$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: sB/VKb5QogW4kI5bADB4CZb8cepDXsYjGQEQrtLx+8Q= Subject key identifier: 4E:A2:A8:A6:21:1D:25:34:F3:C6:2A:6B:FB:FB:AC:BE:38:EE:46:3F Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019C8B3B85B914F8899BD7C28248490CF00B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1538 Signing time: Mon 23 Feb 2026 16:00:59 +0000 Manifest this update: Mon 23 Feb 2026 16:00:59 +0000 Manifest next update: Tue 24 Feb 2026 16:00:59 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=) 6: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 7: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 8: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 9: E2F8QJnesLz_AJ_idudS8beXQtA.roa (hash: Du6ux9WA5KEGcJVYYMPZ9Mo1WXuEbp8iOUzzcljxT9A=) 10: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 11: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 12: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 13: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: N4ghYEdpAoJlhBRAF69dG1Nkk6UzUq3MjKa8MTa4wpg=) 15: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 16: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 17: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 19: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 20: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 21: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 22: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 23: lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa (hash: mnJpBrQabQ5UZ897yJplacc4MCQhCl2/8KWX6EqeD4k=) 24: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=) 25: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 26: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 27: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 28: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 24 Feb 2026 15:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:8b:3b:85:b9:14:f8:89:9b:d7:c2:82:48:49:0c:f0:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Feb 23 16:00:59 2026 GMT Not After : Feb 24 16:00:59 2026 GMT Subject: CN=4ea2a8a6211d2534f3c62a6bfbfbacbe38ee463f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:84:22:80:a9:1b:e3:5b:ca:a3:e4:e4:e5: ff:45:07:dd:48:bd:99:3e:77:7f:3d:a5:f4:a7:bd: 6b:b2:28:ea:e8:91:0b:f2:a5:75:8c:13:6f:80:ae: db:97:10:62:51:47:71:2b:57:30:a4:db:96:37:63: 34:5e:17:b8:16:5e:af:7c:a2:f3:cd:a9:27:44:d4: 2b:75:07:ac:ab:5f:1e:48:32:f9:08:9a:60:66:3a: 87:9a:74:2c:b8:67:84:c4:18:b9:c4:90:d3:2b:94: 6e:50:1b:df:8e:a5:4d:65:60:40:63:0c:4f:9f:31: 5f:76:09:a9:9a:fa:4f:c8:4e:47:a6:82:32:94:67: 32:c3:6e:42:0c:62:9b:14:92:75:04:06:bc:bc:3f: 09:17:d0:4f:96:a9:d6:1d:55:f2:3d:5b:4f:9c:06: e8:08:8f:93:cb:23:2b:31:74:64:d7:e8:03:d7:2a: 65:77:fa:89:bd:c0:9f:d6:d8:28:59:0d:22:4d:ca: 3f:d8:d9:94:e2:a6:1b:d2:f1:ae:6e:32:bc:da:1a: 27:3b:e3:15:de:87:2c:4b:82:6b:97:c8:c8:02:1e: 22:33:78:d9:73:b1:a5:e3:67:31:fe:f1:60:33:0f: 0a:bf:cd:bf:55:b8:a8:c4:13:a5:87:9c:1c:34:7f: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A2:A8:A6:21:1D:25:34:F3:C6:2A:6B:FB:FB:AC:BE:38:EE:46:3F X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c6:ba:1a:d9:57:df:f2:e8:c0:f7:3a:c4:d2:f1:4f:fe:1b: 43:51:6f:c9:56:c2:7b:2d:e8:ae:6e:e4:8a:d2:1a:58:21:e6: 5c:b6:6e:06:29:d6:e7:04:94:26:d6:66:f9:3f:08:e0:df:0e: 6d:49:90:73:78:f1:42:38:c9:57:f0:ef:5f:b0:11:80:80:67: bb:29:66:9c:4a:8a:9c:00:ac:39:48:86:84:8a:6f:74:d4:13: a3:76:aa:dc:f1:96:10:d8:67:00:d3:d2:d6:24:a6:b8:f6:74: 5e:8c:29:c5:a2:36:2e:42:be:f7:1b:e4:bc:92:fa:1d:1a:e7: 37:fa:3a:b5:4c:fa:51:b3:e7:b7:5f:6a:7f:c5:9f:86:3b:61: 48:8b:18:2d:b2:04:57:f5:a4:88:a8:4e:68:35:3f:05:20:a6: f6:1e:05:25:64:5c:ab:78:9d:e5:17:f2:9e:df:82:48:49:78: 19:4a:72:df:ae:be:ea:2e:f3:30:a0:e3:50:16:ac:b6:9c:45: a2:a7:a1:cf:fb:54:d1:27:49:71:90:1a:fd:9f:ff:f8:54:34: c6:fd:19:74:f7:13:11:72:9e:c2:68:6d:5c:30:1e:e1:fc:e1: 18:c2:b7:8a:b8:76:d3:c3:c6:10:83:f9:74:74:89:5a:a7:64: 5f:4a:2c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyLO4W5FPiJm9fCgkhJDPALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMjIzMTYwMDU5WhcNMjYwMjI0MTYwMDU5WjAzMTEwLwYDVQQD Eyg0ZWEyYThhNjIxMWQyNTM0ZjNjNjJhNmJmYmZiYWNiZTM4ZWU0NjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iiEIoCpG+NbyqPk5OX/RQfdSL2Z Pnd/PaX0p71rsijq6JEL8qV1jBNvgK7blxBiUUdxK1cwpNuWN2M0Xhe4Fl6vfKLz zaknRNQrdQesq18eSDL5CJpgZjqHmnQsuGeExBi5xJDTK5RuUBvfjqVNZWBAYwxP nzFfdgmpmvpPyE5HpoIylGcyw25CDGKbFJJ1BAa8vD8JF9BPlqnWHVXyPVtPnAbo CI+TyyMrMXRk1+gD1ypld/qJvcCf1tgoWQ0iTco/2NmU4qYb0vGubjK82honO+MV 3ocsS4Jrl8jIAh4iM3jZc7Gl42cx/vFgMw8Kv82/VbioxBOlh5wcNH8oPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6iqKYhHSU088Yqa/v7rL447kY/MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8a6GtlX 3/LowPc6xNLxT/4bQ1FvyVbCey3orm7kitIaWCHmXLZuBinW5wSUJtZm+T8I4N8O bUmQc3jxQjjJV/DvX7ARgIBnuylmnEqKnACsOUiGhIpvdNQTo3aq3PGWENhnANPS 1iSmuPZ0XowpxaI2LkK+9xvkvJL6HRrnN/o6tUz6UbPnt19qf8WfhjthSIsYLbIE V/WkiKhOaDU/BSCm9h4FJWRcq3id5Rfynt+CSEl4GUpy366+6i7zMKDjUBastpxF oqehz/tU0SdJcZAa/Z//+FQ0xv0ZdPcTEXKewmhtXDAe4fzhGMK3irh208PGEIP5 dHSJWqdkX0osgw== -----END CERTIFICATE-----Generated at Tue Feb 24 00:04:15 2026 by rpki-client