$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: Zge947EXfLFn7IpTlkr3rH9xn0rl3vFS49sVaNTMNLs= Subject key identifier: 33:8B:E7:56:94:EA:48:B4:DE:11:9E:1B:DE:35:CE:12:1C:67:BE:A9 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019EFA5F146AE033553AEFD83FD269487BB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 167C Signing time: Wed 24 Jun 2026 16:03:15 +0000 Manifest this update: Wed 24 Jun 2026 16:03:15 +0000 Manifest next update: Thu 25 Jun 2026 16:03:15 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 9CA3/aEnJHxTOoxY3VeR+9/Ll1e9udoVg38YtF7KrYE=) 12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 14: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 16: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 19: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 20: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 22: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 23: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 14:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:fa:5f:14:6a:e0:33:55:3a:ef:d8:3f:d2:69:48:7b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jun 24 16:03:15 2026 GMT Not After : Jun 25 16:03:15 2026 GMT Subject: CN=338be75694ea48b4de119e1bde35ce121c67bea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:2b:d5:34:8c:18:2c:d1:5c:19:0c:88:ee: 83:59:9d:ac:84:6d:99:bf:0b:85:83:1e:fa:3d:28: 66:6b:61:57:20:bc:b2:2f:d0:ab:4d:1e:0f:bb:9b: b2:cf:f1:51:d3:da:7a:e4:b1:bc:8a:36:50:9a:37: ea:d0:03:5f:47:2b:63:dc:81:a4:26:3a:1e:59:67: d5:4c:40:a6:74:1b:94:ce:08:21:0a:50:64:33:ad: d9:4d:42:32:21:5a:9f:d2:2a:7a:12:cb:5a:9a:5f: f0:0f:6a:bf:67:6f:cf:1f:e8:c7:80:5b:cb:e0:62: 2a:74:c6:de:85:fa:67:06:f8:ed:c2:dd:ef:96:5e: ee:b6:d5:ca:1d:8c:11:c8:66:20:d4:b8:8a:99:74: 80:a3:69:37:f5:50:58:14:56:fc:e5:b5:f8:95:85: a5:29:29:ba:46:1c:5e:d1:4e:44:78:3b:b2:c2:03: 2b:51:b5:16:81:2d:57:08:e3:84:32:30:65:c2:f3: 86:65:a8:c5:55:17:1d:db:9a:0c:ba:ea:59:28:75: 47:36:d5:4c:dc:ba:1a:27:ea:c4:01:da:ca:d8:4d: 09:8f:03:36:f5:19:62:cd:f8:ee:12:09:d5:af:6d: 32:9b:5e:fa:00:d9:63:cd:5f:68:79:0f:e4:89:8e: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8B:E7:56:94:EA:48:B4:DE:11:9E:1B:DE:35:CE:12:1C:67:BE:A9 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:30:0b:5b:c4:0a:81:c5:9a:0c:18:8b:55:7f:f0:d4:48:0d: 6c:ca:d4:88:b6:ba:5c:cf:ba:93:07:db:96:ec:4a:21:82:af: a6:3d:80:23:bf:c3:86:b5:9c:10:3e:4c:17:3d:c8:4a:e1:a4: bb:b8:70:00:b0:c8:eb:27:a1:86:c7:12:55:4a:56:53:71:b2: 46:4e:54:5e:4e:1d:a2:18:40:72:72:48:10:36:73:59:b5:84: ab:84:09:43:ff:6d:72:4a:ce:38:07:e5:10:5f:33:e4:bf:84: df:8d:22:3d:d6:21:dc:62:16:be:1d:06:bc:23:7a:42:bb:cb: 58:fa:1f:1f:7f:e0:46:35:de:72:1e:14:0d:4c:c7:2c:dc:22: 12:85:6b:41:54:c2:3d:ac:83:df:eb:36:d8:41:05:d7:58:38: 0b:a0:16:a8:eb:3e:3f:e8:ae:54:ed:0b:a0:58:16:00:47:fe: b4:59:94:51:6b:36:05:b8:f5:c7:e7:a6:b3:27:57:9a:4b:38: fe:b7:57:06:9f:cb:7d:d8:47:f2:3c:ec:35:e4:ec:54:91:8b: fb:57:8f:69:11:a8:80:97:4d:88:3b:a0:5c:4d:81:88:67:9d: 9f:73:a6:35:2b:46:78:3a:11:c3:99:0a:3d:71:4a:0a:12:d0: 30:82:27:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ76XxRq4DNVOu/YP9JpSHuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNjI0MTYwMzE1WhcNMjYwNjI1MTYwMzE1WjAzMTEwLwYDVQQD EygzMzhiZTc1Njk0ZWE0OGI0ZGUxMTllMWJkZTM1Y2UxMjFjNjdiZWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV0r1TSMGCzRXBkMiO6DWZ2shG2Z vwuFgx76PShma2FXILyyL9CrTR4Pu5uyz/FR09p65LG8ijZQmjfq0ANfRytj3IGk JjoeWWfVTECmdBuUzgghClBkM63ZTUIyIVqf0ip6Estaml/wD2q/Z2/PH+jHgFvL 4GIqdMbehfpnBvjtwt3vll7uttXKHYwRyGYg1LiKmXSAo2k39VBYFFb85bX4lYWl KSm6Rhxe0U5EeDuywgMrUbUWgS1XCOOEMjBlwvOGZajFVRcd25oMuupZKHVHNtVM 3LoaJ+rEAdrK2E0JjwM29RlizfjuEgnVr20ym176ANljzV9oeQ/kiY4UVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOL51aU6ki03hGeG941zhIcZ76pMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzALW8QK gcWaDBiLVX/w1EgNbMrUiLa6XM+6kwfbluxKIYKvpj2AI7/DhrWcED5MFz3ISuGk u7hwALDI6yehhscSVUpWU3GyRk5UXk4dohhAcnJIEDZzWbWEq4QJQ/9tckrOOAfl EF8z5L+E340iPdYh3GIWvh0GvCN6QrvLWPofH3/gRjXech4UDUzHLNwiEoVrQVTC PayD3+s22EEF11g4C6AWqOs+P+iuVO0LoFgWAEf+tFmUUWs2Bbj1x+emsydXmks4 /rdXBp/LfdhH8jzsNeTsVJGL+1ePaRGogJdNiDugXE2BiGedn3OmNStGeDoRw5kK PXFKChLQMIInBA== -----END CERTIFICATE-----Generated at Wed Jun 24 22:48:08 2026 by rpki-client