$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: 3C/seXDoMRTmLOIQUC4LU3hS5e5QkXMl7v14ftR8QY8= Subject key identifier: 5D:71:86:9A:ED:BF:D6:89:CA:B2:CE:AF:F1:B0:49:DC:C8:73:5C:CD Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019F9090DB1809F174D9D5FD2DDA79CF4959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1A01 Signing time: Thu 23 Jul 2026 20:00:40 +0000 Manifest this update: Thu 23 Jul 2026 20:00:40 +0000 Manifest next update: Fri 24 Jul 2026 20:00:40 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 6: 5KqisG8I4aftfbpV-Wm5RoZOAu4.roa (hash: aWHlE7ObMJmJWXU63vmIza0enQBptwax9xe4eo6h4LY=) 7: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 8: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=) 9: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 10: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 11: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 12: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 13: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 14: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=) 16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: PoxKgBhF05KYBfjAa+8jGA8tygMnNCHRrRmPgn9q+II=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) 22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:db:18:09:f1:74:d9:d5:fd:2d:da:79:cf:49:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jul 23 20:00:40 2026 GMT Not After : Jul 24 20:00:40 2026 GMT Subject: CN=5d71869aedbfd689cab2ceaff1b049dcc8735ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:ed:2d:9b:c3:4a:d3:04:83:ae:4a:7f:17: fe:3a:62:18:f0:89:af:8b:7d:5b:54:e5:23:e4:7a: 13:93:e8:93:fc:44:a9:e9:46:c1:08:25:6a:c6:dd: e7:9b:70:9d:3c:b2:31:1b:8e:01:43:8b:1a:9b:e8: bb:d7:be:e3:80:16:b7:c8:46:f3:6c:a0:e6:c2:e2: 3a:3b:18:a2:b5:db:3d:9e:10:a3:b2:d8:46:e8:08: f5:6d:c2:d9:9f:fd:63:07:8f:61:d0:2b:c9:f4:7a: ad:ab:ec:4d:5e:14:12:b3:64:9c:9c:04:32:b7:b8: c7:ca:49:09:00:2c:0e:11:ba:39:14:74:72:91:c3: 20:43:df:46:81:b9:b9:5c:59:5d:e0:d3:59:66:22: 9a:0a:74:68:ef:55:f8:57:df:fc:26:e3:6c:15:e9: 60:ee:b8:96:97:30:55:fb:cb:ac:55:7f:90:8c:98: cf:0a:66:b6:d3:a9:6b:ed:0f:f9:01:0d:9d:83:ab: 34:ec:e7:01:cd:f5:30:2d:b6:39:6e:29:fc:e0:9b: 92:2d:a2:1c:35:65:b2:1e:53:bd:7b:0a:6c:fe:2f: a7:b0:3b:15:b7:74:f2:ef:0f:7d:4f:f3:a2:25:84: 59:03:59:16:85:b3:a9:f3:84:9b:8f:19:c3:a8:2c: 63:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:71:86:9A:ED:BF:D6:89:CA:B2:CE:AF:F1:B0:49:DC:C8:73:5C:CD X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1d:77:ab:93:f6:79:35:38:d4:63:25:b0:55:4e:2c:03:0b: fd:70:3d:25:4e:2b:83:de:d2:1d:08:7c:a8:29:78:f3:ec:31: 46:61:af:c4:8d:ef:c9:13:46:4a:34:da:b9:95:0d:17:50:86: 59:71:47:69:e4:7e:55:c0:bb:33:fe:3b:e5:4a:3d:a3:b4:a9: 2c:9e:7e:b0:8e:2c:95:9a:c6:3f:33:36:8e:07:6f:51:05:45: 8b:0b:e7:3d:81:fe:c5:d4:d9:e6:d3:e4:3c:6b:06:41:3c:80: a8:6b:dd:c9:66:a0:39:79:68:2c:76:2a:3d:a1:39:b1:d7:4a: dc:73:01:36:fd:d0:b7:3a:10:ca:62:f6:28:9e:99:d6:a3:ac: 72:5a:07:62:eb:e1:a6:47:ac:b9:ee:e7:13:78:f1:67:61:09: a0:18:d0:ad:33:fe:ab:4f:2b:08:fc:92:be:5a:20:13:5f:b0: 04:47:9b:5b:af:90:ee:41:83:a8:78:7c:ac:b2:1b:27:b0:1d: b1:68:f7:83:8d:ee:8e:f8:e1:ea:23:61:fe:97:68:9f:87:03: ea:fb:3d:8f:6f:82:c9:d9:f7:38:62:e3:82:fa:91:fd:1b:39: a9:03:0c:75:c5:7f:31:07:ab:07:ae:49:24:13:8b:b1:c6:29: 3a:67:90:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkNsYCfF02dX9Ldp5z0lZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwNzIzMjAwMDQwWhcNMjYwNzI0MjAwMDQwWjAzMTEwLwYDVQQD Eyg1ZDcxODY5YWVkYmZkNjg5Y2FiMmNlYWZmMWIwNDlkY2M4NzM1Y2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyHtLZvDStMEg65Kfxf+OmIY8Imv i31bVOUj5HoTk+iT/ESp6UbBCCVqxt3nm3CdPLIxG44BQ4sam+i7177jgBa3yEbz bKDmwuI6Oxiitds9nhCjsthG6Aj1bcLZn/1jB49h0CvJ9Hqtq+xNXhQSs2ScnAQy t7jHykkJACwOEbo5FHRykcMgQ99Ggbm5XFld4NNZZiKaCnRo71X4V9/8JuNsFelg 7riWlzBV+8usVX+QjJjPCma206lr7Q/5AQ2dg6s07OcBzfUwLbY5bin84JuSLaIc NWWyHlO9ewps/i+nsDsVt3Ty7w99T/OiJYRZA1kWhbOp84SbjxnDqCxjzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1xhprtv9aJyrLOr/GwSdzIc1zNMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYR13q5P2 eTU41GMlsFVOLAML/XA9JU4rg97SHQh8qCl48+wxRmGvxI3vyRNGSjTauZUNF1CG WXFHaeR+VcC7M/475Uo9o7SpLJ5+sI4slZrGPzM2jgdvUQVFiwvnPYH+xdTZ5tPk PGsGQTyAqGvdyWagOXloLHYqPaE5sddK3HMBNv3QtzoQymL2KJ6Z1qOscloHYuvh pkesue7nE3jxZ2EJoBjQrTP+q08rCPySvlogE1+wBEebW6+Q7kGDqHh8rLIbJ7Ad sWj3g43ujvjh6iNh/pdon4cD6vs9j2+Cydn3OGLjgvqR/Rs5qQMMdcV/MQerB65J JBOLscYpOmeQEQ== -----END CERTIFICATE-----Generated at Fri Jul 24 03:05:53 2026 by rpki-client