$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json) Hash identifier: 4ByveajURoJTk5KPHOhLFKW2x2m+VK19R6TK1EWjHz8= Subject key identifier: 7E:70:CF:56:E7:77:CA:F6:76:4D:14:99:F9:4C:70:D1:60:96:A9:2D Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40 Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040 Certificate serial: 019F913602C0E8B58DEC67A6CB44D85A94E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft Manifest number: 0A4B Signing time: Thu 23 Jul 2026 23:01:03 +0000 Manifest this update: Thu 23 Jul 2026 23:01:03 +0000 Manifest next update: Fri 24 Jul 2026 23:01:03 +0000 Files and hashes: 1: AWYzgkSeU1ruLdcQGWyx3NFOxJQ.roa (hash: P9Q3/GJCp544vg/dW4m/kMtZQYifMjeadrDv+i+SQls=) 2: H2zetjbu6Mqb0o7ATyk278R0bGY.roa (hash: bn4QHQyGhFY9rDnnbmAmmLUzcRf+y73YZKo0db/S5Ss=) 3: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: Q9NTID+aFPTgnKHBmuTGxnInufyR4eYnQyDmTqx/I1s=) 4: QpJITU9l6bMr8oGaX825ze1UlB0.roa (hash: e6fSmdbsZJflihklvHaG4cTIHvwJBCCE1qauoGxZ/7c=) 5: _Smc4bBdBO-6MKvuThvX4gAl6Pg.roa (hash: mCRjx/pD6ueYcesgyqYuCCGaR7D8odHRimyrxKf3nE4=) 6: b6wl6UOnM78Lu17GHxPqFqDhyUE.roa (hash: kA09Zc9zhv3l/lp97KkUt2qpUA/O9aXdkknPhTyEEwI=) 7: qQdCoj_2JwppQuwjTQ_EOjn0-cI.roa (hash: +l5KIfbERA9UOrblj5Ez+PPKG4DuoqtWsKoaM93yiFU=) 8: rvS__rQw015TaaBOkmW4cBz1bug.roa (hash: cmcSpRFZSlnzP6e1K+AHDm2VAfZoIyqsC7lkkFh0sCs=) 9: uHtev5eSqC8WE6ycypYpvyTzkPE.roa (hash: tOHZcVwKgbX/CIyGzALYSP5QrShCApH/2VThn/R79QA=) 10: vaYIteS5igEIIJAvOFUUxlbL9iw.roa (hash: FZNQU0LvtoOoER0joQEpoEINbntZYjJgCFYakf2fGAY=) 11: zDOGvp-54c5DIz8rZDqXtpIogVg.roa (hash: 4Aw3hILMm0mcpv1TfZ7Rq5nLkI9ScVMUPUFaf113hZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:36:02:c0:e8:b5:8d:ec:67:a6:cb:44:d8:5a:94:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040 Validity Not Before: Jul 23 23:01:03 2026 GMT Not After : Jul 24 23:01:03 2026 GMT Subject: CN=7e70cf56e777caf6764d1499f94c70d16096a92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:72:91:65:ce:6d:84:45:57:13:4e:70:12: a3:14:60:e2:ad:1c:69:3a:17:6c:d3:62:e4:c9:6e: a1:ad:4f:85:09:12:ce:34:2f:00:e7:2a:7f:72:7a: bd:b8:69:59:36:c4:7e:00:78:48:04:85:d3:97:2f: 64:38:b3:a1:f5:cc:c2:02:a6:c8:f0:0b:e9:01:f9: 7d:a5:03:d0:90:83:3b:84:86:b3:5d:f8:02:ae:55: 8d:c2:8c:40:ba:8f:3f:17:e7:fc:9f:65:33:f0:df: e3:01:71:55:69:a9:37:6f:ad:4e:86:32:67:b9:cb: 61:ba:b4:47:11:90:21:ca:29:ea:09:09:05:ce:43: 03:f7:22:ed:ab:72:30:27:ce:83:c7:4c:af:15:24: 8c:51:0c:d4:c7:ec:6a:2b:62:08:df:24:14:94:30: f6:14:d7:b8:56:b7:05:10:1d:81:59:e1:1a:3c:98: 54:13:1e:0d:a0:63:01:0c:98:27:bf:5b:c0:a7:67: e9:6a:c6:af:d7:e2:4f:1f:fb:6e:0e:d4:6d:f5:04: 66:de:41:07:e2:95:94:34:f6:2f:6a:d1:29:c8:c9: e2:ed:36:6c:e0:f6:46:16:51:ce:16:e0:f3:0f:d0: 59:7d:c1:0a:cd:45:20:f9:48:e5:19:6f:17:fd:bd: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:70:CF:56:E7:77:CA:F6:76:4D:14:99:F9:4C:70:D1:60:96:A9:2D X509v3 Authority Key Identifier: keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:53:c8:fe:03:1e:c7:c6:c5:ce:fa:f8:86:19:0b:a7:39:4d: dc:ec:71:81:29:d2:d6:fc:54:c3:0b:0c:23:45:cd:86:8a:1b: 19:12:7e:9c:fd:f8:9f:ec:a5:8d:06:de:e2:60:49:f3:5a:b5: 96:12:50:2e:9f:4e:43:68:2d:ad:45:07:0a:fa:f5:b1:0c:2b: f6:14:aa:12:bb:45:17:11:3d:7c:2f:65:55:7f:20:b9:b2:a9: 55:e8:ea:be:66:65:12:6c:c7:be:0d:27:c5:7f:ab:5a:6c:f7: 29:24:47:92:fe:87:f4:39:bd:e7:48:23:80:69:b6:f3:a6:81: d7:f0:1f:1e:9b:f7:8a:d5:e0:bd:90:12:c1:a0:7d:90:a4:81: 29:19:53:f3:ae:02:da:69:3d:74:30:d6:d7:30:7b:0c:f0:9c: 65:3d:a2:c8:f4:fd:a9:5c:86:13:a5:07:15:8d:a8:fd:50:dc: 98:f7:66:91:bd:9b:60:06:f8:71:46:76:94:e0:93:bc:b3:9e: 1f:ac:04:58:bf:ad:be:4d:1e:64:e3:b6:54:ff:48:b9:de:9b: 40:64:ab:3c:62:98:7c:6c:ea:02:35:04:30:3e:80:62:e1:61: f0:d3:1b:80:86:53:1e:ce:da:07:89:85:5b:98:a4:22:0b:33: c9:50:75:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RNgLA6LWN7Gemy0TYWpTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy MzUwNDAwHhcNMjYwNzIzMjMwMTAzWhcNMjYwNzI0MjMwMTAzWjAzMTEwLwYDVQQD Eyg3ZTcwY2Y1NmU3NzdjYWY2NzY0ZDE0OTlmOTRjNzBkMTYwOTZhOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptlykWXObYRFVxNOcBKjFGDirRxp Ohds02LkyW6hrU+FCRLONC8A5yp/cnq9uGlZNsR+AHhIBIXTly9kOLOh9czCAqbI 8AvpAfl9pQPQkIM7hIazXfgCrlWNwoxAuo8/F+f8n2Uz8N/jAXFVaak3b61OhjJn ucthurRHEZAhyinqCQkFzkMD9yLtq3IwJ86Dx0yvFSSMUQzUx+xqK2II3yQUlDD2 FNe4VrcFEB2BWeEaPJhUEx4NoGMBDJgnv1vAp2fpasav1+JPH/tuDtRt9QRm3kEH 4pWUNPYvatEpyMni7TZs4PZGFlHOFuDzD9BZfcEKzUUg+UjlGW8X/b03UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5wz1bnd8r2dk0UmflMcNFglqktMB8GA1UdIwQY MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt ZDQ5OTE2YjVmMmI0LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0 LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVPI/gMe x8bFzvr4hhkLpzlN3OxxgSnS1vxUwwsMI0XNhoobGRJ+nP34n+yljQbe4mBJ81q1 lhJQLp9OQ2gtrUUHCvr1sQwr9hSqErtFFxE9fC9lVX8gubKpVejqvmZlEmzHvg0n xX+rWmz3KSRHkv6H9Dm950gjgGm286aB1/AfHpv3itXgvZASwaB9kKSBKRlT864C 2mk9dDDW1zB7DPCcZT2iyPT9qVyGE6UHFY2o/VDcmPdmkb2bYAb4cUZ2lOCTvLOe H6wEWL+tvk0eZOO2VP9Iud6bQGSrPGKYfGzqAjUEMD6AYuFh8NMbgIZTHs7aB4mF W5ikIgszyVB17w== -----END CERTIFICATE-----Generated at Fri Jul 24 09:26:09 2026 by rpki-client