$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: 9UIYgfYtTW053aq140L0sIbT9Dk3/eWjVMdjnu8Q6Eo= Subject key identifier: 23:2E:BC:F3:C4:6B:DE:39:D6:1B:F5:CF:BB:8B:33:22:E4:A9:DA:2A Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019FA974D4848951F32F857D6C10BD1D1A15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1C5D Signing time: Tue 28 Jul 2026 16:00:33 +0000 Manifest this update: Tue 28 Jul 2026 16:00:33 +0000 Manifest next update: Wed 29 Jul 2026 16:00:33 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 3: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 4: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 5: 70bI0BpF1ACsAKCFJ6N-iV0JxII.roa (hash: eA2eEKDYDU9RId38K2W4q8Sfx9olgaplYK4PPc5MYTY=) 6: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 7: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 8: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 9: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 10: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 11: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: K88Touy2eIGQPcPerST+vCQvW4R5G9LXOJshyLXyE9g=) 12: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 13: QbZ1rTEJfzxB66FDqcoxpkam6ns.roa (hash: cM5csjF25iV+29L4asFE5a4kr7pLri+DT2uTV/sOvz8=) 14: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 15: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 16: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 17: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 18: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 19: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 20: c6zz610dAPS93YECDNiRE3FFJv8.roa (hash: OsQ9xfdlBk9mMh8w37FIGirc6gzFq4ptiH5uxHMx2Y4=) 21: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 22: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 23: hqKvBeK3XKVKA5-Y0aUcuIMRMY4.roa (hash: O3T0OOd6bHrZQ6RgmID8QWHDSs65cWOaJr5blLDT9OM=) 24: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 25: qW2Abdn_vKg1qMi5dPH9Mlkq-5k.roa (hash: A2I1BFykGtvUPJzt8UEmOO8VliU3UUk2FL56Hs19AWE=) 26: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 27: skwAlOpJAcdHksUYGz4EwjUIsXM.roa (hash: KLTUqEUZLvS5HlRAC1b4oFl4mIh8SOSk823xWU684vc=) 28: sz_c26rbvH0uu179TRjeU8EM_A0.roa (hash: tMb7Bo7E7L+zeKT6DXx+zQjvZcrsYlKvO7dQ40ku1+s=) 29: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 30: w90FegnaRGuQdEE1G_puoH9JsxU.roa (hash: MGl3WgOVweO0N+ip5QHYD3FksJJCgZGSSbkebGr25vI=) 31: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 32: zzbHWxJLsLUWNFdWT3RcsYaj87k.roa (hash: aYt8vEO0dk7Q0eIdeE/UvWjCj2uQYX3kR/4atzt1mVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:74:d4:84:89:51:f3:2f:85:7d:6c:10:bd:1d:1a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jul 28 16:00:33 2026 GMT Not After : Jul 29 16:00:33 2026 GMT Subject: CN=232ebcf3c46bde39d61bf5cfbb8b3322e4a9da2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:fb:cc:33:88:18:ea:f2:21:e2:48:cd:9a: fe:a4:d9:b0:d7:1d:19:fa:b1:f3:a3:ee:84:d8:47: db:e6:9e:95:40:2f:57:0f:65:44:cc:97:11:65:45: 1d:4f:4d:87:57:ea:b2:5f:a4:a6:55:68:35:8e:b4: ae:39:19:bf:0a:a2:31:bf:ec:f6:45:bd:1c:be:6e: ac:67:25:d6:7a:54:c6:0c:4f:a6:e9:df:79:42:ad: 6c:0c:c6:43:4f:c8:81:ac:50:b5:51:ca:a1:4a:12: 91:52:31:75:bb:99:a3:67:4e:bb:85:07:b6:0a:01: a0:6c:27:7a:26:6e:70:bb:bb:2c:1b:d2:31:9d:78: 76:3b:e2:f9:d0:c7:ef:67:1d:28:e1:9e:a9:1a:1f: fa:40:ef:a8:8a:5b:53:6a:ac:08:93:84:ad:76:46: 47:8c:66:79:07:7b:5b:55:d8:08:73:c3:9d:b8:8a: bf:e6:e0:5b:fa:28:5e:93:33:44:38:cc:66:d0:5b: 70:a8:d9:23:3b:df:1e:dc:37:0f:cc:ad:48:62:70: 13:a0:8a:63:46:04:ac:ca:a6:ca:20:03:d9:42:44: 42:a2:ee:a7:f9:9a:68:8f:28:1b:00:8a:20:d3:4a: 1a:76:8f:ad:99:74:3e:77:79:a3:22:03:51:85:98: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2E:BC:F3:C4:6B:DE:39:D6:1B:F5:CF:BB:8B:33:22:E4:A9:DA:2A X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:37:8b:44:a0:27:22:4c:f9:5b:1c:43:e7:a8:f7:b2:4b:9b: ca:4a:8c:73:f3:1e:73:de:ec:8c:1a:4d:d2:87:64:00:b2:5c: 0a:1a:9e:9b:3d:e3:e8:fd:e9:f7:e3:36:a9:96:e6:2a:fc:4f: 1a:8c:6a:b9:18:4b:82:f8:b4:c2:5c:bc:24:e3:23:3e:48:93: e0:86:97:9b:ff:72:e6:cc:71:35:a8:10:32:0f:58:b4:4a:0b: 62:68:17:36:de:62:6a:72:85:bc:d4:8a:c4:51:74:66:06:93: 65:3b:08:75:0b:ef:24:c0:62:7e:48:8a:47:82:01:6f:64:57: 98:ee:70:75:5a:d3:a2:46:2e:67:a1:1c:06:1b:dc:3e:64:69: c5:0f:7d:ff:d8:68:da:2e:49:3a:d4:dd:17:82:d3:f4:41:81: cc:28:f1:cc:aa:40:74:3a:b5:ae:9a:1c:b2:07:c3:69:ac:43: 79:1f:44:f1:d4:25:19:26:ad:ff:00:9a:b9:3e:e6:b6:c4:11: 6b:ac:b7:ea:cc:52:e0:d5:86:23:fb:28:f1:d7:72:a2:b3:ba: df:b8:c8:39:5c:6d:35:f6:3c:56:cf:4f:15:32:5f:78:c3:f0: de:1b:67:8a:3b:85:9a:17:1f:84:81:a8:bc:97:e6:ab:a1:03: 39:19:05:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdNSEiVHzL4V9bBC9HRoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwNzI4MTYwMDMzWhcNMjYwNzI5MTYwMDMzWjAzMTEwLwYDVQQD EygyMzJlYmNmM2M0NmJkZTM5ZDYxYmY1Y2ZiYjhiMzMyMmU0YTlkYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEr7zDOIGOryIeJIzZr+pNmw1x0Z +rHzo+6E2Efb5p6VQC9XD2VEzJcRZUUdT02HV+qyX6SmVWg1jrSuORm/CqIxv+z2 Rb0cvm6sZyXWelTGDE+m6d95Qq1sDMZDT8iBrFC1UcqhShKRUjF1u5mjZ067hQe2 CgGgbCd6Jm5wu7ssG9IxnXh2O+L50MfvZx0o4Z6pGh/6QO+oiltTaqwIk4StdkZH jGZ5B3tbVdgIc8OduIq/5uBb+ihekzNEOMxm0FtwqNkjO98e3DcPzK1IYnAToIpj RgSsyqbKIAPZQkRCou6n+ZpojygbAIog00oado+tmXQ+d3mjIgNRhZiTiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMuvPPEa9451hv1z7uLMyLkqdoqMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjeLRKAn Ikz5WxxD56j3skubykqMc/Mec97sjBpN0odkALJcChqemz3j6P3p9+M2qZbmKvxP GoxquRhLgvi0wly8JOMjPkiT4IaXm/9y5sxxNagQMg9YtEoLYmgXNt5ianKFvNSK xFF0ZgaTZTsIdQvvJMBifkiKR4IBb2RXmO5wdVrTokYuZ6EcBhvcPmRpxQ99/9ho 2i5JOtTdF4LT9EGBzCjxzKpAdDq1rpocsgfDaaxDeR9E8dQlGSat/wCauT7mtsQR a6y36sxS4NWGI/so8ddyorO637jIOVxtNfY8Vs9PFTJfeMPw3htnijuFmhcfhIGo vJfmq6EDORkFRw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:54:10 2026 by rpki-client