$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: lp8fKw9RsL1VJGosAu0xEPV9+5dOpFoIqXQ3KoKETxg= Subject key identifier: 17:BB:79:AC:5B:D6:7A:45:FF:59:F5:8D:68:BE:E8:47:62:EB:F5:C7 Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 01A0D61469F3CCB675254A18BC16BFF7D7DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 1A77 Signing time: Fri 25 Sep 2026 01:00:56 +0000 Manifest this update: Fri 25 Sep 2026 01:00:56 +0000 Manifest next update: Sat 26 Sep 2026 01:00:56 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: pmXbgzLKxMmQXi8lvG7kGRR+FIpOnpcy+2XPCD1ym1A=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:14:69:f3:cc:b6:75:25:4a:18:bc:16:bf:f7:d7:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Sep 25 01:00:56 2026 GMT Not After : Sep 26 01:00:56 2026 GMT Subject: CN=17bb79ac5bd67a45ff59f58d68bee84762ebf5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:87:bc:7a:56:37:fb:ff:e7:e5:0d:33:6e: fa:8a:b3:90:e3:0e:4c:0f:fe:c8:1e:90:a0:6f:66: 83:01:10:06:40:5f:75:c9:30:b1:39:cc:00:f9:e9: cc:e4:5a:8f:c2:7e:bb:86:4c:16:ae:dc:ad:15:12: db:14:9e:c6:69:49:23:0a:8a:a1:1c:37:07:e2:1e: 9c:66:16:63:98:65:4e:b0:7d:4d:cc:be:5e:27:3a: f4:1a:d0:46:f0:1c:d8:67:15:ef:9a:95:5a:ed:ca: f3:3b:f4:8f:07:69:33:8f:5a:5d:47:c6:aa:d4:24: 69:df:41:7f:bf:f2:1e:b7:f0:27:e0:d7:19:a6:34: be:66:ef:d1:54:2d:f8:78:32:32:17:a9:03:02:fc: e4:1f:d5:c5:3c:29:36:47:89:38:da:53:7e:d0:8a: 2f:d9:af:64:43:d1:fe:6e:af:58:4b:1c:c8:5a:15: 81:d1:96:71:73:76:3c:88:70:9d:f1:69:97:67:4c: 51:f5:6c:0a:60:f1:c2:55:d4:14:13:34:15:37:4d: 96:75:65:af:e7:3d:4e:e4:cc:5f:40:90:9e:37:3e: fe:38:69:a5:b5:ee:73:b1:23:c2:bc:68:cb:9b:96: 9d:ee:d7:c4:d3:fe:d4:84:9f:a6:c9:24:19:2e:d8: 7f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BB:79:AC:5B:D6:7A:45:FF:59:F5:8D:68:BE:E8:47:62:EB:F5:C7 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:07:9b:a1:28:d9:d0:a0:27:dd:a4:f4:3b:d9:d0:e0:81:ca: 8f:64:1a:66:84:a3:87:72:6f:61:ef:db:3d:55:0a:99:36:21: 3e:30:2d:bf:88:30:58:01:f2:51:db:73:d4:cc:2b:69:90:2d: 2d:60:f5:43:f2:c8:31:e1:a8:42:a7:94:00:5b:09:f6:51:7f: d7:28:8c:aa:81:e9:e3:b3:49:23:be:80:c1:5f:1c:cb:8d:ae: e3:3d:1a:e1:06:4b:b8:9a:1e:1a:e5:3f:a2:de:a9:59:b7:01: e2:b4:e7:5a:60:fd:1e:67:23:3a:f7:54:a4:84:42:92:6d:70: f7:42:e8:e4:90:ee:2f:22:58:81:68:6c:f5:39:dc:9a:86:d6: 3b:95:fc:4c:c6:3d:5c:27:38:d3:f6:59:4b:70:29:06:96:92: 83:b9:8f:b2:01:5c:6c:ee:d0:76:30:b5:68:bb:f7:63:64:f3: 27:50:cd:ae:da:f4:97:3c:12:9c:56:3b:95:d6:3c:1d:b4:8b: a6:13:43:da:e5:d0:9c:41:ec:7d:52:90:56:b5:c8:2a:bc:b5: b8:53:9d:2a:3c:28:09:f4:f9:5f:9d:53:02:99:90:ee:c5:93: 00:22:6c:4f:ea:ff:d7:e9:4d:1b:a8:27:45:97:f9:84:bc:13: 2e:14:4f:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWFGnzzLZ1JUoYvBa/99feMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwOTI1MDEwMDU2WhcNMjYwOTI2MDEwMDU2WjAzMTEwLwYDVQQD EygxN2JiNzlhYzViZDY3YTQ1ZmY1OWY1OGQ2OGJlZTg0NzYyZWJmNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkmHvHpWN/v/5+UNM276irOQ4w5M D/7IHpCgb2aDARAGQF91yTCxOcwA+enM5FqPwn67hkwWrtytFRLbFJ7GaUkjCoqh HDcH4h6cZhZjmGVOsH1NzL5eJzr0GtBG8BzYZxXvmpVa7crzO/SPB2kzj1pdR8aq 1CRp30F/v/Iet/An4NcZpjS+Zu/RVC34eDIyF6kDAvzkH9XFPCk2R4k42lN+0Iov 2a9kQ9H+bq9YSxzIWhWB0ZZxc3Y8iHCd8WmXZ0xR9WwKYPHCVdQUEzQVN02WdWWv 5z1O5MxfQJCeNz7+OGmlte5zsSPCvGjLm5ad7tfE0/7UhJ+mySQZLth/PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe7eaxb1npF/1n1jWi+6Edi6/XHMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAeboSjZ 0KAn3aT0O9nQ4IHKj2QaZoSjh3JvYe/bPVUKmTYhPjAtv4gwWAHyUdtz1MwraZAt LWD1Q/LIMeGoQqeUAFsJ9lF/1yiMqoHp47NJI76AwV8cy42u4z0a4QZLuJoeGuU/ ot6pWbcB4rTnWmD9HmcjOvdUpIRCkm1w90Lo5JDuLyJYgWhs9TncmobWO5X8TMY9 XCc40/ZZS3ApBpaSg7mPsgFcbO7QdjC1aLv3Y2TzJ1DNrtr0lzwSnFY7ldY8HbSL phND2uXQnEHsfVKQVrXIKry1uFOdKjwoCfT5X51TApmQ7sWTACJsT+r/1+lNG6gn RZf5hLwTLhRPew== -----END CERTIFICATE-----Generated at Fri Sep 25 04:48:13 2026 by rpki-client