$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: zHCX2M4v+bHoCPBbXNBZSw+Au3mpCBhqnpfLjBmg1bc= Subject key identifier: 70:10:FF:8C:71:74:13:1E:A9:AD:20:17:BA:BB:76:22:E3:1B:1D:E8 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019E1E6C56FF36D4C18DE816B6E8B45F5519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 1918 Signing time: Tue 12 May 2026 23:01:17 +0000 Manifest this update: Tue 12 May 2026 23:01:17 +0000 Manifest next update: Wed 13 May 2026 23:01:17 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: qwLxhJo20n9XMY44oGGZ1WO3JRfXoJGGhC2ZDTd3O24=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=) 17: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 18: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 20:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:6c:56:ff:36:d4:c1:8d:e8:16:b6:e8:b4:5f:55:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: May 12 23:01:17 2026 GMT Not After : May 13 23:01:17 2026 GMT Subject: CN=7010ff8c7174131ea9ad2017babb7622e31b1de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:cf:70:f7:ee:89:fe:7d:dd:d0:35:d9:d9: ba:35:8d:87:2b:dd:19:6c:4c:d2:69:20:85:e3:02: 1d:fe:e7:e9:00:90:f7:94:d8:aa:a8:ca:e2:63:2b: 46:ad:54:0b:ad:8e:1b:cf:75:76:4e:c2:d3:03:b4: 4b:db:a2:f1:88:f4:33:38:29:c3:cb:cc:a0:b9:0c: d8:ac:27:4b:5b:dc:10:6c:21:48:d7:4a:58:f9:9b: e2:75:c8:f0:48:d2:06:81:8f:92:87:12:82:39:65: f8:dd:8f:ef:01:53:67:34:b1:90:a8:8c:a6:00:c6: ac:37:d6:f2:52:0b:ce:c7:b7:d5:57:fb:ad:08:ca: ff:1c:ff:6f:f3:57:bf:76:f9:87:b9:05:0b:9c:14: b6:83:65:c5:ce:e7:f5:7a:39:b1:9d:1a:63:1c:de: 4e:ec:bb:d2:42:bc:93:14:08:cf:71:fc:85:03:f1: 19:1f:59:7d:cc:68:8b:65:ee:b8:46:2f:c1:46:8b: c0:e8:e7:50:a4:d0:ee:db:9f:3b:20:fc:db:dc:52: e5:1f:53:b9:9d:c4:46:23:18:ec:6b:de:88:bd:5a: 91:03:65:e0:24:27:d6:a1:85:9b:4e:d5:05:72:ff: 3b:23:bb:e0:b1:ef:f3:49:b9:d6:b1:ab:d0:57:f1: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:10:FF:8C:71:74:13:1E:A9:AD:20:17:BA:BB:76:22:E3:1B:1D:E8 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d0:3e:2f:4c:d1:33:78:e3:05:ee:20:c3:dd:1f:f8:52:11: 24:43:41:21:da:e9:4e:f9:79:36:81:e2:a8:49:75:83:4d:90: c1:0e:fe:89:2a:ee:a7:6f:e2:9c:80:fd:ff:94:f5:29:b7:0c: 3b:d3:9c:da:ba:b4:d3:0f:2b:7a:f8:f0:7c:7c:05:7e:39:87: 00:af:a6:4a:c8:48:57:ae:a0:3a:1c:ce:64:08:b7:69:00:d5: ab:1a:f9:21:7c:cc:9d:85:76:79:ae:12:59:dd:8e:09:85:c1: ce:7f:55:d4:89:32:88:21:c1:ce:56:a4:9e:c0:82:a0:a7:0b: 9d:51:38:2b:03:f1:98:1b:1e:60:65:0c:8b:0f:e7:74:56:f4: 96:42:f2:af:ad:3e:8d:be:24:91:c6:59:90:9e:ca:98:c1:c7: 09:b5:6e:2a:cf:24:7b:b0:05:57:d7:d3:e2:d9:18:12:f9:cf: c5:d7:f7:b2:07:1d:df:2c:d8:ee:41:ad:11:b6:5b:4c:73:99: 11:be:c2:14:6d:74:9f:72:f6:37:d9:d4:af:fb:af:96:bd:8e: 08:71:cb:c0:14:34:99:bc:f0:bd:d5:dd:ea:d9:cf:db:5c:98: 7f:b8:c6:ff:ab:81:81:ce:0a:82:b1:ba:94:63:45:76:8f:5f: dc:b9:c3:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ebFb/NtTBjegWtui0X1UZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwNTEyMjMwMTE3WhcNMjYwNTEzMjMwMTE3WjAzMTEwLwYDVQQD Eyg3MDEwZmY4YzcxNzQxMzFlYTlhZDIwMTdiYWJiNzYyMmUzMWIxZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnujPcPfuif593dA12dm6NY2HK90Z bEzSaSCF4wId/ufpAJD3lNiqqMriYytGrVQLrY4bz3V2TsLTA7RL26LxiPQzOCnD y8yguQzYrCdLW9wQbCFI10pY+ZvidcjwSNIGgY+ShxKCOWX43Y/vAVNnNLGQqIym AMasN9byUgvOx7fVV/utCMr/HP9v81e/dvmHuQULnBS2g2XFzuf1ejmxnRpjHN5O 7LvSQryTFAjPcfyFA/EZH1l9zGiLZe64Ri/BRovA6OdQpNDu2587IPzb3FLlH1O5 ncRGIxjsa96IvVqRA2XgJCfWoYWbTtUFcv87I7vgse/zSbnWsavQV/EKcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAQ/4xxdBMeqa0gF7q7diLjGx3oMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdA+L0zR M3jjBe4gw90f+FIRJENBIdrpTvl5NoHiqEl1g02QwQ7+iSrup2/inID9/5T1KbcM O9Oc2rq00w8revjwfHwFfjmHAK+mSshIV66gOhzOZAi3aQDVqxr5IXzMnYV2ea4S Wd2OCYXBzn9V1IkyiCHBzlaknsCCoKcLnVE4KwPxmBseYGUMiw/ndFb0lkLyr60+ jb4kkcZZkJ7KmMHHCbVuKs8ke7AFV9fT4tkYEvnPxdf3sgcd3yzY7kGtEbZbTHOZ Eb7CFG10n3L2N9nUr/uvlr2OCHHLwBQ0mbzwvdXd6tnP21yYf7jG/6uBgc4KgrG6 lGNFdo9f3LnDUw== -----END CERTIFICATE-----Generated at Wed May 13 03:39:50 2026 by rpki-client