$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json) Hash identifier: 66Q77wSZk4qiCAONAJalfvm54rxBAFHZP4eSrpv4CaA= Subject key identifier: 35:58:8E:B2:DC:1C:E2:2A:51:51:3F:CA:BD:2C:25:46:6F:CE:B9:B6 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 01A1DCB91C230FB29563F7C73179DA3B438B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft Manifest number: 1C01 Signing time: Sun 15 Nov 2026 01:01:21 +0000 Manifest this update: Sun 15 Nov 2026 01:01:21 +0000 Manifest next update: Mon 16 Nov 2026 01:01:21 +0000 Files and hashes: 1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=) 2: 1-7-6RGar2D151UHvO4qGzPCbHSY.roa (hash: chdOxT3iTp7d3crM5hmS9Pmpnph6NW1r5XQd9AGRwlQ=) 3: AIbgyj5rJwPTdoMqpUx7rJPOJ8M.roa (hash: U67iM3Cy3xcIqgxJAbYo314HCWTV25q08Le26IrCtYQ=) 4: C_GLVEyzOcBWrra4xLg2kec79IM.roa (hash: mHSIddXf7S/2+skg3jB/IQxIEzQrNG7v1jMFRc3QaEs=) 5: IqM8DHRnDmofIv2lJsNWfR7uv5c.roa (hash: eRw/LmZAPGc71ijY9qGID9S/TZbI92W0sv6EWktvEug=) 6: JNZCYSb0eX2LiAhwYWr792VZYyk.roa (hash: 8a/oxkbq80RN3ANPAzfwubbSf0KUQs2EZXuphhCoNP8=) 7: Ja3rDxt90AroBt3QfGvg-I25W6o.roa (hash: rzFqZxATN8r1OfbR2IwYqqAdReVkWGyQF7aAc3rl7gY=) 8: L_ZKDFvjJ7gx0vuFEnKI-RNvrYc.roa (hash: 5OB1/T+LubWmVmcu/MxTj+93D8Y5BWqNoahLBjH78D8=) 9: PUvdc-n4d7MmRYGzGlZpQMrQHcI.roa (hash: LGod6AfnH9jL0fVYkxcwjWKg5xAVH8XL13vJPWI/ir4=) 10: RVdAZHtzLerkUGY6dKLQ4-X1Rqw.roa (hash: d1Zz/Bg2xzBbSD2J97vo2VF0QZE/OLkxbprIsAfGWTg=) 11: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=) 12: UTooJzPNBNgr_W5Lcxca0dC7D-I.roa (hash: mUhkN0o9zEmpQ/72qgn1iXBTOF9eYGfXJ6iRHv/Xfdw=) 13: YnsxCl0Xh6ZLUIEYf8O-ukuou50.roa (hash: bYBgooyYvyoFFtYaFXpaRE1twNqqhrGsquc0ypkKKYU=) 14: Z-xyQCGZATA_NZphEPjLsx-xGUE.roa (hash: ftQ9l9mUrUikETGFT9j6K7ZclBRzaQtRYltg/C2VTjE=) 15: c3ph3fa_5BpHYeXdg0A4BvNc-6Q.roa (hash: YcOEVM8vDy9KRktL6p3vkpAjhaX4lc8im1CCzWQuhp8=) 16: cw3p8OtDCLlC1go49KS1_MxGpnE.roa (hash: Jr8ERSNb16dhdPHQwE9WASS0GyFbBKLbh+bPj3R8bhI=) 17: efFTEfRQiUftQzQVb9cHtQZa-cQ.roa (hash: a58cXnpcOrNRPkaTSvpbx4ht46VIhtHlsm03YV/tuII=) 18: fMFZGkTHLMF1Hi6w_S4ct36ayuc.roa (hash: T5EYFcBX5hS5bZxhj4d6m8iUsfv4/sTDjZabzDTzsrM=) 19: l7F_vL3lMscLrv6DlqsFJBbdp0E.roa (hash: 0lvRZFep/l3fsLuqh0If2Lf+dcuObYSB9+H7T7470Kg=) 20: lxCTOnHr1KbQREAH7MWQBCQBn2Y.roa (hash: zg6Fpt9kVYyqRydItM5lTvKLXzu6WyvSYL/OAHs+pjE=) 21: mAlFWGCll4OiLGvJR7T8i7Xmb6U.roa (hash: 351HLyl6DEHcQwgJ6zlv/UC5Hq9LIwyYLDbTba6u2og=) 22: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: iuHPumTpwIfIr07cmUG0jsmHcTxvX7CAJ1s7/CHWwXU=) 23: qEMl4e9fLr-AQLdZxe6hKXxJlLI.roa (hash: 9NW/M2MDfZmmSLbTCkFcYZxx54P1bR5jVO5Iu7jkpT0=) 24: xNeiTOjB-sSJLbISOAZ1GYO-pD4.roa (hash: AYLnZgrfwBpcRFX58aIJ921NisPijxFA2GX3M1TYMIY=) 25: yTIlbASLhGy20gNJHs7xgFurDmw.roa (hash: VvcvHKECmREGY64u0qRfi/7VnvcvVrYWCm1LwNTSjAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:b9:1c:23:0f:b2:95:63:f7:c7:31:79:da:3b:43:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Nov 15 01:01:21 2026 GMT Not After : Nov 16 01:01:21 2026 GMT Subject: CN=35588eb2dc1ce22a51513fcabd2c25466fceb9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:0d:fe:37:e4:04:fd:42:c6:60:27:a2:4b: 5a:a1:48:c2:62:cb:44:24:63:b0:06:6f:a3:bf:2d: 92:b0:f0:07:b2:5f:b9:2a:4c:1a:06:10:d9:29:d0: 28:53:37:08:dc:b5:db:20:94:16:c8:3e:91:5f:31: 19:be:28:21:97:62:b8:5a:9d:9d:d2:26:be:9e:65: 72:ec:cf:ad:c5:54:6b:8d:58:21:a9:24:96:c0:a3: f3:9c:06:6a:9b:eb:a0:41:f4:35:76:4b:ee:6f:4d: df:c4:e4:20:9e:72:a4:e3:9d:46:b2:ad:bc:2d:d2: 00:28:8c:0f:63:29:4c:9b:53:c3:63:47:98:b4:e5: 83:55:46:e2:31:c5:80:db:38:09:78:0c:e6:a8:4b: fa:b5:1b:a1:e1:6b:a3:d0:81:f3:98:ff:1e:44:dd: 25:94:be:a3:86:9d:2f:81:1d:d0:6e:d9:95:48:ed: 3e:e8:65:36:74:72:a5:c7:e8:9c:1b:4e:ef:29:db: f0:d2:5b:be:72:87:cd:bb:87:f3:ea:63:e3:94:91: a3:25:73:84:24:71:09:38:a8:ff:15:f6:35:c9:9a: cc:65:c9:22:ac:19:51:3b:c2:d3:f5:75:e0:97:95: bb:1f:03:4a:86:4e:cd:43:7d:f3:36:51:bc:6d:fc: d6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:58:8E:B2:DC:1C:E2:2A:51:51:3F:CA:BD:2C:25:46:6F:CE:B9:B6 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:90:ad:15:c2:4e:e4:a1:fc:59:e2:5b:7a:e0:fe:b7:8d:63: f9:47:1e:bf:1f:47:e4:3c:b6:20:bf:78:43:26:31:d0:df:bf: ce:0b:c4:76:b1:18:40:c1:46:bb:2b:74:3f:6b:dc:89:d6:fb: 16:a7:65:12:51:2e:f6:45:8d:3c:ee:c6:6e:83:1c:76:53:e7: e5:24:1a:98:5b:b6:06:d9:85:4e:62:d8:11:07:91:eb:c5:ce: 9f:e1:a5:4e:e0:09:0a:5b:2f:20:a4:68:1a:01:fc:49:74:79: ca:85:40:96:9f:c7:93:ee:78:cb:ff:92:04:b1:93:92:f0:fa: a2:4c:2d:87:38:1b:42:38:ab:51:76:2d:a4:5c:0d:8d:5b:6b: fe:e4:31:49:1e:37:36:76:84:01:bc:19:12:7c:e0:99:5d:fb: be:0a:82:f4:3e:d3:83:47:ce:30:b9:22:77:11:83:5a:a6:f1: 63:df:27:ba:1f:70:67:7d:4e:fd:62:3e:87:f5:cf:4d:a6:71: f2:e5:3e:56:5a:b8:88:76:9a:76:4f:db:28:4d:54:d6:6d:ff: 44:54:02:de:1b:1e:6f:c5:20:18:61:21:13:d2:18:90:a6:d2: 92:8b:8e:59:ab:40:c0:70:ba:e8:2c:16:a7:68:94:fc:62:76: 04:3b:ca:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcuRwjD7KVY/fHMXnaO0OLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjYxMTE1MDEwMTIxWhcNMjYxMTE2MDEwMTIxWjAzMTEwLwYDVQQD EygzNTU4OGViMmRjMWNlMjJhNTE1MTNmY2FiZDJjMjU0NjZmY2ViOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruwN/jfkBP1CxmAnoktaoUjCYstE JGOwBm+jvy2SsPAHsl+5KkwaBhDZKdAoUzcI3LXbIJQWyD6RXzEZvighl2K4Wp2d 0ia+nmVy7M+txVRrjVghqSSWwKPznAZqm+ugQfQ1dkvub03fxOQgnnKk451Gsq28 LdIAKIwPYylMm1PDY0eYtOWDVUbiMcWA2zgJeAzmqEv6tRuh4Wuj0IHzmP8eRN0l lL6jhp0vgR3QbtmVSO0+6GU2dHKlx+icG07vKdvw0lu+cofNu4fz6mPjlJGjJXOE JHEJOKj/FfY1yZrMZckirBlRO8LT9XXgl5W7HwNKhk7NQ33zNlG8bfzW8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVYjrLcHOIqUVE/yr0sJUZvzrm2MB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5CtFcJO 5KH8WeJbeuD+t41j+Ucevx9H5Dy2IL94QyYx0N+/zgvEdrEYQMFGuyt0P2vcidb7 FqdlElEu9kWNPO7GboMcdlPn5SQamFu2BtmFTmLYEQeR68XOn+GlTuAJClsvIKRo GgH8SXR5yoVAlp/Hk+54y/+SBLGTkvD6okwthzgbQjirUXYtpFwNjVtr/uQxSR43 NnaEAbwZEnzgmV37vgqC9D7Tg0fOMLkidxGDWqbxY98nuh9wZ31O/WI+h/XPTaZx 8uU+Vlq4iHaadk/bKE1U1m3/RFQC3hseb8UgGGEhE9IYkKbSkouOWatAwHC66CwW p2iU/GJ2BDvKVg== -----END CERTIFICATE-----Generated at Sun Nov 15 11:23:28 2026 by rpki-client