$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: Dc+s7xAu8xzW4VMUnVbQNZFtApO7YZXVSbbzsKnaXgQ= Subject key identifier: AD:7C:5C:67:D8:F4:4F:A3:30:4D:E0:0C:CC:D3:3C:4E:14:99:D6:30 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D0C31A038BDB58EE34E017FBBBA544806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 157C Signing time: Fri 20 Mar 2026 17:01:11 +0000 Manifest this update: Fri 20 Mar 2026 17:01:11 +0000 Manifest next update: Sat 21 Mar 2026 17:01:11 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: B/jvyyApJjLBwVPlSTzGCVSJrOp7hkMpeQ0vtdzqGXk=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 21 Mar 2026 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:0c:31:a0:38:bd:b5:8e:e3:4e:01:7f:bb:ba:54:48:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Mar 20 17:01:11 2026 GMT Not After : Mar 21 17:01:11 2026 GMT Subject: CN=ad7c5c67d8f44fa3304de00cccd33c4e1499d630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:45:37:e8:3f:03:c8:eb:0b:44:cb:12:69: 0b:de:b1:59:2f:9e:18:98:26:4e:95:5a:c7:03:ca: 0c:89:3f:da:ca:81:14:1b:aa:0f:bf:b1:4a:10:d6: 9e:73:86:90:91:7e:fa:22:66:66:10:36:27:7c:ae: 91:02:78:15:31:36:63:b8:db:c3:67:f2:bb:7f:2c: 57:a9:2b:85:3a:f4:ec:db:11:02:7b:63:8b:36:5a: 26:87:7f:90:10:23:e8:5c:0c:f2:e5:70:0b:52:b9: 29:3e:79:04:6f:ea:95:f4:08:52:08:86:25:40:17: f6:d5:22:18:33:18:46:97:c8:f2:5d:e4:07:0d:74: e5:c7:40:0f:00:7e:2c:61:d3:78:07:45:e6:d3:05: 4f:65:10:78:69:37:a9:22:7e:af:12:46:da:c1:1a: 2a:a6:16:82:7d:cf:93:29:73:08:b5:20:2b:8a:42: 12:a6:da:8b:50:27:c2:e7:3f:ec:fc:c1:74:e2:44: c0:1e:0e:c2:e0:2a:29:c7:df:72:61:c3:2e:43:5f: 67:1a:1a:98:19:95:44:66:c8:64:35:a3:a6:32:64: 35:45:4f:66:a3:bf:7a:60:0e:79:63:b0:e4:43:c7: f5:ec:53:15:b7:ec:e4:76:2d:3b:71:96:b9:f3:c8: b8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7C:5C:67:D8:F4:4F:A3:30:4D:E0:0C:CC:D3:3C:4E:14:99:D6:30 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:18:35:e7:9c:9d:d9:c7:d9:9d:46:fb:d3:67:c4:c4:b9:2d: 08:4f:36:b5:05:bc:0e:3a:08:f0:69:48:14:ca:7c:97:b3:f9: 41:92:1a:5a:5f:e5:da:30:58:bf:38:fa:29:2e:a1:54:fa:99: 4e:9f:b2:38:90:73:5e:1b:5b:7b:52:28:d9:86:6a:37:9d:61: d3:16:52:df:ac:dd:ed:61:90:bb:c9:3b:b2:67:1d:99:40:5f: 37:59:5f:3c:0d:aa:2f:12:4d:c5:c2:b1:8e:ab:5f:23:4b:17: 4b:f0:c9:7b:7f:0c:2c:39:80:f9:05:20:54:50:71:2d:c4:53: c6:16:bb:9f:04:20:49:aa:db:28:7d:4a:e5:90:ca:30:e2:e3: 16:8a:87:fe:4c:7c:e1:fe:f3:45:e9:66:64:93:a4:fc:3f:1f: 3b:fc:2f:66:21:c6:9f:1f:59:07:c2:dd:30:42:81:93:bc:66: 4e:bf:27:78:a9:55:2f:f8:13:4f:a5:89:f9:e6:29:60:27:73: e7:0b:00:e5:d7:b0:41:33:bd:1b:4b:bb:0b:ad:15:59:85:b7: 8d:02:65:73:ce:26:b6:2f:19:e4:d5:de:2d:6e:7a:11:87:4f: 45:6f:30:a3:49:a4:6f:ff:90:68:97:93:18:83:08:3a:f4:bb: ce:4b:40:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0MMaA4vbWO404Bf7u6VEgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMzIwMTcwMTExWhcNMjYwMzIxMTcwMTExWjAzMTEwLwYDVQQD EyhhZDdjNWM2N2Q4ZjQ0ZmEzMzA0ZGUwMGNjY2QzM2M0ZTE0OTlkNjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBdFN+g/A8jrC0TLEmkL3rFZL54Y mCZOlVrHA8oMiT/ayoEUG6oPv7FKENaec4aQkX76ImZmEDYnfK6RAngVMTZjuNvD Z/K7fyxXqSuFOvTs2xECe2OLNlomh3+QECPoXAzy5XALUrkpPnkEb+qV9AhSCIYl QBf21SIYMxhGl8jyXeQHDXTlx0APAH4sYdN4B0Xm0wVPZRB4aTepIn6vEkbawRoq phaCfc+TKXMItSArikISptqLUCfC5z/s/MF04kTAHg7C4Copx99yYcMuQ19nGhqY GZVEZshkNaOmMmQ1RU9mo796YA55Y7DkQ8f17FMVt+zkdi07cZa588i4ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK18XGfY9E+jME3gDMzTPE4UmdYwMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBg155yd 2cfZnUb702fExLktCE82tQW8DjoI8GlIFMp8l7P5QZIaWl/l2jBYvzj6KS6hVPqZ Tp+yOJBzXhtbe1Io2YZqN51h0xZS36zd7WGQu8k7smcdmUBfN1lfPA2qLxJNxcKx jqtfI0sXS/DJe38MLDmA+QUgVFBxLcRTxha7nwQgSarbKH1K5ZDKMOLjFoqH/kx8 4f7zRelmZJOk/D8fO/wvZiHGnx9ZB8LdMEKBk7xmTr8neKlVL/gTT6WJ+eYpYCdz 5wsA5dewQTO9G0u7C60VWYW3jQJlc84mti8Z5NXeLW56EYdPRW8wo0mkb/+QaJeT GIMIOvS7zktAPw== -----END CERTIFICATE-----Generated at Sat Mar 21 04:13:18 2026 by rpki-client