$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 4MQhnbG5011gRowqJzpURm8Pdy3lwvYcvQcTGTvJyek= Subject key identifier: D7:74:04:13:88:13:6E:81:58:41:4B:88:DC:86:20:F2:3D:43:F9:84 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019E412F612446B955137D3753716FFDA9E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 161C Signing time: Tue 19 May 2026 17:01:24 +0000 Manifest this update: Tue 19 May 2026 17:01:24 +0000 Manifest next update: Wed 20 May 2026 17:01:24 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: VMmopDihVgVhBmbtyjKS/G6ck07vsbxkmwYMWZtWRSo=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 20 May 2026 17:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:41:2f:61:24:46:b9:55:13:7d:37:53:71:6f:fd:a9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: May 19 17:01:24 2026 GMT Not After : May 20 17:01:24 2026 GMT Subject: CN=d774041388136e8158414b88dc8620f23d43f984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:3d:b5:9f:a9:da:f1:15:b6:8e:5e:64:b8: aa:11:cd:ed:a3:2a:1b:67:2c:21:30:ec:bb:5f:de: 90:01:76:1f:51:fe:8c:9a:3e:61:d4:67:63:81:f4: 61:d3:d6:bf:af:4c:b7:55:7b:bd:04:69:0d:21:47: 52:cd:7e:3d:96:6c:a2:8d:9c:3c:ba:fe:76:cd:a6: 26:50:6c:fb:84:d7:21:3c:de:e6:4a:1f:85:61:61: f0:f8:d2:63:2d:b4:f8:de:0f:ea:33:7c:93:72:79: a3:4b:d0:0f:47:71:eb:7e:ba:b1:56:8f:25:ad:25: 8a:6b:24:c9:c6:91:e6:65:11:58:97:0e:f4:b8:68: 8e:d4:1e:43:5e:b5:f8:47:60:0d:6a:c8:59:e1:57: 58:fd:24:a9:9b:ac:60:48:d0:a9:20:f2:6c:d2:10: 60:dc:da:8f:55:93:38:4a:7f:45:22:9b:0e:79:3b: 02:95:4a:8f:ea:90:91:6a:49:21:d1:03:d8:e2:d0: 39:28:40:87:73:34:ef:73:95:49:96:37:fb:9d:d0: f1:f1:29:1d:b5:2d:16:03:9a:d3:69:4c:7b:77:87: 35:95:91:9c:31:ef:f1:b5:d1:0b:24:b0:a6:ca:87: c6:97:29:14:77:58:ad:34:73:8f:36:ef:e2:58:38: f6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:04:13:88:13:6E:81:58:41:4B:88:DC:86:20:F2:3D:43:F9:84 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bd:49:d8:b4:63:2a:b1:7d:44:7e:ec:26:ad:9b:60:02:38: 5b:9d:bc:c3:4b:0e:a2:d3:5c:77:2c:9c:c7:69:6d:f8:f1:da: e3:d8:23:f7:fa:ef:fe:47:24:d2:aa:9c:e9:b0:9e:fd:7f:a2: 89:e3:c3:25:6c:24:44:5f:df:81:cd:eb:95:67:9e:e4:9e:9e: 48:78:99:ad:bf:f7:7d:43:11:18:4b:5c:a0:15:a6:08:f4:f9: 4c:0b:f9:e3:6b:47:ec:db:d8:26:8d:e2:f8:8d:3f:2d:30:e9: a9:f5:6c:66:e6:37:7f:ec:4f:9d:e1:e7:46:4c:ff:bb:6e:33: 78:1c:f1:a5:30:28:24:a7:b1:fb:04:53:62:4c:7e:af:26:88: 39:98:52:4f:83:1f:1d:1c:70:61:40:5c:72:6c:6c:cc:92:39: 6b:53:eb:65:b9:0f:12:34:11:b6:f3:53:19:7e:6b:cb:45:60: cd:4d:be:45:fe:3f:7d:4a:e9:c2:f3:58:71:c3:78:87:e2:42: 32:4a:7e:b5:31:b9:e1:f4:6c:4e:ec:5e:d5:79:fe:15:66:c5: f8:ae:3a:8b:83:aa:de:1f:e2:4e:2c:da:f2:de:1a:33:aa:72: 91:9f:a1:8f:ac:1a:41:58:25:03:75:37:28:9c:db:93:9a:26: 7b:c9:f8:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5BL2EkRrlVE303U3Fv/anjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNTE5MTcwMTI0WhcNMjYwNTIwMTcwMTI0WjAzMTEwLwYDVQQD EyhkNzc0MDQxMzg4MTM2ZTgxNTg0MTRiODhkYzg2MjBmMjNkNDNmOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztM9tZ+p2vEVto5eZLiqEc3toyob ZywhMOy7X96QAXYfUf6Mmj5h1GdjgfRh09a/r0y3VXu9BGkNIUdSzX49lmyijZw8 uv52zaYmUGz7hNchPN7mSh+FYWHw+NJjLbT43g/qM3yTcnmjS9APR3HrfrqxVo8l rSWKayTJxpHmZRFYlw70uGiO1B5DXrX4R2ANashZ4VdY/SSpm6xgSNCpIPJs0hBg 3NqPVZM4Sn9FIpsOeTsClUqP6pCRakkh0QPY4tA5KECHczTvc5VJljf7ndDx8Skd tS0WA5rTaUx7d4c1lZGcMe/xtdELJLCmyofGlykUd1itNHOPNu/iWDj2xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNd0BBOIE26BWEFLiNyGIPI9Q/mEMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT71J2LRj KrF9RH7sJq2bYAI4W528w0sOotNcdyycx2lt+PHa49gj9/rv/kck0qqc6bCe/X+i iePDJWwkRF/fgc3rlWee5J6eSHiZrb/3fUMRGEtcoBWmCPT5TAv542tH7NvYJo3i +I0/LTDpqfVsZuY3f+xPneHnRkz/u24zeBzxpTAoJKex+wRTYkx+ryaIOZhST4Mf HRxwYUBccmxszJI5a1PrZbkPEjQRtvNTGX5ry0VgzU2+Rf4/fUrpwvNYccN4h+JC Mkp+tTG54fRsTuxe1Xn+FWbF+K46i4Oq3h/iTiza8t4aM6pykZ+hj6waQVglA3U3 KJzbk5ome8n4/A== -----END CERTIFICATE-----Generated at Wed May 20 02:46:56 2026 by rpki-client