$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 62lzn0ZGRFQZcMJRxBPiNE6ewb61FrfhNxcXS9LkSW4= Subject key identifier: 9D:EA:FD:E2:63:0B:F9:2C:95:CC:C9:F7:89:A8:35:70:13:DB:07:93 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 01A08942C3C5BD25F7EA5E318B98CFA4E738 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1754 Signing time: Thu 10 Sep 2026 03:00:49 +0000 Manifest this update: Thu 10 Sep 2026 03:00:49 +0000 Manifest next update: Fri 11 Sep 2026 03:00:49 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: iINCy8v9DQ5z6Qk3rV4TCgqIS0VH4xcR7Ia/6FEoi7k=) 11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 13: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 14: ZwZjPmKqIDTnl3lP9m_rRWyYN0c.roa (hash: TD6pBOGIF20vbuMuxYPEJhEGW+OrNQ5RfnBfL6AVH4w=) 15: _P0C-SR8Kw9w9haP-aP3nTgQVNI.roa (hash: 8MfPM40gokqxEviwGWTmZUjx1l7KKFS499HIMZ/P+Eg=) 16: aHo5M1RoL7FKPSf5l-vOxtoiiyc.roa (hash: nQApn0hLdraUfEmIQ3A7TNFwA+SqKqDap59Iwwu352M=) 17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 19: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 20: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 21: oWL5joytfin_gt-k-BUcQBuOefw.roa (hash: EOEkeib+twkPeieXgGeJ/sLRKfqsyBday+MtX6lBB6c=) 22: pEYKqh-HZTICIznuDDkvZQKOpQs.roa (hash: +6JOcYl0e7Kly90geVNRPtpifQQJN2SaFu3Bf0va6jA=) 23: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 24: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=) 25: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 26: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:42:c3:c5:bd:25:f7:ea:5e:31:8b:98:cf:a4:e7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Sep 10 03:00:49 2026 GMT Not After : Sep 11 03:00:49 2026 GMT Subject: CN=9deafde2630bf92c95ccc9f789a8357013db0793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:d7:c9:a3:b0:f0:1f:0b:22:d6:f7:2e:d0: 41:97:9d:89:c8:8a:88:5d:6a:33:62:53:00:b0:1f: 50:d8:ed:04:70:17:4c:38:c8:f9:a9:7c:10:01:46: e1:61:70:ba:bc:98:8a:bd:a7:da:c7:ec:cf:b1:8c: 84:d9:c7:a2:30:a4:92:cd:7a:2d:73:84:a7:3d:f2: 06:fc:ad:46:22:4d:99:fb:5d:90:ee:da:78:14:fd: 60:23:39:a8:94:1b:60:99:07:5b:bb:48:e0:56:37: 2c:7c:e9:dc:65:dc:c6:0c:96:04:54:1b:9a:7e:f4: 7b:f9:9c:73:7e:8c:5a:17:da:15:1c:9a:b2:2d:13: 9c:b5:46:4b:8c:b6:ad:95:0f:04:8f:55:1f:72:ff: 5f:41:af:82:6d:b8:da:7b:8d:b7:cb:f8:87:a0:1e: 3e:84:b9:1d:48:41:d0:0f:07:77:48:76:00:ef:04: d2:6a:1b:fc:7f:28:0a:28:e5:ae:35:65:fc:a7:85: 93:b7:bd:df:d4:ba:74:94:ef:0a:97:aa:0a:7e:6a: 36:e7:52:60:28:39:61:26:98:c1:51:51:e6:7b:d4: ee:85:80:1c:b8:8f:46:6d:49:d1:c6:a6:68:5e:fe: 04:4a:4f:00:22:4a:31:9c:f6:2a:91:38:eb:6d:3a: 91:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EA:FD:E2:63:0B:F9:2C:95:CC:C9:F7:89:A8:35:70:13:DB:07:93 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:31:d0:43:62:e1:51:84:a9:83:5b:5e:eb:28:c6:7e:52:ce: 37:d9:7b:f8:5f:da:6d:4e:ee:7e:f4:47:e4:0b:91:87:10:af: a1:13:68:2c:79:b1:55:c2:db:21:b4:8d:11:a7:ce:9e:74:4c: 4b:39:9d:09:25:c4:fb:c5:e2:e2:7f:f1:6a:9c:1e:7d:da:6e: 8a:f1:6b:e8:a1:b0:0a:89:66:99:d2:e8:12:ef:3a:b5:c0:b2: 5e:dd:b3:ac:61:2a:95:4b:8c:b5:03:5d:4d:c6:0c:66:1f:24: cd:d3:34:65:e0:fa:07:87:61:70:27:d2:99:9f:2c:f9:f9:d8: a9:0a:62:f1:c1:70:cf:5b:75:75:30:5c:93:2d:7c:7e:ed:b8: 95:ca:1e:73:bc:47:1c:7d:de:5a:fb:a8:6f:19:4e:22:d5:84: 39:14:22:06:a7:e5:94:7a:e7:a2:f2:a5:96:30:c6:19:98:b4: c0:6c:8d:0c:ce:fe:53:70:20:f3:7c:52:b8:aa:47:c1:05:14: cd:56:9c:07:96:24:e6:f4:61:28:0a:db:27:b5:33:51:64:b2: 6b:4f:f9:69:b5:cb:93:cf:9a:aa:ed:1f:7a:98:05:1c:2c:31: b7:26:83:6f:c4:a8:9f:59:ed:43:18:8d:22:fb:3b:49:9f:0c: 43:6f:f7:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJQsPFvSX36l4xi5jPpOc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwOTEwMDMwMDQ5WhcNMjYwOTExMDMwMDQ5WjAzMTEwLwYDVQQD Eyg5ZGVhZmRlMjYzMGJmOTJjOTVjY2M5Zjc4OWE4MzU3MDEzZGIwNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6vXyaOw8B8LItb3LtBBl52JyIqI XWozYlMAsB9Q2O0EcBdMOMj5qXwQAUbhYXC6vJiKvafax+zPsYyE2ceiMKSSzXot c4SnPfIG/K1GIk2Z+12Q7tp4FP1gIzmolBtgmQdbu0jgVjcsfOncZdzGDJYEVBua fvR7+ZxzfoxaF9oVHJqyLROctUZLjLatlQ8Ej1Ufcv9fQa+Cbbjae423y/iHoB4+ hLkdSEHQDwd3SHYA7wTSahv8fygKKOWuNWX8p4WTt73f1Lp0lO8Kl6oKfmo251Jg KDlhJpjBUVHme9TuhYAcuI9GbUnRxqZoXv4ESk8AIkoxnPYqkTjrbTqRzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3q/eJjC/kslczJ94moNXAT2weTMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTHQQ2Lh UYSpg1te6yjGflLON9l7+F/abU7ufvRH5AuRhxCvoRNoLHmxVcLbIbSNEafOnnRM SzmdCSXE+8Xi4n/xapwefdpuivFr6KGwColmmdLoEu86tcCyXt2zrGEqlUuMtQNd TcYMZh8kzdM0ZeD6B4dhcCfSmZ8s+fnYqQpi8cFwz1t1dTBcky18fu24lcoec7xH HH3eWvuobxlOItWEORQiBqfllHrnovKlljDGGZi0wGyNDM7+U3Ag83xSuKpHwQUU zVacB5Yk5vRhKArbJ7UzUWSya0/5abXLk8+aqu0fepgFHCwxtyaDb8Son1ntQxiN Ivs7SZ8MQ2/3bA== -----END CERTIFICATE-----Generated at Thu Sep 10 14:35:23 2026 by rpki-client