$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: Xe79xm7kK3vyF/WEOz11BklLPwh/UDl5fgSFSAjgG44= Subject key identifier: B1:C6:52:F1:92:74:56:9B:14:CA:52:AD:B8:A6:30:FB:B7:B2:10:75 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019F9059D5AD5894613A201AEA7421E9A5FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1C50 Signing time: Thu 23 Jul 2026 19:00:34 +0000 Manifest this update: Thu 23 Jul 2026 19:00:34 +0000 Manifest next update: Fri 24 Jul 2026 19:00:34 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 3: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 4: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 5: 70bI0BpF1ACsAKCFJ6N-iV0JxII.roa (hash: eA2eEKDYDU9RId38K2W4q8Sfx9olgaplYK4PPc5MYTY=) 6: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 7: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 8: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 9: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 10: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 11: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: 6BROJG8p7NH1r8JaAh+LFoHMk4yGAP6zxNu5PWSooiQ=) 12: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 13: QbZ1rTEJfzxB66FDqcoxpkam6ns.roa (hash: cM5csjF25iV+29L4asFE5a4kr7pLri+DT2uTV/sOvz8=) 14: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 15: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 16: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 17: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 18: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 19: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 20: c6zz610dAPS93YECDNiRE3FFJv8.roa (hash: OsQ9xfdlBk9mMh8w37FIGirc6gzFq4ptiH5uxHMx2Y4=) 21: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 22: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 23: hqKvBeK3XKVKA5-Y0aUcuIMRMY4.roa (hash: O3T0OOd6bHrZQ6RgmID8QWHDSs65cWOaJr5blLDT9OM=) 24: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 25: qW2Abdn_vKg1qMi5dPH9Mlkq-5k.roa (hash: A2I1BFykGtvUPJzt8UEmOO8VliU3UUk2FL56Hs19AWE=) 26: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 27: skwAlOpJAcdHksUYGz4EwjUIsXM.roa (hash: KLTUqEUZLvS5HlRAC1b4oFl4mIh8SOSk823xWU684vc=) 28: sz_c26rbvH0uu179TRjeU8EM_A0.roa (hash: tMb7Bo7E7L+zeKT6DXx+zQjvZcrsYlKvO7dQ40ku1+s=) 29: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 30: w90FegnaRGuQdEE1G_puoH9JsxU.roa (hash: MGl3WgOVweO0N+ip5QHYD3FksJJCgZGSSbkebGr25vI=) 31: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 32: zzbHWxJLsLUWNFdWT3RcsYaj87k.roa (hash: aYt8vEO0dk7Q0eIdeE/UvWjCj2uQYX3kR/4atzt1mVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:59:d5:ad:58:94:61:3a:20:1a:ea:74:21:e9:a5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jul 23 19:00:34 2026 GMT Not After : Jul 24 19:00:34 2026 GMT Subject: CN=b1c652f19274569b14ca52adb8a630fbb7b21075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:5e:d0:4c:1b:a4:ec:7e:55:99:60:6b:ee: 53:39:74:5d:47:d8:ea:e6:f1:e3:d6:53:9c:9b:a2: 87:b6:e7:12:71:4a:ee:5d:37:7d:be:03:e1:71:8d: a3:7a:94:79:f0:f7:8e:b7:27:60:26:3f:f5:cf:b9: e3:c5:2c:b2:72:83:97:84:dd:5c:e9:fb:7a:85:fc: ef:13:c3:6a:65:34:7a:2f:0b:3b:8e:03:7f:a3:8d: 8c:67:d8:06:a3:05:5b:6b:0a:5a:fa:8c:56:4c:3d: 48:e7:2f:70:d4:07:d1:24:53:14:f0:82:92:33:7a: 13:1f:b5:b8:b8:64:52:b3:23:e8:19:ad:b4:d8:26: d5:d3:99:ec:18:5f:11:59:91:e0:bf:1b:e8:42:17: 52:d8:ed:99:93:e4:48:3b:21:d7:34:de:9a:8b:06: d6:9f:4c:5d:c7:bf:3b:66:75:8c:3b:3b:28:94:69: f5:30:2a:3d:ec:4b:79:17:52:50:e9:80:5a:bd:74: 56:a1:f9:e0:4c:18:7c:47:84:f7:c0:5a:46:ae:2c: 20:d3:71:c0:0b:04:8c:eb:1e:ac:cd:4e:81:18:5a: f4:d8:0f:6a:54:4d:7b:59:5c:2d:39:48:c7:49:0d: c9:52:33:e0:2d:7e:29:84:79:da:85:28:4c:4c:be: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C6:52:F1:92:74:56:9B:14:CA:52:AD:B8:A6:30:FB:B7:B2:10:75 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cb:84:6d:25:6d:18:4d:9b:0a:90:00:14:7f:44:ce:22:05: 48:dd:e5:e0:90:03:f7:90:c3:23:ad:68:c5:91:7c:f7:f2:8a: 0e:84:43:a4:3f:3b:35:2c:1a:7a:10:a1:41:2b:23:75:2e:cb: ac:a7:73:45:87:fd:ad:6d:9a:72:db:98:99:55:4d:70:d2:fd: 7a:57:dc:d6:8a:90:2e:86:f3:b9:ff:24:a0:f3:7e:21:19:93: 1c:13:2d:bb:b6:2a:40:5a:55:95:2c:95:11:6c:44:8c:65:85: e2:78:4a:e7:b8:a0:bb:d3:29:41:cc:12:64:f2:5b:43:9a:1d: 0c:3c:a2:24:07:0b:35:00:eb:dc:24:82:12:08:a9:43:6a:fa: e0:a7:bf:36:f2:39:51:b2:79:86:10:37:65:1a:9b:06:ca:38: 50:cf:0a:5c:5f:7e:93:b8:95:13:44:ed:ca:40:e8:d1:46:d6: a8:cf:75:3c:5c:ed:96:cd:de:c0:4f:17:ce:87:f7:6b:4e:7d: eb:ba:eb:9c:50:0e:41:4e:4d:e0:a9:a0:df:e3:39:52:4e:c0: fa:c9:b6:bd:80:9f:ca:37:7d:2c:af:45:5e:42:eb:d8:2f:05: 29:c5:fb:c4:8b:96:d3:9f:b3:20:9b:e1:52:84:45:f9:1f:fc: 5f:15:47:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWdWtWJRhOiAa6nQh6aX/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwNzIzMTkwMDM0WhcNMjYwNzI0MTkwMDM0WjAzMTEwLwYDVQQD EyhiMWM2NTJmMTkyNzQ1NjliMTRjYTUyYWRiOGE2MzBmYmI3YjIxMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Fe0EwbpOx+VZlga+5TOXRdR9jq 5vHj1lOcm6KHtucScUruXTd9vgPhcY2jepR58PeOtydgJj/1z7njxSyycoOXhN1c 6ft6hfzvE8NqZTR6Lws7jgN/o42MZ9gGowVbawpa+oxWTD1I5y9w1AfRJFMU8IKS M3oTH7W4uGRSsyPoGa202CbV05nsGF8RWZHgvxvoQhdS2O2Zk+RIOyHXNN6aiwbW n0xdx787ZnWMOzsolGn1MCo97Et5F1JQ6YBavXRWofngTBh8R4T3wFpGriwg03HA CwSM6x6szU6BGFr02A9qVE17WVwtOUjHSQ3JUjPgLX4phHnahShMTL5ygQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHGUvGSdFabFMpSrbimMPu3shB1MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8uEbSVt GE2bCpAAFH9EziIFSN3l4JAD95DDI61oxZF89/KKDoRDpD87NSwaehChQSsjdS7L rKdzRYf9rW2actuYmVVNcNL9elfc1oqQLobzuf8koPN+IRmTHBMtu7YqQFpVlSyV EWxEjGWF4nhK57igu9MpQcwSZPJbQ5odDDyiJAcLNQDr3CSCEgipQ2r64Ke/NvI5 UbJ5hhA3ZRqbBso4UM8KXF9+k7iVE0TtykDo0UbWqM91PFztls3ewE8Xzof3a059 67rrnFAOQU5N4Kmg3+M5Uk7A+sm2vYCfyjd9LK9FXkLr2C8FKcX7xIuW05+zIJvh UoRF+R/8XxVHew== -----END CERTIFICATE-----Generated at Fri Jul 24 02:02:57 2026 by rpki-client