$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: mFqHAx6ePhFa/OW+287lu+qPRlG1ZTqqQVOt7goQTg8= Subject key identifier: 1B:C1:7B:14:73:21:DC:E5:B3:64:40:9F:FE:B4:B7:BA:DA:E3:1D:E6 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 01A01C7826E229EB63E1273856143D4CAA90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1716 Signing time: Thu 20 Aug 2026 00:00:31 +0000 Manifest this update: Thu 20 Aug 2026 00:00:31 +0000 Manifest next update: Fri 21 Aug 2026 00:00:31 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 4: 1kOZn--0TV8mINAOK8zNe0cR5Fc.roa (hash: +yJ0/l/ebfqk5PtE/KW8wQHru8HbhRVMl8T92kwAYpA=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: peJn5huk28LR5SGcdWuoIxPhMdGRi5ZSmb+Uvigrw1Y=) 12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 14: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 15: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 16: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 17: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 19: jUGUoMYUN3ZYoWwyz7MweD_DD8g.roa (hash: TwO/js2mCJinc13dOSDj9ill0w/sSJlMwVo+p9a4L5g=) 20: l3kP8XKLnkc7kxARwwBVsIubeYo.roa (hash: ODIpUeXui7cr21j59575AUDpip/iPtzw/YNI1x8c83k=) 21: pEYKqh-HZTICIznuDDkvZQKOpQs.roa (hash: +6JOcYl0e7Kly90geVNRPtpifQQJN2SaFu3Bf0va6jA=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=) 24: wCMm-aenH_zuMJOSQuJWeb71NJ0.roa (hash: ayLqc4WWQljF7RYZ5IzvneWbkS5edMXjdGTG+Aa5QjQ=) 25: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 26: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Aug 2026 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:1c:78:26:e2:29:eb:63:e1:27:38:56:14:3d:4c:aa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Aug 20 00:00:31 2026 GMT Not After : Aug 21 00:00:31 2026 GMT Subject: CN=1bc17b147321dce5b364409ffeb4b7badae31de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:db:35:d2:2c:c7:1b:22:8a:3f:1e:c3:5d: ba:0b:0e:25:fc:75:13:5c:cb:96:27:85:0e:82:c0: 31:0a:f8:cd:1b:5b:98:6f:65:07:39:1c:bd:31:27: b9:34:c4:70:b6:81:c9:65:1b:93:24:24:13:d9:37: c2:ee:6c:08:58:ad:20:8f:40:14:27:02:ea:a4:20: d2:60:fc:30:a4:5e:49:63:af:c7:61:db:ed:04:7d: e3:b8:32:31:64:74:4c:60:79:21:66:69:0d:ed:b0: c7:e3:ee:e5:d0:92:11:cf:36:d1:da:34:93:e3:0e: 1e:57:98:f6:16:9f:7c:de:6b:2e:58:a9:d2:8a:47: 2f:4f:20:8d:f8:b8:66:97:7a:7b:5f:d6:6b:57:9d: e3:2b:85:ba:f7:c0:ad:ef:0e:03:6f:56:f5:ff:52: db:a9:87:ce:da:5b:d2:0e:15:7f:44:20:7d:e2:56: 57:ee:f5:42:b5:13:2f:cf:e8:9b:0d:4a:3c:cc:0a: da:39:ba:8a:c5:9f:8f:a7:40:7b:42:86:27:31:a4: 89:ac:81:c7:c7:c0:06:00:c6:22:2e:6d:a9:0f:d1: 98:e1:05:6b:e9:24:df:2e:06:8b:2a:49:bb:f3:d6: 92:bd:2a:92:33:a8:52:cb:b1:e2:66:67:29:b5:50: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C1:7B:14:73:21:DC:E5:B3:64:40:9F:FE:B4:B7:BA:DA:E3:1D:E6 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f9:61:41:e7:8a:2f:ef:da:25:5b:c5:6e:6b:06:bb:0b:fd: ed:11:42:79:2c:23:a2:9e:2a:32:5a:12:c7:56:13:d7:3d:f3: ab:57:68:c7:ef:be:75:2f:80:b1:6f:d6:9c:35:81:0e:13:f2: 16:54:db:09:d6:27:ab:d2:bc:74:46:ed:33:fd:43:b1:c7:97: 21:94:2a:0f:c7:1c:d5:6e:64:55:b0:54:f7:26:ea:ff:d9:98: f9:81:99:e6:31:4e:6e:73:13:c5:38:6f:02:a4:56:11:ff:6f: 6e:70:93:1e:93:1d:10:a7:75:a7:50:dc:6e:fb:00:8f:7f:26: 8e:f5:fb:af:2c:da:21:b5:9d:59:9a:a1:5b:c0:94:39:01:b1: ee:f1:d6:19:5c:e4:f2:90:1b:20:26:e9:2c:ce:02:f6:e9:7f: bb:7d:c0:da:48:70:38:d9:b1:25:5f:95:a5:d4:b6:f4:d8:24: f1:2c:57:d2:56:14:59:09:de:f2:da:46:6d:28:60:4f:ed:0a: 25:a1:91:f7:43:7a:cd:03:7d:a8:b5:2c:20:dd:7c:a3:f1:4c: 3f:70:36:51:1d:3e:40:ef:7c:91:38:8f:dc:11:80:89:11:82: c0:0e:1b:c2:f8:de:25:5d:bf:ba:6c:84:a0:68:c1:3c:ef:84: 2b:a6:0e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAceCbiKetj4Sc4VhQ9TKqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwODIwMDAwMDMxWhcNMjYwODIxMDAwMDMxWjAzMTEwLwYDVQQD EygxYmMxN2IxNDczMjFkY2U1YjM2NDQwOWZmZWI0YjdiYWRhZTMxZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw73bNdIsxxsiij8ew126Cw4l/HUT XMuWJ4UOgsAxCvjNG1uYb2UHORy9MSe5NMRwtoHJZRuTJCQT2TfC7mwIWK0gj0AU JwLqpCDSYPwwpF5JY6/HYdvtBH3juDIxZHRMYHkhZmkN7bDH4+7l0JIRzzbR2jST 4w4eV5j2Fp983msuWKnSikcvTyCN+Lhml3p7X9ZrV53jK4W698Ct7w4Db1b1/1Lb qYfO2lvSDhV/RCB94lZX7vVCtRMvz+ibDUo8zAraObqKxZ+Pp0B7QoYnMaSJrIHH x8AGAMYiLm2pD9GY4QVr6STfLgaLKkm789aSvSqSM6hSy7HiZmcptVDqRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvBexRzIdzls2RAn/60t7ra4x3mMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvlhQeeK L+/aJVvFbmsGuwv97RFCeSwjop4qMloSx1YT1z3zq1dox+++dS+AsW/WnDWBDhPy FlTbCdYnq9K8dEbtM/1DsceXIZQqD8cc1W5kVbBU9ybq/9mY+YGZ5jFObnMTxThv AqRWEf9vbnCTHpMdEKd1p1DcbvsAj38mjvX7ryzaIbWdWZqhW8CUOQGx7vHWGVzk 8pAbICbpLM4C9ul/u33A2khwONmxJV+VpdS29Ngk8SxX0lYUWQne8tpGbShgT+0K JaGR90N6zQN9qLUsIN18o/FMP3A2UR0+QO98kTiP3BGAiRGCwA4bwvjeJV2/umyE oGjBPO+EK6YOTQ== -----END CERTIFICATE-----Generated at Thu Aug 20 07:52:29 2026 by rpki-client