$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: 9Yuu/3jeUipBHjV8qxuY1oHFHzG+P6m+Rn+9NX6sBHU= Subject key identifier: 23:67:DE:37:2D:E5:05:5E:2D:ED:27:E2:A4:CA:12:A7:4A:B0:A5:44 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019FAB99DDA5E72B3C867028CF7BE9114C26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 0962 Signing time: Wed 29 Jul 2026 02:00:15 +0000 Manifest this update: Wed 29 Jul 2026 02:00:15 +0000 Manifest next update: Thu 30 Jul 2026 02:00:15 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: PGEIV88Z3oArQ7uDXH7BICG57ATs28buuD6R1i2odI0=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:99:dd:a5:e7:2b:3c:86:70:28:cf:7b:e9:11:4c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Jul 29 02:00:15 2026 GMT Not After : Jul 30 02:00:15 2026 GMT Subject: CN=2367de372de5055e2ded27e2a4ca12a74ab0a544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:5c:4d:36:3a:bb:b7:70:03:62:0d:af:92: aa:69:2d:91:69:d8:a9:db:8b:96:a4:df:3d:33:19: a7:cc:21:83:f0:8a:14:8b:dd:7d:ae:8d:ac:83:8b: f4:0d:2f:c3:a8:ac:01:e6:bb:05:5e:97:40:19:75: f8:54:26:d1:4e:41:30:93:59:23:66:b6:5c:94:78: 15:e5:a7:33:92:d9:11:1e:ef:28:16:85:2a:3b:99: e5:ca:c5:d1:9c:b7:1d:69:41:88:de:9d:94:d9:16: 35:05:04:8a:c5:b5:b2:31:c9:fc:e6:b2:47:37:cb: 4d:ae:a8:6e:20:32:81:43:3b:92:72:0f:a2:cb:64: 93:08:55:e1:32:cc:cd:b7:30:2a:a4:90:de:c2:f1: 16:2b:1b:1c:28:dd:2f:c0:20:b4:51:de:93:ba:c2: e5:1b:73:de:13:17:61:3b:bd:1e:68:51:7f:6f:29: 67:1c:fd:df:d7:c9:a1:7b:7f:28:3e:57:ba:ec:4c: 31:64:f4:12:c8:80:37:0c:df:5d:ef:93:af:49:0b: fe:32:d7:1f:4e:41:90:27:0d:31:48:80:86:e3:94: c2:38:bf:56:0d:5d:a9:b1:cd:f6:db:c9:ec:71:e3: 3e:d6:e2:69:d9:4c:6e:2d:70:a5:7f:62:76:6c:03: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:67:DE:37:2D:E5:05:5E:2D:ED:27:E2:A4:CA:12:A7:4A:B0:A5:44 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:bc:f9:2f:4d:e4:d1:1b:27:62:65:a3:13:f9:ac:46:3a:ea: a2:fb:cd:c7:8d:2e:5a:11:94:e7:0d:bd:e2:b1:72:65:1a:fc: 56:35:45:bc:28:fd:6f:a4:6c:6e:7e:a2:ff:28:25:56:28:ef: d5:9f:07:a7:31:90:ec:16:0d:b9:52:c6:a4:62:92:28:17:32: ea:c8:e4:32:d7:72:90:02:0e:2e:87:2c:f2:1c:ce:ad:58:7a: 9e:c0:bd:6d:cb:db:26:ce:ff:a3:49:6c:b9:2e:f8:a1:84:16: 8e:73:c4:32:30:48:3c:26:b5:e6:63:3f:c7:e9:55:61:e3:d1: 94:cb:6d:c2:ea:f5:20:20:8c:6e:8f:be:d6:bd:ce:70:d8:a5: 1b:0e:df:4c:ea:bb:50:d6:2f:ca:8a:1a:1e:26:47:88:ad:6f: 13:15:06:70:72:04:a4:78:9a:bb:92:2c:45:15:e8:c4:ba:56: 9d:92:4f:d5:9e:ea:54:c2:e9:ab:27:64:e5:67:0f:ad:8d:8a: 06:f1:9b:cd:ee:1f:49:41:96:ab:3d:36:ab:9f:98:b2:4d:0a: fe:b0:99:79:57:20:2c:b4:c5:a1:f3:64:37:62:99:b8:55:04: e3:47:b6:28:83:fb:b4:87:f6:f9:92:fd:5f:00:b9:94:6c:6f: 6c:09:84:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmd2l5ys8hnAoz3vpEUwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwNzI5MDIwMDE1WhcNMjYwNzMwMDIwMDE1WjAzMTEwLwYDVQQD EygyMzY3ZGUzNzJkZTUwNTVlMmRlZDI3ZTJhNGNhMTJhNzRhYjBhNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P5cTTY6u7dwA2INr5KqaS2Radip 24uWpN89MxmnzCGD8IoUi919ro2sg4v0DS/DqKwB5rsFXpdAGXX4VCbRTkEwk1kj ZrZclHgV5aczktkRHu8oFoUqO5nlysXRnLcdaUGI3p2U2RY1BQSKxbWyMcn85rJH N8tNrqhuIDKBQzuScg+iy2STCFXhMszNtzAqpJDewvEWKxscKN0vwCC0Ud6TusLl G3PeExdhO70eaFF/bylnHP3f18mhe38oPle67EwxZPQSyIA3DN9d75OvSQv+Mtcf TkGQJw0xSICG45TCOL9WDV2psc3228nsceM+1uJp2UxuLXClf2J2bAPT/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNn3jct5QVeLe0n4qTKEqdKsKVEMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbz5L03k 0RsnYmWjE/msRjrqovvNx40uWhGU5w294rFyZRr8VjVFvCj9b6Rsbn6i/yglVijv 1Z8HpzGQ7BYNuVLGpGKSKBcy6sjkMtdykAIOLocs8hzOrVh6nsC9bcvbJs7/o0ls uS74oYQWjnPEMjBIPCa15mM/x+lVYePRlMttwur1ICCMbo++1r3OcNilGw7fTOq7 UNYvyooaHiZHiK1vExUGcHIEpHiau5IsRRXoxLpWnZJP1Z7qVMLpqydk5WcPrY2K BvGbze4fSUGWqz02q5+Ysk0K/rCZeVcgLLTFofNkN2KZuFUE40e2KIP7tIf2+ZL9 XwC5lGxvbAmEOg== -----END CERTIFICATE-----Generated at Wed Jul 29 08:12:10 2026 by rpki-client