$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: es4YrxiwNYLGJ3pqYfrt951PVS+YxdzQOEHi8habfWA= Subject key identifier: CE:7E:F8:EC:68:DB:74:AC:C7:1D:AA:50:AF:71:59:72:86:7E:1C:0D Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019CAA2203ECE0D3ABB1ED58B15FD8F953EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 1548 Signing time: Sun 01 Mar 2026 16:01:21 +0000 Manifest this update: Sun 01 Mar 2026 16:01:21 +0000 Manifest next update: Mon 02 Mar 2026 16:01:21 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 5lQ9rixfmqRXxii30JKkmR03sr8.roa (hash: iF1NyTDi0aWK3rGC4FTsYT+Tf9o3Dfjcwz99TIaRhHY=) 6: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 7: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 8: B7U_PWJRbBPHyBYoJaj_TGN4-GE.roa (hash: apdlBMeSCN/dJUIXemLRlnwgD9xz8rjoE5psaqBe7no=) 9: E2F8QJnesLz_AJ_idudS8beXQtA.roa (hash: Du6ux9WA5KEGcJVYYMPZ9Mo1WXuEbp8iOUzzcljxT9A=) 10: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 11: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 12: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 13: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 14: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: aVVZ1j8N0ROwDoA9X2Rgb6yuDGifHy1p52DD8M4gVSY=) 15: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 16: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 17: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 18: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 19: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 20: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 21: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 22: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 23: lX5sl-Bs9YPPelSQB3cgwK9Lslw.roa (hash: mnJpBrQabQ5UZ897yJplacc4MCQhCl2/8KWX6EqeD4k=) 24: niUr6FHPmgY6CtuAz4gWdWka0MA.roa (hash: IuoDMTxSe/qrJgdwIn4nlwn1wmvo4BWmMWaqX2zRdbA=) 25: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 26: wpS5466WrfyGixagdXKkH56sESs.roa (hash: mif5lFotN45ot9LfakRYn/u5jNp6N1mLbVqWGc8M7pc=) 27: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 28: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:22:03:ec:e0:d3:ab:b1:ed:58:b1:5f:d8:f9:53:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Mar 1 16:01:21 2026 GMT Not After : Mar 2 16:01:21 2026 GMT Subject: CN=ce7ef8ec68db74acc71daa50af715972867e1c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:55:74:4c:70:d8:b1:fd:1d:7d:78:3a:77: 43:a7:af:75:40:cd:6e:bb:62:85:69:78:48:3d:9f: f3:66:f8:ad:35:6d:51:09:b2:06:c4:82:3b:d2:07: 36:de:39:21:db:be:1f:c1:74:ec:18:cb:87:a4:e7: 71:10:8a:cb:47:11:16:ad:e5:92:50:ed:8b:3a:d8: 2b:95:83:18:dc:56:07:bb:8d:a5:ee:77:2d:21:c1: d7:96:03:24:cf:20:40:f6:d1:88:cc:d4:a7:b0:d0: fa:37:e2:d6:5b:9c:ae:d4:cf:8b:c7:bf:c0:fa:71: 9e:db:68:fa:d6:2b:28:2a:65:64:2d:2b:4b:95:de: ed:fc:e7:d1:48:d4:7f:5f:3c:b5:5d:fd:bb:f5:de: a4:4c:e9:30:24:8d:8c:fc:be:8f:c3:c0:b5:7f:7a: 24:17:c5:86:17:0b:40:71:e2:d5:61:dd:5f:05:07: cd:6a:49:a4:8f:cd:84:d9:20:6b:ab:c5:80:03:51: 4b:3f:d3:7a:26:47:3d:99:29:90:53:ab:a3:36:17: 18:0b:6a:b6:b0:9b:ee:68:e5:57:9e:1a:51:c8:01: 97:c9:ed:9f:ca:bf:aa:06:5f:32:e4:5d:e5:e8:b5: 69:95:db:10:5c:ee:09:81:08:1f:36:45:58:17:f0: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7E:F8:EC:68:DB:74:AC:C7:1D:AA:50:AF:71:59:72:86:7E:1C:0D X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f3:1f:e8:65:96:ca:ab:c6:9d:2d:6b:3e:75:4d:9d:a6:cb: 6c:87:45:d0:03:7d:13:24:c0:dc:aa:9e:fb:59:1e:6d:1d:ca: 2a:03:f4:fa:aa:cd:44:60:a2:e5:a3:fc:f3:87:d1:b6:90:51: 44:42:5d:72:c8:34:fd:bf:fb:ea:0e:ce:b1:c1:f1:79:5b:41: 9b:ea:da:a2:12:4e:1a:c5:7f:0c:8a:78:0e:e9:8d:72:af:ff: b2:ce:71:ce:59:90:ed:c5:de:4f:13:fb:bd:6f:5d:c9:dd:e9: c5:50:6f:4b:71:10:2d:55:65:17:1a:d4:af:0d:d3:a2:6f:12: af:f0:9c:5b:06:a6:05:65:80:a5:62:ca:ca:24:1b:14:4b:84: 90:9a:52:7c:ca:ed:2e:ca:7d:f2:e2:1e:bd:a2:59:23:fc:db: a1:35:6f:7a:90:2a:d5:3b:aa:fe:95:db:32:da:94:8b:82:07: 08:88:d0:f6:1d:7a:49:7f:3d:2d:79:b3:51:b7:27:d7:d9:01: 8e:80:9f:9e:8f:0c:dc:91:4d:4f:9d:1e:e4:73:4f:66:b8:89: 43:30:d3:b1:c4:9d:1b:3f:73:03:52:4f:a4:10:ce:c3:5a:88: 98:bb:eb:ab:e3:2d:5a:de:bc:27:28:77:97:61:fd:05:b0:9f: ed:0e:86:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIgPs4NOrse1YsV/Y+VPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMzAxMTYwMTIxWhcNMjYwMzAyMTYwMTIxWjAzMTEwLwYDVQQD EyhjZTdlZjhlYzY4ZGI3NGFjYzcxZGFhNTBhZjcxNTk3Mjg2N2UxYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1VVdExw2LH9HX14OndDp691QM1u u2KFaXhIPZ/zZvitNW1RCbIGxII70gc23jkh274fwXTsGMuHpOdxEIrLRxEWreWS UO2LOtgrlYMY3FYHu42l7nctIcHXlgMkzyBA9tGIzNSnsND6N+LWW5yu1M+Lx7/A +nGe22j61isoKmVkLStLld7t/OfRSNR/Xzy1Xf279d6kTOkwJI2M/L6Pw8C1f3ok F8WGFwtAceLVYd1fBQfNakmkj82E2SBrq8WAA1FLP9N6Jkc9mSmQU6ujNhcYC2q2 sJvuaOVXnhpRyAGXye2fyr+qBl8y5F3l6LVpldsQXO4JgQgfNkVYF/D7tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5++Oxo23Ssxx2qUK9xWXKGfhwNMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPMf6GWW yqvGnS1rPnVNnabLbIdF0AN9EyTA3Kqe+1kebR3KKgP0+qrNRGCi5aP884fRtpBR REJdcsg0/b/76g7OscHxeVtBm+raohJOGsV/DIp4DumNcq//ss5xzlmQ7cXeTxP7 vW9dyd3pxVBvS3EQLVVlFxrUrw3Tom8Sr/CcWwamBWWApWLKyiQbFEuEkJpSfMrt Lsp98uIevaJZI/zboTVvepAq1Tuq/pXbMtqUi4IHCIjQ9h16SX89LXmzUbcn19kB joCfno8M3JFNT50e5HNPZriJQzDTscSdGz9zA1JPpBDOw1qImLvrq+MtWt68Jyh3 l2H9BbCf7Q6GeQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:57:13 2026 by rpki-client