$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: ZANzuuUatpUkSaMd/Aslbx0zbCAgfrPqNqQKztKRliY= Subject key identifier: 22:3B:A4:7B:71:13:3E:90:21:1F:EA:B3:A6:B4:31:7B:AE:FE:24:7D Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01A10023351F8D7AB07268CECAF492778D27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1D31 Signing time: Sat 03 Oct 2026 05:01:09 +0000 Manifest this update: Sat 03 Oct 2026 05:01:09 +0000 Manifest next update: Sun 04 Oct 2026 05:01:09 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 3: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 4: 3kdkXs-Im4X4WxDF387Kz58kORA.roa (hash: 1WD5Nbn4e/aPX7Ez9Elfw89SdkV6nUX+vasnfRGAOWw=) 5: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 6: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 7: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 8: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 9: HrxcodrvVIM_GMxKhZQudNRip6c.roa (hash: MTdn9qnsxs92sBTi2UkM6k+YAlFOUGhoYZbEqur9JIg=) 10: JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa (hash: kcTQU5997oY8OpgCn62LAmPoorNvkv8hEcl9ToSuUFo=) 11: KAv0a2aBh2HKZaJ11jodxywws-4.roa (hash: H3aWrK0K0iZNqy3EQ3BRXNZTYMg5/3AIf1FGtpEowbk=) 12: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 13: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: oQSqRhvqhMXs1qA8+2CyIwH6bBbG1F+w+TxLw+vG9Ic=) 14: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 15: PrMKAjfyE4gDVPM_30yhUEgUaK8.roa (hash: d5Ri8zlN+7mgIl6066b62P5+COYbCz5V4oEMD6BJQvc=) 16: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 17: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 18: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 19: ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa (hash: mZ/hXIWOyw1nZePba2ku4vzRolnuQ9r/sg/ZfJza0sU=) 20: _SBs4pCKKhk6pMcCKSMOStF2zLs.roa (hash: K5M4wzgI5IwgTsBzGfeMMvXNqnGoMX/i5D4sN0k8DcM=) 21: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 22: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 23: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 24: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 25: f2jgN13vsLBBFFDE9L3XqIO-zZI.roa (hash: 6jwpW+Gz/4278/TgiUlJbdacPgd1+h1QmRHWgV41/1A=) 26: f32IN8X8VX0IYse4UWL7OQvSP60.roa (hash: rb+UUhOxd1nri0jZfCETT05e9Y4KfO4sAh9g9cW0pPI=) 27: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 28: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 29: rwIxl0xSpx6cLwOck58lc13Z1LA.roa (hash: tTGUty/PmeIj7uvxFb0523AV7tRjEIfSVI+SkDAItjw=) 30: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 31: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:00:23:35:1f:8d:7a:b0:72:68:ce:ca:f4:92:77:8d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Oct 3 05:01:09 2026 GMT Not After : Oct 4 05:01:09 2026 GMT Subject: CN=223ba47b71133e90211feab3a6b4317baefe247d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:80:59:36:94:c5:04:7e:47:36:64:12:a9: 48:0b:b6:86:f1:06:1c:d6:d1:ff:bb:f1:a1:e9:a4: b6:ff:64:aa:cd:21:53:37:36:bf:e2:dd:d5:49:bb: 14:f7:5e:1e:60:7b:5a:7f:5f:30:64:2d:20:bf:42: b7:3f:3d:99:ab:3c:46:10:a5:48:ac:af:95:c7:26: c4:60:b6:6b:34:27:ae:b4:ba:28:75:0d:ee:17:1c: 18:51:e7:f0:de:6c:64:52:60:f1:cd:c3:36:95:61: 47:71:fd:9d:6b:91:b9:a1:16:58:6f:c7:3b:52:e0: a0:79:16:79:c7:c1:36:8a:c0:b3:2a:44:2d:96:fe: cd:5f:6f:34:29:19:8b:2b:09:59:d8:58:fe:a1:8b: 2b:a3:7d:63:03:08:33:e5:74:5d:14:44:21:18:38: 64:b5:24:4d:a8:44:4b:95:97:1c:e5:14:ae:ca:ad: 23:f3:d6:4b:ee:9b:5e:05:62:41:ea:8f:60:90:48: d8:72:a0:d6:0c:7b:5b:f6:9b:02:43:b5:48:db:24: 0a:8a:43:41:ec:34:90:b1:3e:0b:48:46:5c:28:d9: 89:79:8b:db:6a:88:46:3f:88:32:fa:22:8d:a5:c0: c8:7e:84:c1:84:fe:33:ad:97:b2:88:57:d5:17:a1: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3B:A4:7B:71:13:3E:90:21:1F:EA:B3:A6:B4:31:7B:AE:FE:24:7D X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:a1:6c:3c:ec:f2:b0:17:76:db:03:7d:8d:02:fd:68:7a: 44:ef:5f:59:2e:e5:46:24:83:36:78:87:0d:2f:2b:ce:bd:d4: 82:aa:96:3f:32:d7:37:c4:b0:54:c4:33:44:61:a3:a0:64:96: a8:e3:f9:69:96:5e:d3:25:86:06:1e:06:8c:6f:d0:5d:44:77: a8:b6:69:e8:eb:0f:6c:c4:61:4c:d1:5e:2e:e2:b8:e7:a9:8e: a4:80:c3:bd:9b:86:fc:46:9e:db:ab:c2:72:84:2a:c6:50:94: aa:17:a6:49:37:a6:bf:0d:de:ee:af:20:7e:c1:47:a8:37:b7: 8d:3b:02:98:ae:88:2a:40:05:a0:23:f7:55:e6:05:11:40:80: 3c:c6:fa:97:1a:9d:d3:41:6a:ec:fa:1c:3c:5d:78:fe:5f:ee: 74:f9:e0:b8:bf:55:74:52:7a:ce:7d:61:e0:43:c9:49:29:a9: 6b:8c:29:6a:ab:4f:7d:5f:0d:1d:1e:89:56:b7:ee:8a:a7:b9: ef:41:3a:4a:9d:4f:c7:54:cd:e4:08:1a:d5:84:b8:0d:ea:e3: 0f:ed:52:3e:b6:f8:bf:91:51:fd:ab:94:5d:2a:b4:99:dd:dc: 9b:6b:2b:6d:d4:c1:37:48:8c:19:e5:9a:ed:2e:74:1a:76:b4: a9:3b:a0:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEAIzUfjXqwcmjOyvSSd40nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYxMDAzMDUwMTA5WhcNMjYxMDA0MDUwMTA5WjAzMTEwLwYDVQQD EygyMjNiYTQ3YjcxMTMzZTkwMjExZmVhYjNhNmI0MzE3YmFlZmUyNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3U6AWTaUxQR+RzZkEqlIC7aG8QYc 1tH/u/Gh6aS2/2SqzSFTNza/4t3VSbsU914eYHtaf18wZC0gv0K3Pz2ZqzxGEKVI rK+VxybEYLZrNCeutLoodQ3uFxwYUefw3mxkUmDxzcM2lWFHcf2da5G5oRZYb8c7 UuCgeRZ5x8E2isCzKkQtlv7NX280KRmLKwlZ2Fj+oYsro31jAwgz5XRdFEQhGDhk tSRNqERLlZcc5RSuyq0j89ZL7pteBWJB6o9gkEjYcqDWDHtb9psCQ7VI2yQKikNB 7DSQsT4LSEZcKNmJeYvbaohGP4gy+iKNpcDIfoTBhP4zrZeyiFfVF6Eo7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI7pHtxEz6QIR/qs6a0MXuu/iR9MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiWhbDzs 8rAXdtsDfY0C/Wh6RO9fWS7lRiSDNniHDS8rzr3UgqqWPzLXN8SwVMQzRGGjoGSW qOP5aZZe0yWGBh4GjG/QXUR3qLZp6OsPbMRhTNFeLuK456mOpIDDvZuG/Eae26vC coQqxlCUqhemSTemvw3e7q8gfsFHqDe3jTsCmK6IKkAFoCP3VeYFEUCAPMb6lxqd 00Fq7PocPF14/l/udPnguL9VdFJ6zn1h4EPJSSmpa4wpaqtPfV8NHR6JVrfuiqe5 70E6Sp1Px1TN5Aga1YS4DerjD+1SPrb4v5FR/auUXSq0md3cm2srbdTBN0iMGeWa 7S50Gna0qTugVg== -----END CERTIFICATE-----Generated at Sat Oct 3 08:41:24 2026 by rpki-client