$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: wuqUedrXJuHACospi6gpEiF50Cp8wtiRWJzQNgcOq4c= Subject key identifier: 1F:36:BB:70:84:F2:80:32:44:DE:F2:26:D9:87:CD:5D:57:3A:3F:CE Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 0199FC8FB70BB055C7DB225076B99F4E5839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1716 Signing time: Sun 19 Oct 2025 13:01:40 +0000 Manifest this update: Sun 19 Oct 2025 13:01:40 +0000 Manifest next update: Mon 20 Oct 2025 13:01:40 +0000 Files and hashes: 1: 4LkBcAsH60Y0m4sjDykqzEXI1Sk.roa (hash: JaP407qv2XroPK5rb+48crR7hUs4Usjq32UPFFAgazY=) 2: 5BICsEwf39tSfyuR3Dxq7LQhNTs.roa (hash: F1ThVBGu9zXgcyXnsxcohjmknQWFIwIuRVmf9x9GU+Q=) 3: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=) 4: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (hash: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=) 5: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=) 6: 8k6ClTzEe4SSsmZAgXUSnPK9Ii8.roa (hash: m+6p5azzOSpvaAx4gZnWGAghzk+PpdZC6bfHiCkS+NQ=) 7: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=) 8: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=) 9: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=) 10: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=) 11: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=) 12: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=) 13: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=) 14: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=) 15: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=) 16: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=) 17: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=) 18: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: B9Wss5IeL3QGlxlNcwT8dD+x3t5YV25x+2hCfBxja/I=) 20: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=) 21: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:b7:0b:b0:55:c7:db:22:50:76:b9:9f:4e:58:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Oct 19 13:01:40 2025 GMT Not After : Oct 20 13:01:40 2025 GMT Subject: CN=1f36bb7084f2803244def226d987cd5d573a3fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:db:3d:45:a6:15:e5:db:ed:81:0e:85:ac: 2d:55:88:d5:59:85:96:53:c5:3d:3a:d4:01:39:77: c1:b9:59:ef:69:7b:3e:e0:96:a6:cc:22:16:03:2c: 07:7d:d9:5e:89:37:06:47:61:33:cd:9e:48:72:83: 62:cd:f3:c5:15:67:46:c1:f9:37:e1:5c:ff:27:45: 3a:6a:8a:0b:89:2e:5e:4f:bf:f1:08:f8:53:18:36: a7:0c:55:99:d8:29:82:a1:f5:ac:c5:9c:c8:a0:0f: 95:b7:34:b2:eb:09:6b:c7:b4:7e:5a:d3:26:2b:8b: e4:ac:c4:6e:ce:8f:33:db:2d:67:b8:f5:68:b2:81: 47:c5:42:4e:97:bc:a5:38:59:46:a8:a5:a8:a7:f2: 02:f5:d5:2b:46:2f:9f:aa:73:6a:d7:70:1c:ed:9e: 93:e3:48:01:ac:2d:16:8d:08:2e:24:ab:07:4b:88: eb:b6:e7:09:b3:d4:85:2b:67:2d:e6:54:a2:0c:76: 9e:8f:8f:11:43:1c:8b:89:a5:13:d5:e9:98:90:e7: 68:08:39:d5:5f:f3:3a:31:71:e5:1a:3f:1f:c3:7d: 24:8f:07:d6:1b:2b:08:da:01:fc:f7:77:fa:1a:93: a9:5d:cf:c4:06:a2:36:80:bc:e8:b5:9f:1e:39:60: ef:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:36:BB:70:84:F2:80:32:44:DE:F2:26:D9:87:CD:5D:57:3A:3F:CE X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:43:96:ba:6b:8b:8b:89:5f:1c:48:65:4e:f4:f1:cb:0f:cf: 2e:9b:b5:03:f8:92:ec:aa:fd:37:eb:70:57:e9:04:32:39:6e: 0d:2e:ac:2e:6d:b5:5d:ff:f4:63:ca:11:c4:b2:c9:b8:8d:3d: f6:1d:3c:78:59:22:18:d5:5c:d7:3c:c9:e1:4f:76:ac:97:b9: 3c:27:af:90:f7:6f:77:63:89:ec:3a:d7:fe:b3:a5:bb:52:7e: 35:e9:c7:05:f8:ca:88:9b:d9:a1:1f:17:d3:7b:51:3a:c7:3e: ef:0d:66:c2:82:48:8e:f3:49:9d:3b:0e:6c:65:4c:4a:5d:b2: ae:34:42:7e:19:0e:69:d7:eb:a9:9b:19:ab:87:77:0b:ad:be: e7:a4:72:56:ae:dc:62:d6:66:46:27:da:17:f9:02:03:9a:0d: fa:06:8d:88:fd:b0:5b:28:0f:0b:d7:bf:ad:d4:ac:f4:0f:8d: 07:96:34:d5:79:a3:2b:27:ce:73:58:61:21:54:5c:a3:ae:a2: 0a:68:a0:e7:4f:dc:5c:d5:61:4c:be:62:21:71:31:db:c0:7e: df:d1:da:1a:25:ac:76:87:39:d4:2e:3d:c1:2a:1c:6c:85:65: 19:a8:3e:05:b3:a9:72:36:0d:3e:d2:91:7e:0b:72:be:90:3d: b1:58:40:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j7cLsFXH2yJQdrmfTlg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUxMDE5MTMwMTQwWhcNMjUxMDIwMTMwMTQwWjAzMTEwLwYDVQQD EygxZjM2YmI3MDg0ZjI4MDMyNDRkZWYyMjZkOTg3Y2Q1ZDU3M2EzZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivHbPUWmFeXb7YEOhawtVYjVWYWW U8U9OtQBOXfBuVnvaXs+4JamzCIWAywHfdleiTcGR2EzzZ5IcoNizfPFFWdGwfk3 4Vz/J0U6aooLiS5eT7/xCPhTGDanDFWZ2CmCofWsxZzIoA+VtzSy6wlrx7R+WtMm K4vkrMRuzo8z2y1nuPVosoFHxUJOl7ylOFlGqKWop/IC9dUrRi+fqnNq13Ac7Z6T 40gBrC0WjQguJKsHS4jrtucJs9SFK2ct5lSiDHaej48RQxyLiaUT1emYkOdoCDnV X/M6MXHlGj8fw30kjwfWGysI2gH893f6GpOpXc/EBqI2gLzotZ8eOWDvoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB82u3CE8oAyRN7yJtmHzV1XOj/OMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0OWumuL i4lfHEhlTvTxyw/PLpu1A/iS7Kr9N+twV+kEMjluDS6sLm21Xf/0Y8oRxLLJuI09 9h08eFkiGNVc1zzJ4U92rJe5PCevkPdvd2OJ7DrX/rOlu1J+NenHBfjKiJvZoR8X 03tROsc+7w1mwoJIjvNJnTsObGVMSl2yrjRCfhkOadfrqZsZq4d3C62+56RyVq7c YtZmRifaF/kCA5oN+gaNiP2wWygPC9e/rdSs9A+NB5Y01XmjKyfOc1hhIVRco66i Cmig50/cXNVhTL5iIXEx28B+39HaGiWsdoc51C49wSocbIVlGag+BbOpcjYNPtKR fgtyvpA9sVhAVw== -----END CERTIFICATE-----Generated at Sun Oct 19 17:54:40 2025 by rpki-client