$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: 0/snENm5OR0rIU0urvTwVYjs2g2uUfzW4QkwFF1KogE= Subject key identifier: 48:E7:77:40:4C:AA:37:97:C7:2E:2B:2F:EB:4D:AC:99:98:DF:56:A0 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019FA9AC155BD8330E7D86A9ED05B3AE1F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1A0E Signing time: Tue 28 Jul 2026 17:00:54 +0000 Manifest this update: Tue 28 Jul 2026 17:00:54 +0000 Manifest next update: Wed 29 Jul 2026 17:00:54 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 6: 5KqisG8I4aftfbpV-Wm5RoZOAu4.roa (hash: aWHlE7ObMJmJWXU63vmIza0enQBptwax9xe4eo6h4LY=) 7: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 8: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=) 9: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 10: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 11: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 12: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 13: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 14: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=) 16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: VorzBCgo7CTqPOrOdKb0Tkvu9XPjZftXe9jJIWTc+ds=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) 22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:15:5b:d8:33:0e:7d:86:a9:ed:05:b3:ae:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jul 28 17:00:54 2026 GMT Not After : Jul 29 17:00:54 2026 GMT Subject: CN=48e777404caa3797c72e2b2feb4dac9998df56a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:25:cf:ab:10:22:44:3d:5f:bf:e4:24:9a: 59:be:de:29:ab:35:7a:ae:99:03:6b:16:86:85:6c: bb:b9:e8:47:1b:75:0c:61:d8:f8:72:36:b9:8e:5f: a0:66:d3:85:09:de:72:dc:d1:02:c9:8e:82:98:02: e8:af:ce:c7:9f:38:65:fb:2b:9d:70:7b:e6:10:3a: d2:fe:51:45:93:0c:7f:23:dd:44:bd:a9:08:55:63: c2:4b:45:53:20:f4:00:c1:41:a3:e5:65:75:30:3f: c1:7f:a0:4d:33:26:1f:30:5d:29:f6:4f:e9:e3:33: 35:db:ff:b9:20:de:c9:51:5f:f1:23:9e:34:f5:4a: 4c:10:c8:56:a6:f6:7f:fa:2f:4d:a2:b4:9e:7a:c3: 75:8e:0a:d5:4d:4d:c4:be:48:16:3b:43:ca:cd:f8: 02:d9:d8:da:92:84:76:bb:81:90:41:d7:22:d1:03: 22:f0:98:89:ad:f9:57:9d:4c:de:98:31:24:31:08: 6c:d5:3d:3b:3b:d0:61:da:fd:2f:56:28:df:17:78: 5a:40:ef:97:21:7d:8f:d9:5e:32:7d:09:12:83:ba: 0f:83:4f:00:01:ed:ed:dc:d3:ac:74:2a:2a:8e:9f: b0:68:e7:14:40:e9:55:74:d5:f7:31:6f:bf:60:d5: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E7:77:40:4C:AA:37:97:C7:2E:2B:2F:EB:4D:AC:99:98:DF:56:A0 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3c:63:e2:df:a7:1f:a1:da:a6:f7:f3:94:a6:f1:9a:18:f0: 82:95:3d:6d:93:43:72:d7:02:69:f7:63:cc:46:b0:63:e2:ed: 04:79:b7:a8:41:3b:d6:c4:6e:d9:c7:f1:a6:9a:9e:48:5a:88: 1e:55:6c:46:24:9a:bc:76:88:f2:c6:2c:7f:7b:38:19:1b:eb: 67:f0:27:9e:e5:64:fa:18:24:58:51:4c:ed:4c:ce:bd:64:17: fa:aa:76:5c:ce:4b:6c:26:86:8f:6c:17:7d:21:69:66:12:81: 49:1b:e1:41:58:e2:0d:40:24:37:5b:83:18:e9:4e:2c:c6:e1: 3e:71:90:30:6f:b0:86:f1:f5:88:14:65:90:21:0c:72:e3:2e: 97:eb:41:b4:0e:38:a8:c6:47:89:07:61:b0:c7:68:47:2e:82: 61:2b:c6:2b:23:04:45:29:70:db:a3:97:c5:ce:b3:6b:c1:4c: d0:9f:8a:2e:dc:f0:70:0b:a7:9d:0f:3b:0b:bc:d2:7a:50:a2: 80:4a:e9:b2:4c:94:a7:37:a4:07:5b:c5:ac:ea:f0:7e:a0:6a: 35:43:e5:46:e4:3b:66:35:4c:03:e6:1d:56:7b:63:4f:81:80: 2a:48:4e:af:c8:4b:16:3e:ea:05:ee:6c:5f:04:46:2d:5c:32: 9a:d6:53:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prBVb2DMOfYap7QWzrh8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwNzI4MTcwMDU0WhcNMjYwNzI5MTcwMDU0WjAzMTEwLwYDVQQD Eyg0OGU3Nzc0MDRjYWEzNzk3YzcyZTJiMmZlYjRkYWM5OTk4ZGY1NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOolz6sQIkQ9X7/kJJpZvt4pqzV6 rpkDaxaGhWy7uehHG3UMYdj4cja5jl+gZtOFCd5y3NECyY6CmALor87Hnzhl+yud cHvmEDrS/lFFkwx/I91EvakIVWPCS0VTIPQAwUGj5WV1MD/Bf6BNMyYfMF0p9k/p 4zM12/+5IN7JUV/xI5409UpMEMhWpvZ/+i9NorSeesN1jgrVTU3EvkgWO0PKzfgC 2djakoR2u4GQQdci0QMi8JiJrflXnUzemDEkMQhs1T07O9Bh2v0vVijfF3haQO+X IX2P2V4yfQkSg7oPg08AAe3t3NOsdCoqjp+waOcUQOlVdNX3MW+/YNVFMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjnd0BMqjeXxy4rL+tNrJmY31agMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzxj4t+n H6HapvfzlKbxmhjwgpU9bZNDctcCafdjzEawY+LtBHm3qEE71sRu2cfxppqeSFqI HlVsRiSavHaI8sYsf3s4GRvrZ/AnnuVk+hgkWFFM7UzOvWQX+qp2XM5LbCaGj2wX fSFpZhKBSRvhQVjiDUAkN1uDGOlOLMbhPnGQMG+whvH1iBRlkCEMcuMul+tBtA44 qMZHiQdhsMdoRy6CYSvGKyMERSlw26OXxc6za8FM0J+KLtzwcAunnQ87C7zSelCi gErpskyUpzekB1vFrOrwfqBqNUPlRuQ7ZjVMA+YdVntjT4GAKkhOr8hLFj7qBe5s XwRGLVwymtZT5A== -----END CERTIFICATE-----Generated at Tue Jul 28 22:10:08 2026 by rpki-client