$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: n6TgGIcMDptvcrIn/U1UnBQufPC/Ya5phpzBQug4xqw= Subject key identifier: F3:D6:31:CA:3B:3F:13:27:E5:BB:99:03:D5:62:A7:86:AC:24:EB:92 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D13EAD49C752D852A796D4860F86D2F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1580 Signing time: Sun 22 Mar 2026 05:00:49 +0000 Manifest this update: Sun 22 Mar 2026 05:00:49 +0000 Manifest next update: Mon 23 Mar 2026 05:00:49 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: DPT/Z/t3UYJeXN8HO0h+GrPZLvBklhPjh3TaeIi7lCw=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 22 Mar 2026 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:13:ea:d4:9c:75:2d:85:2a:79:6d:48:60:f8:6d:2f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Mar 22 05:00:49 2026 GMT Not After : Mar 23 05:00:49 2026 GMT Subject: CN=f3d631ca3b3f1327e5bb9903d562a786ac24eb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:61:6f:56:96:3a:e1:d2:be:5a:e5:13:c1: 71:bb:8b:28:78:a4:4e:f2:97:2e:cc:dd:50:09:13: 00:0a:e3:4c:3a:82:90:d5:a1:1c:85:0e:a1:69:03: ff:0f:ad:40:b7:84:ef:94:fa:e0:7a:9d:e6:ba:24: ea:9f:e7:15:f2:76:07:c5:df:e3:e5:a2:76:13:33: 28:f4:b0:c0:0b:57:bd:20:28:b8:e6:d4:1f:79:8e: 40:80:a8:6e:47:eb:60:38:06:8c:0e:3c:c5:da:ef: 09:23:f6:e7:c1:4a:48:17:05:f1:8e:1b:9f:b4:c9: 5d:b7:1b:0c:e9:c1:94:a1:dc:07:05:16:ea:a8:b5: d4:86:0e:b4:54:95:dc:6e:aa:98:1f:30:b0:0b:ae: 34:24:24:01:8e:01:05:36:0a:06:75:2c:e4:44:33: eb:30:1e:47:c1:1f:c6:6c:0d:45:3d:5d:b2:3f:2c: 19:c1:14:60:f4:64:83:cd:62:54:17:79:46:c4:0c: 11:e7:ed:72:18:aa:59:2b:a2:fd:f2:d5:ce:c9:e5: 24:7c:78:c0:49:98:e2:bd:75:fd:e6:5b:2c:55:b2: f3:06:76:7b:5e:4e:14:f0:a2:c2:5b:68:3a:d7:d9: df:31:24:3a:94:19:74:ff:27:1e:f9:92:99:f9:3a: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D6:31:CA:3B:3F:13:27:E5:BB:99:03:D5:62:A7:86:AC:24:EB:92 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:60:5b:1b:f7:e1:56:c3:bd:2d:9d:99:93:4f:50:ed:a7:0c: fd:b2:3e:d6:74:d5:6c:68:7e:c9:87:bd:e4:7d:de:1a:01:e3: ac:da:43:24:f1:84:6d:da:c3:0c:be:7f:be:dc:35:5f:dd:ab: b5:21:e6:41:72:00:ca:83:d9:f4:f9:66:30:4f:82:70:74:73: 1c:d9:0e:a8:18:16:56:2e:15:1a:a2:ec:78:2e:a1:09:4f:3b: 3b:06:2f:e9:69:e0:44:22:4c:a1:b1:5d:cb:1b:d8:a2:ac:0c: 29:9e:9e:46:93:cc:2b:62:00:ca:87:b8:66:5b:1c:f4:a7:08: ef:b0:50:94:61:66:4f:97:17:ce:04:80:ca:6d:cb:fd:a5:87: e2:d5:72:d9:b5:0d:25:84:6d:90:3a:87:1b:31:71:d1:42:eb: 50:61:04:9d:f1:c0:9c:ef:5c:4c:f0:2e:b0:cf:b1:ac:51:7e: 07:bb:75:95:a4:49:d7:99:81:49:1f:d7:38:07:37:01:5e:90: be:89:ba:95:1c:6c:f5:d9:28:56:c1:2e:6c:a0:9d:bd:29:8c: 83:89:72:ca:91:21:86:f9:6d:48:98:69:41:8c:66:81:c2:8e: d0:b1:35:27:77:3d:52:ad:68:57:c6:3b:a3:c9:f7:a1:76:94: f2:13:de:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0T6tScdS2FKnltSGD4bS+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMzIyMDUwMDQ5WhcNMjYwMzIzMDUwMDQ5WjAzMTEwLwYDVQQD EyhmM2Q2MzFjYTNiM2YxMzI3ZTViYjk5MDNkNTYyYTc4NmFjMjRlYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkxhb1aWOuHSvlrlE8Fxu4soeKRO 8pcuzN1QCRMACuNMOoKQ1aEchQ6haQP/D61At4TvlPrgep3muiTqn+cV8nYHxd/j 5aJ2EzMo9LDAC1e9ICi45tQfeY5AgKhuR+tgOAaMDjzF2u8JI/bnwUpIFwXxjhuf tMldtxsM6cGUodwHBRbqqLXUhg60VJXcbqqYHzCwC640JCQBjgEFNgoGdSzkRDPr MB5HwR/GbA1FPV2yPywZwRRg9GSDzWJUF3lGxAwR5+1yGKpZK6L98tXOyeUkfHjA SZjivXX95lssVbLzBnZ7Xk4U8KLCW2g619nfMSQ6lBl0/yce+ZKZ+Tr3wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPWMco7PxMn5buZA9Vip4asJOuSMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyGBbG/fh VsO9LZ2Zk09Q7acM/bI+1nTVbGh+yYe95H3eGgHjrNpDJPGEbdrDDL5/vtw1X92r tSHmQXIAyoPZ9PlmME+CcHRzHNkOqBgWVi4VGqLseC6hCU87OwYv6WngRCJMobFd yxvYoqwMKZ6eRpPMK2IAyoe4Zlsc9KcI77BQlGFmT5cXzgSAym3L/aWH4tVy2bUN JYRtkDqHGzFx0ULrUGEEnfHAnO9cTPAusM+xrFF+B7t1laRJ15mBSR/XOAc3AV6Q vom6lRxs9dkoVsEubKCdvSmMg4lyypEhhvltSJhpQYxmgcKO0LE1J3c9Uq1oV8Y7 o8n3oXaU8hPeGg== -----END CERTIFICATE-----Generated at Sun Mar 22 08:13:43 2026 by rpki-client