$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: WHq3juRKYhMIFn3yQdYMjCxOMt2k98kZUDc2q/HRJY4= Subject key identifier: FD:A2:0F:AD:70:E5:C1:52:6F:99:53:88:5D:AD:6F:6E:AD:93:0B:46 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019F93C9387E0AE1445EFE7FF1CD6CDA836F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 1707 Signing time: Fri 24 Jul 2026 11:01:05 +0000 Manifest this update: Fri 24 Jul 2026 11:01:05 +0000 Manifest next update: Sat 25 Jul 2026 11:01:05 +0000 Files and hashes: 1: FaALcy5Rtdmr2uieYxRcTmINxY0.roa (hash: o5V0XpUincjUZD8yuz4NaYPFOSAiOXTebna/NUT2JTM=) 2: GIHrVIViJFcoMcRYSuQORanWhE0.roa (hash: Xw1YJyhBQX1BH/gd6wFdXzyzKUO+qJJ2rPYoYPjD3gc=) 3: GoQ2pW0J_933ITOYr6rqq9EIbrQ.roa (hash: tKfgDPMmtVyaPODH9xVO5b6jSIkFqfcU29cf6LiBAWM=) 4: MxSN252Rt46daJzmFnKjpDWsGI4.roa (hash: UgheYX57caiwV4IurgnGNzd/ol6yl6jaHGlsEwq1YIg=) 5: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: KOmPfDyJT2+TbczccDn6LAajN6N22Q2MNTGcRWBvCuo=) 6: aXaCU83J-_jJ_EnlqZRgN5SQBBk.roa (hash: Vz1lenxM6E43wZsZKYeL1SXodzdNb6RvRRHtozOm9sQ=) 7: cuzZQDYRmdoOYAwAqrA09B4nCAY.roa (hash: 1hhTZq7Tio3QN3NZHMlqIBNsnPCPxg5AP94bS0dr2eU=) 8: lnbRQm2gHQjzkC4Pljc7ywe1fzc.roa (hash: hyi2L8VUzd790YBk5rv5fMvAHFOMrgEkftZ2exdk9ZU=) 9: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (hash: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs=) 10: raiLbBG1CMRiAfKyRkS-YiJSo9g.roa (hash: 8FLAxtrWMI4dbICfx4l/Gu56C8DGN6sem1ZiAu15jqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:c9:38:7e:0a:e1:44:5e:fe:7f:f1:cd:6c:da:83:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jul 24 11:01:05 2026 GMT Not After : Jul 25 11:01:05 2026 GMT Subject: CN=fda20fad70e5c1526f9953885dad6f6ead930b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:29:c8:12:26:a4:19:47:09:4d:91:af:61: 20:3b:9f:97:b7:ad:21:6e:bc:d7:5e:d7:4e:4a:8d: dc:29:e8:8c:2d:4a:9f:76:7e:1a:93:87:04:ff:1f: 82:8a:2a:2e:34:0c:a2:11:10:ad:92:2a:e7:5d:54: 44:fb:0a:4a:26:cd:f8:5f:6a:bd:cb:4e:83:81:dd: 51:04:c1:45:99:a0:ba:63:d2:86:ae:70:29:35:1b: ca:00:3a:e0:ba:e4:fb:f3:92:6d:fa:2e:12:af:3c: 45:61:13:49:9b:e4:77:d2:18:82:0d:9f:ef:2a:19: 19:0f:bb:01:fd:c9:91:a1:a0:f2:e7:20:86:d2:e0: df:85:56:1d:50:95:6f:e7:93:6f:a2:df:8b:58:c9: 23:e7:25:34:86:44:02:7f:bd:25:43:de:35:d0:1d: 94:85:e2:41:ac:d1:81:6b:05:5e:8c:8b:ee:ff:52: 4e:b5:d4:f3:d8:0a:2b:28:cc:19:18:b9:49:c5:5f: e2:e3:c0:4a:11:8f:ae:30:5a:16:a5:ef:77:b2:0e: ae:a6:8a:00:29:5e:90:8a:f7:8a:9c:bc:30:55:6c: 0e:35:ce:75:3b:15:f0:34:3b:37:85:52:94:eb:94: 6b:da:9b:2e:66:be:36:19:88:a2:9e:ed:64:37:79: 6b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A2:0F:AD:70:E5:C1:52:6F:99:53:88:5D:AD:6F:6E:AD:93:0B:46 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f8:66:35:a9:26:fb:c4:8f:f4:92:e0:f6:54:67:c9:ba:1e: ea:0b:93:e2:68:24:7f:55:cc:69:0c:94:56:cd:7f:7b:17:64: a5:4f:4b:73:ce:72:ee:3d:b5:53:1e:4a:d7:ec:70:a9:f1:ee: 0b:8d:70:f9:c6:c4:f6:0b:51:75:f2:c9:ea:56:e2:4f:b1:21: 1c:ea:92:40:f0:81:52:a4:0f:ac:ac:c1:30:d6:52:5b:db:4c: 2d:f8:5c:45:55:c4:2b:7d:70:b5:bc:4a:ad:e1:c2:d7:ae:3d: 39:62:23:7f:35:f4:31:45:97:87:14:8a:7a:df:07:cd:42:4e: 5a:79:5f:43:6f:07:3a:c1:f7:11:ae:fa:2d:70:f7:15:f8:e1: 67:2b:bf:92:85:b5:3a:c8:f2:cd:d1:a1:92:06:12:a6:e0:57: f8:79:63:c5:c9:c8:54:66:fd:a7:36:32:03:7e:ef:4b:c4:3d: 7b:b0:82:2a:65:c8:7c:aa:46:38:ad:1d:b5:05:af:f1:cc:d9: 01:23:2f:fa:48:d1:78:e2:88:90:70:0d:50:ec:4b:bf:df:bf: 1e:29:ca:e3:6c:f0:da:9d:5b:44:8c:87:7c:9d:e7:80:7d:d7: a2:ef:d2:18:63:4e:e0:4d:e5:8d:a7:9a:6e:59:0e:b9:64:a9: e9:99:ec:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TyTh+CuFEXv5/8c1s2oNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwNzI0MTEwMTA1WhcNMjYwNzI1MTEwMTA1WjAzMTEwLwYDVQQD EyhmZGEyMGZhZDcwZTVjMTUyNmY5OTUzODg1ZGFkNmY2ZWFkOTMwYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTApyBImpBlHCU2Rr2EgO5+Xt60h brzXXtdOSo3cKeiMLUqfdn4ak4cE/x+CiiouNAyiERCtkirnXVRE+wpKJs34X2q9 y06Dgd1RBMFFmaC6Y9KGrnApNRvKADrguuT785Jt+i4SrzxFYRNJm+R30hiCDZ/v KhkZD7sB/cmRoaDy5yCG0uDfhVYdUJVv55Nvot+LWMkj5yU0hkQCf70lQ9410B2U heJBrNGBawVejIvu/1JOtdTz2AorKMwZGLlJxV/i48BKEY+uMFoWpe93sg6upooA KV6QiveKnLwwVWwONc51OxXwNDs3hVKU65Rr2psuZr42GYiinu1kN3lrfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2iD61w5cFSb5lTiF2tb26tkwtGMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/hmNakm +8SP9JLg9lRnyboe6guT4mgkf1XMaQyUVs1/exdkpU9Lc85y7j21Ux5K1+xwqfHu C41w+cbE9gtRdfLJ6lbiT7EhHOqSQPCBUqQPrKzBMNZSW9tMLfhcRVXEK31wtbxK reHC1649OWIjfzX0MUWXhxSKet8HzUJOWnlfQ28HOsH3Ea76LXD3FfjhZyu/koW1 OsjyzdGhkgYSpuBX+HljxcnIVGb9pzYyA37vS8Q9e7CCKmXIfKpGOK0dtQWv8czZ ASMv+kjReOKIkHANUOxLv9+/HinK42zw2p1bRIyHfJ3ngH3Xou/SGGNO4E3ljaea blkOuWSp6Zns9w== -----END CERTIFICATE-----Generated at Fri Jul 24 14:43:04 2026 by rpki-client