$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: 756BKMYLOdilPauxZlh/TP2e45QMd6i9PlyoLBW3ASQ= Subject key identifier: 30:01:4A:84:56:E5:84:52:DC:31:B0:B1:4D:DD:1D:61:E8:31:97:98 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019EBFFF7067E69E75CBF39C3A026E95006D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 08E8 Signing time: Sat 13 Jun 2026 08:00:49 +0000 Manifest this update: Sat 13 Jun 2026 08:00:49 +0000 Manifest next update: Sun 14 Jun 2026 08:00:49 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: AnsgGI5LN+jSnoE+JI/QfX4uSvrJxVf5evQL70rTc34=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:ff:70:67:e6:9e:75:cb:f3:9c:3a:02:6e:95:00:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Jun 13 08:00:49 2026 GMT Not After : Jun 14 08:00:49 2026 GMT Subject: CN=30014a8456e58452dc31b0b14ddd1d61e8319798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:12:b3:0a:b9:24:c9:a0:d9:c4:29:63:95: ef:01:25:f5:67:a3:f7:78:82:81:32:93:af:6a:68: 7e:d2:90:a9:16:03:0d:82:6a:45:ad:8d:4a:e3:d6: 56:e2:ab:df:d7:c2:f1:a2:4f:74:fd:a1:9e:8b:ce: 73:e7:5e:26:12:fd:dc:8f:2e:2b:79:0a:99:26:22: 4e:16:c4:d5:82:46:bd:74:41:7c:a3:31:c5:5c:29: cd:ac:fe:e4:df:ae:f2:7b:a7:5e:70:61:59:3a:a0: 89:47:2e:60:c8:04:2b:f6:3e:a6:49:14:a2:3a:76: 04:c6:31:21:e9:47:3a:1f:59:f6:32:df:2f:9c:7d: 0b:e7:81:3e:ba:73:ce:59:63:f9:28:59:7d:19:d5: ca:0e:80:f7:0a:d7:e4:f2:2a:8a:e9:3f:f5:a6:52: d5:b8:08:b5:50:c2:df:d5:8a:fd:95:8c:e3:99:8f: e7:81:ad:24:38:34:ba:c2:9c:be:c7:9b:c2:bb:82: 9a:4f:9a:ea:d2:10:10:3c:1b:e8:57:6b:00:da:1b: a6:43:42:00:2c:ec:80:d6:27:24:b1:c9:eb:9b:78: 0d:be:f0:0b:e5:83:64:ec:ff:46:aa:2f:77:3d:d6: a8:dd:54:f0:82:5b:51:f7:70:b0:f6:57:58:78:88: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:4A:84:56:E5:84:52:DC:31:B0:B1:4D:DD:1D:61:E8:31:97:98 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6f:c6:ba:fe:9c:d3:07:12:ab:fa:e6:aa:8a:d0:0f:27:2a: 0a:b6:c7:fa:ef:9d:77:94:c8:df:e2:d5:12:30:c7:6b:19:f9: 2d:90:dd:49:06:c9:7a:5d:1d:4a:ad:bb:c8:0e:4a:bc:7a:94: 69:83:11:9a:53:de:14:a9:da:a9:77:e8:16:6e:b6:b4:b2:b0: 4e:34:3d:60:c0:9b:61:70:ea:5c:08:6b:0d:e7:9a:54:fa:02: 2c:25:4e:00:05:a7:da:b8:b9:c3:c3:6f:15:c8:71:20:c2:e2: bd:65:9c:ff:d1:5a:72:c7:72:a1:8e:1e:75:c2:98:3c:ec:5f: 47:f2:d2:45:0b:2e:82:18:74:c2:18:fc:34:2c:47:da:f6:8b: c9:f6:1f:04:60:a4:4c:2a:de:30:c7:64:47:d0:43:82:8f:ac: 4a:78:f9:21:48:2c:99:11:61:df:fe:7a:e1:9a:de:84:40:a0: 60:97:aa:38:a7:fb:8a:5a:71:b6:46:1b:ea:4f:f4:81:f9:41: 8f:8f:29:da:6c:d1:07:6a:93:d9:06:50:09:05:67:5f:13:e8: 3c:4e:69:31:83:ad:57:59:73:1b:73:7d:82:a4:a3:b4:b5:3f: 4d:e1:a7:35:3a:c3:d6:ce:94:73:46:ae:93:3b:aa:b7:71:d6: 72:d8:42:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6//3Bn5p51y/OcOgJulQBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwNjEzMDgwMDQ5WhcNMjYwNjE0MDgwMDQ5WjAzMTEwLwYDVQQD EygzMDAxNGE4NDU2ZTU4NDUyZGMzMWIwYjE0ZGRkMWQ2MWU4MzE5Nzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRMSswq5JMmg2cQpY5XvASX1Z6P3 eIKBMpOvamh+0pCpFgMNgmpFrY1K49ZW4qvf18Lxok90/aGei85z514mEv3cjy4r eQqZJiJOFsTVgka9dEF8ozHFXCnNrP7k367ye6decGFZOqCJRy5gyAQr9j6mSRSi OnYExjEh6Uc6H1n2Mt8vnH0L54E+unPOWWP5KFl9GdXKDoD3Ctfk8iqK6T/1plLV uAi1UMLf1Yr9lYzjmY/nga0kODS6wpy+x5vCu4KaT5rq0hAQPBvoV2sA2humQ0IA LOyA1ickscnrm3gNvvAL5YNk7P9Gqi93Pdao3VTwgltR93Cw9ldYeIj0XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDABSoRW5YRS3DGwsU3dHWHoMZeYMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2/Guv6c 0wcSq/rmqorQDycqCrbH+u+dd5TI3+LVEjDHaxn5LZDdSQbJel0dSq27yA5KvHqU aYMRmlPeFKnaqXfoFm62tLKwTjQ9YMCbYXDqXAhrDeeaVPoCLCVOAAWn2ri5w8Nv FchxIMLivWWc/9FacsdyoY4edcKYPOxfR/LSRQsughh0whj8NCxH2vaLyfYfBGCk TCreMMdkR9BDgo+sSnj5IUgsmRFh3/564ZrehECgYJeqOKf7ilpxtkYb6k/0gflB j48p2mzRB2qT2QZQCQVnXxPoPE5pMYOtV1lzG3N9gqSjtLU/TeGnNTrD1s6Uc0au kzuqt3HWcthCGg== -----END CERTIFICATE-----Generated at Sat Jun 13 16:58:34 2026 by rpki-client