$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: bfYOyTzI2xi2DoYWtPT9MxkC9Y5FP3+wUTtvFzUFTy4= Subject key identifier: 4D:14:F9:5C:1A:DB:60:43:F3:25:AB:0E:81:4E:3A:88:87:EB:C4:BB Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019FA93E38584240DF38F92322602D7E1484 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 19E5 Signing time: Tue 28 Jul 2026 15:00:54 +0000 Manifest this update: Tue 28 Jul 2026 15:00:54 +0000 Manifest next update: Wed 29 Jul 2026 15:00:54 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: N+xT/F0znUUJYQb/nlLGxqjln9ePN0MDvnBF+3o28Ik=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 17: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:38:58:42:40:df:38:f9:23:22:60:2d:7e:14:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jul 28 15:00:54 2026 GMT Not After : Jul 29 15:00:54 2026 GMT Subject: CN=4d14f95c1adb6043f325ab0e814e3a8887ebc4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:61:6f:72:49:59:3e:43:72:43:d5:7c:c9: b2:75:fd:66:00:2b:7c:0e:1f:c6:3b:e2:8c:00:aa: 7c:f8:bc:10:30:b0:64:b7:d7:9b:22:a6:b2:b9:95: 9f:90:43:74:b7:7c:aa:3d:90:82:05:cf:a8:30:68: 2e:3b:89:a1:c3:a8:e1:66:c5:62:50:8f:6d:36:d2: 2e:22:12:e2:cf:c6:66:c6:45:6d:71:2c:56:78:79: 62:75:85:11:ee:e9:c1:30:54:34:d1:4d:b0:27:e3: c1:93:60:8a:e8:14:da:39:da:0d:5a:e3:44:1c:85: 55:7a:48:f2:d2:0f:ff:66:8d:80:d2:49:1c:86:39: 8d:81:38:8f:aa:6e:ea:8c:8b:37:79:e7:2e:94:a1: 4f:93:b9:99:c2:a2:7d:0b:b4:c8:b0:56:34:38:bb: 0a:23:26:97:25:fd:e3:85:91:dd:30:e6:19:ba:31: 6a:02:c9:74:dd:37:64:cb:b3:c9:91:59:2d:1c:74: e0:4b:16:46:c9:b9:24:cf:04:60:01:a6:99:20:cf: be:74:39:cb:54:09:ed:1e:03:89:12:f7:93:aa:8d: d8:90:c3:0a:40:09:bc:91:5a:67:63:67:1a:1a:88: ab:c7:05:be:83:5e:e1:7b:9a:5a:38:ec:9c:65:50: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:14:F9:5C:1A:DB:60:43:F3:25:AB:0E:81:4E:3A:88:87:EB:C4:BB X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:70:8b:02:55:a4:cf:1d:95:c0:22:56:91:0a:ab:bb:d1: 4f:bb:9b:b5:50:60:2b:12:c9:e5:40:0e:d9:b0:98:09:68:80: 8a:82:01:64:9c:04:fa:a3:5d:18:43:72:54:1b:d0:c5:88:2b: 26:0d:bc:9e:32:b5:b1:ad:81:18:24:4d:ee:0b:ed:b1:5f:34: ab:a2:6c:f9:66:71:a5:52:d8:2f:2d:a5:28:e4:6c:22:75:76: db:09:93:d8:7a:d5:03:d3:53:ee:ec:3c:7d:88:52:1b:35:d0: d2:6f:16:d0:c5:c7:32:09:08:44:c3:44:56:83:c7:b8:4a:35: 01:d0:b6:ef:70:9e:48:b3:ed:2b:b1:d4:96:4a:82:a6:5c:da: 5f:64:54:72:bb:2c:2b:b5:8e:12:f8:91:e5:f5:a6:84:c5:15: f8:a3:66:8f:f4:c2:9e:90:9a:f4:cf:42:5a:11:d1:ad:75:9c: 5e:d9:8b:b7:13:d8:f4:46:45:5e:96:d5:52:3b:2f:ce:96:ba: 6b:e9:07:8f:5d:a4:c0:9c:5a:a3:54:12:42:07:bc:2c:11:5d: c4:d4:a0:65:45:0d:1c:91:7b:f2:89:5f:a8:54:f5:e4:db:f5: 3a:ac:29:28:d4:c3:00:f3:63:7d:0d:69:92:b8:f0:15:c4:5a: 29:1a:a9:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPjhYQkDfOPkjImAtfhSEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwNzI4MTUwMDU0WhcNMjYwNzI5MTUwMDU0WjAzMTEwLwYDVQQD Eyg0ZDE0Zjk1YzFhZGI2MDQzZjMyNWFiMGU4MTRlM2E4ODg3ZWJjNGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KFhb3JJWT5DckPVfMmydf1mACt8 Dh/GO+KMAKp8+LwQMLBkt9ebIqayuZWfkEN0t3yqPZCCBc+oMGguO4mhw6jhZsVi UI9tNtIuIhLiz8ZmxkVtcSxWeHlidYUR7unBMFQ00U2wJ+PBk2CK6BTaOdoNWuNE HIVVekjy0g//Zo2A0kkchjmNgTiPqm7qjIs3eeculKFPk7mZwqJ9C7TIsFY0OLsK IyaXJf3jhZHdMOYZujFqAsl03Tdky7PJkVktHHTgSxZGybkkzwRgAaaZIM++dDnL VAntHgOJEveTqo3YkMMKQAm8kVpnY2caGoirxwW+g17he5paOOycZVA6zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0U+Vwa22BD8yWrDoFOOoiH68S7MB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0JwiwJV pM8dlcAiVpEKq7vRT7ubtVBgKxLJ5UAO2bCYCWiAioIBZJwE+qNdGENyVBvQxYgr Jg28njK1sa2BGCRN7gvtsV80q6Js+WZxpVLYLy2lKORsInV22wmT2HrVA9NT7uw8 fYhSGzXQ0m8W0MXHMgkIRMNEVoPHuEo1AdC273CeSLPtK7HUlkqCplzaX2RUcrss K7WOEviR5fWmhMUV+KNmj/TCnpCa9M9CWhHRrXWcXtmLtxPY9EZFXpbVUjsvzpa6 a+kHj12kwJxao1QSQge8LBFdxNSgZUUNHJF78olfqFT15Nv1OqwpKNTDAPNjfQ1p krjwFcRaKRqpLg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:51:07 2026 by rpki-client