$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: Bnsex3L5DG25Mco/vdj0okfdFcDjLlLl5LJsVs2SNAI= Subject key identifier: 68:64:EB:A6:56:44:03:EE:8B:30:39:B0:F6:C5:F1:84:42:B9:78:ED Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019FAABED6649465FBFB40E7DBA07E26DCE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 16D8 Signing time: Tue 28 Jul 2026 22:01:01 +0000 Manifest this update: Tue 28 Jul 2026 22:01:01 +0000 Manifest next update: Wed 29 Jul 2026 22:01:01 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 4: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 5: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 6: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 7: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 8: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 9: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 10: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: t+rCqDSAP3caE0+Nm0fENIGugGmc11pJ+2lJHiHToFk=) 11: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 12: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 13: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 14: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 15: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 16: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 17: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 18: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 19: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 20: utF1Hb3bzsO09sTloqJeLO08SqU.roa (hash: zW94J0vK080nCwGZYwZncOPirWSIzruXkKW5U5VdEH8=) 21: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 22: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:d6:64:94:65:fb:fb:40:e7:db:a0:7e:26:dc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jul 28 22:01:01 2026 GMT Not After : Jul 29 22:01:01 2026 GMT Subject: CN=6864eba6564403ee8b3039b0f6c5f18442b978ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:5e:47:d7:0f:5a:8c:4c:c8:ba:33:9e:10: 1b:f1:54:89:e4:07:db:2b:5a:f6:da:25:6a:8e:c2: 97:2e:4a:02:89:bc:63:7d:75:70:76:f3:bf:7a:b4: 38:e0:33:0a:29:a1:f1:c6:98:9f:31:2d:3f:7c:2c: 0b:3b:27:a7:fc:a4:e0:66:13:53:70:7a:8a:28:af: 3a:ca:22:49:b4:7b:d5:2e:a4:dc:8d:08:35:a7:a1: ef:84:71:6c:c3:39:c0:7a:b4:b4:af:cc:27:bb:49: da:a3:12:6f:8d:4d:b2:c8:f3:3e:49:73:de:4a:50: d5:33:da:9c:ed:7b:75:6f:07:e1:1d:e0:47:91:a2: 95:ea:75:69:09:98:ca:e9:bc:ba:ca:d0:c0:cf:63: dc:08:1e:83:6e:4e:41:c4:31:0b:a6:36:20:06:c3: 1c:de:2f:38:8a:56:40:49:50:89:db:a5:3d:6d:c1: 2d:f4:52:12:0f:25:7f:b1:c2:42:97:3a:86:61:dc: 10:04:70:39:d7:5d:c7:ed:96:60:b0:73:38:f8:93: 6f:c5:e1:3e:7a:bf:19:88:14:9a:d0:d9:d0:aa:41: 67:0b:a7:34:88:07:66:1f:53:a7:4e:4c:ed:f8:7b: 5c:e8:49:41:2f:aa:b6:63:1d:33:a4:ac:ae:3d:b5: 2f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:64:EB:A6:56:44:03:EE:8B:30:39:B0:F6:C5:F1:84:42:B9:78:ED X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ea:ea:49:b3:93:d2:1c:de:db:fe:96:8a:e5:f2:9b:47:6d: d9:ea:35:e1:34:62:bc:a8:6a:19:02:e0:64:5d:75:dc:19:df: c0:9a:12:76:cb:6c:b8:d1:62:63:5d:ff:b0:c5:22:b4:7c:d3: e7:2f:c1:7f:25:ba:9b:b6:3c:54:75:24:e3:45:9b:7d:f6:ee: 8d:04:a3:87:32:28:26:ad:3d:e3:15:41:60:cd:aa:c6:20:9c: 70:8d:46:99:bc:f6:74:ba:dd:c0:e0:77:68:cd:f7:de:9c:18: 80:92:9c:a5:6c:f3:b3:09:9f:cb:6a:3a:1c:bd:a1:08:95:0b: 04:a4:c6:08:28:8b:ff:39:04:a6:7c:c8:de:75:db:90:ce:88: 1b:fe:24:4f:9e:cf:e6:0e:d5:1c:c0:a2:bc:6a:5d:7d:e8:f5: 55:c0:55:e1:8e:4d:5f:c9:b0:93:e1:a5:e1:07:38:d9:51:19: 47:d6:44:8b:2f:ca:bd:2b:df:e2:d9:49:d2:20:e7:cb:58:0e: c3:9a:f1:61:cf:8a:46:29:7c:ce:71:63:80:eb:19:a7:c2:56: aa:31:37:c4:dc:78:2a:12:b8:fe:ef:dd:c8:08:c2:f2:35:84: f3:63:ae:db:d5:36:9d:ae:01:7a:ba:0d:7e:e5:00:74:49:21: dc:be:18:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvtZklGX7+0Dn26B+JtzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNzI4MjIwMTAxWhcNMjYwNzI5MjIwMTAxWjAzMTEwLwYDVQQD Eyg2ODY0ZWJhNjU2NDQwM2VlOGIzMDM5YjBmNmM1ZjE4NDQyYjk3OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDteR9cPWoxMyLoznhAb8VSJ5Afb K1r22iVqjsKXLkoCibxjfXVwdvO/erQ44DMKKaHxxpifMS0/fCwLOyen/KTgZhNT cHqKKK86yiJJtHvVLqTcjQg1p6HvhHFswznAerS0r8wnu0naoxJvjU2yyPM+SXPe SlDVM9qc7Xt1bwfhHeBHkaKV6nVpCZjK6by6ytDAz2PcCB6Dbk5BxDELpjYgBsMc 3i84ilZASVCJ26U9bcEt9FISDyV/scJClzqGYdwQBHA5113H7ZZgsHM4+JNvxeE+ er8ZiBSa0NnQqkFnC6c0iAdmH1OnTkzt+Htc6ElBL6q2Yx0zpKyuPbUvXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhk66ZWRAPuizA5sPbF8YRCuXjtMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROrqSbOT 0hze2/6WiuXym0dt2eo14TRivKhqGQLgZF113BnfwJoSdstsuNFiY13/sMUitHzT 5y/BfyW6m7Y8VHUk40WbffbujQSjhzIoJq094xVBYM2qxiCccI1Gmbz2dLrdwOB3 aM333pwYgJKcpWzzswmfy2o6HL2hCJULBKTGCCiL/zkEpnzI3nXbkM6IG/4kT57P 5g7VHMCivGpdfej1VcBV4Y5NX8mwk+Gl4Qc42VEZR9ZEiy/KvSvf4tlJ0iDny1gO w5rxYc+KRil8znFjgOsZp8JWqjE3xNx4KhK4/u/dyAjC8jWE82Ou29U2na4BeroN fuUAdEkh3L4Y0w== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:25 2026 by rpki-client