$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 4qhTzix0U3PHA5qkeiWNS0T1ZU3p5ko8/GKAQcZuLqY= Subject key identifier: 2E:B5:6F:7D:2D:05:23:0D:AD:D3:29:33:E3:0E:6F:0B:B9:86:36:F7 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019E50A2CB1E5392C17A6C739014163C30C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1624 Signing time: Fri 22 May 2026 17:01:46 +0000 Manifest this update: Fri 22 May 2026 17:01:46 +0000 Manifest next update: Sat 23 May 2026 17:01:46 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: yjmLB711xeBD9QUBGC+KOSLJjH9idbYMURUe0AtJv2c=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 May 2026 17:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:50:a2:cb:1e:53:92:c1:7a:6c:73:90:14:16:3c:30:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: May 22 17:01:46 2026 GMT Not After : May 23 17:01:46 2026 GMT Subject: CN=2eb56f7d2d05230dadd32933e30e6f0bb98636f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:3d:b0:d8:b5:92:af:ef:a1:23:8a:7e:5c: 06:59:bf:53:9a:2a:81:8a:2a:22:49:8b:f7:db:3c: 5c:47:e9:d3:fa:03:8f:db:8c:ef:a9:c9:96:46:a0: 5d:f5:ec:b9:79:38:9e:1c:e7:dd:18:6a:6e:08:dc: 42:86:7d:c2:70:a3:af:ae:ab:29:7c:fd:d1:32:5e: e5:c0:5c:a3:6c:8f:ab:91:ac:e2:12:9a:69:82:32: c9:12:2d:06:4f:78:cd:e0:d5:91:0a:f3:78:99:a0: b5:bc:8e:5a:3e:8c:ba:d5:12:a2:c7:cd:59:18:77: fe:12:f3:05:53:5d:47:f8:5d:28:12:72:c1:2b:38: 5b:04:cd:87:56:6e:68:64:04:c2:bd:64:83:8e:ee: 4e:17:b3:61:c4:3f:4a:d0:41:75:bf:b7:6e:8c:f8: ef:4a:cb:27:cf:9b:d6:dc:a4:b2:d8:89:99:73:c4: 6f:9e:21:94:9f:54:ba:8b:39:49:6d:54:5f:cd:8f: 27:3d:51:20:c4:84:44:64:b6:df:77:67:e8:88:17: 19:5c:af:ba:c0:6d:df:d3:17:c7:2d:37:63:32:5d: 34:b3:5a:5b:26:20:d5:b0:b7:0d:e3:ab:65:a0:fd: 5d:bd:fb:32:92:f0:a1:a3:8e:ac:77:92:80:03:5e: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B5:6F:7D:2D:05:23:0D:AD:D3:29:33:E3:0E:6F:0B:B9:86:36:F7 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a4:6f:e4:76:63:06:25:7a:35:d9:a9:07:34:95:74:7f:fc: 4e:a5:8c:2c:37:db:cc:a3:d1:a7:61:b1:68:a1:01:e8:91:a9: fb:61:14:62:01:13:71:20:ae:89:eb:1e:ce:6d:0b:54:53:80: 21:60:0e:49:d6:d2:78:d7:fb:58:18:2f:98:f4:96:5f:00:ee: ff:2d:05:82:0b:fb:f5:c8:81:13:ea:76:f7:cc:b3:c0:3c:2a: f4:19:c9:75:b7:59:54:d0:cd:43:f0:50:9a:88:bb:4e:b0:a6: 59:14:c3:84:e0:6b:16:66:d6:d8:27:b5:b1:08:bd:47:7c:7f: 1c:db:99:d4:29:18:9a:65:ab:b0:70:4f:b6:de:09:0f:b5:93: 6c:ed:55:26:a7:3c:c9:e4:13:a9:e6:56:ab:4a:09:31:fe:39: 1a:9f:34:bc:3e:db:88:57:dc:5e:d0:8f:fc:3e:04:d6:de:fc: ec:dc:83:4b:b3:9e:65:8b:40:ca:0b:ff:0c:71:87:fe:4b:c1: 1d:0d:c4:3b:ff:c9:48:30:70:8e:cc:6f:ef:80:dd:46:ea:47: 42:fd:49:01:31:c2:c3:27:34:16:fb:90:a9:69:99:ec:cf:b1: 33:01:0b:a6:0d:03:b7:ca:a5:86:c7:38:81:d2:c5:39:ca:29: af:5e:b7:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5QosseU5LBemxzkBQWPDDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNTIyMTcwMTQ2WhcNMjYwNTIzMTcwMTQ2WjAzMTEwLwYDVQQD EygyZWI1NmY3ZDJkMDUyMzBkYWRkMzI5MzNlMzBlNmYwYmI5ODYzNmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG49sNi1kq/voSOKflwGWb9TmiqB iioiSYv32zxcR+nT+gOP24zvqcmWRqBd9ey5eTieHOfdGGpuCNxChn3CcKOvrqsp fP3RMl7lwFyjbI+rkaziEpppgjLJEi0GT3jN4NWRCvN4maC1vI5aPoy61RKix81Z GHf+EvMFU11H+F0oEnLBKzhbBM2HVm5oZATCvWSDju5OF7NhxD9K0EF1v7dujPjv Sssnz5vW3KSy2ImZc8RvniGUn1S6izlJbVRfzY8nPVEgxIREZLbfd2foiBcZXK+6 wG3f0xfHLTdjMl00s1pbJiDVsLcN46tloP1dvfsykvCho46sd5KAA16SxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC61b30tBSMNrdMpM+MObwu5hjb3MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6Rv5HZj BiV6NdmpBzSVdH/8TqWMLDfbzKPRp2GxaKEB6JGp+2EUYgETcSCuiesezm0LVFOA IWAOSdbSeNf7WBgvmPSWXwDu/y0Fggv79ciBE+p298yzwDwq9BnJdbdZVNDNQ/BQ moi7TrCmWRTDhOBrFmbW2Ce1sQi9R3x/HNuZ1CkYmmWrsHBPtt4JD7WTbO1VJqc8 yeQTqeZWq0oJMf45Gp80vD7biFfcXtCP/D4E1t787NyDS7OeZYtAygv/DHGH/kvB HQ3EO//JSDBwjsxv74DdRupHQv1JATHCwyc0FvuQqWmZ7M+xMwELpg0Dt8qlhsc4 gdLFOcopr163ng== -----END CERTIFICATE-----Generated at Sat May 23 03:04:57 2026 by rpki-client