$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: dSOkpFYRH2NnpnsWDUNSCNOAahrc5iPhqPCWAe7DLYg= Subject key identifier: 57:6E:62:92:70:F5:18:E8:04:76:C9:24:9E:2C:C6:AB:C0:5F:32:9C Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 01A066B735C6D4CE304D2586DC09D8D5756A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1740 Signing time: Thu 03 Sep 2026 10:01:17 +0000 Manifest this update: Thu 03 Sep 2026 10:01:17 +0000 Manifest next update: Fri 04 Sep 2026 10:01:17 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: F3whITyXhYmaeQ+99VxpO3FMOps90Bm7i8j17rIutxk=) 11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 13: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 14: ZwZjPmKqIDTnl3lP9m_rRWyYN0c.roa (hash: TD6pBOGIF20vbuMuxYPEJhEGW+OrNQ5RfnBfL6AVH4w=) 15: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 16: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 17: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 19: jUGUoMYUN3ZYoWwyz7MweD_DD8g.roa (hash: TwO/js2mCJinc13dOSDj9ill0w/sSJlMwVo+p9a4L5g=) 20: lUvgRvKTr0drfF9HBU6MPHX53jg.roa (hash: CyU0Ra8LeEhZZFXq5pcOQgbm3LZ1WdCEBpi5b5T49Kc=) 21: pEYKqh-HZTICIznuDDkvZQKOpQs.roa (hash: +6JOcYl0e7Kly90geVNRPtpifQQJN2SaFu3Bf0va6jA=) 22: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 23: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=) 24: vVDSShRrrwTYV95J37bb3l6D4I8.roa (hash: PwmcJpwCUhaqO20Cel5odPRhmyaGJG40qV/N4BqbnLI=) 25: wCMm-aenH_zuMJOSQuJWeb71NJ0.roa (hash: ayLqc4WWQljF7RYZ5IzvneWbkS5edMXjdGTG+Aa5QjQ=) 26: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 27: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Sep 2026 07:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:66:b7:35:c6:d4:ce:30:4d:25:86:dc:09:d8:d5:75:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Sep 3 10:01:17 2026 GMT Not After : Sep 4 10:01:17 2026 GMT Subject: CN=576e629270f518e80476c9249e2cc6abc05f329c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:9e:07:26:0f:68:00:be:a5:a2:55:58:52: 7f:8f:41:ca:1d:8d:41:52:33:96:89:43:ca:9b:b4: 58:0b:4c:89:20:07:0e:1c:54:e7:c2:2b:f3:fe:dd: ad:7f:04:d4:b4:d2:74:73:87:91:2c:df:3f:81:9d: 03:2d:0d:be:b3:f2:c0:24:79:64:49:8c:ba:03:a9: aa:61:e2:a9:44:f5:f0:ef:1f:a4:4d:b3:7b:95:5b: 75:1c:8d:96:10:38:14:bf:cf:97:76:b3:33:b6:62: f2:10:d1:d2:e0:13:10:58:f2:a8:fc:8a:f7:e2:46: f3:0a:74:32:07:02:bc:78:31:94:18:a8:e6:b7:f4: a5:fd:5c:bf:7c:0f:33:2b:a4:ae:d5:e1:c2:54:0f: 19:7a:7e:e1:45:9d:d1:04:14:e0:24:90:e4:72:05: c9:b2:8c:e4:6f:46:0e:42:9d:91:c7:c0:69:fb:ec: f1:78:2d:7f:16:fc:ef:0d:3b:8c:b9:32:e7:22:4f: 7d:6e:5d:68:cc:48:f7:64:1f:32:42:df:f0:1f:b5: 89:61:82:81:ec:c3:3f:0a:d8:04:2b:73:65:cc:31: 24:fc:da:1a:37:d0:bf:8f:4f:71:a6:0e:0b:69:d7: 1f:48:f2:42:85:15:e9:7b:19:42:75:a7:7d:73:4a: b6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6E:62:92:70:F5:18:E8:04:76:C9:24:9E:2C:C6:AB:C0:5F:32:9C X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a9:44:bd:5d:f4:86:eb:be:45:ae:73:3c:23:47:55:64:c7: 34:21:ea:f3:a0:aa:9d:41:cc:a6:31:c1:69:60:be:77:43:63: a6:ec:da:23:25:cf:9f:f9:95:4e:59:8b:31:ba:77:ca:d9:f4: c0:63:41:b4:35:5b:03:26:53:e3:dd:07:bc:8d:19:f1:53:2f: 94:79:2e:54:8a:48:46:52:21:89:71:e8:dd:d9:62:ef:fb:a8: 65:2d:ac:76:86:81:7f:d1:83:7e:6a:06:06:fc:7b:2b:38:52: 84:81:28:80:01:78:86:0c:7b:30:f4:eb:6f:a5:42:69:56:df: 71:40:f5:d3:1a:7c:19:f6:d1:d6:16:00:0f:24:f4:6e:02:f3: 8d:23:17:d9:24:4a:b9:a3:f9:fc:07:af:4d:8f:1d:f3:4b:57: 71:dd:a8:fa:a5:b7:c3:d5:5d:36:81:f6:16:ed:3b:76:74:66: 79:64:73:8d:4d:cc:9f:f7:df:a3:80:f0:f6:8b:9c:d7:90:46: 0a:65:e3:68:e9:08:53:45:ed:eb:ee:f9:84:d2:db:5e:8a:7c: 1f:ed:cd:b0:96:99:60:20:ee:27:06:01:6d:cd:a6:d5:08:d6: 3e:63:de:dd:ed:84:42:88:3d:0a:b7:1d:cd:18:90:b0:c5:c7: 14:b1:7c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBmtzXG1M4wTSWG3AnY1XVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwOTAzMTAwMTE3WhcNMjYwOTA0MTAwMTE3WjAzMTEwLwYDVQQD Eyg1NzZlNjI5MjcwZjUxOGU4MDQ3NmM5MjQ5ZTJjYzZhYmMwNWYzMjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4aeByYPaAC+paJVWFJ/j0HKHY1B UjOWiUPKm7RYC0yJIAcOHFTnwivz/t2tfwTUtNJ0c4eRLN8/gZ0DLQ2+s/LAJHlk SYy6A6mqYeKpRPXw7x+kTbN7lVt1HI2WEDgUv8+XdrMztmLyENHS4BMQWPKo/Ir3 4kbzCnQyBwK8eDGUGKjmt/Sl/Vy/fA8zK6Su1eHCVA8Zen7hRZ3RBBTgJJDkcgXJ sozkb0YOQp2Rx8Bp++zxeC1/FvzvDTuMuTLnIk99bl1ozEj3ZB8yQt/wH7WJYYKB 7MM/CtgEK3NlzDEk/NoaN9C/j09xpg4LadcfSPJChRXpexlCdad9c0q2/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFduYpJw9RjoBHbJJJ4sxqvAXzKcMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqlEvV30 huu+Ra5zPCNHVWTHNCHq86CqnUHMpjHBaWC+d0NjpuzaIyXPn/mVTlmLMbp3ytn0 wGNBtDVbAyZT490HvI0Z8VMvlHkuVIpIRlIhiXHo3dli7/uoZS2sdoaBf9GDfmoG Bvx7KzhShIEogAF4hgx7MPTrb6VCaVbfcUD10xp8GfbR1hYADyT0bgLzjSMX2SRK uaP5/AevTY8d80tXcd2o+qW3w9VdNoH2Fu07dnRmeWRzjU3Mn/ffo4Dw9ouc15BG CmXjaOkIU0Xt6+75hNLbXop8H+3NsJaZYCDuJwYBbc2m1QjWPmPe3e2EQog9Crcd zRiQsMXHFLF8uw== -----END CERTIFICATE-----Generated at Thu Sep 3 12:34:18 2026 by rpki-client