$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: 2VswOaJhBtpvEksy0rKl8BgpPvEDE+vMzfSB54gXGNQ= Subject key identifier: 22:9C:B0:46:AE:6D:61:B6:45:AE:94:1A:0C:6F:19:D8:0C:48:18:37 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019D0666856C1C2F1329E4251888DC85C1C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1579 Signing time: Thu 19 Mar 2026 14:01:15 +0000 Manifest this update: Thu 19 Mar 2026 14:01:15 +0000 Manifest next update: Fri 20 Mar 2026 14:01:15 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 8: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 9: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 10: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 11: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 12: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: TUWPxNq/MR8nY20HiVBvhfI4yfZLZb9CotpLMYLL9bk=) 13: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 14: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 15: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 16: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 17: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 18: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 19: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 20: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 21: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 24: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 25: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Mar 2026 14:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:06:66:85:6c:1c:2f:13:29:e4:25:18:88:dc:85:c1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Mar 19 14:01:15 2026 GMT Not After : Mar 20 14:01:15 2026 GMT Subject: CN=229cb046ae6d61b645ae941a0c6f19d80c481837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:42:da:91:77:94:36:05:d9:85:0e:ea:dc: 70:71:08:9e:d1:2f:5f:27:c9:5c:81:fc:60:95:34: d9:19:7f:a5:6b:09:ab:51:e6:e3:44:08:af:ee:15: ca:31:aa:17:f6:d6:c4:81:8c:42:e9:1f:1f:d1:e1: 68:2e:e4:57:be:88:cf:55:b7:ad:85:8d:38:c8:b7: 14:3c:43:6f:35:a9:44:db:a8:91:a4:4b:0e:a4:b7: 5f:d2:9d:77:f5:d7:f6:c2:b7:b2:9e:8a:83:28:9f: 38:4d:6c:29:2a:8d:4a:e3:97:03:8d:d9:07:e0:b0: 37:43:a5:9f:a8:9b:fa:86:d6:14:80:12:cd:7c:f3: 93:cf:c7:43:2e:32:3a:6b:25:ab:70:92:23:ec:58: 7f:28:3c:a2:74:82:33:1e:a3:26:98:2d:1f:26:1e: 3e:b2:54:23:aa:43:56:ee:fb:cb:93:29:28:b8:36: 71:bf:22:aa:aa:78:e9:c3:8d:18:ed:a7:04:b3:12: 59:4c:1d:6b:99:7f:59:a1:80:dc:c9:5c:7d:a8:a0: 30:3d:3f:b5:97:8c:e7:5f:80:0a:f0:49:fe:a2:9b: c0:fc:b0:75:2b:64:4d:84:d9:74:e3:92:70:79:bc: b3:5f:34:e7:5c:dc:7a:42:73:4f:e8:38:11:6c:72: 76:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9C:B0:46:AE:6D:61:B6:45:AE:94:1A:0C:6F:19:D8:0C:48:18:37 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:64:a7:e7:03:25:b8:aa:d8:65:91:64:b5:19:52:6e:01:4f: 36:80:00:ff:cb:7c:ce:be:81:91:0c:1b:63:67:f6:6a:63:b1: f0:de:47:6d:e3:6e:a7:5e:e1:7c:a8:bb:dd:51:b3:94:10:fe: 3b:7e:26:12:93:1e:dc:5d:ba:96:c5:70:9a:46:81:47:08:6c: e3:03:b7:e0:ef:98:3a:93:a0:67:6f:39:35:a6:b0:dc:d1:e2: 61:a8:c4:1a:c7:d9:d8:05:13:7b:ed:57:c3:00:b1:7c:72:21: 34:9b:7e:aa:eb:73:1b:d2:37:02:73:d9:95:c7:f8:a4:ce:2f: a4:fa:28:70:af:12:e9:49:f7:06:90:5e:4e:52:8b:32:f7:e0: 60:22:b0:24:41:d2:aa:86:26:ec:ed:2e:78:99:dd:1b:43:02: 3a:b9:f8:ed:59:b9:14:bc:a7:44:db:bf:d6:c2:c2:39:f6:78: fb:3c:bc:84:6c:50:7e:d5:4f:60:0e:f3:ff:4c:72:c9:b1:65: bb:53:b0:fb:78:d8:4a:dd:7e:6e:49:9e:fb:72:07:1b:eb:8e: 0b:e5:ff:04:d2:03:a5:92:98:ec:95:4d:54:e6:99:c9:4e:63: b8:fe:62:bf:39:81:29:33:46:e6:49:f3:56:36:89:69:ec:24: e8:64:12:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ0GZoVsHC8TKeQlGIjchcHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMzE5MTQwMTE1WhcNMjYwMzIwMTQwMTE1WjAzMTEwLwYDVQQD EygyMjljYjA0NmFlNmQ2MWI2NDVhZTk0MWEwYzZmMTlkODBjNDgxODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuphC2pF3lDYF2YUO6txwcQie0S9f J8lcgfxglTTZGX+lawmrUebjRAiv7hXKMaoX9tbEgYxC6R8f0eFoLuRXvojPVbet hY04yLcUPENvNalE26iRpEsOpLdf0p139df2wreynoqDKJ84TWwpKo1K45cDjdkH 4LA3Q6WfqJv6htYUgBLNfPOTz8dDLjI6ayWrcJIj7Fh/KDyidIIzHqMmmC0fJh4+ slQjqkNW7vvLkykouDZxvyKqqnjpw40Y7acEsxJZTB1rmX9ZoYDcyVx9qKAwPT+1 l4znX4AK8En+opvA/LB1K2RNhNl045JwebyzXzTnXNx6QnNP6DgRbHJ2GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKcsEaubWG2Ra6UGgxvGdgMSBg3MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2Sn5wMl uKrYZZFktRlSbgFPNoAA/8t8zr6BkQwbY2f2amOx8N5HbeNup17hfKi73VGzlBD+ O34mEpMe3F26lsVwmkaBRwhs4wO34O+YOpOgZ285Naaw3NHiYajEGsfZ2AUTe+1X wwCxfHIhNJt+qutzG9I3AnPZlcf4pM4vpPoocK8S6Un3BpBeTlKLMvfgYCKwJEHS qoYm7O0ueJndG0MCOrn47Vm5FLynRNu/1sLCOfZ4+zy8hGxQftVPYA7z/0xyybFl u1Ow+3jYSt1+bkme+3IHG+uOC+X/BNIDpZKY7JVNVOaZyU5juP5ivzmBKTNG5knz VjaJaewk6GQSbQ== -----END CERTIFICATE-----Generated at Fri Mar 20 00:34:36 2026 by rpki-client