$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: TgZuhXJe2V+9XHo9GWh6fUBluVbkUJIODKcQemxdivc= Subject key identifier: EA:3F:FA:5C:E2:B5:57:8B:9D:C7:EE:E0:CE:2C:0F:F4:D3:5D:19:4A Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 01A0C88F0A70C9226C0EF89375AE64560813 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1AA3 Signing time: Tue 22 Sep 2026 10:00:12 +0000 Manifest this update: Tue 22 Sep 2026 10:00:12 +0000 Manifest next update: Wed 23 Sep 2026 10:00:12 +0000 Files and hashes: 1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=) 2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=) 3: 20wjFtXnjGJFtNE9JwgpAjwGMFQ.roa (hash: 047BUjsh/ZnBIkSq30F05EypvdArFWjl/1ixpgiZ1ds=) 4: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=) 5: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=) 6: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=) 7: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=) 8: BiFlBqm3KUzEVOiMzYhT_EVILsg.roa (hash: fPfSMKmz3G9txaE/xrCmq0xkzT0anA6fzG93SYzo/Cs=) 9: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=) 10: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=) 11: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=) 12: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=) 13: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=) 14: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=) 15: Ss_HAbXwrBgTnN9olUTWyjQFCB4.roa (hash: nrNxrT3l4poCRT7QhHB8p4Y5AUqyWOUsBfKv8pVp0tQ=) 16: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=) 17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=) 18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: Ke/Jm5px8SBY/fjv0dlmghJgBztbRMAWQSN9OnOG5eo=) 20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=) 21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:8f:0a:70:c9:22:6c:0e:f8:93:75:ae:64:56:08:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Sep 22 10:00:12 2026 GMT Not After : Sep 23 10:00:12 2026 GMT Subject: CN=ea3ffa5ce2b5578b9dc7eee0ce2c0ff4d35d194a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f3:37:9d:d2:3e:99:8a:24:a3:95:23:65:62: c9:58:fb:18:83:6b:6f:f9:22:f7:34:20:99:1e:db: 22:0e:c3:41:2b:7e:bf:71:81:d9:05:2e:84:a2:f0: 85:27:4c:fa:0a:99:27:0f:42:de:d9:c7:6f:ab:89: a8:ea:91:db:3f:95:46:be:d5:d7:26:77:79:54:fa: 0d:ed:57:1e:c7:84:b7:fe:90:fa:94:af:7c:6d:9e: a6:0e:80:b5:2b:0c:4f:9a:f8:86:15:e2:bf:cd:b5: 23:b7:1c:05:27:04:d2:56:b1:2b:14:20:1f:f9:97: 72:52:de:c1:4d:76:92:f2:3f:a3:4c:2d:b2:4e:84: 18:e3:34:8d:6f:e4:9e:f4:8f:4d:62:dc:23:a6:5a: aa:7f:da:a7:91:41:c6:66:7d:32:bf:05:c3:20:e6: 98:58:7d:74:65:79:70:a9:10:b9:69:dd:65:e6:0c: 7e:35:4d:0b:82:83:71:16:c9:3c:94:9d:f5:48:84: 50:e8:f9:93:06:d9:c5:59:3e:24:e7:0e:27:e4:04: 21:95:5e:51:72:1e:92:a4:07:87:b8:25:6d:8a:d7: 32:1e:1d:21:8d:70:64:0f:81:c0:41:ba:1e:63:b6: 88:0f:a7:ef:c1:3b:0e:36:d5:ef:8a:b7:8b:bf:47: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3F:FA:5C:E2:B5:57:8B:9D:C7:EE:E0:CE:2C:0F:F4:D3:5D:19:4A X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:70:c6:3a:13:ba:0f:cd:4a:8e:d0:61:bb:54:d9:38:6e: d1:76:fd:3c:c8:04:d9:08:ef:18:28:7a:68:3f:74:eb:e9:8c: 53:f7:22:04:13:21:92:bd:92:58:a3:a9:c1:e5:22:e5:70:27: cf:6c:62:6e:30:99:eb:83:fc:98:4d:d0:a2:b7:f5:b0:a8:a9: 80:55:a9:30:58:b6:58:b6:e5:7c:2c:c6:05:31:33:2b:f4:6e: 0d:5d:0d:b4:14:31:86:3c:f5:97:df:66:c5:64:da:67:e6:20: 5b:8f:8b:22:ac:77:b4:ca:1d:a3:f7:95:27:83:00:28:18:19: f4:44:b2:95:f4:8a:6e:76:4e:3e:de:2e:1d:50:7f:01:6e:0c: cd:ab:f0:49:7b:d1:89:0b:b7:04:ba:57:65:3a:1a:04:e6:fd: 09:3e:43:f3:db:42:a6:74:24:72:39:58:31:36:e0:42:71:4c: 8d:69:7c:2f:0e:77:5a:47:53:d5:b7:e0:8c:32:0d:eb:5a:6a: 3e:54:c6:95:47:ce:45:eb:7c:18:b1:0b:09:88:5a:0b:a8:09: 32:4e:03:33:1f:04:b2:da:2a:9c:a8:42:e2:55:f1:47:3a:4c: 96:6f:af:a2:36:bb:fd:54:f7:45:16:ee:0f:9b:c9:d8:d3:b1: a5:14:f5:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIjwpwySJsDviTda5kVggTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwOTIyMTAwMDEyWhcNMjYwOTIzMTAwMDEyWjAzMTEwLwYDVQQD EyhlYTNmZmE1Y2UyYjU1NzhiOWRjN2VlZTBjZTJjMGZmNGQzNWQxOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PM3ndI+mYoko5UjZWLJWPsYg2tv +SL3NCCZHtsiDsNBK36/cYHZBS6EovCFJ0z6CpknD0Le2cdvq4mo6pHbP5VGvtXX Jnd5VPoN7Vcex4S3/pD6lK98bZ6mDoC1KwxPmviGFeK/zbUjtxwFJwTSVrErFCAf +ZdyUt7BTXaS8j+jTC2yToQY4zSNb+Se9I9NYtwjplqqf9qnkUHGZn0yvwXDIOaY WH10ZXlwqRC5ad1l5gx+NU0LgoNxFsk8lJ31SIRQ6PmTBtnFWT4k5w4n5AQhlV5R ch6SpAeHuCVtitcyHh0hjXBkD4HAQboeY7aID6fvwTsONtXvireLv0eP2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo/+lzitVeLncfu4M4sD/TTXRlKMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORRwxjoT ug/NSo7QYbtU2Thu0Xb9PMgE2QjvGCh6aD906+mMU/ciBBMhkr2SWKOpweUi5XAn z2xibjCZ64P8mE3Qorf1sKipgFWpMFi2WLblfCzGBTEzK/RuDV0NtBQxhjz1l99m xWTaZ+YgW4+LIqx3tModo/eVJ4MAKBgZ9ESylfSKbnZOPt4uHVB/AW4MzavwSXvR iQu3BLpXZToaBOb9CT5D89tCpnQkcjlYMTbgQnFMjWl8Lw53WkdT1bfgjDIN61pq PlTGlUfORet8GLELCYhaC6gJMk4DMx8EstoqnKhC4lXxRzpMlm+voja7/VT3RRbu D5vJ2NOxpRT1vA== -----END CERTIFICATE-----Generated at Tue Sep 22 18:07:04 2026 by rpki-client