$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: nXvM7tvHdjC4SB9A5t66hyaXqv+zITnBAzru4AtBW0c= Subject key identifier: 5F:D4:1B:0B:AB:D8:D3:5B:20:07:CE:A3:D7:7F:9F:55:F5:03:C0:D5 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01A0DA283C8F3E8F00E471C6B90B79BE6C9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1D19 Signing time: Fri 25 Sep 2026 20:01:04 +0000 Manifest this update: Fri 25 Sep 2026 20:01:04 +0000 Manifest next update: Sat 26 Sep 2026 20:01:04 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 3: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 4: 5CRzGhoU_e7eBUnAKy8O8D4EtQk.roa (hash: LJTrOsci6Dw72z3TAo1qYXwRYs/MlFjYW3VDOUG/E6w=) 5: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 6: 9-qnUIUgALNLXr9kc-W4Rp_ypek.roa (hash: 0Ht+KbAol8hyl4XyJvy1w5p5czvvmCyS8xC2e+SIbRY=) 7: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 8: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 9: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 10: HrxcodrvVIM_GMxKhZQudNRip6c.roa (hash: MTdn9qnsxs92sBTi2UkM6k+YAlFOUGhoYZbEqur9JIg=) 11: JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa (hash: kcTQU5997oY8OpgCn62LAmPoorNvkv8hEcl9ToSuUFo=) 12: KAv0a2aBh2HKZaJ11jodxywws-4.roa (hash: H3aWrK0K0iZNqy3EQ3BRXNZTYMg5/3AIf1FGtpEowbk=) 13: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 14: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: stVdVErUGqcFsA1yco0ay1LOJ1ZXFZVA9oguohT4IaU=) 15: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 16: PrMKAjfyE4gDVPM_30yhUEgUaK8.roa (hash: d5Ri8zlN+7mgIl6066b62P5+COYbCz5V4oEMD6BJQvc=) 17: QwF0BlO4tk_h2m7pI4nhweiHhKA.roa (hash: /hRSobrtsj4yZ3x+jWbxAu/sV+yBO6+8QUxw1Z3nc/Q=) 18: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 19: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 20: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 21: ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa (hash: mZ/hXIWOyw1nZePba2ku4vzRolnuQ9r/sg/ZfJza0sU=) 22: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 23: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 24: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 25: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 26: f2jgN13vsLBBFFDE9L3XqIO-zZI.roa (hash: 6jwpW+Gz/4278/TgiUlJbdacPgd1+h1QmRHWgV41/1A=) 27: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 28: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 29: rwIxl0xSpx6cLwOck58lc13Z1LA.roa (hash: tTGUty/PmeIj7uvxFb0523AV7tRjEIfSVI+SkDAItjw=) 30: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 31: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:28:3c:8f:3e:8f:00:e4:71:c6:b9:0b:79:be:6c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Sep 25 20:01:04 2026 GMT Not After : Sep 26 20:01:04 2026 GMT Subject: CN=5fd41b0babd8d35b2007cea3d77f9f55f503c0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:2c:85:2f:f7:fb:cb:9a:45:09:8b:bb:bb: 74:75:8e:36:80:a3:6b:81:f1:42:4e:97:55:9a:a8: 38:4c:67:48:15:d1:da:9b:32:f4:08:31:d9:b4:27: 75:2f:50:31:9b:09:b6:b0:6e:fd:92:72:42:f9:e9: c3:38:c9:9e:1c:70:a2:ea:e0:f8:c9:58:e5:11:cc: 0a:4b:64:0b:52:55:6b:ea:0d:a9:44:91:96:ae:a6: 0d:d6:74:d5:ba:24:dd:eb:22:3e:3c:56:28:b5:70: 35:fe:7c:15:ef:68:0d:a4:65:15:54:70:b5:c2:60: a8:5c:78:ac:e8:8c:07:a3:7d:76:3b:72:2a:3f:6f: 5f:6f:6a:52:66:c5:5b:70:76:b3:1b:0e:6b:c1:b0: 77:04:03:4d:ef:53:e5:87:a7:bc:60:ea:97:21:25: 6c:a6:7b:aa:fb:c7:8e:73:b8:28:67:f4:84:d7:65: b9:26:61:41:84:38:b2:5e:9d:d4:a6:40:e2:88:4f: 70:71:c0:9e:e3:fe:81:3d:9d:a3:2f:cb:a2:ed:80: c0:89:29:83:14:f1:6d:b4:15:50:83:7c:c3:44:88: 2e:bb:64:95:4f:3e:5d:47:e1:7f:f7:21:c8:b8:79: 59:12:3e:fa:c3:66:71:8e:16:f4:bc:85:e2:9a:51: 98:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D4:1B:0B:AB:D8:D3:5B:20:07:CE:A3:D7:7F:9F:55:F5:03:C0:D5 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:48:86:08:7a:1d:54:26:8b:8b:77:11:e7:b3:c7:79:09:7c: 4d:96:42:c3:17:71:e8:ec:f3:43:9d:30:b8:c7:62:0d:3c:83: 51:f7:4d:ac:9c:71:b3:3b:ee:8e:8b:62:7d:a3:68:67:7b:fe: 87:95:52:15:6f:df:69:f3:31:44:ae:03:98:d0:10:8e:2d:7b: 37:48:f3:a4:99:75:58:bb:e0:0c:75:1e:57:29:8e:16:e3:35: 5f:af:65:23:3d:03:dd:d5:81:c9:b2:da:2a:36:70:22:17:3d: 0e:0c:f5:23:ce:4a:a2:11:fc:a9:b1:3c:c3:0f:59:14:f4:75: 4e:14:93:9a:cb:1f:8a:7e:f0:48:6f:9a:57:36:65:fb:ce:21: 8f:94:27:ff:86:d5:14:bb:52:be:38:20:b6:24:cd:1a:8d:44: 33:30:f9:50:e0:6a:6e:c5:da:50:13:70:1a:fb:96:ee:11:6f: 3c:e9:3b:11:76:bc:b8:32:3b:46:b5:27:6d:aa:ee:50:f2:53: 46:6b:64:58:8e:75:ae:1f:d4:6a:58:36:58:1a:54:80:93:05: d4:03:55:ad:bb:f5:90:b4:67:b9:22:f9:63:bf:58:00:99:ab: e8:79:fc:ab:93:ea:84:20:54:5c:cf:18:bc:b8:8e:9a:b2:47: cf:95:1c:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDaKDyPPo8A5HHGuQt5vmycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwOTI1MjAwMTA0WhcNMjYwOTI2MjAwMTA0WjAzMTEwLwYDVQQD Eyg1ZmQ0MWIwYmFiZDhkMzViMjAwN2NlYTNkNzdmOWY1NWY1MDNjMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5gshS/3+8uaRQmLu7t0dY42gKNr gfFCTpdVmqg4TGdIFdHamzL0CDHZtCd1L1Axmwm2sG79knJC+enDOMmeHHCi6uD4 yVjlEcwKS2QLUlVr6g2pRJGWrqYN1nTVuiTd6yI+PFYotXA1/nwV72gNpGUVVHC1 wmCoXHis6IwHo312O3IqP29fb2pSZsVbcHazGw5rwbB3BANN71Plh6e8YOqXISVs pnuq+8eOc7goZ/SE12W5JmFBhDiyXp3UpkDiiE9wccCe4/6BPZ2jL8ui7YDAiSmD FPFttBVQg3zDRIguu2SVTz5dR+F/9yHIuHlZEj76w2Zxjhb0vIXimlGYyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/UGwur2NNbIAfOo9d/n1X1A8DVMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEiGCHod VCaLi3cR57PHeQl8TZZCwxdx6OzzQ50wuMdiDTyDUfdNrJxxszvujotifaNoZ3v+ h5VSFW/fafMxRK4DmNAQji17N0jzpJl1WLvgDHUeVymOFuM1X69lIz0D3dWBybLa KjZwIhc9Dgz1I85KohH8qbE8ww9ZFPR1ThSTmssfin7wSG+aVzZl+84hj5Qn/4bV FLtSvjggtiTNGo1EMzD5UOBqbsXaUBNwGvuW7hFvPOk7EXa8uDI7RrUnbaruUPJT RmtkWI51rh/Ualg2WBpUgJMF1ANVrbv1kLRnuSL5Y79YAJmr6Hn8q5PqhCBUXM8Y vLiOmrJHz5Ucbw== -----END CERTIFICATE-----Generated at Fri Sep 25 22:40:58 2026 by rpki-client