$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: 4oPezps5WBwo3HWEtBAH32JMZRUGvkEXxa4dfgiD4GE= Subject key identifier: 78:6B:0F:3B:01:81:3E:9D:AD:65:A2:DF:FB:02:94:58:7E:19:AF:9B Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01A0EA402C99F995EE90A3E86CADA07EC38D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1D23 Signing time: Mon 28 Sep 2026 23:01:09 +0000 Manifest this update: Mon 28 Sep 2026 23:01:09 +0000 Manifest next update: Tue 29 Sep 2026 23:01:09 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 3: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 4: 5CRzGhoU_e7eBUnAKy8O8D4EtQk.roa (hash: LJTrOsci6Dw72z3TAo1qYXwRYs/MlFjYW3VDOUG/E6w=) 5: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 6: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 7: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 8: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 9: HrxcodrvVIM_GMxKhZQudNRip6c.roa (hash: MTdn9qnsxs92sBTi2UkM6k+YAlFOUGhoYZbEqur9JIg=) 10: JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa (hash: kcTQU5997oY8OpgCn62LAmPoorNvkv8hEcl9ToSuUFo=) 11: KAv0a2aBh2HKZaJ11jodxywws-4.roa (hash: H3aWrK0K0iZNqy3EQ3BRXNZTYMg5/3AIf1FGtpEowbk=) 12: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 13: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: xF0fU/htmKZV7bvF8rGIRG1BYV05Q/Pu69sBFGR+Xc4=) 14: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 15: PrMKAjfyE4gDVPM_30yhUEgUaK8.roa (hash: d5Ri8zlN+7mgIl6066b62P5+COYbCz5V4oEMD6BJQvc=) 16: QwF0BlO4tk_h2m7pI4nhweiHhKA.roa (hash: /hRSobrtsj4yZ3x+jWbxAu/sV+yBO6+8QUxw1Z3nc/Q=) 17: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 18: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 19: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 20: ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa (hash: mZ/hXIWOyw1nZePba2ku4vzRolnuQ9r/sg/ZfJza0sU=) 21: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 22: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 23: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 24: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 25: f2jgN13vsLBBFFDE9L3XqIO-zZI.roa (hash: 6jwpW+Gz/4278/TgiUlJbdacPgd1+h1QmRHWgV41/1A=) 26: f32IN8X8VX0IYse4UWL7OQvSP60.roa (hash: rb+UUhOxd1nri0jZfCETT05e9Y4KfO4sAh9g9cW0pPI=) 27: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 28: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 29: rwIxl0xSpx6cLwOck58lc13Z1LA.roa (hash: tTGUty/PmeIj7uvxFb0523AV7tRjEIfSVI+SkDAItjw=) 30: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 31: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 19:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ea:40:2c:99:f9:95:ee:90:a3:e8:6c:ad:a0:7e:c3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Sep 28 23:01:09 2026 GMT Not After : Sep 29 23:01:09 2026 GMT Subject: CN=786b0f3b01813e9dad65a2dffb0294587e19af9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:98:b1:18:7c:00:3a:99:fb:00:93:37:6c: 4e:94:29:b2:a9:49:0c:50:1f:95:1a:71:0a:92:5d: 5b:b0:a8:1b:54:88:8d:7e:ba:87:30:78:1e:9b:75: 06:1a:8a:4f:41:7d:4c:4e:58:bb:e9:aa:d5:14:5e: 0a:eb:9a:53:5a:e3:34:c9:36:2c:f1:75:de:91:6c: 9f:ae:cf:7e:98:96:66:65:83:0c:a7:c7:7a:fe:c0: 48:c8:97:19:b8:0f:96:b5:21:42:03:23:73:ce:e5: 77:c2:6e:2d:0a:fc:d4:4f:08:2f:89:be:9c:a2:a5: 14:6d:94:04:32:80:e7:38:cc:94:54:a5:66:0f:90: ba:1d:17:6a:54:68:ea:5a:66:15:82:ab:23:68:cd: ed:46:e1:e4:31:3b:77:ba:1f:de:6b:8c:0e:e0:1a: c7:c1:5f:68:e1:9f:89:3d:41:90:3a:6f:5b:e2:1b: a0:0d:fd:4d:65:c4:aa:2e:8c:81:2d:ca:bb:05:fc: d8:0f:7d:69:f2:17:6a:99:38:54:1e:0a:e2:7b:31: 12:a1:8f:dd:f9:bd:6c:c3:9a:10:10:e2:9e:25:a8: 4a:22:8e:d7:0c:e6:22:9e:ff:7e:18:2d:1c:a5:e8: 60:46:a7:3e:38:fd:2b:ca:0d:71:a6:3d:c9:b3:89: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6B:0F:3B:01:81:3E:9D:AD:65:A2:DF:FB:02:94:58:7E:19:AF:9B X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:79:5b:eb:21:96:b6:af:06:eb:47:a2:25:f0:50:18:d7:d7: 73:af:aa:3a:c1:1b:df:4f:57:75:f1:7b:d2:73:01:34:dc:5c: 4e:c1:bf:d2:72:b0:60:4b:5d:ff:fe:bd:f2:26:c4:95:9d:69: 45:d6:c6:c6:a0:4c:1d:40:e9:f5:f5:8d:01:fb:81:7a:fd:1a: fc:45:e7:34:25:6f:dd:d1:51:4f:77:13:81:aa:37:94:ff:6f: 3d:2f:12:0f:46:87:87:12:af:29:7f:ae:38:7e:d5:5c:45:5b: 83:c1:b6:01:67:e7:05:c9:bc:9f:9c:a4:20:05:61:7c:ed:b1: 5e:f9:a8:fc:1f:9e:52:eb:54:e4:4f:50:08:e5:3a:79:cf:09: 86:1f:ac:73:29:db:c9:7b:2c:4c:fa:6f:9c:46:2c:96:5b:92: a5:23:ea:91:7d:db:16:e6:ec:23:0a:dc:6d:02:0a:03:83:97: 56:f3:18:bf:76:5f:a1:66:8a:23:16:f8:3a:bc:a3:53:77:b4: d3:00:58:8e:ef:85:92:d3:d9:70:f7:6a:db:22:50:bf:82:af: 66:11:59:9b:d9:8c:f1:1a:1e:be:3b:7e:d4:29:ca:1d:ef:64: 9e:9c:17:ae:db:c7:e7:cd:8d:c2:aa:1a:5d:98:75:87:d9:84: dc:27:fb:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDqQCyZ+ZXukKPobK2gfsONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwOTI4MjMwMTA5WhcNMjYwOTI5MjMwMTA5WjAzMTEwLwYDVQQD Eyg3ODZiMGYzYjAxODEzZTlkYWQ2NWEyZGZmYjAyOTQ1ODdlMTlhZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDuYsRh8ADqZ+wCTN2xOlCmyqUkM UB+VGnEKkl1bsKgbVIiNfrqHMHgem3UGGopPQX1MTli76arVFF4K65pTWuM0yTYs 8XXekWyfrs9+mJZmZYMMp8d6/sBIyJcZuA+WtSFCAyNzzuV3wm4tCvzUTwgvib6c oqUUbZQEMoDnOMyUVKVmD5C6HRdqVGjqWmYVgqsjaM3tRuHkMTt3uh/ea4wO4BrH wV9o4Z+JPUGQOm9b4hugDf1NZcSqLoyBLcq7BfzYD31p8hdqmThUHgriezESoY/d +b1sw5oQEOKeJahKIo7XDOYinv9+GC0cpehgRqc+OP0ryg1xpj3Js4mEDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhrDzsBgT6drWWi3/sClFh+Ga+bMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXlb6yGW tq8G60eiJfBQGNfXc6+qOsEb309XdfF70nMBNNxcTsG/0nKwYEtd//698ibElZ1p RdbGxqBMHUDp9fWNAfuBev0a/EXnNCVv3dFRT3cTgao3lP9vPS8SD0aHhxKvKX+u OH7VXEVbg8G2AWfnBcm8n5ykIAVhfO2xXvmo/B+eUutU5E9QCOU6ec8Jhh+scynb yXssTPpvnEYslluSpSPqkX3bFubsIwrcbQIKA4OXVvMYv3ZfoWaKIxb4OryjU3e0 0wBYju+FktPZcPdq2yJQv4KvZhFZm9mM8Roevjt+1CnKHe9knpwXrtvH582Nwqoa XZh1h9mE3Cf7Pg== -----END CERTIFICATE-----Generated at Tue Sep 29 02:48:41 2026 by rpki-client