$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: VBQirLRL7W0MRuhui/eIFvm9lnGkKBOoyow4LeieeRA= Subject key identifier: 33:A9:14:86:04:8B:DF:D6:77:74:38:7B:18:3F:A4:22:A3:E0:C3:0B Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019EC224CA949B6A3C753546334EC449581C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1BD9 Signing time: Sat 13 Jun 2026 18:00:51 +0000 Manifest this update: Sat 13 Jun 2026 18:00:51 +0000 Manifest next update: Sun 14 Jun 2026 18:00:51 +0000 Files and hashes: 1: 1Y1EwjaV7a9eVAgAhrsnxksIDpQ.roa (hash: xa3gckHz1ChceSiF0rgEARg82tStCJlJUKlIhcFw/78=) 2: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 3: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 4: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 5: 4R7zOUd2bWJxOBBi5UC7h0hZu1w.roa (hash: ZqY4GqqmXqn1EnGBUxEdD3VnQj8pPDbqpf6OPJo6fp4=) 6: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 7: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 8: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 9: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 10: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 11: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: WF/tIHLWtUrQjO6CEWk8PYCF/jNGoALWRhnriDXWrQ8=) 13: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 14: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 15: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 16: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 17: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 18: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 19: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 20: c6zz610dAPS93YECDNiRE3FFJv8.roa (hash: OsQ9xfdlBk9mMh8w37FIGirc6gzFq4ptiH5uxHMx2Y4=) 21: cFVAK4Rr7dzQgpURz6ErhW-a6uQ.roa (hash: ChetHwgAUANEPoqsVi2wXLnS3I1hXnJB9ZWw45C9B9I=) 22: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 23: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 24: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 25: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 26: skwAlOpJAcdHksUYGz4EwjUIsXM.roa (hash: KLTUqEUZLvS5HlRAC1b4oFl4mIh8SOSk823xWU684vc=) 27: sz_c26rbvH0uu179TRjeU8EM_A0.roa (hash: tMb7Bo7E7L+zeKT6DXx+zQjvZcrsYlKvO7dQ40ku1+s=) 28: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 29: w90FegnaRGuQdEE1G_puoH9JsxU.roa (hash: MGl3WgOVweO0N+ip5QHYD3FksJJCgZGSSbkebGr25vI=) 30: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 31: zzbHWxJLsLUWNFdWT3RcsYaj87k.roa (hash: aYt8vEO0dk7Q0eIdeE/UvWjCj2uQYX3kR/4atzt1mVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c2:24:ca:94:9b:6a:3c:75:35:46:33:4e:c4:49:58:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jun 13 18:00:51 2026 GMT Not After : Jun 14 18:00:51 2026 GMT Subject: CN=33a91486048bdfd67774387b183fa422a3e0c30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:b0:1d:f6:4a:c3:73:1f:61:17:39:f6:3d: 24:f8:68:27:48:d2:70:47:85:1d:fe:3e:14:89:e9: 05:18:ab:86:43:ff:3c:4b:5e:fe:80:fb:6c:a5:a9: 15:9e:53:ab:76:dc:3d:3a:82:f2:52:65:96:92:32: 6f:a3:3e:2a:37:05:44:3f:ba:20:6e:33:e1:bc:51: f2:8b:e3:a7:ce:5f:71:ba:53:bb:5e:10:be:fe:57: d3:54:e3:51:db:14:20:89:3c:10:10:5e:0c:12:cb: 8d:9c:38:2b:8e:b6:2a:04:ce:da:96:c1:01:0b:b0: ff:a3:ae:21:80:1f:7e:c7:97:42:f2:e8:79:e1:85: 18:f7:17:f4:0a:86:4c:2b:80:73:59:96:90:d7:ed: 62:22:94:fc:f0:67:10:de:60:72:75:14:e6:e9:3c: 36:da:cf:fb:c4:3a:4b:16:36:e0:1e:c5:45:d4:cb: 17:c3:48:52:84:53:a0:d2:cd:3e:39:b6:96:40:d4: 70:32:74:59:13:af:37:31:a1:6c:36:42:8c:33:1b: 00:59:cd:9b:55:6b:e1:14:fa:11:8f:1a:23:b6:50: 8a:19:5b:af:87:57:4c:30:38:8d:ca:a4:92:d2:92: d0:1d:2a:ae:9e:1b:f8:8a:0c:4c:e7:cf:c5:c3:dc: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:14:86:04:8B:DF:D6:77:74:38:7B:18:3F:A4:22:A3:E0:C3:0B X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:65:0b:1d:c0:ab:d7:fb:2a:73:47:55:b1:c2:6b:11:5d:07: f2:d9:31:7f:d3:b0:aa:a0:a9:c9:58:0b:2d:85:bc:43:c6:5a: 39:1c:18:23:89:4a:b4:5a:06:7e:bc:3a:c7:0c:98:2f:03:ab: f8:a0:d9:62:08:27:3e:95:d9:95:7c:1f:35:7b:57:0a:14:27: 0e:f8:42:eb:01:cb:ae:95:c0:1f:d8:8c:44:8c:e3:28:e2:0a: f2:11:13:ba:e1:a7:ef:1f:23:68:77:c0:3f:db:14:a3:0e:32: 6b:78:eb:64:47:25:b2:83:75:7e:99:a9:88:e9:4f:a0:92:1f: a3:6f:21:a8:49:6e:da:f6:ce:1d:3d:91:4d:0e:0e:ed:87:af: ff:97:06:b8:c0:9a:c4:74:67:63:80:6a:d2:b2:42:3b:fa:4a: fb:bd:a3:a9:d3:33:f8:e4:f2:69:41:4d:30:b1:aa:99:91:75: 5e:39:67:54:8a:e7:b2:ac:18:ab:47:9b:1d:ea:f5:e7:4b:82: b8:1b:d6:5e:d1:eb:eb:56:64:af:68:4b:1c:1d:54:42:5c:5b: f5:ee:94:07:a4:94:75:4d:19:1e:ce:72:4f:65:a2:f9:ce:54: 03:6c:7c:a7:a5:29:49:f7:61:ef:9f:a7:a4:27:b5:26:32:91: 49:a1:28:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7CJMqUm2o8dTVGM07ESVgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwNjEzMTgwMDUxWhcNMjYwNjE0MTgwMDUxWjAzMTEwLwYDVQQD EygzM2E5MTQ4NjA0OGJkZmQ2Nzc3NDM4N2IxODNmYTQyMmEzZTBjMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXOwHfZKw3MfYRc59j0k+GgnSNJw R4Ud/j4UiekFGKuGQ/88S17+gPtspakVnlOrdtw9OoLyUmWWkjJvoz4qNwVEP7og bjPhvFHyi+Onzl9xulO7XhC+/lfTVONR2xQgiTwQEF4MEsuNnDgrjrYqBM7alsEB C7D/o64hgB9+x5dC8uh54YUY9xf0CoZMK4BzWZaQ1+1iIpT88GcQ3mBydRTm6Tw2 2s/7xDpLFjbgHsVF1MsXw0hShFOg0s0+ObaWQNRwMnRZE683MaFsNkKMMxsAWc2b VWvhFPoRjxojtlCKGVuvh1dMMDiNyqSS0pLQHSqunhv4igxM58/Fw9zFFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOpFIYEi9/Wd3Q4exg/pCKj4MMLMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGULHcCr 1/sqc0dVscJrEV0H8tkxf9OwqqCpyVgLLYW8Q8ZaORwYI4lKtFoGfrw6xwyYLwOr +KDZYggnPpXZlXwfNXtXChQnDvhC6wHLrpXAH9iMRIzjKOIK8hETuuGn7x8jaHfA P9sUow4ya3jrZEclsoN1fpmpiOlPoJIfo28hqElu2vbOHT2RTQ4O7Yev/5cGuMCa xHRnY4Bq0rJCO/pK+72jqdMz+OTyaUFNMLGqmZF1XjlnVIrnsqwYq0ebHer150uC uBvWXtHr61Zkr2hLHB1UQlxb9e6UB6SUdU0ZHs5yT2Wi+c5UA2x8p6UpSfdh75+n pCe1JjKRSaEogQ== -----END CERTIFICATE-----Generated at Sat Jun 13 20:03:29 2026 by rpki-client