$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: TeGpaepISKRHOzxL76Ejt4Z04Izs+IEfzfTDS/z/guc= Subject key identifier: 51:EE:F4:FB:6A:C4:BC:CD:D4:F0:13:39:01:20:0D:44:5E:02:E6:C1 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D2B173095091AC91A150D32C85C5A3FC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 158C Signing time: Thu 26 Mar 2026 17:00:33 +0000 Manifest this update: Thu 26 Mar 2026 17:00:33 +0000 Manifest next update: Fri 27 Mar 2026 17:00:33 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 12szSZVH5RaaSxfOGKUGeiH6wUCpZ5r14EIiW/9+1NI=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:2b:17:30:95:09:1a:c9:1a:15:0d:32:c8:5c:5a:3f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Mar 26 17:00:33 2026 GMT Not After : Mar 27 17:00:33 2026 GMT Subject: CN=51eef4fb6ac4bccdd4f0133901200d445e02e6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:25:bc:f1:01:b8:4c:2e:c6:40:85:24:71: e2:47:6f:84:65:84:06:70:00:19:8d:b0:93:2a:0b: 72:64:22:41:a7:61:ff:b7:fc:86:8f:8f:d0:80:cc: 77:75:a1:76:ee:7c:71:8d:d2:7c:b8:70:b7:79:5e: 43:0d:21:1e:89:d8:34:47:35:0e:b0:27:e7:3a:5d: ab:5f:3b:f9:6a:af:4c:15:72:cf:26:d1:58:48:25: fd:2d:b2:72:e9:69:3e:4a:0d:e2:b3:4a:f2:8e:42: e7:22:13:6c:dd:a0:f3:49:8e:c7:6e:34:b8:e0:00: b0:40:2a:60:05:95:b7:04:5a:a5:5f:54:c1:c4:9d: 79:81:ac:fb:b6:dc:33:fd:59:13:e0:80:93:4a:b8: 1e:54:49:7c:72:d7:b5:ce:3a:75:58:1d:e3:52:2f: bf:0f:3e:19:aa:c7:01:d0:e9:5d:c8:72:1e:af:30: ad:8f:75:dd:06:fd:97:1d:a3:a1:29:d6:e0:5f:a0: fb:be:d8:82:0f:fa:26:3a:ce:76:8e:22:76:64:56: 7b:7f:2d:b3:0b:83:95:13:be:f4:ad:6a:61:3f:d0: 6b:27:89:60:c0:49:a3:0d:57:b5:8e:16:19:a8:6e: 48:c9:2a:15:65:2a:5f:23:14:57:8b:12:4d:24:98: 8b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EE:F4:FB:6A:C4:BC:CD:D4:F0:13:39:01:20:0D:44:5E:02:E6:C1 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:26:06:c4:21:a2:16:8e:9f:49:f3:9a:a4:01:25:b5:97:a2: d9:87:70:0a:9b:19:02:cb:2e:8e:3e:83:43:ab:d8:99:0e:26: a8:26:c1:67:cd:42:53:74:47:09:b5:b1:9b:2e:2c:5a:29:5d: 86:3a:eb:6d:5e:ad:7d:f7:63:35:0d:80:aa:00:a8:2c:9d:ae: 5b:e3:5a:06:ba:80:a5:a3:fc:ef:be:16:40:5b:53:e8:7c:e1: 77:bb:7e:ec:3b:53:6c:82:eb:ec:9d:66:59:5e:4d:75:a7:31: ee:ab:57:f4:3a:d0:93:74:87:72:73:36:4c:d8:21:12:e0:83: c7:24:a2:95:25:05:13:07:bc:31:54:8e:35:98:76:0d:e4:51: 11:29:b4:92:04:af:2f:8a:8c:d2:2c:78:5d:54:92:c0:33:ab: 1f:ea:2c:ab:57:b5:6a:3b:c3:bc:f3:f3:86:5d:7a:98:49:ea: 3f:47:9e:65:16:66:37:68:cd:32:4f:ff:2c:38:e1:f6:57:da: 6e:15:b2:59:bc:48:74:60:ad:c0:ef:43:3a:21:cb:77:53:47: 4d:e8:74:aa:52:d2:4f:d3:cc:0c:85:4b:88:2b:d1:a2:86:c7: f7:9d:cc:e1:f0:5b:13:99:ae:4e:47:20:03:45:1a:12:aa:c3: 3d:26:b1:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0rFzCVCRrJGhUNMshcWj/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMzI2MTcwMDMzWhcNMjYwMzI3MTcwMDMzWjAzMTEwLwYDVQQD Eyg1MWVlZjRmYjZhYzRiY2NkZDRmMDEzMzkwMTIwMGQ0NDVlMDJlNmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdslvPEBuEwuxkCFJHHiR2+EZYQG cAAZjbCTKgtyZCJBp2H/t/yGj4/QgMx3daF27nxxjdJ8uHC3eV5DDSEeidg0RzUO sCfnOl2rXzv5aq9MFXLPJtFYSCX9LbJy6Wk+Sg3is0ryjkLnIhNs3aDzSY7HbjS4 4ACwQCpgBZW3BFqlX1TBxJ15gaz7ttwz/VkT4ICTSrgeVEl8cte1zjp1WB3jUi+/ Dz4ZqscB0OldyHIerzCtj3XdBv2XHaOhKdbgX6D7vtiCD/omOs52jiJ2ZFZ7fy2z C4OVE770rWphP9BrJ4lgwEmjDVe1jhYZqG5IySoVZSpfIxRXixJNJJiLDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHu9PtqxLzN1PATOQEgDUReAubBMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyYGxCGi Fo6fSfOapAEltZei2YdwCpsZAssujj6DQ6vYmQ4mqCbBZ81CU3RHCbWxmy4sWild hjrrbV6tffdjNQ2AqgCoLJ2uW+NaBrqApaP8774WQFtT6Hzhd7t+7DtTbILr7J1m WV5Ndacx7qtX9DrQk3SHcnM2TNghEuCDxySilSUFEwe8MVSONZh2DeRRESm0kgSv L4qM0ix4XVSSwDOrH+osq1e1ajvDvPPzhl16mEnqP0eeZRZmN2jNMk//LDjh9lfa bhWyWbxIdGCtwO9DOiHLd1NHTeh0qlLST9PMDIVLiCvRoobH953M4fBbE5muTkcg A0UaEqrDPSaxbQ== -----END CERTIFICATE-----Generated at Fri Mar 27 04:08:54 2026 by rpki-client