$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: BNss2AucUP60f6hMGMMhyqvYAv6jqbJWMyVdIdOPVpo= Subject key identifier: 19:B1:A1:FC:3A:73:67:2C:CE:3F:3D:DF:E6:27:5A:4E:88:0B:22:91 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019CA9B3E8D64E3EF5A6D5B20B397B043BCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 1857 Signing time: Sun 01 Mar 2026 14:01:05 +0000 Manifest this update: Sun 01 Mar 2026 14:01:05 +0000 Manifest next update: Mon 02 Mar 2026 14:01:05 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: oMT3nwdbcLO9LjxWFfsnsyxncNtZnXdDN+Y5XaPGqy8=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=) 17: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 18: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 09:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:a9:b3:e8:d6:4e:3e:f5:a6:d5:b2:0b:39:7b:04:3b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Mar 1 14:01:05 2026 GMT Not After : Mar 2 14:01:05 2026 GMT Subject: CN=19b1a1fc3a73672cce3f3ddfe6275a4e880b2291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:76:5a:73:1d:7a:8d:19:b2:42:4c:48:5e:54: 4d:51:19:81:2e:de:2c:7a:08:80:66:0d:70:66:b2: aa:8f:51:de:ca:98:47:13:7b:f8:75:b6:5c:ef:fb: c9:5a:1b:31:2c:00:ef:d2:81:84:7c:4a:01:1f:0c: 0a:18:ae:eb:25:a1:e9:8b:90:eb:ec:3e:00:c8:c3: 5d:59:8b:52:0b:e5:c9:e8:e7:b0:09:82:cc:ec:30: 69:2a:36:f1:08:47:b2:3e:00:69:a5:ac:60:5f:20: a8:c6:84:02:4f:96:fe:0d:3a:16:b2:02:e7:57:58: 7d:d7:87:d4:40:8e:af:8d:92:be:88:05:db:4c:47: 03:a2:0d:44:a7:be:af:20:4e:52:e0:ab:7a:90:cc: e2:86:d8:ce:c2:2d:38:26:88:2f:f0:b3:fe:da:7b: 3b:6b:75:1d:f8:0b:92:a7:06:1f:9f:8d:5c:03:51: 9c:00:8f:3d:1e:a5:bc:f6:a2:0b:c6:d0:34:5d:38: fb:c5:71:16:73:4a:c3:61:49:43:55:dc:ab:ac:8e: ad:a2:45:a7:4e:0a:ef:04:05:5b:1c:37:82:fb:96: 0c:8b:4d:c9:29:06:fc:d7:7d:8d:38:6f:22:6d:92: 5f:3e:22:e7:ea:ec:00:ea:31:60:76:1e:a1:cc:f0: a3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B1:A1:FC:3A:73:67:2C:CE:3F:3D:DF:E6:27:5A:4E:88:0B:22:91 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6b:e8:f8:db:33:8c:de:cc:37:60:4f:77:c4:70:36:74:8a: 97:aa:0a:9b:2c:cb:32:e6:2c:67:51:e0:16:17:53:d4:e9:e3: 90:c5:e8:68:0a:61:b8:51:0c:b8:5d:af:23:07:de:e9:ad:de: 5b:c9:d1:c4:b4:0f:b4:d4:7c:50:90:1f:dc:3a:34:87:c7:c0: ef:6b:23:1f:a6:06:1b:96:12:ba:8d:38:64:3e:d1:90:70:04: c3:8b:d0:39:93:9c:49:1d:7b:30:fe:cb:73:8f:c1:5e:f6:bf: 88:e8:38:64:94:37:41:eb:0a:06:02:6b:a7:7f:b6:c3:d3:09: d1:78:2a:7b:70:61:4f:b8:35:97:eb:38:60:20:39:d3:43:3f: 3b:9d:fe:05:6e:45:3b:72:7e:cc:9d:76:c9:a6:f1:bf:44:a4: 01:ed:55:ec:b7:a1:52:3a:6d:47:4d:b7:55:fa:06:22:5c:8c: 82:ac:75:e4:0e:84:a5:f7:4f:85:0b:83:0c:bd:a8:4c:44:14: 87:e2:fc:f1:1e:25:dd:ad:23:52:42:75:4e:09:44:db:14:9d: 8c:0a:08:6f:43:2c:db:ef:6a:51:22:d0:52:d4:69:c5:62:d4: 21:78:e1:74:8d:42:f1:97:06:24:c0:d1:74:27:0e:8d:d8:ce: 65:c4:dc:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyps+jWTj71ptWyCzl7BDvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwMzAxMTQwMTA1WhcNMjYwMzAyMTQwMTA1WjAzMTEwLwYDVQQD EygxOWIxYTFmYzNhNzM2NzJjY2UzZjNkZGZlNjI3NWE0ZTg4MGIyMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HZacx16jRmyQkxIXlRNURmBLt4s egiAZg1wZrKqj1HeyphHE3v4dbZc7/vJWhsxLADv0oGEfEoBHwwKGK7rJaHpi5Dr 7D4AyMNdWYtSC+XJ6OewCYLM7DBpKjbxCEeyPgBppaxgXyCoxoQCT5b+DToWsgLn V1h914fUQI6vjZK+iAXbTEcDog1Ep76vIE5S4Kt6kMzihtjOwi04Jogv8LP+2ns7 a3Ud+AuSpwYfn41cA1GcAI89HqW89qILxtA0XTj7xXEWc0rDYUlDVdyrrI6tokWn TgrvBAVbHDeC+5YMi03JKQb8132NOG8ibZJfPiLn6uwA6jFgdh6hzPCjGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmxofw6c2cszj893+YnWk6ICyKRMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGvo+Nsz jN7MN2BPd8RwNnSKl6oKmyzLMuYsZ1HgFhdT1OnjkMXoaAphuFEMuF2vIwfe6a3e W8nRxLQPtNR8UJAf3Do0h8fA72sjH6YGG5YSuo04ZD7RkHAEw4vQOZOcSR17MP7L c4/BXva/iOg4ZJQ3QesKBgJrp3+2w9MJ0Xgqe3BhT7g1l+s4YCA500M/O53+BW5F O3J+zJ12yabxv0SkAe1V7LehUjptR023VfoGIlyMgqx15A6EpfdPhQuDDL2oTEQU h+L88R4l3a0jUkJ1TglE2xSdjAoIb0Ms2+9qUSLQUtRpxWLUIXjhdI1C8ZcGJMDR dCcOjdjOZcTcLw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:19:59 2026 by rpki-client