$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: RmUUklI4BINPEKUD1imbkmBKQX7hhEddlQEzun2hLEE= Subject key identifier: 85:71:5C:6C:07:86:3F:08:E1:A2:0F:9E:C9:24:B0:F4:65:02:E7:49 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 01A0D803F60239493B8B95ECED1B2BDCA0FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1AAB Signing time: Fri 25 Sep 2026 10:02:13 +0000 Manifest this update: Fri 25 Sep 2026 10:02:13 +0000 Manifest next update: Sat 26 Sep 2026 10:02:13 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 20wjFtXnjGJFtNE9JwgpAjwGMFQ.roa (hash: 047BUjsh/ZnBIkSq30F05EypvdArFWjl/1ixpgiZ1ds=) 4: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 5: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 6: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 7: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 8: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=) 9: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 10: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 11: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 12: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 13: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 14: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=) 16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: hqVFVwAkpWbHrenrXR35trEKpPDuBwxlGjrdYNLw9I8=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:03:f6:02:39:49:3b:8b:95:ec:ed:1b:2b:dc:a0:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Sep 25 10:02:13 2026 GMT Not After : Sep 26 10:02:13 2026 GMT Subject: CN=85715c6c07863f08e1a20f9ec924b0f46502e749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:b5:5f:1a:f0:eb:d5:6d:3c:97:01:4b:80: 5a:d6:d9:4a:af:f1:5f:d4:a2:f6:f4:ad:45:bb:76: 61:b5:c9:05:b3:74:4e:17:ab:68:9b:ff:98:b4:91: 5f:0b:e6:f3:7d:a7:c9:0e:85:a8:bd:75:f1:6a:2a: 4c:44:44:c4:da:9c:43:6a:3f:04:9e:90:53:04:f4: 86:af:61:c8:7d:fa:f3:a7:a0:1b:6a:9f:a9:f7:55: c4:82:15:cb:62:4e:45:50:7a:10:58:07:ee:44:e3: 56:9d:28:5e:6d:17:7a:a3:6f:aa:88:cd:66:4f:4c: ce:41:51:1c:77:41:b2:66:54:d7:ea:08:1c:91:57: 53:58:74:33:13:34:76:d1:e2:64:6d:c7:0a:b1:7f: 91:b8:f8:fd:50:9f:30:37:1b:10:1a:76:96:17:27: 81:af:77:64:d7:17:e6:bf:18:a8:26:96:21:ba:66: 30:d5:9e:f1:b4:14:2d:b3:ce:38:50:f7:ba:01:ef: 92:05:d9:62:ec:f6:82:8c:53:0f:c2:bf:72:b1:56: 86:3d:6e:f4:06:d0:75:52:c4:91:da:a8:51:96:ae: c0:45:b5:fb:1d:ae:d6:b7:73:46:79:f8:d2:ff:f9: 75:35:1b:6c:ae:b7:15:be:9f:de:b4:2b:f4:2c:6b: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:71:5C:6C:07:86:3F:08:E1:A2:0F:9E:C9:24:B0:F4:65:02:E7:49 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f8:a2:7e:9a:83:8b:34:7e:e5:c3:17:2e:39:85:8b:79:b9: 9a:d6:d3:28:e7:4e:76:e1:ef:2f:10:a5:78:78:e2:16:26:b9: 62:a6:a0:d9:14:47:39:70:90:92:c4:e0:63:79:12:02:ca:2d: a6:58:d9:f3:d7:b4:2e:03:56:e9:c8:d7:1b:7e:1b:37:aa:ba: 42:77:c2:6f:dc:b7:49:0c:ec:6f:a9:03:37:5a:aa:e8:d6:22: ae:38:3f:e5:25:ed:a2:0c:3b:10:b1:8e:88:05:2a:da:9f:43: 06:64:73:f4:73:b8:50:ee:0a:e6:9f:a9:5c:ed:9e:a9:8d:56: ef:4e:d4:37:1d:11:ff:f8:69:e7:26:75:47:b2:d2:a1:b0:83: 9d:83:0d:1a:5a:8b:70:e2:79:0e:b8:3c:79:8f:17:e7:65:33: 13:39:66:8d:4d:6f:1e:9a:ad:93:80:fc:7a:df:82:fb:bf:16: 32:54:ea:e2:c0:f4:6f:0b:16:db:b4:e0:1e:49:77:1b:56:fe: c1:6d:df:bc:f9:6e:fa:f5:1a:ab:f6:c1:26:4a:6c:a0:af:ad: ac:43:23:28:de:c4:ef:f5:ed:d7:3a:5a:8a:78:55:a2:b5:b6: 16:28:36:e7:23:93:14:1e:61:ee:49:93:f3:35:14:74:1e:e1: 46:ab:a2:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYA/YCOUk7i5Xs7Rsr3KD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwOTI1MTAwMjEzWhcNMjYwOTI2MTAwMjEzWjAzMTEwLwYDVQQD Eyg4NTcxNWM2YzA3ODYzZjA4ZTFhMjBmOWVjOTI0YjBmNDY1MDJlNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMe1Xxrw69VtPJcBS4Ba1tlKr/Ff 1KL29K1Fu3ZhtckFs3ROF6tom/+YtJFfC+bzfafJDoWovXXxaipMRETE2pxDaj8E npBTBPSGr2HIffrzp6Abap+p91XEghXLYk5FUHoQWAfuRONWnShebRd6o2+qiM1m T0zOQVEcd0GyZlTX6ggckVdTWHQzEzR20eJkbccKsX+RuPj9UJ8wNxsQGnaWFyeB r3dk1xfmvxioJpYhumYw1Z7xtBQts844UPe6Ae+SBdli7PaCjFMPwr9ysVaGPW70 BtB1UsSR2qhRlq7ARbX7Ha7Wt3NGefjS//l1NRtsrrcVvp/etCv0LGtBQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVxXGwHhj8I4aIPnskksPRlAudJMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPiifpqD izR+5cMXLjmFi3m5mtbTKOdOduHvLxCleHjiFia5Yqag2RRHOXCQksTgY3kSAsot pljZ89e0LgNW6cjXG34bN6q6QnfCb9y3SQzsb6kDN1qq6NYirjg/5SXtogw7ELGO iAUq2p9DBmRz9HO4UO4K5p+pXO2eqY1W707UNx0R//hp5yZ1R7LSobCDnYMNGlqL cOJ5Drg8eY8X52UzEzlmjU1vHpqtk4D8et+C+78WMlTq4sD0bwsW27TgHkl3G1b+ wW3fvPlu+vUaq/bBJkpsoK+trEMjKN7E7/Xt1zpainhVorW2Fig25yOTFB5h7kmT 8zUUdB7hRquiPQ== -----END CERTIFICATE-----Generated at Fri Sep 25 12:48:28 2026 by rpki-client