$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: cOCCMXdYOHtDGcIjOPQDajUb8DFgIEROcEODrFHfxUA= Subject key identifier: A9:52:D7:CA:7D:94:DC:4A:7D:00:69:26:0B:0D:35:F4:9E:1B:3B:ED Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019EC0366B2092C9E3215F8EEC04F3B1D124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1BD8 Signing time: Sat 13 Jun 2026 09:00:52 +0000 Manifest this update: Sat 13 Jun 2026 09:00:52 +0000 Manifest next update: Sun 14 Jun 2026 09:00:52 +0000 Files and hashes: 1: 1Y1EwjaV7a9eVAgAhrsnxksIDpQ.roa (hash: xa3gckHz1ChceSiF0rgEARg82tStCJlJUKlIhcFw/78=) 2: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 3: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 4: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 5: 4R7zOUd2bWJxOBBi5UC7h0hZu1w.roa (hash: ZqY4GqqmXqn1EnGBUxEdD3VnQj8pPDbqpf6OPJo6fp4=) 6: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 7: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 8: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 9: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 10: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 11: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: iaDjWsFYN/6WA2nagUWtUw5h6/RDhd3BFvAMoxGwvSU=) 13: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 14: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 15: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 16: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 17: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 18: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 19: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 20: c6zz610dAPS93YECDNiRE3FFJv8.roa (hash: OsQ9xfdlBk9mMh8w37FIGirc6gzFq4ptiH5uxHMx2Y4=) 21: cFVAK4Rr7dzQgpURz6ErhW-a6uQ.roa (hash: ChetHwgAUANEPoqsVi2wXLnS3I1hXnJB9ZWw45C9B9I=) 22: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 23: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 24: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 25: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 26: skwAlOpJAcdHksUYGz4EwjUIsXM.roa (hash: KLTUqEUZLvS5HlRAC1b4oFl4mIh8SOSk823xWU684vc=) 27: sz_c26rbvH0uu179TRjeU8EM_A0.roa (hash: tMb7Bo7E7L+zeKT6DXx+zQjvZcrsYlKvO7dQ40ku1+s=) 28: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 29: w90FegnaRGuQdEE1G_puoH9JsxU.roa (hash: MGl3WgOVweO0N+ip5QHYD3FksJJCgZGSSbkebGr25vI=) 30: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 31: zzbHWxJLsLUWNFdWT3RcsYaj87k.roa (hash: aYt8vEO0dk7Q0eIdeE/UvWjCj2uQYX3kR/4atzt1mVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:36:6b:20:92:c9:e3:21:5f:8e:ec:04:f3:b1:d1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jun 13 09:00:52 2026 GMT Not After : Jun 14 09:00:52 2026 GMT Subject: CN=a952d7ca7d94dc4a7d0069260b0d35f49e1b3bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:32:ae:b3:5e:2a:f2:15:ff:d9:69:f6:89: 5f:38:f5:a5:67:ae:35:fb:c7:a8:17:90:36:2e:2e: 00:b9:29:68:85:5a:38:c0:1c:97:93:f6:35:a6:1f: ad:d1:8f:1c:77:57:94:a3:96:60:e7:ac:a1:d3:37: 27:ad:36:70:88:96:5b:ca:87:b0:42:4c:de:ea:e1: ed:26:66:42:38:ab:58:78:52:67:68:1b:b3:43:f4: 59:41:68:02:99:76:0b:31:96:7d:46:f5:97:47:c7: 5e:bd:f0:85:ae:eb:05:b2:f3:ef:3e:95:2c:ce:c8: 1d:0c:22:d2:45:cf:85:e8:06:74:ac:20:98:23:a8: 64:87:81:1d:0f:46:d0:c5:a4:8b:46:75:da:ef:b2: 13:24:79:40:02:43:22:4f:84:e4:60:46:ce:ba:c4: 5f:f3:1c:69:32:c8:46:06:1b:07:68:e3:3f:ad:28: 8b:64:7b:d8:54:8a:c0:1e:1a:34:9b:28:a5:81:a4: 3c:37:0d:d0:9d:fc:21:b0:ff:26:fa:05:6a:39:e0: 35:d6:65:8d:d6:5e:59:c0:e2:d6:35:c8:1a:5e:3c: 55:5c:80:21:a7:42:9a:bc:60:21:4c:15:b5:3d:62: 62:76:f8:2f:26:5f:fd:cd:7f:03:49:07:f2:06:4d: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:52:D7:CA:7D:94:DC:4A:7D:00:69:26:0B:0D:35:F4:9E:1B:3B:ED X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:56:bd:2d:bd:ae:0a:85:f0:7d:1f:33:18:e7:c3:04:90:55: 05:02:cc:8e:13:8c:8b:13:35:17:3d:7d:50:5a:69:43:e0:78: 18:8f:dc:27:2d:c3:5e:35:05:92:40:9b:58:93:eb:fb:1d:6a: 17:22:7e:a2:c8:a1:ee:cb:46:f9:c8:cc:07:df:e6:56:f7:39: ad:83:7e:6f:3b:45:12:b3:8e:f7:97:8b:39:1e:67:7a:e8:49: cd:07:0c:b8:77:87:e1:f6:fc:27:fc:94:2e:bd:d1:b2:65:e9: 29:ab:9d:05:bf:4e:3e:18:6a:b7:2c:8f:a4:0a:8d:68:bf:93: 48:e3:2d:b3:18:73:3a:25:0f:f3:2f:c7:ad:e0:82:12:e6:8f: 1d:66:ef:14:ea:93:ab:38:61:cd:0a:22:f8:fe:d3:6d:ed:75: 65:84:ef:4c:90:0a:e8:19:2d:04:5f:3e:6f:fb:e0:11:16:45: db:aa:a6:0c:75:86:17:55:1c:2b:42:55:0f:58:a9:1d:61:d7: 07:4a:05:00:e0:7d:9e:11:5d:97:ac:2c:3f:ba:f6:b8:89:86: c7:c7:dd:3d:54:d5:e2:6a:89:d8:34:47:3a:5c:3c:ca:6b:f3: 96:2c:e1:e5:3b:58:85:70:56:dd:37:4e:b1:5f:da:87:5f:65: 7a:71:9e:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7ANmsgksnjIV+O7ATzsdEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwNjEzMDkwMDUyWhcNMjYwNjE0MDkwMDUyWjAzMTEwLwYDVQQD EyhhOTUyZDdjYTdkOTRkYzRhN2QwMDY5MjYwYjBkMzVmNDllMWIzYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR0yrrNeKvIV/9lp9olfOPWlZ641 +8eoF5A2Li4AuSlohVo4wByXk/Y1ph+t0Y8cd1eUo5Zg56yh0zcnrTZwiJZbyoew Qkze6uHtJmZCOKtYeFJnaBuzQ/RZQWgCmXYLMZZ9RvWXR8devfCFrusFsvPvPpUs zsgdDCLSRc+F6AZ0rCCYI6hkh4EdD0bQxaSLRnXa77ITJHlAAkMiT4TkYEbOusRf 8xxpMshGBhsHaOM/rSiLZHvYVIrAHho0myilgaQ8Nw3QnfwhsP8m+gVqOeA11mWN 1l5ZwOLWNcgaXjxVXIAhp0KavGAhTBW1PWJidvgvJl/9zX8DSQfyBk1ntQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlS18p9lNxKfQBpJgsNNfSeGzvtMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFla9Lb2u CoXwfR8zGOfDBJBVBQLMjhOMixM1Fz19UFppQ+B4GI/cJy3DXjUFkkCbWJPr+x1q FyJ+osih7stG+cjMB9/mVvc5rYN+bztFErOO95eLOR5neuhJzQcMuHeH4fb8J/yU Lr3RsmXpKaudBb9OPhhqtyyPpAqNaL+TSOMtsxhzOiUP8y/HreCCEuaPHWbvFOqT qzhhzQoi+P7Tbe11ZYTvTJAK6BktBF8+b/vgERZF26qmDHWGF1UcK0JVD1ipHWHX B0oFAOB9nhFdl6wsP7r2uImGx8fdPVTV4mqJ2DRHOlw8ymvzlizh5TtYhXBW3TdO sV/ah19lenGeQA== -----END CERTIFICATE-----Generated at Sat Jun 13 18:58:29 2026 by rpki-client