$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: tPKIR0w2kHjmhLKLhHUuceJ+VirbRiqoceevq66+yH4= Subject key identifier: BD:DB:AB:81:71:96:70:13:77:36:F6:D0:C4:D4:D3:A3:E8:9C:46:CD Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D7A459950AE4938C92A35E337DABC988B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15B5 Signing time: Sat 11 Apr 2026 02:01:14 +0000 Manifest this update: Sat 11 Apr 2026 02:01:14 +0000 Manifest next update: Sun 12 Apr 2026 02:01:14 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: PL8rJq8XDt02BJxMVBYZ7XeBEjLjvzkbHwaVlpmzI5g=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 Apr 2026 23:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:7a:45:99:50:ae:49:38:c9:2a:35:e3:37:da:bc:98:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Apr 11 02:01:14 2026 GMT Not After : Apr 12 02:01:14 2026 GMT Subject: CN=bddbab81719670137736f6d0c4d4d3a3e89c46cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:f7:f4:66:24:fb:10:71:77:02:04:7b:c5: ca:dc:dd:4d:90:a8:41:39:5a:6d:c3:4c:f6:1e:64: 27:38:fa:d4:af:d0:51:a4:f6:1e:6d:e9:12:83:f6: bc:e9:c0:8b:50:4f:a2:87:82:04:c3:08:7f:29:c8: 4d:4e:c0:d6:9b:50:2c:48:ee:55:0f:0e:c3:ee:cc: 9c:fc:ba:2a:88:8e:62:c6:bd:db:3b:cd:e0:e3:05: ba:8e:42:af:e6:f8:92:b2:3c:8f:71:06:d9:5f:93: 8a:0e:b6:dc:40:88:17:58:2d:5e:45:e0:70:38:c3: 09:0d:4f:6f:11:cb:26:a9:85:88:03:b3:74:d2:10: 86:24:98:fd:14:7c:9a:19:a5:2b:4d:55:1c:4d:5e: 90:54:97:e1:56:2a:9b:0d:f9:2f:7f:a7:ef:08:d2: 58:b1:94:9e:69:46:9a:e6:36:78:6f:57:4d:70:fb: 74:bf:16:e9:66:37:de:91:ed:20:5f:ab:6d:d0:e9: 65:f6:59:e8:9f:6b:03:40:3d:67:7b:26:8f:2c:43: 71:ac:d2:a1:e0:9a:2b:ac:cd:3c:64:47:10:92:3d: f1:df:ce:3c:29:25:5b:ad:cf:87:f0:47:c3:80:98: f0:47:dc:6f:9b:e3:69:bd:23:a6:e0:9e:10:75:2c: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DB:AB:81:71:96:70:13:77:36:F6:D0:C4:D4:D3:A3:E8:9C:46:CD X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:58:6c:89:a4:c6:42:4f:8a:dd:9b:dd:3b:56:5b:28:29:6a: 4f:a7:fa:44:51:78:36:42:27:51:51:f2:92:39:99:5e:ba:b2: d6:69:b5:ca:ae:89:ab:6e:27:7d:5e:c9:4d:48:4f:eb:05:68: ef:d2:52:48:53:5c:ab:77:3e:27:11:d5:73:d8:08:8c:14:84: b9:89:57:f5:fe:ea:a1:7f:8e:a8:02:51:c5:6b:82:08:54:49: 3e:41:cc:aa:ff:b7:6e:f4:62:02:58:01:4b:37:59:fc:f8:ae: ea:32:33:3d:b0:41:7f:91:d3:c9:09:4d:16:a1:47:06:bd:d6: e8:51:5e:0d:63:af:a5:e1:34:49:e6:f1:f8:a3:e1:46:57:13: 8d:ca:61:9a:ab:4d:ca:8d:30:f8:37:e8:b3:83:19:7f:88:37: 92:0c:6c:99:0d:14:df:dc:5e:06:6b:6c:9b:c3:e1:86:ce:39: 99:2e:8f:f5:b4:8b:6f:ba:4c:be:47:56:0e:c4:31:55:8a:f3: 02:2a:45:f4:fc:07:3c:63:bd:4f:ac:eb:c1:73:1c:3b:3b:3a: b1:ae:7e:44:69:c0:a6:00:c4:33:ff:d1:d7:6b:d9:50:01:83: cf:a4:18:73:fe:b1:5f:f5:55:99:bf:3f:61:2f:af:4a:31:b9: 02:82:ec:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ16RZlQrkk4ySo14zfavJiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNDExMDIwMTE0WhcNMjYwNDEyMDIwMTE0WjAzMTEwLwYDVQQD EyhiZGRiYWI4MTcxOTY3MDEzNzczNmY2ZDBjNGQ0ZDNhM2U4OWM0NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYD39GYk+xBxdwIEe8XK3N1NkKhB OVptw0z2HmQnOPrUr9BRpPYebekSg/a86cCLUE+ih4IEwwh/KchNTsDWm1AsSO5V Dw7D7syc/LoqiI5ixr3bO83g4wW6jkKv5viSsjyPcQbZX5OKDrbcQIgXWC1eReBw OMMJDU9vEcsmqYWIA7N00hCGJJj9FHyaGaUrTVUcTV6QVJfhViqbDfkvf6fvCNJY sZSeaUaa5jZ4b1dNcPt0vxbpZjfeke0gX6tt0Oll9lnon2sDQD1neyaPLENxrNKh 4JorrM08ZEcQkj3x3848KSVbrc+H8EfDgJjwR9xvm+NpvSOm4J4QdSy47QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3bq4FxlnATdzb20MTU06PonEbNMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVhsiaTG Qk+K3ZvdO1ZbKClqT6f6RFF4NkInUVHykjmZXrqy1mm1yq6Jq24nfV7JTUhP6wVo 79JSSFNcq3c+JxHVc9gIjBSEuYlX9f7qoX+OqAJRxWuCCFRJPkHMqv+3bvRiAlgB SzdZ/Piu6jIzPbBBf5HTyQlNFqFHBr3W6FFeDWOvpeE0Sebx+KPhRlcTjcphmqtN yo0w+Dfos4MZf4g3kgxsmQ0U39xeBmtsm8Phhs45mS6P9bSLb7pMvkdWDsQxVYrz AipF9PwHPGO9T6zrwXMcOzs6sa5+RGnApgDEM//R12vZUAGDz6QYc/6xX/VVmb8/ YS+vSjG5AoLsgQ== -----END CERTIFICATE-----Generated at Sat Apr 11 04:04:49 2026 by rpki-client