$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: bF4y6CeusMeV0ZTbhDKF9tSCPeQLH1rV1rLGOsUe4MY= Subject key identifier: 43:F0:8A:7D:06:58:C0:3F:44:C1:9E:4A:C5:73:BB:0F:06:9D:3F:39 Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019FAABEA0F1B430E5521D481C9FA354A00C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 19DC Signing time: Tue 28 Jul 2026 22:00:47 +0000 Manifest this update: Tue 28 Jul 2026 22:00:47 +0000 Manifest next update: Wed 29 Jul 2026 22:00:47 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: 4Hb/W5MLEY9755nmQfjxaRIB0uK7ZNfiCSInPB0M3NY=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:a0:f1:b4:30:e5:52:1d:48:1c:9f:a3:54:a0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jul 28 22:00:47 2026 GMT Not After : Jul 29 22:00:47 2026 GMT Subject: CN=43f08a7d0658c03f44c19e4ac573bb0f069d3f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:00:9f:e3:13:de:36:e8:6e:ee:b7:32:6f: ee:eb:5c:2b:24:48:cc:d6:60:51:a4:ba:06:93:b3: 07:32:06:55:93:88:e1:0c:61:80:4f:5d:05:df:56: a9:f9:ca:c5:d2:de:b6:ea:57:46:d5:5c:61:72:48: 6b:15:d8:81:9d:d3:23:71:4e:98:ec:0f:ff:56:79: 68:7e:e5:e1:0c:72:c8:4d:1a:ee:67:86:37:d1:1b: 5a:7b:85:94:4e:9b:32:9a:27:33:e8:88:2a:11:1b: d9:8e:52:6b:32:35:ec:5c:1f:99:cf:f1:11:99:7e: 38:98:24:cd:30:49:d5:cc:f8:e7:de:98:c7:1c:f1: 04:88:ac:63:91:99:a4:ae:c9:46:8c:31:56:39:70: 3f:e1:07:e8:36:8b:e4:37:35:aa:55:61:47:d4:1f: f8:d0:89:ec:e9:0a:fc:6e:b0:42:2a:d5:ca:e0:f2: 12:67:5f:c7:41:0e:56:17:03:92:54:3a:ad:8b:f2: f1:45:f5:68:3e:07:ba:28:56:44:ed:ee:36:2c:a2: ad:fa:b4:65:dc:89:fa:4a:60:b8:c4:f1:07:5b:19: a3:e5:43:72:4a:11:73:ab:45:1e:b8:10:b4:4f:28: 7a:4e:7b:07:02:31:f2:ad:7b:9a:33:09:d0:4b:b9: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F0:8A:7D:06:58:C0:3F:44:C1:9E:4A:C5:73:BB:0F:06:9D:3F:39 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:92:d9:a0:d4:52:a5:20:e5:7d:86:d5:99:73:1a:c3:fa:9e: ad:f6:60:b8:2b:84:7e:e8:8a:f0:eb:15:fd:06:77:61:71:e1: c1:04:18:13:c0:bc:25:37:53:35:60:38:fd:05:2e:72:bd:63: b0:9f:4d:9c:18:11:1c:9d:bc:92:e5:59:40:da:eb:16:85:f0: fe:2c:9e:9b:a4:d7:17:c0:30:4b:b1:46:91:6f:15:77:2c:05: 68:5c:26:bf:61:25:fe:73:9c:e6:06:18:6a:0d:da:9f:ec:ca: 3f:30:5d:0b:ec:45:c4:2e:63:5c:a3:91:df:33:e2:d9:45:33: fb:4d:67:65:6f:8f:7a:76:53:25:b8:e6:ae:e9:d2:42:d9:64: 9a:11:a6:58:fa:e6:a7:b2:6b:99:99:e7:f8:28:31:d9:1b:18: 38:08:4b:b1:05:97:df:c3:ce:c6:02:43:dc:6f:b9:69:98:e6: 3b:c5:a9:db:74:0e:31:ce:96:d7:32:ce:e5:95:54:8a:a5:79: 81:4f:30:66:61:db:64:9d:65:1b:40:2b:70:ea:dc:51:4e:0f: 00:fd:8a:30:64:10:b3:fb:47:ac:ff:49:96:d9:36:1e:3d:6f: 32:0f:26:c6:5a:e6:b2:1c:f7:9f:fa:b2:1e:81:b3:ce:d2:6e: 01:14:a8:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvqDxtDDlUh1IHJ+jVKAMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwNzI4MjIwMDQ3WhcNMjYwNzI5MjIwMDQ3WjAzMTEwLwYDVQQD Eyg0M2YwOGE3ZDA2NThjMDNmNDRjMTllNGFjNTczYmIwZjA2OWQzZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1AAn+MT3jbobu63Mm/u61wrJEjM 1mBRpLoGk7MHMgZVk4jhDGGAT10F31ap+crF0t626ldG1VxhckhrFdiBndMjcU6Y 7A//VnlofuXhDHLITRruZ4Y30Rtae4WUTpsymicz6IgqERvZjlJrMjXsXB+Zz/ER mX44mCTNMEnVzPjn3pjHHPEEiKxjkZmkrslGjDFWOXA/4QfoNovkNzWqVWFH1B/4 0Ins6Qr8brBCKtXK4PISZ1/HQQ5WFwOSVDqti/LxRfVoPge6KFZE7e42LKKt+rRl 3In6SmC4xPEHWxmj5UNyShFzq0UeuBC0Tyh6TnsHAjHyrXuaMwnQS7l3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPwin0GWMA/RMGeSsVzuw8GnT85MB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppLZoNRS pSDlfYbVmXMaw/qerfZguCuEfuiK8OsV/QZ3YXHhwQQYE8C8JTdTNWA4/QUucr1j sJ9NnBgRHJ28kuVZQNrrFoXw/iyem6TXF8AwS7FGkW8VdywFaFwmv2El/nOc5gYY ag3an+zKPzBdC+xFxC5jXKOR3zPi2UUz+01nZW+PenZTJbjmrunSQtlkmhGmWPrm p7JrmZnn+Cgx2RsYOAhLsQWX38POxgJD3G+5aZjmO8Wp23QOMc6W1zLO5ZVUiqV5 gU8wZmHbZJ1lG0ArcOrcUU4PAP2KMGQQs/tHrP9Jltk2Hj1vMg8mxlrmshz3n/qy HoGzztJuARSoTw== -----END CERTIFICATE-----Generated at Wed Jul 29 05:25:49 2026 by rpki-client