$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: XP/FeETOG+0eTzl7cqqIyx9fKXYHw1qKO2iTbrI7fCc= Subject key identifier: 43:51:D9:AC:5F:29:8C:53:3D:DB:A8:34:0B:F7:CA:85:8E:CE:C7:D5 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019DDCC37C0081BC2C4959B5630D64BB2BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15E8 Signing time: Thu 30 Apr 2026 05:01:31 +0000 Manifest this update: Thu 30 Apr 2026 05:01:31 +0000 Manifest next update: Fri 01 May 2026 05:01:31 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: ZAKcp91KBCfV8DBtkEwtFbEIDuPArE4pVd+ago7L78k=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 01 May 2026 05:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:dc:c3:7c:00:81:bc:2c:49:59:b5:63:0d:64:bb:2b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 30 05:01:31 2026 GMT Not After : May 1 05:01:31 2026 GMT Subject: CN=4351d9ac5f298c533ddba8340bf7ca858ecec7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:ac:15:e0:85:54:9a:1b:a9:97:88:80:2c: 2e:ae:22:85:d6:01:c8:7a:96:ca:dd:f2:a8:61:f6: fa:1a:26:46:d1:09:18:04:51:1f:a8:36:f5:5f:11: 4f:72:32:e2:04:b7:d4:96:d6:e2:b9:db:0c:16:6d: a7:1e:ac:27:6a:cb:06:77:01:82:fe:e2:74:cd:9e: 9e:39:08:77:1d:16:b7:5b:c9:80:f3:bc:e2:0d:0e: 00:d1:b1:01:73:ea:a5:b8:e7:fe:d9:96:f6:36:49: 9e:8f:dc:97:fc:95:40:7d:bc:43:05:26:0e:29:c2: f0:aa:f6:e3:1e:83:81:f2:67:7c:13:b3:7d:ec:3b: 6b:fe:3c:2b:eb:f2:e9:db:e9:1e:75:7f:a4:0f:7c: 5b:bb:3a:16:c1:7d:67:ec:2f:70:59:e1:80:9e:c5: 19:81:03:aa:d1:09:7a:17:a2:e9:bc:01:2a:c9:f2: e7:12:54:b1:bd:34:15:9d:d5:7a:bf:98:03:38:79: 9b:4e:bd:46:f1:e1:22:b3:98:a2:59:e1:bb:1c:16: d1:14:68:01:8f:23:4e:9c:ba:25:e1:fd:22:62:ab: f7:00:eb:4f:b4:19:c7:a3:02:a1:88:40:b3:0f:4b: c7:7c:88:fd:5a:d7:2d:99:83:a3:a8:bd:63:4f:02: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:D9:AC:5F:29:8C:53:3D:DB:A8:34:0B:F7:CA:85:8E:CE:C7:D5 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4d:12:38:5c:be:af:30:71:9a:3e:59:e3:a8:6b:84:6f:da: 13:2c:33:cf:94:76:c9:2e:77:20:fb:bc:e1:a0:f2:76:35:d5: 4a:ca:12:66:b2:c0:72:b7:26:b4:ef:16:ad:99:88:d7:e2:43: ab:5d:1a:57:94:01:c7:c3:ca:18:35:65:b1:37:8c:63:94:75: cb:04:22:0d:eb:af:5e:be:6e:3d:bf:59:5c:bf:fb:26:1d:97: 29:79:74:1c:bf:05:55:5e:fd:c2:81:21:d5:f1:c0:78:ed:47: d1:82:6f:a6:a0:dd:63:30:29:fa:f9:62:c2:aa:6a:0f:ff:29: a0:77:54:92:f7:c8:b8:c2:01:e4:8a:b6:c6:55:8f:45:2e:c0: 41:77:6c:20:99:ff:ee:56:ec:b3:24:67:91:2d:4f:70:d8:1e: 75:93:38:b2:ab:d4:b4:56:21:5d:6a:c4:ff:9a:2e:b7:33:c2: 5c:5d:3c:8a:8d:7c:d4:f6:61:fd:6d:0c:b2:7f:8f:10:1e:4f: f0:e0:10:bf:3d:25:ec:07:71:28:d4:78:eb:b7:90:59:aa:78: ac:40:37:f4:45:c5:68:39:4e:47:cb:de:43:b8:55:bd:70:9e: 57:0b:bd:13:75:b5:a9:0d:07:91:b9:b8:7a:c1:b9:c5:06:98: ff:8f:a0:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3cw3wAgbwsSVm1Yw1kuyvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNDMwMDUwMTMxWhcNMjYwNTAxMDUwMTMxWjAzMTEwLwYDVQQD Eyg0MzUxZDlhYzVmMjk4YzUzM2RkYmE4MzQwYmY3Y2E4NThlY2VjN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7isFeCFVJobqZeIgCwuriKF1gHI epbK3fKoYfb6GiZG0QkYBFEfqDb1XxFPcjLiBLfUltbiudsMFm2nHqwnassGdwGC /uJ0zZ6eOQh3HRa3W8mA87ziDQ4A0bEBc+qluOf+2Zb2Nkmej9yX/JVAfbxDBSYO KcLwqvbjHoOB8md8E7N97Dtr/jwr6/Lp2+kedX+kD3xbuzoWwX1n7C9wWeGAnsUZ gQOq0Ql6F6LpvAEqyfLnElSxvTQVndV6v5gDOHmbTr1G8eEis5iiWeG7HBbRFGgB jyNOnLol4f0iYqv3AOtPtBnHowKhiECzD0vHfIj9WtctmYOjqL1jTwLHYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENR2axfKYxTPduoNAv3yoWOzsfVMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL00SOFy+ rzBxmj5Z46hrhG/aEywzz5R2yS53IPu84aDydjXVSsoSZrLAcrcmtO8WrZmI1+JD q10aV5QBx8PKGDVlsTeMY5R1ywQiDeuvXr5uPb9ZXL/7Jh2XKXl0HL8FVV79woEh 1fHAeO1H0YJvpqDdYzAp+vliwqpqD/8poHdUkvfIuMIB5Iq2xlWPRS7AQXdsIJn/ 7lbssyRnkS1PcNgedZM4sqvUtFYhXWrE/5outzPCXF08io181PZh/W0Msn+PEB5P 8OAQvz0l7AdxKNR467eQWap4rEA39EXFaDlOR8veQ7hVvXCeVwu9E3W1qQ0Hkbm4 esG5xQaY/4+gbw== -----END CERTIFICATE-----Generated at Thu Apr 30 13:01:20 2026 by rpki-client