$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft File: OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json) Hash identifier: Mep24iDTBzPSdCNUpJ35OwarA7Cr8lze/TsPEuNPn14= Subject key identifier: 04:2D:A0:3D:5F:99:4B:6D:39:F0:6E:07:7A:7F:7A:0C:F5:50:93:5D Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019DA4540352CACF477B25401720975FEB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft Manifest number: 0F4C Signing time: Sun 19 Apr 2026 06:01:02 +0000 Manifest this update: Sun 19 Apr 2026 06:01:02 +0000 Manifest next update: Mon 20 Apr 2026 06:01:02 +0000 Files and hashes: 1: 1de8pjWZdbZ222YYe2GXtR0jHsA.roa (hash: nh2vUuTt0Og2aMiOlGOrS+L6/mjzmIQi3XaIf1H65RY=) 2: 72rogKEUs1fjFAjfM7Cy9UHe_kw.roa (hash: Z8ZWpoeVc5I33UXwalFKXVV5S6etbriIYRPgHvGgfKI=) 3: 7WH7MNjgKQECpcfeO5Kiimb7Df0.roa (hash: Jicb2Ne1P8KiYy+rp1J4QMe3h0nRexvVyWXvg4N4jbE=) 4: 9JzB_fLsIZkzxzin2R8Wl5zsThg.roa (hash: zo4ZNsXVTAK6EOsgV3BJxS3TB/kgAKw2MtLEp37xiy8=) 5: Ir68V4nnZXMcM6su4E53Z2sPiPY.roa (hash: lSuOvFNbw/w4QoIfL4Sy9erXzeD0fPgJM5VGjdoFZuQ=) 6: JVHz_wFOaKlGa58bai3EZCkfl4o.roa (hash: Y2zjYlZsQWvQMF2i9AMdA74KrKWztyg082FTOrRHXB8=) 7: M--TDwBebYUuyU8m_hJhv6lANn0.roa (hash: ng0FfscKlU2HqCySpQvVoxWawyYxW3g+qpkRloBHnkM=) 8: MltfaSDzKKivi1ba6fyL603ZViA.roa (hash: o/h5nKm2TLBULoQARQH8ZnVSg+ceTA0UZkwLaI/sNkY=) 9: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: m/bvS2aRuu5EimJj0Ng/dp3ly4VM37p7Pi/RXUViuBU=) 10: TRYASeew79G5zn73E_j8Aa7JY-4.roa (hash: A844v0atomupwaPDxBuN0WbPBoix8FPtluT4rtEa/Ek=) 11: XIqvmqOdi_1zuzz2kKUxoCjwnVU.roa (hash: aMJOD4Mp/WfwOzWMvVMOZcZY7T1v0Kzr3ZB6XKJtt8o=) 12: YhEfS85SYBMPKRthi3IBpgKLVMM.roa (hash: GHyyiR6rzvrtE1D+fKHBtSmJRDZFZe0bkqf0kjPYJfQ=) 13: _BB0ZdbUeeGFKqBB6D8keNkJhmM.roa (hash: T/kG9iPqWLLw7hdfMQ7fu7gcEyRzV3wIoGwtmsPPr8s=) 14: dRduPk6jL2FbB0-s8ry1uL0Q-eo.roa (hash: lfjBFM+1U9k216beb8eucrAzFXFmpoPSWELuxMZ26Pc=) 15: dbau0xstNC0a9Fpwh6CWAAAnHyM.roa (hash: e/zjCnrdCYGxw6Ltb9IbAiAiIi8CP9A+KZqcWKp2hGc=) 16: k6-nBaulYfEOor49zlFj5eqWqf0.roa (hash: lOORiIv+Z9qnEfNyp2jcr7RZz1lUKEk6RF5zemJB2ZA=) 17: lJKm_LqFIVtk8fG-fe1_yBQ6EHo.roa (hash: 5zV7j1uxdw2hrQqRjN6UaXy8pRasBHhvGZI+Khd0zVU=) 18: lSUGE_d_qT6-86LK03VWiCsMsbM.roa (hash: 7WobUs7M0Xn7OFwQ+ogGC49nWaSQqiEzFFsE29+lB2c=) 19: nrEO1LwODrFmSevli7_t9F7GPZ4.roa (hash: Zoj1yWH/o3nIYH7s5SfUXzlnm7ibfpx4Jw+0Ke350ZM=) 20: yTZqlhAkkerpe2L4CyUvh9Svaqs.roa (hash: hMnmd7o1av9aOhsK5OjFywbUYNzo9xYVVgQ8qsY2PHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Apr 2026 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:a4:54:03:52:ca:cf:47:7b:25:40:17:20:97:5f:eb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Apr 19 06:01:02 2026 GMT Not After : Apr 20 06:01:02 2026 GMT Subject: CN=042da03d5f994b6d39f06e077a7f7a0cf550935d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:56:4b:54:6a:b7:89:fe:19:b3:66:5f:d7: b8:63:fc:b0:f3:54:01:6c:0e:60:8d:0f:c3:f7:d5: 4b:54:e5:5b:ed:09:0b:ce:fe:b7:3c:a2:ce:1c:2e: ee:ec:3b:71:9c:90:2c:18:92:0a:3a:b4:d1:6a:d8: c0:29:60:b7:d9:af:26:d7:22:61:cb:ba:67:02:ee: bd:96:89:39:29:0e:75:7f:cd:ea:32:9b:43:7d:0f: 9a:69:05:f2:55:f3:6a:4b:94:5d:d3:5b:d2:ad:a6: 99:31:74:8d:77:36:d2:81:1e:42:e8:10:0c:ad:f9: d9:1b:72:c1:92:50:67:01:d6:ba:79:0f:2f:06:46: fd:6e:17:d0:4f:42:73:dd:27:26:44:07:47:83:4d: 4b:cf:97:3d:36:89:01:88:57:be:ed:84:b7:d7:9f: f0:c9:b0:17:34:6d:bf:4d:d6:1f:2d:18:97:1c:80: aa:03:f6:00:67:f3:62:0b:69:c8:1e:d9:f4:19:3d: cd:ed:73:be:e9:a9:25:2d:7f:0d:5f:9c:d6:a6:19: 4a:ad:57:dd:68:19:89:2d:13:19:1e:20:72:36:48: 46:2b:a2:b6:99:72:56:c3:40:2c:9b:8f:f7:da:8a: a4:1e:77:96:aa:67:fd:b7:2f:28:4c:aa:e2:88:ef: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2D:A0:3D:5F:99:4B:6D:39:F0:6E:07:7A:7F:7A:0C:F5:50:93:5D X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:1a:b1:1c:f4:ab:30:22:8a:56:85:d8:dd:19:09:20:9d:8a: c5:a3:e9:7d:66:3e:63:21:3c:f7:6a:3f:7f:df:c6:dc:ab:76: f1:5f:5d:ce:c6:b5:56:f9:a5:1e:80:2d:31:bb:f9:cc:e4:f5: bc:b7:7e:77:4a:e5:9f:34:87:49:3a:e2:14:31:d0:e9:58:cf: d5:e6:87:39:4f:8b:a5:5c:33:1e:2e:eb:e9:97:2f:05:43:56: 90:ee:19:db:fa:f4:cf:32:de:64:82:9d:1a:e5:98:76:5c:48: 68:7f:96:14:03:4e:58:22:dc:ae:d7:0a:34:2b:c9:95:00:8d: a6:f1:a9:20:8e:99:28:d9:b4:58:db:08:af:c3:6c:e7:ac:d1: 92:ff:85:64:34:1b:e4:d9:1e:10:56:a7:90:7b:b4:ca:8e:11: b8:19:cb:51:75:51:4f:24:48:fe:b7:4f:3b:82:da:fb:32:6a: 25:c5:d3:55:46:cb:30:7b:9f:8d:f6:fc:ef:50:68:6e:a1:52: 94:65:38:14:d6:dd:1c:45:16:c4:ba:56:91:d7:33:e1:b6:19: 50:ef:0d:20:23:cb:71:7b:1e:3e:7e:37:02:3c:01:ed:25:7c: 69:b7:65:ae:5b:90:48:80:91:83:bf:4e:08:9b:d4:ff:1c:7f: 88:eb:7d:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2kVANSys9HeyVAFyCXX+t6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwNDE5MDYwMTAyWhcNMjYwNDIwMDYwMTAyWjAzMTEwLwYDVQQD EygwNDJkYTAzZDVmOTk0YjZkMzlmMDZlMDc3YTdmN2EwY2Y1NTA5MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf5WS1Rqt4n+GbNmX9e4Y/yw81QB bA5gjQ/D99VLVOVb7QkLzv63PKLOHC7u7DtxnJAsGJIKOrTRatjAKWC32a8m1yJh y7pnAu69lok5KQ51f83qMptDfQ+aaQXyVfNqS5Rd01vSraaZMXSNdzbSgR5C6BAM rfnZG3LBklBnAda6eQ8vBkb9bhfQT0Jz3ScmRAdHg01Lz5c9NokBiFe+7YS315/w ybAXNG2/TdYfLRiXHICqA/YAZ/NiC2nIHtn0GT3N7XO+6aklLX8NX5zWphlKrVfd aBmJLRMZHiByNkhGK6K2mXJWw0Asm4/32oqkHneWqmf9ty8oTKriiO9GBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQtoD1fmUttOfBuB3p/egz1UJNdMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1BqxHPSr MCKKVoXY3RkJIJ2KxaPpfWY+YyE892o/f9/G3Kt28V9dzsa1VvmlHoAtMbv5zOT1 vLd+d0rlnzSHSTriFDHQ6VjP1eaHOU+LpVwzHi7r6ZcvBUNWkO4Z2/r0zzLeZIKd GuWYdlxIaH+WFANOWCLcrtcKNCvJlQCNpvGpII6ZKNm0WNsIr8Ns56zRkv+FZDQb 5NkeEFankHu0yo4RuBnLUXVRTyRI/rdPO4La+zJqJcXTVUbLMHufjfb871BobqFS lGU4FNbdHEUWxLpWkdcz4bYZUO8NICPLcXsePn43AjwB7SV8abdlrluQSICRg79O CJvU/xx/iOt9Sw== -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:15 2026 by rpki-client