$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: PXE4MiLcBsxVrfZRQkehCkVpEaCMTdwGVKUSWnxIvdg= Subject key identifier: F6:1D:93:CE:A7:29:FA:80:0A:AA:90:89:3D:F7:3C:3B:88:66:3C:5C Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019F9391925F60EF4A46CD5F2C260218C0AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 19D0 Signing time: Fri 24 Jul 2026 10:00:18 +0000 Manifest this update: Fri 24 Jul 2026 10:00:18 +0000 Manifest next update: Sat 25 Jul 2026 10:00:18 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: nMOAH4NkTN7UbIliDKApvT/PFDjVSBH8QwcmgwOdsu8=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:91:92:5f:60:ef:4a:46:cd:5f:2c:26:02:18:c0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jul 24 10:00:18 2026 GMT Not After : Jul 25 10:00:18 2026 GMT Subject: CN=f61d93cea729fa800aaa90893df73c3b88663c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:f7:71:81:c4:d0:ed:eb:8c:78:8d:13:9c: 0c:33:6d:08:be:34:fc:b8:46:16:c1:ad:33:f7:bf: 08:c5:c0:fa:ba:81:28:9e:3f:e2:26:48:8a:b1:d3: 0c:98:a6:17:1d:44:8d:9a:16:c2:51:43:f3:24:65: cb:f5:ce:1e:a1:cb:a2:23:10:c6:78:92:f4:40:b2: 82:aa:36:1e:f0:67:67:9a:ed:f5:55:f3:a1:57:55: b9:f3:5b:1a:08:3f:f9:53:69:3a:41:78:1d:fb:5a: 00:cf:a1:90:9d:ea:9a:6d:98:c7:ae:f9:41:de:f8: 97:37:52:b4:87:df:ab:6d:ef:39:26:ba:40:87:c6: 6f:44:45:f8:d1:35:25:a2:96:9a:06:b3:74:e2:0f: f2:61:27:75:8c:b2:e1:1b:62:17:46:2e:5f:10:9a: 90:0e:7f:c5:2d:40:75:10:f7:97:67:bd:05:df:8c: 0f:ba:d3:74:4c:70:11:41:84:e6:29:2a:40:0a:08: c1:3d:a7:21:15:d2:a8:80:cd:03:cf:10:d8:3e:3d: ef:0e:57:88:a3:b1:63:57:ee:5a:51:65:2e:ac:68: 00:75:cf:b3:50:8b:1a:b4:d4:07:f4:b8:ba:86:93: d0:ba:5a:3b:7b:3a:23:cd:e0:da:ee:13:7b:7f:82: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1D:93:CE:A7:29:FA:80:0A:AA:90:89:3D:F7:3C:3B:88:66:3C:5C X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7b:f4:83:63:f8:ca:36:c0:f4:85:05:d8:09:46:18:ee:98: 1e:64:97:2f:ac:ce:a5:b5:96:ce:17:ef:a2:07:c5:b1:bd:38: 45:d1:e3:e2:d9:30:65:74:e4:2d:f9:5f:7c:8b:b2:b3:92:fa: 1b:cd:59:7e:8e:0d:4e:54:0d:02:04:13:b7:5c:31:9b:cd:14: 0e:0a:ac:59:a4:01:f1:67:74:a6:0c:01:ad:62:0b:e6:74:43: 02:e3:fe:8b:86:ad:d6:13:43:da:5d:8c:b3:a6:ca:bf:00:4c: 1c:c7:7f:17:76:f2:99:c5:07:20:a9:e8:38:d6:4c:a9:f9:ae: 85:c4:f6:41:40:8f:3b:f5:1a:07:9e:18:f0:a2:37:be:ca:f1: 24:ea:cc:8a:0a:4b:03:6f:d1:36:1f:10:69:92:a5:7d:c4:5e: ef:95:88:6a:b3:1c:75:96:54:6b:0e:c2:cd:12:a2:3c:d8:a3: 42:64:b1:98:1f:75:a9:93:bf:07:33:97:6f:b4:85:c5:87:e7: df:dd:36:30:76:68:87:b3:0b:65:63:6f:75:fe:b7:a5:73:7d: 99:4d:ce:15:1a:5d:24:2b:3d:77:9c:c2:ab:16:53:29:7c:2e: e6:3b:ea:44:d0:87:8a:bd:75:0c:52:8a:3b:9a:da:d3:f9:a2: 0a:66:a8:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TkZJfYO9KRs1fLCYCGMCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwNzI0MTAwMDE4WhcNMjYwNzI1MTAwMDE4WjAzMTEwLwYDVQQD EyhmNjFkOTNjZWE3MjlmYTgwMGFhYTkwODkzZGY3M2MzYjg4NjYzYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6r3cYHE0O3rjHiNE5wMM20IvjT8 uEYWwa0z978IxcD6uoEonj/iJkiKsdMMmKYXHUSNmhbCUUPzJGXL9c4eocuiIxDG eJL0QLKCqjYe8Gdnmu31VfOhV1W581saCD/5U2k6QXgd+1oAz6GQneqabZjHrvlB 3viXN1K0h9+rbe85JrpAh8ZvREX40TUlopaaBrN04g/yYSd1jLLhG2IXRi5fEJqQ Dn/FLUB1EPeXZ70F34wPutN0THARQYTmKSpACgjBPachFdKogM0DzxDYPj3vDleI o7FjV+5aUWUurGgAdc+zUIsatNQH9Li6hpPQulo7ezojzeDa7hN7f4LbDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYdk86nKfqACqqQiT33PDuIZjxcMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnv0g2P4 yjbA9IUF2AlGGO6YHmSXL6zOpbWWzhfvogfFsb04RdHj4tkwZXTkLflffIuys5L6 G81Zfo4NTlQNAgQTt1wxm80UDgqsWaQB8Wd0pgwBrWIL5nRDAuP+i4at1hND2l2M s6bKvwBMHMd/F3bymcUHIKnoONZMqfmuhcT2QUCPO/UaB54Y8KI3vsrxJOrMigpL A2/RNh8QaZKlfcRe75WIarMcdZZUaw7CzRKiPNijQmSxmB91qZO/BzOXb7SFxYfn 3902MHZoh7MLZWNvdf63pXN9mU3OFRpdJCs9d5zCqxZTKXwu5jvqRNCHir11DFKK O5ra0/miCmaoXg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:54:15 2026 by rpki-client