$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: VbUGqTxQKtlcUEOFGT0Ti6Z42EFxQjQZnDr8J0vLbBQ= Subject key identifier: 91:C9:2D:14:EE:4F:B5:E0:7E:3F:33:7C:93:40:AF:EC:B0:EF:BA:D7 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 01A0E286C983DFB2A50A196A3274305B0E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 0A03 Signing time: Sun 27 Sep 2026 11:01:19 +0000 Manifest this update: Sun 27 Sep 2026 11:01:19 +0000 Manifest next update: Mon 28 Sep 2026 11:01:19 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: GIdYTtoeZOn5BjNFPridaUPD9P4Hr8P60no2G2ScFlo=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e2:86:c9:83:df:b2:a5:0a:19:6a:32:74:30:5b:0e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Sep 27 11:01:19 2026 GMT Not After : Sep 28 11:01:19 2026 GMT Subject: CN=91c92d14ee4fb5e07e3f337c9340afecb0efbad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:2a:b8:50:61:9c:13:36:67:95:77:49:a3: 7f:bb:f8:b2:88:a4:d0:76:ac:ff:80:ea:dc:7a:72: 2c:4b:41:cb:9e:0c:5b:e0:5d:d3:8e:9b:84:3e:d1: b8:78:a0:fb:2f:21:b0:cd:f4:6a:33:a6:84:68:72: c6:9c:b0:9c:9f:84:27:00:af:5c:38:66:f6:80:19: b4:b8:81:1e:cf:f9:46:97:d4:2c:f9:d0:f1:89:f0: 64:0a:c1:4a:98:fe:90:5f:6e:cf:23:53:69:be:48: ed:ea:69:65:84:81:34:51:79:2a:14:75:a5:4d:03: 49:b1:8e:49:32:44:d2:e6:47:b8:32:fa:45:05:3a: a7:fc:aa:c3:f8:7e:94:ac:41:89:75:76:b9:ee:47: 6d:41:49:b4:9f:95:87:2e:f3:5d:47:0a:e3:c8:33: 18:30:74:7a:73:df:54:49:9e:19:3c:68:30:13:5e: 9c:5b:ba:45:99:de:44:62:51:19:8b:ca:13:b5:44: 6f:fc:c3:5b:59:57:a1:76:ed:a4:24:3e:a5:da:d0: 32:44:a7:d3:21:fc:25:83:6f:dd:a5:51:fd:c6:6b: 3c:fd:a5:a6:29:f1:a3:44:8e:ab:6e:5c:be:75:50: a6:dc:ec:8f:0a:86:2d:22:28:ff:43:2b:b6:a9:ec: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C9:2D:14:EE:4F:B5:E0:7E:3F:33:7C:93:40:AF:EC:B0:EF:BA:D7 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:59:f9:1d:fe:d9:f6:3c:31:ef:e6:94:6b:64:82:7f:05:fd: dc:3b:d5:3a:b5:1d:c4:f5:30:8c:16:ff:54:63:b8:06:3a:bf: 21:45:e7:ec:8f:9c:4e:ba:47:43:42:6a:b0:54:3c:3c:38:8c: 2f:02:65:61:e8:21:27:7f:b7:08:0a:d4:f7:fb:56:31:f1:c9: c2:1c:58:d2:10:f6:d8:55:16:c5:ce:8e:f9:40:6e:09:96:2c: db:40:56:10:ca:3f:99:b4:a4:75:31:f7:e2:9f:81:a6:e8:50: f1:98:c6:bf:7d:05:07:a5:24:6c:18:a5:95:64:ea:32:44:33: aa:41:fb:d9:27:8c:9b:49:cb:fe:ca:22:c5:1a:8e:5f:73:f5: 07:4f:84:20:11:fa:b4:d0:57:71:2d:9a:a7:9f:f9:cb:f2:13: 00:8d:6e:ce:49:05:b4:3e:8f:d3:92:60:1b:ba:3a:80:3a:e7: 99:12:21:f0:61:4d:d1:3b:71:2f:42:25:a0:14:b5:82:74:6c: 0d:9c:7d:09:24:6a:c0:08:ab:89:43:ea:77:9d:88:83:dd:b6: ce:88:30:b0:35:eb:07:19:77:eb:2c:06:92:bd:b1:8a:ba:00: 82:8f:ee:0c:ca:35:65:97:13:63:02:79:18:56:ed:3b:5e:b2: fa:52:93:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDihsmD37KlChlqMnQwWw4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwOTI3MTEwMTE5WhcNMjYwOTI4MTEwMTE5WjAzMTEwLwYDVQQD Eyg5MWM5MmQxNGVlNGZiNWUwN2UzZjMzN2M5MzQwYWZlY2IwZWZiYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumEquFBhnBM2Z5V3SaN/u/iyiKTQ dqz/gOrcenIsS0HLngxb4F3TjpuEPtG4eKD7LyGwzfRqM6aEaHLGnLCcn4QnAK9c OGb2gBm0uIEez/lGl9Qs+dDxifBkCsFKmP6QX27PI1Npvkjt6mllhIE0UXkqFHWl TQNJsY5JMkTS5ke4MvpFBTqn/KrD+H6UrEGJdXa57kdtQUm0n5WHLvNdRwrjyDMY MHR6c99USZ4ZPGgwE16cW7pFmd5EYlEZi8oTtURv/MNbWVehdu2kJD6l2tAyRKfT Ifwlg2/dpVH9xms8/aWmKfGjRI6rbly+dVCm3OyPCoYtIij/Qyu2qewspwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHJLRTuT7Xgfj8zfJNAr+yw77rXMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1n5Hf7Z 9jwx7+aUa2SCfwX93DvVOrUdxPUwjBb/VGO4Bjq/IUXn7I+cTrpHQ0JqsFQ8PDiM LwJlYeghJ3+3CArU9/tWMfHJwhxY0hD22FUWxc6O+UBuCZYs20BWEMo/mbSkdTH3 4p+BpuhQ8ZjGv30FB6UkbBillWTqMkQzqkH72SeMm0nL/soixRqOX3P1B0+EIBH6 tNBXcS2ap5/5y/ITAI1uzkkFtD6P05JgG7o6gDrnmRIh8GFN0TtxL0IloBS1gnRs DZx9CSRqwAiriUPqd52Ig922zogwsDXrBxl36ywGkr2xiroAgo/uDMo1ZZcTYwJ5 GFbtO16y+lKTUw== -----END CERTIFICATE-----Generated at Sun Sep 27 16:53:02 2026 by rpki-client