$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: WAsBE08GzcWK4OWxD1nCVmNAtPmX+HGMdui2YeyhgT0= Subject key identifier: BB:E7:B3:84:D8:5C:B3:A7:18:B4:E1:9A:85:EF:C3:3C:DA:EB:C9:46 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 01A0DACD66D29FFAB5097F62FC8EF8C65384 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 09FF Signing time: Fri 25 Sep 2026 23:01:29 +0000 Manifest this update: Fri 25 Sep 2026 23:01:29 +0000 Manifest next update: Sat 26 Sep 2026 23:01:29 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: Z4SOlgockHJvTUSvyIeWqL0WLH4+KttHYZaWnuvUV5I=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:cd:66:d2:9f:fa:b5:09:7f:62:fc:8e:f8:c6:53:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Sep 25 23:01:29 2026 GMT Not After : Sep 26 23:01:29 2026 GMT Subject: CN=bbe7b384d85cb3a718b4e19a85efc33cdaebc946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:cd:ef:93:64:ec:26:fb:b3:ff:8a:92:8b: 73:9c:4f:a9:f3:4a:69:9f:26:0b:1b:c5:aa:19:98: 15:3c:cd:82:0d:08:21:66:32:1a:99:41:fd:fc:e4: 52:d7:56:c5:d8:24:3b:e3:64:7d:21:17:75:70:c1: 23:10:35:e5:a8:8d:fe:bd:ee:2d:a7:cc:c7:8c:5b: 60:b8:a2:97:15:f9:1f:6c:c5:57:08:95:bc:89:b7: 3e:97:d4:13:69:f7:b7:d4:26:3a:9e:63:5b:bb:07: 43:d3:11:53:9d:4f:77:ff:2d:5f:05:88:1f:d4:08: 51:93:37:6c:3f:05:cf:a6:bf:4f:ad:da:90:70:69: fe:da:18:11:fb:e0:c9:ff:98:93:da:3a:7b:8a:79: 77:25:2e:37:3e:19:91:7a:65:00:27:4f:ad:6e:22: 20:c5:83:b8:c9:f8:ab:4e:98:c7:b2:d3:12:0a:6f: 66:7e:ef:54:9c:d2:2a:fa:c4:94:07:3d:40:12:90: 5c:ba:5b:c1:66:f2:bb:24:20:9c:3a:4d:e7:cc:ee: f0:07:7f:62:1a:22:6a:74:de:33:59:83:34:70:ec: e4:a2:90:b8:df:66:ca:a5:d2:30:9d:7b:c2:e8:61: 7a:25:ac:3a:0b:02:84:9d:3a:85:7d:89:cb:4c:1d: 9d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E7:B3:84:D8:5C:B3:A7:18:B4:E1:9A:85:EF:C3:3C:DA:EB:C9:46 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d1:f9:b8:d6:44:f4:29:38:f8:89:8e:28:d4:5b:06:38:7b: b4:c0:14:a6:a6:63:fc:bf:0e:e7:29:b6:6d:5c:54:46:6d:77: f8:b4:2c:53:a6:0d:f0:d4:24:c0:66:a0:c1:b2:74:a4:9c:26: fd:a7:c3:1b:2b:83:f0:72:aa:9c:8c:27:4b:7f:6e:8a:2a:18: dd:e6:ed:df:8f:65:a4:f7:d0:c2:42:8d:9b:b0:12:80:a9:17: 89:58:72:c7:db:fc:05:47:4e:5d:b7:f5:e6:16:3a:10:cf:bf: dd:2a:52:02:34:34:a8:e4:44:6c:ec:92:82:9b:54:a3:58:3a: 7d:4a:73:5f:72:f6:19:e9:2c:c6:d9:36:26:7e:5a:5b:2c:5c: d5:51:12:f5:58:7c:d0:5d:6a:0d:53:24:48:44:ea:63:f0:5c: db:8d:de:6b:e9:7b:af:bc:52:bf:85:fd:9a:23:c0:1d:2c:83: da:f1:49:dd:25:a8:26:5c:9f:72:f0:7d:e5:bd:1d:d1:fb:7a: 98:f5:4c:23:f8:c0:56:24:3b:5f:0a:06:0e:09:01:6d:6a:a8: 39:59:69:ab:1b:4a:02:e0:70:cc:d3:36:38:a5:0f:85:73:83: 9e:15:a8:8d:ba:95:40:76:76:6c:b3:68:3c:21:dd:67:98:ed: 43:3f:63:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDazWbSn/q1CX9i/I74xlOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwOTI1MjMwMTI5WhcNMjYwOTI2MjMwMTI5WjAzMTEwLwYDVQQD EyhiYmU3YjM4NGQ4NWNiM2E3MThiNGUxOWE4NWVmYzMzY2RhZWJjOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArULN75Nk7Cb7s/+KkotznE+p80pp nyYLG8WqGZgVPM2CDQghZjIamUH9/ORS11bF2CQ742R9IRd1cMEjEDXlqI3+ve4t p8zHjFtguKKXFfkfbMVXCJW8ibc+l9QTafe31CY6nmNbuwdD0xFTnU93/y1fBYgf 1AhRkzdsPwXPpr9PrdqQcGn+2hgR++DJ/5iT2jp7inl3JS43PhmRemUAJ0+tbiIg xYO4yfirTpjHstMSCm9mfu9UnNIq+sSUBz1AEpBculvBZvK7JCCcOk3nzO7wB39i GiJqdN4zWYM0cOzkopC432bKpdIwnXvC6GF6Jaw6CwKEnTqFfYnLTB2drwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvns4TYXLOnGLThmoXvwzza68lGMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdH5uNZE 9Ck4+ImOKNRbBjh7tMAUpqZj/L8O5ym2bVxURm13+LQsU6YN8NQkwGagwbJ0pJwm /afDGyuD8HKqnIwnS39uiioY3ebt349lpPfQwkKNm7ASgKkXiVhyx9v8BUdOXbf1 5hY6EM+/3SpSAjQ0qOREbOySgptUo1g6fUpzX3L2Geksxtk2Jn5aWyxc1VES9Vh8 0F1qDVMkSETqY/Bc243ea+l7r7xSv4X9miPAHSyD2vFJ3SWoJlyfcvB95b0d0ft6 mPVMI/jAViQ7XwoGDgkBbWqoOVlpqxtKAuBwzNM2OKUPhXODnhWojbqVQHZ2bLNo PCHdZ5jtQz9j6w== -----END CERTIFICATE-----Generated at Sat Sep 26 06:14:57 2026 by rpki-client