$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: nh2I+F+Op4+GZ2AlY4Uwu5XSdqihOzSm755XCDzMBmQ= Subject key identifier: AE:DE:32:B3:2A:EE:5F:6F:83:A8:52:AC:91:CF:DA:08:FE:40:AA:A9 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019DE28EF7A0402DDA86B01680B357C0C931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 15EB Signing time: Fri 01 May 2026 08:01:53 +0000 Manifest this update: Fri 01 May 2026 08:01:53 +0000 Manifest next update: Sat 02 May 2026 08:01:53 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: lUDW7znDKlGii3sLDIhQDyWX5UbRhcbDRR//W1Z8PyA=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 02 May 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:e2:8e:f7:a0:40:2d:da:86:b0:16:80:b3:57:c0:c9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: May 1 08:01:53 2026 GMT Not After : May 2 08:01:53 2026 GMT Subject: CN=aede32b32aee5f6f83a852ac91cfda08fe40aaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:5a:9f:e1:db:db:f4:3b:b2:45:67:dd:74: aa:6a:86:d5:0c:90:6f:dc:dc:1c:93:cb:f1:ae:bc: 8d:aa:13:81:5b:56:36:06:4a:64:f6:d9:35:f4:d0: 94:d7:2b:cd:49:a8:13:71:a2:3e:cf:33:4d:91:41: 52:b9:20:c1:f3:44:c0:97:64:bf:3b:b3:fd:48:fe: fc:62:c3:9e:13:ab:56:6a:46:78:e4:88:38:ac:37: dd:f4:85:e7:59:b7:56:dd:ec:fd:1c:c2:d4:c6:c4: e7:47:ea:a3:92:86:cf:82:28:a2:07:65:e2:21:bf: a3:aa:23:29:28:02:87:46:46:75:d8:03:67:08:d1: 58:8f:39:43:9e:fb:75:9c:08:93:6e:9f:7e:8d:a3: f2:ff:dc:e9:a1:e1:af:e4:7c:0b:9a:fe:34:8d:f6: e0:6b:28:57:6b:ed:76:7e:89:2f:b3:1d:1f:ba:e0: 87:2f:ae:be:43:73:3d:5b:f2:e9:fb:40:df:4a:29: fd:45:d4:18:38:59:03:b9:4e:c0:49:b0:a6:db:a8: 5e:8b:82:f4:a1:b1:f1:1e:c0:d7:9c:33:fe:10:1b: 48:02:14:24:2b:1a:27:13:22:91:9f:31:98:12:98: d6:7b:10:61:b6:b5:21:a0:4e:3e:39:9e:77:cc:9b: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DE:32:B3:2A:EE:5F:6F:83:A8:52:AC:91:CF:DA:08:FE:40:AA:A9 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:98:d0:78:2f:9e:98:ea:30:21:fd:bb:49:e1:1c:3c:c2:81: 2f:ef:77:63:a6:70:88:fc:79:b8:7f:6c:ae:5c:8d:cb:0f:e3: 58:5d:69:bd:48:b7:36:a0:44:d4:b6:09:5d:53:ee:c1:5e:b0: 25:e6:0d:76:c2:04:6e:cb:18:e2:4f:26:dc:11:a5:f8:f3:e2: a7:b5:ca:9e:4f:e7:07:79:33:d2:0e:d9:07:02:c6:82:a3:ba: 5e:2e:a2:d2:a6:51:91:14:dc:71:b9:be:c5:3e:0c:f7:20:a4: df:d6:5b:04:cb:e3:bf:3d:49:c3:52:37:dc:95:c5:85:0b:4c: e9:5e:a6:d6:ea:ce:89:27:e1:eb:3c:cc:bb:4b:72:1a:33:10: f9:c6:76:67:4a:73:eb:2e:ef:49:03:94:f1:2a:e9:b3:02:d8: 72:fe:2a:65:34:a1:2c:79:6c:65:ca:4f:9a:40:d2:b6:02:00: 07:bc:2e:38:de:8d:ba:1c:f4:b0:bf:b2:95:0e:93:7d:67:08: f8:4e:fa:e6:90:0e:37:0e:52:04:88:5e:27:df:2a:df:49:a5: af:5f:85:66:0b:d1:91:27:c4:c8:fc:32:54:4a:af:51:72:f0: 66:22:27:4f:f8:37:4e:bf:e9:9b:f4:ae:e1:72:58:ab:a8:64: dd:d8:f4:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ3ijvegQC3ahrAWgLNXwMkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNTAxMDgwMTUzWhcNMjYwNTAyMDgwMTUzWjAzMTEwLwYDVQQD EyhhZWRlMzJiMzJhZWU1ZjZmODNhODUyYWM5MWNmZGEwOGZlNDBhYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjFan+Hb2/Q7skVn3XSqaobVDJBv 3Nwck8vxrryNqhOBW1Y2Bkpk9tk19NCU1yvNSagTcaI+zzNNkUFSuSDB80TAl2S/ O7P9SP78YsOeE6tWakZ45Ig4rDfd9IXnWbdW3ez9HMLUxsTnR+qjkobPgiiiB2Xi Ib+jqiMpKAKHRkZ12ANnCNFYjzlDnvt1nAiTbp9+jaPy/9zpoeGv5HwLmv40jfbg ayhXa+12fokvsx0fuuCHL66+Q3M9W/Lp+0DfSin9RdQYOFkDuU7ASbCm26hei4L0 obHxHsDXnDP+EBtIAhQkKxonEyKRnzGYEpjWexBhtrUhoE4+OZ53zJuGwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7eMrMq7l9vg6hSrJHP2gj+QKqpMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5jQeC+e mOowIf27SeEcPMKBL+93Y6ZwiPx5uH9srlyNyw/jWF1pvUi3NqBE1LYJXVPuwV6w JeYNdsIEbssY4k8m3BGl+PPip7XKnk/nB3kz0g7ZBwLGgqO6Xi6i0qZRkRTccbm+ xT4M9yCk39ZbBMvjvz1Jw1I33JXFhQtM6V6m1urOiSfh6zzMu0tyGjMQ+cZ2Z0pz 6y7vSQOU8SrpswLYcv4qZTShLHlsZcpPmkDStgIAB7wuON6Nuhz0sL+ylQ6TfWcI +E765pAONw5SBIheJ98q30mlr1+FZgvRkSfEyPwyVEqvUXLwZiInT/g3Tr/pm/Su 4XJYq6hk3dj0JA== -----END CERTIFICATE-----Generated at Fri May 1 18:12:24 2026 by rpki-client