvnSlgKpa24RCeBr4j5khQ+9L7//+ 08rb4BXA2gz+kCwg+vmD8xuTpcxUc705YtNXIZYCIgqD4uUMvlbU8CIWR/3NHpuK G7XHg0ycoDSFIBJuBqWVf9OkAQuPbam5YC8Arx42oDXoTFal/c64d9jzWraijYxs mCP32ultssPEGPVKGhMErjngdGxznzAcdsYM60eN3qNrZmoZ6SK0SMSZmhJlbboA ooMQHkVScOD1JQ== -----END CERTIFICATE-----Generated at Thu Aug 27 08:52:04 2026 by rpki-client