$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: TggKTMqD5mT6tifxAJDtTY/6al1c2ktH3k7uqTk81cU= Subject key identifier: B2:28:7F:3A:FB:F1:55:35:5A:33:46:2E:BD:FB:A1:4C:68:F3:83:27 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019F9022F9E5905839F9456280BF77B6663D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 19D8 Signing time: Thu 23 Jul 2026 18:00:38 +0000 Manifest this update: Thu 23 Jul 2026 18:00:38 +0000 Manifest next update: Fri 24 Jul 2026 18:00:38 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: nMExbi8s2G41/15PTOrIzZh6doyTyFPwx+brahof2/w=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 17: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:22:f9:e5:90:58:39:f9:45:62:80:bf:77:b6:66:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jul 23 18:00:38 2026 GMT Not After : Jul 24 18:00:38 2026 GMT Subject: CN=b2287f3afbf155355a33462ebdfba14c68f38327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:52:91:8c:d1:54:4c:d7:cd:6e:88:6c:37:be: e3:60:a8:e9:5d:af:76:16:ff:14:b8:eb:98:85:12: b4:7f:98:65:8d:63:2e:dc:4a:7e:39:27:cb:69:c9: e2:22:33:a4:8d:b5:ef:43:1c:16:f3:bc:f0:f4:62: e1:2a:5d:96:82:22:9e:1d:a7:5f:75:89:05:b5:59: b8:29:df:65:59:38:d2:d0:a6:c0:ca:97:fe:ac:b8: 30:54:7b:75:45:e1:88:c8:77:78:19:2d:57:db:c7: b7:7d:e0:83:0a:0a:a5:68:84:32:3a:09:7d:b9:c4: 42:6e:65:97:24:98:7b:44:86:be:cd:19:12:e0:e1: ef:ea:ee:96:ee:6e:df:5a:b7:af:a5:40:83:36:06: 9f:f2:a7:fd:3c:e3:7a:50:42:3a:fb:7f:9c:40:3c: 73:65:dd:ba:1a:81:36:40:4d:e5:0a:74:55:db:d8: 59:e1:19:fc:ea:99:cd:1d:49:8f:df:e1:3a:0d:78: 55:77:30:b3:e6:d1:fc:51:c6:51:b9:93:d9:78:ca: 99:80:da:26:fe:5c:48:69:5c:be:7c:02:0d:03:07: 51:4b:40:8b:ff:1c:36:14:fd:14:ac:34:9d:4b:ec: 1a:db:be:e4:93:d6:d1:e8:66:1c:4c:ef:5e:f4:bb: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:7F:3A:FB:F1:55:35:5A:33:46:2E:BD:FB:A1:4C:68:F3:83:27 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d2:50:b3:14:35:58:a9:43:23:7d:e8:d1:e2:7a:82:15:e2: db:4f:bd:ff:06:c9:b9:bb:e1:dc:88:ac:42:1a:45:c5:b3:a1: 42:bb:f8:54:bf:9e:68:54:18:3f:b1:f6:3f:12:58:7c:b5:9e: 10:1b:b7:d2:bd:db:30:66:16:c2:6a:19:a1:c6:e3:a4:f9:2f: da:e6:8d:2f:5d:83:27:ff:49:18:33:2e:3d:70:43:3e:46:82: d6:5c:76:42:58:6b:3a:8e:04:04:9e:52:58:ef:6a:93:10:6c: be:34:4f:13:f2:ce:05:37:fb:05:00:4c:35:ae:4a:c8:88:6d: 36:36:04:d2:c9:57:b1:0d:d2:e8:ae:38:fc:a2:4b:f5:59:4e: fe:d0:ee:ed:31:12:9f:15:74:ed:a6:7e:33:2f:87:3d:33:6e: 36:dc:06:61:0d:24:fd:4f:5f:2e:b0:e0:59:ff:4f:2d:e4:00: b0:21:87:9e:b1:73:5d:90:23:da:52:6c:91:1b:a8:c0:c0:3e: 04:2e:8a:51:8b:23:e1:eb:6e:0c:60:c5:77:8b:a2:cf:ee:b5: 8c:5e:b7:60:12:bd:bc:bf:e5:20:9d:e1:39:8f:1b:9c:b0:f0: 33:48:ce:ee:9e:92:ee:20:34:db:68:c3:4e:b8:17:45:b0:21: 34:96:08:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIvnlkFg5+UVigL93tmY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwNzIzMTgwMDM4WhcNMjYwNzI0MTgwMDM4WjAzMTEwLwYDVQQD EyhiMjI4N2YzYWZiZjE1NTM1NWEzMzQ2MmViZGZiYTE0YzY4ZjM4MzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1KRjNFUTNfNbohsN77jYKjpXa92 Fv8UuOuYhRK0f5hljWMu3Ep+OSfLacniIjOkjbXvQxwW87zw9GLhKl2WgiKeHadf dYkFtVm4Kd9lWTjS0KbAypf+rLgwVHt1ReGIyHd4GS1X28e3feCDCgqlaIQyOgl9 ucRCbmWXJJh7RIa+zRkS4OHv6u6W7m7fWrevpUCDNgaf8qf9PON6UEI6+3+cQDxz Zd26GoE2QE3lCnRV29hZ4Rn86pnNHUmP3+E6DXhVdzCz5tH8UcZRuZPZeMqZgNom /lxIaVy+fAINAwdRS0CL/xw2FP0UrDSdS+wa277kk9bR6GYcTO9e9LvqpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIofzr78VU1WjNGLr37oUxo84MnMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9JQsxQ1 WKlDI33o0eJ6ghXi20+9/wbJubvh3IisQhpFxbOhQrv4VL+eaFQYP7H2PxJYfLWe EBu30r3bMGYWwmoZocbjpPkv2uaNL12DJ/9JGDMuPXBDPkaC1lx2QlhrOo4EBJ5S WO9qkxBsvjRPE/LOBTf7BQBMNa5KyIhtNjYE0slXsQ3S6K44/KJL9VlO/tDu7TES nxV07aZ+My+HPTNuNtwGYQ0k/U9fLrDgWf9PLeQAsCGHnrFzXZAj2lJskRuowMA+ BC6KUYsj4etuDGDFd4uiz+61jF63YBK9vL/lIJ3hOY8bnLDwM0jO7p6S7iA022jD TrgXRbAhNJYIFA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:31:14 2026 by rpki-client