$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: d5b635mKz3TKEXXGB/E19V9ccafVoPzDM1u/EofRvkE= Subject key identifier: A1:43:D5:8A:56:7D:31:28:E7:C2:3A:1E:B3:0F:4F:F9:23:FC:05:14 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019F8FEC5003E00AC67C845DA673E715B966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 19EA Signing time: Thu 23 Jul 2026 17:00:56 +0000 Manifest this update: Thu 23 Jul 2026 17:00:56 +0000 Manifest next update: Fri 24 Jul 2026 17:00:56 +0000 Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 2: 9OWOKSpLigen3wmL7mhYnOHGp20.roa (hash: RW363Lgc9ijutZ++Br9twiDa8reB4RMvt+oPMke+fMw=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: rlJOljOb00A92rSea6Yre4Hdac5eKNKpZXoYG+iDy20=) 4: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 5: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 6: gcbYT709f0hgiLNirRCxsCWINg0.roa (hash: GvONaLOScpTddKmNp/ohtdFC7YpVWBMSGSchqA80EtE=) 7: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 8: qQh8Ea6WfJPSa--99ZPG599-K5o.roa (hash: lcYkdnY9FrHkVWlxdS8gfgs1tGrcmc2midRbLooz/Uc=) 9: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 10: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:50:03:e0:0a:c6:7c:84:5d:a6:73:e7:15:b9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jul 23 17:00:56 2026 GMT Not After : Jul 24 17:00:56 2026 GMT Subject: CN=a143d58a567d3128e7c23a1eb30f4ff923fc0514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:5b:08:f0:a6:e7:48:00:9b:4f:e5:db:3a: 9a:81:e4:1a:d8:4c:03:d6:e9:ac:2b:5e:ca:c4:34: c8:e8:e2:f9:92:f2:0a:a0:0e:0f:5a:44:e3:41:0f: 57:c9:8a:90:35:bb:1b:cf:d8:d7:b9:06:44:3a:f0: 8f:14:d0:eb:60:d0:ef:05:2a:54:2d:89:4d:b7:ea: 2e:9f:b2:02:11:6b:ac:01:d2:22:fd:ce:8a:11:b3: 45:12:13:d8:9e:49:f9:62:0c:1b:c7:d4:9f:f8:40: d9:2c:00:f8:04:e0:39:f3:cc:56:f9:3c:cd:20:93: b3:42:41:71:40:bc:00:ef:00:2b:30:c3:f0:28:90: 2b:ab:0d:01:8a:ee:e7:31:3c:97:94:29:03:fe:94: 1c:4f:64:38:28:f7:3e:75:ae:6c:a8:7a:6b:fd:f5: ab:9d:48:3c:c4:b5:cf:e6:e1:ec:74:7a:10:7d:65: 3a:dc:3a:71:ff:21:78:6f:bd:df:f6:c2:36:b0:f4: b3:4e:90:0c:92:4b:9f:86:d5:ec:8a:b3:6a:b4:b4: 09:b0:63:05:15:b5:2d:57:b7:5b:d9:00:37:36:91: 62:1d:47:5a:73:6b:ae:b1:82:2b:5b:60:97:38:3e: 58:cf:d5:bf:3b:a2:c3:02:11:ba:e8:1e:09:6c:e4: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:43:D5:8A:56:7D:31:28:E7:C2:3A:1E:B3:0F:4F:F9:23:FC:05:14 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:87:bc:e9:f2:51:8f:cb:a1:95:c9:2c:33:35:a4:62:8a:aa: 70:50:8d:f1:43:52:d5:b1:cc:20:64:9f:61:9f:c5:66:64:01: eb:eb:4d:57:e0:df:fb:82:30:52:7f:f7:8c:16:c1:ae:87:ad: 16:26:2e:49:0f:44:77:17:c0:c6:c1:92:cd:a3:73:93:bc:d8: 33:b9:57:ff:21:7a:ee:19:b8:54:9b:cd:b9:ba:4c:d5:74:7f: 2f:b9:d7:a0:ea:b9:76:a1:b9:c8:f8:2d:36:a6:09:39:c9:69: 85:45:b1:5e:86:23:0e:93:fe:1f:f7:f1:cd:37:bb:bc:c1:e0: 60:81:48:f8:3c:53:6d:f7:e1:55:cc:ab:64:8a:fd:16:23:f4: b2:bc:cb:f2:9f:ae:ce:e9:0e:ed:e0:5d:7e:f7:f4:29:5d:83: 7d:9c:c6:df:00:ae:ff:ef:69:ac:12:12:87:d2:b6:f2:fa:74: cf:0f:0f:ad:90:5e:9e:b2:a4:c3:67:a7:41:4b:72:8c:ac:aa: 86:1a:83:e5:a1:1c:f7:75:3b:69:fc:6b:03:de:94:d3:4c:18: 7c:24:00:d3:7b:36:ea:2f:fd:3a:9a:89:42:7f:bc:ac:5f:f0: a9:57:46:f9:69:7e:4e:c9:79:2e:0f:b7:5b:0a:49:2b:67:bd: 6d:1a:f1:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7FAD4ArGfIRdpnPnFblmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwNzIzMTcwMDU2WhcNMjYwNzI0MTcwMDU2WjAzMTEwLwYDVQQD EyhhMTQzZDU4YTU2N2QzMTI4ZTdjMjNhMWViMzBmNGZmOTIzZmMwNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoFbCPCm50gAm0/l2zqageQa2EwD 1umsK17KxDTI6OL5kvIKoA4PWkTjQQ9XyYqQNbsbz9jXuQZEOvCPFNDrYNDvBSpU LYlNt+oun7ICEWusAdIi/c6KEbNFEhPYnkn5Ygwbx9Sf+EDZLAD4BOA588xW+TzN IJOzQkFxQLwA7wArMMPwKJArqw0Biu7nMTyXlCkD/pQcT2Q4KPc+da5sqHpr/fWr nUg8xLXP5uHsdHoQfWU63Dpx/yF4b73f9sI2sPSzTpAMkkufhtXsirNqtLQJsGMF FbUtV7db2QA3NpFiHUdac2uusYIrW2CXOD5Yz9W/O6LDAhG66B4JbOQX2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFD1YpWfTEo58I6HrMPT/kj/AUUMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooe86fJR j8uhlcksMzWkYoqqcFCN8UNS1bHMIGSfYZ/FZmQB6+tNV+Df+4IwUn/3jBbBroet FiYuSQ9EdxfAxsGSzaNzk7zYM7lX/yF67hm4VJvNubpM1XR/L7nXoOq5dqG5yPgt NqYJOclphUWxXoYjDpP+H/fxzTe7vMHgYIFI+DxTbffhVcyrZIr9FiP0srzL8p+u zukO7eBdfvf0KV2DfZzG3wCu/+9prBISh9K28vp0zw8PrZBenrKkw2enQUtyjKyq hhqD5aEc93U7afxrA96U00wYfCQA03s26i/9OpqJQn+8rF/wqVdG+Wl+Tsl5Lg+3 WwpJK2e9bRrxcQ== -----END CERTIFICATE-----Generated at Fri Jul 24 03:16:58 2026 by rpki-client