$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: OA77/WBcYtv2JnV+cDO+QUNcDjJ2nqiJrBKc3SKmo3k= Subject key identifier: E5:B3:F1:55:DE:55:DA:90:3B:54:54:1D:8C:75:2C:F0:3A:31:19:8E Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D389C5742FA8B51221E3DAF4BE6FD8423 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1593 Signing time: Sun 29 Mar 2026 08:01:03 +0000 Manifest this update: Sun 29 Mar 2026 08:01:03 +0000 Manifest next update: Mon 30 Mar 2026 08:01:03 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: urtk+W3bld4GJhSl/0jOiRPmkLmGDFlRivSQ9SXYBoE=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:38:9c:57:42:fa:8b:51:22:1e:3d:af:4b:e6:fd:84:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Mar 29 08:01:03 2026 GMT Not After : Mar 30 08:01:03 2026 GMT Subject: CN=e5b3f155de55da903b54541d8c752cf03a31198e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:45:a7:64:19:49:f4:54:5b:78:83:d7:fb: 1e:15:c4:20:64:a1:c1:af:7a:f1:ea:88:8f:5c:bd: 20:9f:d9:4f:24:df:f3:d8:22:cc:a7:5b:96:6d:a1: 4d:66:f1:e6:c5:ac:09:71:94:93:f1:97:0d:76:a5: 95:08:7c:33:f8:3f:cc:81:e3:bb:a9:6c:e1:d7:ce: 62:45:cf:c3:3d:48:90:9c:83:3e:63:1a:6e:c3:17: e4:8c:20:3a:74:20:10:ab:7d:05:1c:4a:5e:1e:d5: 40:0d:56:f6:32:0b:03:bf:04:55:35:1f:99:ea:6d: 39:55:5a:e3:41:5e:11:27:40:0f:ef:62:77:b9:7a: 6d:9b:31:26:5a:34:ca:04:38:6a:ed:5d:0d:10:79: 24:a7:da:0d:a6:e1:97:3c:de:ef:cb:07:fb:8e:99: 19:a8:16:c4:41:84:d1:7b:f2:45:4e:b5:2e:6d:b7: fe:e0:83:9c:a6:45:47:5a:f5:ab:69:c5:33:8f:4c: 47:6a:0e:01:d2:fb:2f:5b:d0:a9:61:f4:91:cc:a8: cc:02:6b:30:e6:ab:b5:d7:57:b8:61:7a:93:1b:0d: ed:89:9e:93:11:f0:9c:7a:08:f2:76:b9:03:e2:5c: 6a:2a:53:6f:3f:62:47:e0:98:f6:d7:15:89:f9:f3: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B3:F1:55:DE:55:DA:90:3B:54:54:1D:8C:75:2C:F0:3A:31:19:8E X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:cd:dc:f3:87:2d:fd:d8:da:46:cb:40:30:5c:16:1f:92:62: d4:b4:bd:3d:ba:8c:88:9f:be:03:5e:26:90:ce:59:d9:e3:3d: 99:94:7e:e1:03:e3:f3:10:81:91:be:5c:98:e9:75:61:7f:7d: dc:97:cd:b6:ba:e6:19:95:f2:31:61:db:7c:60:1e:8a:fd:97: ce:d0:bf:a4:f1:95:87:b8:7b:c5:8b:4a:0a:9a:29:38:db:4f: 18:25:45:aa:9d:45:26:7b:ff:e7:b7:8c:e4:39:94:87:f7:88: bd:35:f0:db:68:9e:37:d8:1b:e8:29:a5:d1:96:dd:fb:c6:e3: e9:35:34:b4:bc:60:99:7f:3a:34:37:88:45:57:ca:e6:56:85: f4:39:26:b9:f3:03:99:09:98:f8:a5:8f:40:f5:c7:c0:aa:3c: b7:db:9f:8e:cb:68:3d:9e:c3:1b:fb:6f:d7:01:24:97:72:8d: 45:cb:cc:86:bb:df:72:b8:0c:b3:df:34:0e:74:9c:10:c4:a2: 1a:03:da:22:d3:bf:a1:77:0a:74:bc:f1:f3:b5:0b:6f:0c:2a: 2b:6b:9e:df:65:93:d6:c6:61:78:1b:cf:b1:4c:b2:9c:5e:f0: d5:1c:73:fc:3f:34:bd:49:19:b8:76:33:b4:c4:fd:4d:7d:f8: 2e:c1:af:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ04nFdC+otRIh49r0vm/YQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMzI5MDgwMTAzWhcNMjYwMzMwMDgwMTAzWjAzMTEwLwYDVQQD EyhlNWIzZjE1NWRlNTVkYTkwM2I1NDU0MWQ4Yzc1MmNmMDNhMzExOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv9Fp2QZSfRUW3iD1/seFcQgZKHB r3rx6oiPXL0gn9lPJN/z2CLMp1uWbaFNZvHmxawJcZST8ZcNdqWVCHwz+D/MgeO7 qWzh185iRc/DPUiQnIM+YxpuwxfkjCA6dCAQq30FHEpeHtVADVb2MgsDvwRVNR+Z 6m05VVrjQV4RJ0AP72J3uXptmzEmWjTKBDhq7V0NEHkkp9oNpuGXPN7vywf7jpkZ qBbEQYTRe/JFTrUubbf+4IOcpkVHWvWracUzj0xHag4B0vsvW9CpYfSRzKjMAmsw 5qu111e4YXqTGw3tiZ6TEfCcegjydrkD4lxqKlNvP2JH4Jj21xWJ+fPrzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWz8VXeVdqQO1RUHYx1LPA6MRmOMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOM3c84ct /djaRstAMFwWH5Ji1LS9PbqMiJ++A14mkM5Z2eM9mZR+4QPj8xCBkb5cmOl1YX99 3JfNtrrmGZXyMWHbfGAeiv2XztC/pPGVh7h7xYtKCpopONtPGCVFqp1FJnv/57eM 5DmUh/eIvTXw22ieN9gb6Cml0Zbd+8bj6TU0tLxgmX86NDeIRVfK5laF9DkmufMD mQmY+KWPQPXHwKo8t9ufjstoPZ7DG/tv1wEkl3KNRcvMhrvfcrgMs980DnScEMSi GgPaItO/oXcKdLzx87ULbwwqK2ue32WT1sZheBvPsUyynF7w1Rxz/D80vUkZuHYz tMT9TX34LsGvYg== -----END CERTIFICATE-----Generated at Sun Mar 29 16:36:57 2026 by rpki-client