$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: HayBuNNE0pZONVkb5czFimUK+2/lyfA4xqd2eieOa/c= Subject key identifier: BB:F0:A9:C8:80:D7:6A:83:13:4E:D3:05:1B:6D:41:E2:56:AE:C0:A4 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019DF3EFA0BF71667CDF62814FBFD91D0645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15F4 Signing time: Mon 04 May 2026 17:01:00 +0000 Manifest this update: Mon 04 May 2026 17:01:00 +0000 Manifest next update: Tue 05 May 2026 17:01:00 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: LR9LpiEYsSlfyqs5pDZCTyIcJfzFMqESR58g9fHAR4o=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 May 2026 14:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f3:ef:a0:bf:71:66:7c:df:62:81:4f:bf:d9:1d:06:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: May 4 17:01:00 2026 GMT Not After : May 5 17:01:00 2026 GMT Subject: CN=bbf0a9c880d76a83134ed3051b6d41e256aec0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:56:63:44:11:83:77:f2:33:08:25:b3:d2: 0a:7a:d6:65:bd:a5:4f:87:1a:b9:c2:1f:86:d0:0f: 66:d9:e4:92:c6:6c:31:b2:8a:a4:11:89:ff:f8:f9: f2:87:40:68:0a:8e:35:22:2f:78:c6:f5:cc:e9:9c: 69:5d:5e:b7:ae:a7:9c:43:d9:44:cf:90:99:89:5b: bf:12:2d:99:3b:18:76:0e:d1:11:40:8a:a2:27:26: 11:dc:57:b5:87:83:eb:d9:36:90:96:26:58:49:b8: e9:5b:b0:27:33:23:d7:ea:ee:51:4f:8d:10:1c:8a: 93:db:2a:4f:4f:16:c2:57:a6:7a:f5:39:bf:1b:6a: 9f:59:32:01:7b:bf:bb:23:bd:75:ca:9d:93:a5:7a: be:f9:67:07:70:1e:1d:de:0e:00:79:77:69:a1:32: 04:53:95:11:c6:dd:ca:35:92:ea:e9:3c:81:62:bb: 40:75:f6:6f:b4:6b:9c:35:49:ad:77:8f:be:91:56: 0b:d7:86:25:c2:30:9c:93:18:37:52:c9:ea:18:bd: 58:c1:bf:2f:00:61:0f:1a:fd:ac:76:e0:38:d1:31: 46:1a:65:1b:22:d6:6f:77:ca:6e:f5:3e:1c:f1:24: 6e:84:53:68:96:86:b0:8e:57:99:71:ab:27:0e:3d: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F0:A9:C8:80:D7:6A:83:13:4E:D3:05:1B:6D:41:E2:56:AE:C0:A4 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:73:29:17:37:e2:2a:17:1f:72:3c:72:17:57:17:25:28:45: 7b:c0:10:85:89:e7:e1:c0:ce:9d:86:1b:11:5e:4f:ad:aa:db: 4f:a4:03:a9:bf:f1:cf:68:5f:6a:e6:11:bf:b0:c9:58:dd:96: 54:2c:f9:fd:7a:72:78:f2:ab:3d:da:25:7a:ff:91:4b:bc:a7: c3:6d:91:82:1f:71:60:2f:55:96:0f:e9:63:71:03:a0:48:57: 40:86:43:7c:c5:16:75:7e:67:ba:54:df:38:c2:13:cf:a2:e8: d3:9d:51:a9:53:94:10:72:b8:39:28:12:1f:2c:43:ea:18:7e: b3:6e:01:bb:38:b1:ab:4c:8a:12:41:d6:53:d6:40:5d:8e:a1: cd:58:4f:ef:3b:7b:ee:3c:7b:79:0f:9b:86:21:cf:5c:d5:0b: 8c:8a:ec:b8:72:79:4d:3c:14:1f:2e:2d:2f:e1:9c:f9:57:de: 4f:40:ad:1f:10:63:a1:b7:41:f5:7d:d5:e2:87:b0:6d:52:ed: 74:fd:f6:b0:a2:42:15:e6:e5:55:80:d9:ff:02:5f:e7:f3:8f: fd:0b:ed:8c:c6:eb:41:34:b5:1b:1e:4b:a3:e2:3d:30:71:f7: 75:d1:f7:ff:34:75:d5:db:4d:62:2f:5b:ac:ac:00:b8:2e:33: 7f:5a:c6:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3z76C/cWZ832KBT7/ZHQZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNTA0MTcwMTAwWhcNMjYwNTA1MTcwMTAwWjAzMTEwLwYDVQQD EyhiYmYwYTljODgwZDc2YTgzMTM0ZWQzMDUxYjZkNDFlMjU2YWVjMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroNWY0QRg3fyMwgls9IKetZlvaVP hxq5wh+G0A9m2eSSxmwxsoqkEYn/+Pnyh0BoCo41Ii94xvXM6ZxpXV63rqecQ9lE z5CZiVu/Ei2ZOxh2DtERQIqiJyYR3Fe1h4Pr2TaQliZYSbjpW7AnMyPX6u5RT40Q HIqT2ypPTxbCV6Z69Tm/G2qfWTIBe7+7I711yp2TpXq++WcHcB4d3g4AeXdpoTIE U5URxt3KNZLq6TyBYrtAdfZvtGucNUmtd4++kVYL14YlwjCckxg3UsnqGL1Ywb8v AGEPGv2sduA40TFGGmUbItZvd8pu9T4c8SRuhFNoloawjleZcasnDj0yiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvwqciA12qDE07TBRttQeJWrsCkMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnMpFzfi KhcfcjxyF1cXJShFe8AQhYnn4cDOnYYbEV5PrarbT6QDqb/xz2hfauYRv7DJWN2W VCz5/XpyePKrPdolev+RS7ynw22Rgh9xYC9Vlg/pY3EDoEhXQIZDfMUWdX5nulTf OMITz6Lo051RqVOUEHK4OSgSHyxD6hh+s24Buzixq0yKEkHWU9ZAXY6hzVhP7zt7 7jx7eQ+bhiHPXNULjIrsuHJ5TTwUHy4tL+Gc+VfeT0CtHxBjobdB9X3V4oewbVLt dP32sKJCFeblVYDZ/wJf5/OP/QvtjMbrQTS1Gx5Lo+I9MHH3ddH3/zR11dtNYi9b rKwAuC4zf1rG1A== -----END CERTIFICATE-----Generated at Mon May 4 21:08:42 2026 by rpki-client