$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft File: Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json) Hash identifier: w2AP7LBtXbuuH+7IpmxEYIvgdP64rromkteJVl8q8I8= Subject key identifier: BE:F8:05:B4:CB:E0:B5:CE:B7:06:2F:45:0C:56:0D:2F:6D:12:CF:37 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019F90FF9CD350DC2A8933D0A6FF7CD5BA68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft Manifest number: 16CA Signing time: Thu 23 Jul 2026 22:01:38 +0000 Manifest this update: Thu 23 Jul 2026 22:01:38 +0000 Manifest next update: Fri 24 Jul 2026 22:01:38 +0000 Files and hashes: 1: 0izJqNpwGrzqGY2KAPmDZhqZcDQ.roa (hash: kVpXKt5/uB6mnq98IPFI3mbG6Gzf/FsKpLdlNXsb0AU=) 2: 1-CaNO8_RMnpzKeMx-OMItczEl8.roa (hash: CCl7V5Ac7Zg0Z2Ogyr85g8hmFXorBL+LtY9lhKDMctg=) 3: 1-ODEklGOq8I3EAyPIiqwbAbefBQ.roa (hash: KaSR9/Fowi4ECU+VzMIBriqftQDKjqb9qhs07E3Bgkg=) 4: 1-wkOwoVcm2-zwVYhOI9Tfh_EWPY.roa (hash: sqyNSN/2mGi5Eya1/BldAt3EPeodNfFAQ5WsvWxud+s=) 5: 8GKAWQ23bVaOj62dghwbzfB4KBs.roa (hash: BrI+TdtguYxBn7MIHj7b5Fyu4yLPZopcndp3pThsJFk=) 6: 9v6zNDxWi4SZuzKdNsH0dUjcIqQ.roa (hash: 0yWtU5SRw7DUUJ7u77ckHQ8clv07UvrqSOWSgyzWW/4=) 7: FnVVoWa_UoNljszQfJN3s6N4Fg8.roa (hash: IhS3eAFrVeqpZBjkBUTGqO3m/IEt1w9kYZheoswil+8=) 8: HwgNT-WlslCb5z--PUmLTd8h3OY.roa (hash: 7PAd9LCcjyY7TVI0QFxAJoa17PGNVYAW7pBCdgtZI8U=) 9: Ko8NpcLG_AogYj3Bc2k5Nz4ZyyY.roa (hash: lf7aD0SYGRXlZhSRDl+oj2HhMH2HQGI1V2RHXtUwGww=) 10: M1lTEOUKJKB3wxU-Ufw3xwr2Bn4.roa (hash: 5L2OcxfFuv45Y2sgzqxSydPqsmcdId+rZQdxYTPEdZg=) 11: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: OtoIrdwHMPr5c2BW/UAXaxxh/znXfs8RDX7gw19Awqk=) 12: OJaCH_FRxKGvw45Z5gEomrY6by4.roa (hash: lnlTPPpLh0wuAEb6l4qCBAAloBz60wNJBIDMm24VjPc=) 13: RSezJsuJZgdORKHcBM299fPXKwc.roa (hash: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo=) 14: VnSDETPGYr2c0RUCcCji6_4WgC4.roa (hash: BOWXNqL+Qdlre4gMlyUelDXLPYo8OQeW2qT705txKiQ=) 15: YPJDYVYIDjteAJ95vKZaIRYGL3g.roa (hash: sNPPgLJqMfMVLlDzJAa40Y0v1iOlKeP2KYVSWomo16Y=) 16: ZmbT7ckq9AWU7ftFPSy0_2aVcIQ.roa (hash: z4uFLh99ra2k+PrXJ8wTnzRsRakRgbEYF3GEsOcbjqE=) 17: bryZgTJJGS-FOz_HYLbqtaKw-po.roa (hash: aiINGCzxZNhxZwQ5hoSWV6CWBgjNkR1DWd3FkVokojQ=) 18: fJt5Doe5R4Pj15sL_bEFLsxVQu0.roa (hash: PAAc3aXzWoAAF0qb+ex/ps/wxwpBzPByQ0jG601T7Go=) 19: iS_IteKYOEO3aqQ6EFMAokejebE.roa (hash: QJNjPBPOKdt2Y0iNlpFoOGbtCBY3Zi1u+aqO17hBnjs=) 20: j20-Qg6Dllv24CgeMRfK9YqUFsA.roa (hash: +aqG4jVK8I02VVBJfDJU1hx8A09QKHjG0H2i0LdjW9Q=) 21: unQfyoMm3gJGcK6KVwPJMMwgAmE.roa (hash: dJwKOB7hLwrpnKolTbkDVLvsYmZrBaj//I+3Zr9dVQk=) 22: yV2oMTPDTm1TWEpu2kD5QAemRu0.roa (hash: sM2rCmqU4pO3UwoNbds8BRoQEXTCg3X6py2M7iBaZ3w=) 23: yfOWaWQMRst2xNQtvy2Y_lNwdUA.roa (hash: 8ibNwF/5VTzCu9MBNCfFWDY8eww+HMMEV12ydh8npoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:ff:9c:d3:50:dc:2a:89:33:d0:a6:ff:7c:d5:ba:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jul 23 22:01:38 2026 GMT Not After : Jul 24 22:01:38 2026 GMT Subject: CN=bef805b4cbe0b5ceb7062f450c560d2f6d12cf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fc:4d:43:02:59:de:5c:5f:49:61:a1:88:4e: 03:10:44:9e:c1:be:75:83:bd:bf:6d:bc:38:01:01: 05:9d:1f:3e:1b:4b:c2:e8:a9:03:e2:0f:a8:aa:bb: f4:d9:fe:c4:bf:13:3f:a5:db:68:a3:bc:d9:2a:45: eb:d1:e7:74:22:0c:e6:32:ca:08:14:e6:1a:e5:77: 34:c0:c2:95:73:73:b9:b1:1e:19:9a:c3:49:51:ad: 96:80:30:50:fd:d9:f8:e4:48:3f:03:eb:97:e8:29: 71:2d:d6:38:6c:14:99:f0:c8:df:df:78:81:b0:d2: cd:82:e2:bf:8d:40:eb:8b:c8:52:f9:d0:da:e3:30: f4:61:09:1c:26:25:d9:47:26:21:6d:02:5b:be:14: c0:2a:99:f0:62:5a:f6:af:9c:41:1c:99:a0:51:dc: f5:37:93:bb:a4:9b:0a:96:a8:71:39:87:31:b2:d3: 1b:c2:e3:13:a9:b8:17:c9:4a:0c:c1:59:55:55:41: ee:4d:6e:25:1d:60:97:ad:9e:d4:50:6c:9e:40:e0: dc:a5:a7:87:f9:9c:fe:c8:32:16:4e:32:aa:50:6e: 75:89:19:84:99:ec:6b:e2:7f:58:1e:53:b1:5d:74: c8:b2:ce:48:7f:48:38:5e:ba:d8:f9:54:7b:fc:f7: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F8:05:B4:CB:E0:B5:CE:B7:06:2F:45:0C:56:0D:2F:6D:12:CF:37 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8f:70:74:37:91:cc:e5:c5:31:a9:b7:1c:de:4c:46:88:84: e0:a1:ce:4f:3b:e4:a3:7d:8b:9d:d8:91:1a:75:e1:d6:8b:20: 50:a0:73:42:2a:a6:87:ad:4c:92:62:26:15:31:38:bb:cd:7c: 1a:c1:25:ee:09:59:d4:83:12:2a:10:e9:2f:93:c1:d2:3d:3e: 74:06:ae:ea:aa:82:d6:ee:5d:0b:31:3b:0a:c6:af:e1:01:00: ca:7a:38:39:25:bf:c9:ce:39:86:22:6a:13:07:c9:02:32:b5: ef:b2:20:78:7b:f1:e4:d2:f6:fe:81:3e:22:1a:65:34:9e:77: 60:48:92:a2:92:29:8f:cd:f8:db:76:2b:88:d7:91:d0:79:64: 06:8d:fa:da:00:af:cc:b1:40:78:b0:75:bb:65:e8:ce:15:a9: dc:9a:7f:ac:5d:2d:f8:2b:12:c7:a9:d2:18:37:23:b5:f1:04: 6d:f1:40:d8:c5:c7:b6:0d:41:50:2e:2e:ee:86:ad:35:7b:91: 84:cc:2d:95:ac:16:ee:99:80:2e:f3:bc:1d:25:65:fd:58:52: ab:c8:47:90:bd:06:4c:f4:71:af:97:ce:40:22:8e:de:df:e6: c8:45:b9:bd:e3:92:58:c3:96:b8:31:eb:17:9c:bb:94:da:4c: 96:3c:83:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/5zTUNwqiTPQpv981bpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwNzIzMjIwMTM4WhcNMjYwNzI0MjIwMTM4WjAzMTEwLwYDVQQD EyhiZWY4MDViNGNiZTBiNWNlYjcwNjJmNDUwYzU2MGQyZjZkMTJjZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vxNQwJZ3lxfSWGhiE4DEESewb51 g72/bbw4AQEFnR8+G0vC6KkD4g+oqrv02f7EvxM/pdtoo7zZKkXr0ed0IgzmMsoI FOYa5Xc0wMKVc3O5sR4ZmsNJUa2WgDBQ/dn45Eg/A+uX6ClxLdY4bBSZ8Mjf33iB sNLNguK/jUDri8hS+dDa4zD0YQkcJiXZRyYhbQJbvhTAKpnwYlr2r5xBHJmgUdz1 N5O7pJsKlqhxOYcxstMbwuMTqbgXyUoMwVlVVUHuTW4lHWCXrZ7UUGyeQODcpaeH +Zz+yDIWTjKqUG51iRmEmexr4n9YHlOxXXTIss5If0g4XrrY+VR7/Pey1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL74BbTL4LXOtwYvRQxWDS9tEs83MB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApI9wdDeR zOXFMam3HN5MRoiE4KHOTzvko32LndiRGnXh1osgUKBzQiqmh61MkmImFTE4u818 GsEl7glZ1IMSKhDpL5PB0j0+dAau6qqC1u5dCzE7Csav4QEAyno4OSW/yc45hiJq EwfJAjK177IgeHvx5NL2/oE+IhplNJ53YEiSopIpj83423YriNeR0HlkBo362gCv zLFAeLB1u2XozhWp3Jp/rF0t+CsSx6nSGDcjtfEEbfFA2MXHtg1BUC4u7oatNXuR hMwtlawW7pmALvO8HSVl/VhSq8hHkL0GTPRxr5fOQCKO3t/myEW5veOSWMOWuDHr F5y7lNpMljyDmw== -----END CERTIFICATE-----Generated at Fri Jul 24 05:14:02 2026 by rpki-client