$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: 3hm5G4w+nzDD5ommTtMXk/+WGY8mJr3Giso/tNkYz6M= Subject key identifier: 0A:C5:73:3A:B3:F9:46:DB:5B:40:E8:F7:15:55:87:86:D7:F2:87:DD Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019F909075CF7451AB44A5A7EB982BDDBDCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 0954 Signing time: Thu 23 Jul 2026 20:00:14 +0000 Manifest this update: Thu 23 Jul 2026 20:00:14 +0000 Manifest next update: Fri 24 Jul 2026 20:00:14 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: /bRqRweXqs14a/497umB4QDa1K5mWxL+D+abuj6fjUw=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:75:cf:74:51:ab:44:a5:a7:eb:98:2b:dd:bd:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Jul 23 20:00:14 2026 GMT Not After : Jul 24 20:00:14 2026 GMT Subject: CN=0ac5733ab3f946db5b40e8f715558786d7f287dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:87:9c:20:0d:ea:14:37:b7:50:f7:76:55:10: 0f:98:77:ae:e6:4e:e8:c1:4e:ca:54:b4:74:0b:39: 2e:7d:41:1a:ef:0e:b0:b8:69:47:bc:81:ff:83:e4: 5d:25:fa:c9:37:35:34:7f:e1:03:0c:50:5f:4c:5a: ae:45:98:d5:3c:02:c2:d0:ee:02:a2:25:1f:2a:25: 02:e6:19:c3:cf:78:80:dc:75:a8:a8:85:15:41:dd: ef:4f:ff:85:d9:bb:cc:b5:67:60:af:07:e5:eb:4d: 06:92:6b:a7:97:60:73:df:19:b1:5a:f2:39:69:3c: 2e:7f:3f:ae:18:f9:2a:45:91:5b:7b:a5:23:05:e5: 8f:a9:f8:4c:1b:69:f9:80:29:65:ec:33:f3:db:da: d3:67:d0:27:36:34:7a:3c:79:81:72:17:bf:19:7b: 36:a1:fc:97:74:20:2f:db:50:60:fc:8d:42:ce:af: 1d:4c:f0:4c:82:d0:d4:e4:49:0d:87:ee:d9:46:e6: 02:eb:5e:31:81:78:8a:02:c7:0a:85:b4:d0:de:25: f4:36:ef:c0:1e:a5:e2:29:53:b1:b9:6a:f5:1b:b5: f6:ee:37:a7:ae:0f:02:e1:99:c1:b2:77:f5:e8:d1: 16:fb:a3:b4:4d:75:70:3c:61:6a:05:05:f3:56:b4: 74:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C5:73:3A:B3:F9:46:DB:5B:40:E8:F7:15:55:87:86:D7:F2:87:DD X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4c:8f:71:fe:44:ae:c0:d1:21:dd:84:4d:b7:81:92:ba:44: 6f:ba:11:85:bc:ab:b2:10:4c:31:80:23:1d:b2:85:3b:24:d1: 21:73:7b:50:d8:88:91:53:c2:c1:ac:22:cc:cd:d3:bd:6c:53: df:f3:50:f7:1c:b5:34:68:f4:82:86:8a:81:67:23:6b:a9:69: 29:1a:c5:3e:39:c8:b1:ad:cd:57:ca:04:8b:1a:8f:29:03:04: ec:70:c4:0b:fd:18:9c:6e:c4:15:bc:72:b7:b6:15:77:89:be: 84:be:82:86:f7:1a:91:93:19:f7:b5:0c:c1:88:d7:2b:5f:63: f3:1f:5b:34:45:51:dd:6f:4e:03:31:45:1c:d0:e0:fb:26:f0: b9:5c:79:d7:42:99:70:56:01:95:81:66:68:f6:8a:3a:2b:3d: 09:f4:e7:b9:b6:8f:ff:8d:77:f1:04:19:49:18:2e:da:eb:cd: 40:75:ad:c0:de:1f:80:4f:11:04:6f:46:24:93:c5:3e:28:6b: 8b:e2:22:f0:2d:54:f8:72:d8:9c:46:85:3d:77:27:25:59:61: fa:c2:94:85:7e:d8:33:77:40:00:56:9e:ea:a3:1a:30:dd:45: 9b:08:91:00:e5:4f:64:38:54:a4:aa:bd:ac:7e:ec:d2:6d:07: 8e:77:aa:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkHXPdFGrRKWn65gr3b3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwNzIzMjAwMDE0WhcNMjYwNzI0MjAwMDE0WjAzMTEwLwYDVQQD EygwYWM1NzMzYWIzZjk0NmRiNWI0MGU4ZjcxNTU1ODc4NmQ3ZjI4N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYecIA3qFDe3UPd2VRAPmHeu5k7o wU7KVLR0CzkufUEa7w6wuGlHvIH/g+RdJfrJNzU0f+EDDFBfTFquRZjVPALC0O4C oiUfKiUC5hnDz3iA3HWoqIUVQd3vT/+F2bvMtWdgrwfl600Gkmunl2Bz3xmxWvI5 aTwufz+uGPkqRZFbe6UjBeWPqfhMG2n5gCll7DPz29rTZ9AnNjR6PHmBche/GXs2 ofyXdCAv21Bg/I1Czq8dTPBMgtDU5EkNh+7ZRuYC614xgXiKAscKhbTQ3iX0Nu/A HqXiKVOxuWr1G7X27jenrg8C4ZnBsnf16NEW+6O0TXVwPGFqBQXzVrR0qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArFczqz+UbbW0Do9xVVh4bX8ofdMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakyPcf5E rsDRId2ETbeBkrpEb7oRhbyrshBMMYAjHbKFOyTRIXN7UNiIkVPCwawizM3TvWxT 3/NQ9xy1NGj0goaKgWcja6lpKRrFPjnIsa3NV8oEixqPKQME7HDEC/0YnG7EFbxy t7YVd4m+hL6ChvcakZMZ97UMwYjXK19j8x9bNEVR3W9OAzFFHNDg+ybwuVx510KZ cFYBlYFmaPaKOis9CfTnubaP/4138QQZSRgu2uvNQHWtwN4fgE8RBG9GJJPFPihr i+Ii8C1U+HLYnEaFPXcnJVlh+sKUhX7YM3dAAFae6qMaMN1FmwiRAOVPZDhUpKq9 rH7s0m0HjneqOg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:25:29 2026 by rpki-client