$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: lFPqhvlLRQDsO8Cj1UCty03mt0LAZ9XKQOoOuMitg4Y= Subject key identifier: 0B:57:0D:7F:CF:78:61:30:FD:40:65:2C:23:89:1A:5D:C1:DD:26:8F Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 01A0CC6BC3AB90874B0514BE1AF8CE1A8FE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 1A72 Signing time: Wed 23 Sep 2026 04:00:09 +0000 Manifest this update: Wed 23 Sep 2026 04:00:09 +0000 Manifest next update: Thu 24 Sep 2026 04:00:09 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: qTQrp1aAlXpK7qFWYthFOk4NYSZm/iHQZLBscDZP71Y=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 04:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:6b:c3:ab:90:87:4b:05:14:be:1a:f8:ce:1a:8f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Sep 23 04:00:09 2026 GMT Not After : Sep 24 04:00:09 2026 GMT Subject: CN=0b570d7fcf786130fd40652c23891a5dc1dd268f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:bf:64:7f:54:c8:0a:f3:b4:24:e0:79:e7: 0a:ed:78:c4:af:c9:d5:43:09:3f:81:fe:76:01:fa: 2d:57:87:0a:30:dc:4e:1c:41:5b:a7:d7:81:7e:a0: 85:34:e8:d2:2d:23:5a:09:65:d2:4d:73:cb:2b:cf: 95:17:44:c4:e5:dc:d4:6d:a1:b2:df:39:90:fc:29: d8:6d:ce:5e:99:e2:2f:aa:c0:47:cf:21:ed:7f:47: fc:fb:1b:3e:79:04:c3:d6:9f:f2:11:36:d7:8e:28: bf:62:7b:00:8b:3d:84:86:22:d8:68:b3:4f:8c:93: de:a0:e2:d3:44:ad:0c:5e:ac:c4:e6:dd:74:70:75: a7:1f:40:ef:94:ec:b1:d6:9b:3b:c7:cd:e4:ed:f4: d9:3e:0c:79:6d:70:8e:91:8a:2d:33:e3:f6:ec:73: b9:95:57:ba:91:6c:b3:34:2b:c0:a2:30:a3:a0:32: be:28:9b:05:77:17:ae:ca:28:fa:14:75:c6:ac:6a: 43:41:ad:2b:6e:15:91:11:9a:4b:81:66:a6:2b:28: d3:b4:11:ce:47:77:c0:86:6d:df:d1:de:d1:04:e6: 89:6e:05:27:5c:ee:3d:6c:9b:a1:f4:52:45:4e:3a: aa:37:4d:b8:4f:29:0d:44:27:e6:5c:0c:e7:78:8d: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:57:0D:7F:CF:78:61:30:FD:40:65:2C:23:89:1A:5D:C1:DD:26:8F X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:44:2a:2c:9a:b5:75:4f:c7:ad:63:c7:24:89:15:a7:fc:6a: b5:92:3e:db:9c:42:26:86:f7:8d:dc:7a:c9:f6:82:63:6e:6e: 94:44:f2:23:3a:73:f9:29:8f:07:0e:23:93:9b:ba:71:75:5e: b9:c1:05:4e:ab:e8:f7:29:96:14:b0:c7:20:9c:3a:ce:45:f0: 62:c2:22:60:90:fb:e2:fb:06:db:20:ec:03:43:f7:00:a5:7d: f2:88:a6:b5:e9:c9:e1:ab:0d:06:42:b7:35:62:28:4e:3f:c0: f0:29:a8:c5:e8:2d:d6:88:72:57:c0:64:97:d9:66:c2:f0:4b: 84:da:9e:3d:cf:a2:78:a5:4a:2b:8f:65:a6:1c:9a:28:73:8d: 74:1d:5d:7c:c6:8f:9f:31:6c:45:82:dd:63:02:5c:85:05:43: 4c:88:4f:0e:db:43:ed:06:35:ca:ae:64:f6:92:d9:35:83:d3: c1:43:33:b2:83:68:89:ea:ef:29:bc:1a:bb:c4:80:30:d5:af: 7f:6e:17:f5:18:b7:e1:2b:cd:51:72:14:32:83:b1:d9:72:3a: fb:8d:91:34:5d:34:c2:1b:b8:5a:87:a3:ee:93:f0:86:be:8c: 3e:b0:8b:df:9c:91:21:17:9c:33:cd:e4:8d:50:30:10:7f:56: 81:1c:23:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMa8OrkIdLBRS+GvjOGo/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwOTIzMDQwMDA5WhcNMjYwOTI0MDQwMDA5WjAzMTEwLwYDVQQD EygwYjU3MGQ3ZmNmNzg2MTMwZmQ0MDY1MmMyMzg5MWE1ZGMxZGQyNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt+/ZH9UyArztCTgeecK7XjEr8nV Qwk/gf52AfotV4cKMNxOHEFbp9eBfqCFNOjSLSNaCWXSTXPLK8+VF0TE5dzUbaGy 3zmQ/CnYbc5emeIvqsBHzyHtf0f8+xs+eQTD1p/yETbXjii/YnsAiz2EhiLYaLNP jJPeoOLTRK0MXqzE5t10cHWnH0DvlOyx1ps7x83k7fTZPgx5bXCOkYotM+P27HO5 lVe6kWyzNCvAojCjoDK+KJsFdxeuyij6FHXGrGpDQa0rbhWREZpLgWamKyjTtBHO R3fAhm3f0d7RBOaJbgUnXO49bJuh9FJFTjqqN024TykNRCfmXAzneI15iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtXDX/PeGEw/UBlLCOJGl3B3SaPMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkQqLJq1 dU/HrWPHJIkVp/xqtZI+25xCJob3jdx6yfaCY25ulETyIzpz+SmPBw4jk5u6cXVe ucEFTqvo9ymWFLDHIJw6zkXwYsIiYJD74vsG2yDsA0P3AKV98oimtenJ4asNBkK3 NWIoTj/A8Cmoxegt1ohyV8Bkl9lmwvBLhNqePc+ieKVKK49lphyaKHONdB1dfMaP nzFsRYLdYwJchQVDTIhPDttD7QY1yq5k9pLZNYPTwUMzsoNoiervKbwau8SAMNWv f24X9Ri34SvNUXIUMoOx2XI6+42RNF00whu4Woej7pPwhr6MPrCL35yRIRecM83k jVAwEH9WgRwjcA== -----END CERTIFICATE-----Generated at Wed Sep 23 11:36:48 2026 by rpki-client