$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 5xYx4esbQAf3Rb8sFPEzZNllwAQMUXTuYu7w8N4lTUw= Subject key identifier: D4:18:AE:84:C6:D5:5C:81:0C:1C:3E:9D:4F:56:20:D7:88:07:F8:77 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019F1F0EAD4EED0B51932CBD374E6B3CB618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 168F Signing time: Wed 01 Jul 2026 19:01:23 +0000 Manifest this update: Wed 01 Jul 2026 19:01:23 +0000 Manifest next update: Thu 02 Jul 2026 19:01:23 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: y4PHkT7qdIMeP48JktttMu6XRJVd5I393n7cUz8M4SQ=) 12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 14: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 16: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 19: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 20: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 22: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 23: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 Jul 2026 16:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:1f:0e:ad:4e:ed:0b:51:93:2c:bd:37:4e:6b:3c:b6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jul 1 19:01:23 2026 GMT Not After : Jul 2 19:01:23 2026 GMT Subject: CN=d418ae84c6d55c810c1c3e9d4f5620d78807f877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:89:c1:ba:d4:c3:70:39:a5:90:27:52:11: 4f:c1:0f:3e:50:cd:27:15:6e:88:ec:9c:91:ed:b8: b7:ad:b9:46:ed:7e:a7:f7:71:92:8b:f4:04:f7:ba: 09:2f:68:15:75:3b:83:19:ef:57:09:a5:4b:9f:7f: 32:e2:f2:57:d2:54:9e:57:6c:5c:db:7b:59:1d:8d: 66:60:19:83:20:b1:01:5b:4d:48:f7:47:a1:b6:d2: ad:0a:76:71:02:66:f1:eb:7c:d0:48:bd:39:96:8a: 6d:76:a4:e9:10:e0:df:5a:7c:64:7d:57:ef:02:88: 95:c3:59:84:72:a3:e3:66:cb:5e:82:f9:d5:4c:42: 9e:ff:2d:b4:83:83:39:04:79:e3:06:c7:10:bd:94: bd:79:56:b9:13:8c:c1:1f:6b:82:12:22:06:12:10: 05:cf:27:ed:2b:11:1f:9c:48:61:b0:6f:aa:dc:0c: a8:a1:33:80:a8:0c:21:d2:97:db:9e:ee:4e:9e:3d: 75:b1:e5:2c:2b:63:14:aa:56:5b:69:f6:1e:23:da: 9b:99:36:02:33:18:09:82:f7:0d:53:00:27:71:58: ab:51:34:48:6b:fa:26:a9:bc:e0:89:de:ce:11:2d: cc:de:f5:9b:fe:89:f6:0f:32:c9:40:8f:2e:f2:d2: af:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:18:AE:84:C6:D5:5C:81:0C:1C:3E:9D:4F:56:20:D7:88:07:F8:77 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2d:56:7c:a8:f7:f1:b6:97:95:db:fd:80:b4:71:d2:d5:06: b6:bf:81:a1:04:56:1b:01:28:19:6c:38:76:36:12:ad:3a:b6: 59:78:65:da:0b:05:4e:d1:d4:24:1e:ef:73:1e:47:6c:d7:f4: 02:42:09:31:89:85:ba:38:b9:bc:67:fc:8e:27:dc:49:8b:c9: 6f:c3:75:5e:19:5d:47:0f:c4:0f:90:b1:d8:4b:60:2a:7f:d3: d6:f0:55:69:12:ed:30:33:0d:f3:4a:d3:75:72:c4:d7:45:da: d0:e1:21:ba:da:9d:57:d9:1f:cb:68:e0:6a:71:8c:d6:c1:b6: 50:4f:dd:09:b8:2f:92:86:31:f3:2d:82:99:81:97:f5:00:fc: 70:bf:d9:36:b3:60:30:db:a8:e0:37:d4:88:d3:d4:59:62:2d: c9:0e:e9:01:5c:96:02:30:d7:c4:1d:a2:b5:86:1d:f6:eb:50: b8:28:52:58:bd:07:f3:1c:47:cd:4b:a7:e0:eb:d9:ad:70:fb: de:bc:d5:57:36:67:d2:b3:0b:9f:5d:52:0f:8a:ce:ac:41:21: e1:b3:fd:c6:24:28:36:f5:ab:b9:da:9f:8f:49:f7:e4:c6:09: b1:1a:88:cb:1a:38:ad:b2:cc:67:17:cc:ea:25:d0:af:87:47: 87:ed:7d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8fDq1O7QtRkyy9N05rPLYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNzAxMTkwMTIzWhcNMjYwNzAyMTkwMTIzWjAzMTEwLwYDVQQD EyhkNDE4YWU4NGM2ZDU1YzgxMGMxYzNlOWQ0ZjU2MjBkNzg4MDdmODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRaJwbrUw3A5pZAnUhFPwQ8+UM0n FW6I7JyR7bi3rblG7X6n93GSi/QE97oJL2gVdTuDGe9XCaVLn38y4vJX0lSeV2xc 23tZHY1mYBmDILEBW01I90ehttKtCnZxAmbx63zQSL05loptdqTpEODfWnxkfVfv AoiVw1mEcqPjZstegvnVTEKe/y20g4M5BHnjBscQvZS9eVa5E4zBH2uCEiIGEhAF zyftKxEfnEhhsG+q3AyooTOAqAwh0pfbnu5Onj11seUsK2MUqlZbafYeI9qbmTYC MxgJgvcNUwAncVirUTRIa/omqbzgid7OES3M3vWb/on2DzLJQI8u8tKv5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQYroTG1VyBDBw+nU9WINeIB/h3MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC1WfKj3 8baXldv9gLRx0tUGtr+BoQRWGwEoGWw4djYSrTq2WXhl2gsFTtHUJB7vcx5HbNf0 AkIJMYmFuji5vGf8jifcSYvJb8N1XhldRw/ED5Cx2EtgKn/T1vBVaRLtMDMN80rT dXLE10Xa0OEhutqdV9kfy2jganGM1sG2UE/dCbgvkoYx8y2CmYGX9QD8cL/ZNrNg MNuo4DfUiNPUWWItyQ7pAVyWAjDXxB2itYYd9utQuChSWL0H8xxHzUun4OvZrXD7 3rzVVzZn0rMLn11SD4rOrEEh4bP9xiQoNvWrudqfj0n35MYJsRqIyxo4rbLMZxfM 6iXQr4dHh+19Wg== -----END CERTIFICATE-----Generated at Thu Jul 2 02:02:52 2026 by rpki-client