$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: n560pDqDxBt2/ucQeFMLTfymXd8TlKq6GNA9oBRZkNg= Subject key identifier: 3D:12:59:3E:A7:64:43:6E:5C:9E:D8:72:60:5D:66:CA:BE:1D:1A:25 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01A1822BC49FF4D1E9CD91627A79E6E5010A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1D85 Signing time: Wed 28 Oct 2026 11:01:08 +0000 Manifest this update: Wed 28 Oct 2026 11:01:08 +0000 Manifest next update: Thu 29 Oct 2026 11:01:08 +0000 Files and hashes: 1: 1-cCN5fKkBx-1CnMu2h0S360pudU.roa (hash: SfNQXzL9IxP/9ufOvlCpE32kV3j+g2yy7+anpcxEBEY=) 2: 1wSZWKXMyJfB32iIqMGEz_wEs-A.roa (hash: 1+HEn3e7uSzvz+L70yYTjmA5ki0QSHgTSf9doGyxKcs=) 3: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 4: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 5: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 6: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 7: 7Sh8qXKnoV8f_LGY164eeeVzWwY.roa (hash: h/eQK/wLOp5ta++3VeBPvQxzXRr/Q6UnPMs4Xvr7Ojc=) 8: 8oKJbrOA0rsDp7n33mWPcysZ3VU.roa (hash: a19m/8qSvSyLhLUWr6FbKES7iV/eFkGEIZn7b/NOXgI=) 9: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 10: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 11: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 12: H5ZYe_Ag7prsC3TXqbV6CRa9FlY.roa (hash: 3IwOGJbM2WxEKxC9Fa9yZDt79Q/TfZFjPHgrWJIXGcU=) 13: HWbYB_DmGeXYNXnb_W2jLtWLINI.roa (hash: AP3CLrLM8qm1AIBNge70pBO7qQX28XeGqFK58Es6e0E=) 14: HrxcodrvVIM_GMxKhZQudNRip6c.roa (hash: MTdn9qnsxs92sBTi2UkM6k+YAlFOUGhoYZbEqur9JIg=) 15: JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa (hash: kcTQU5997oY8OpgCn62LAmPoorNvkv8hEcl9ToSuUFo=) 16: KAv0a2aBh2HKZaJ11jodxywws-4.roa (hash: H3aWrK0K0iZNqy3EQ3BRXNZTYMg5/3AIf1FGtpEowbk=) 17: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 18: NzzGm9Vj3j1UrepChyTINXfqnXQ.roa (hash: YceJiNifefimgL4zVWFRkbOO+t34SAh3R2em4gagF38=) 19: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: VuA+tM/UfMJp0SUB+az88ZrLwaIAw6qPK0cAW+Zdmv4=) 20: WtWX_AKcvGcWMQX9EqLnmLKQeEk.roa (hash: ZoB6xp2dZxliYKtdyb5XBTNX0yR6OqjtAm3u4SbSsSk=) 21: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 22: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 23: ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa (hash: mZ/hXIWOyw1nZePba2ku4vzRolnuQ9r/sg/ZfJza0sU=) 24: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 25: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 26: cxqiAJpPq12isjMxfe6AG8PVi2k.roa (hash: PWSIOA0IFBTX5MYqwR7HqCu8ZXO2s0vpto1um9AjcjA=) 27: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 28: f2jgN13vsLBBFFDE9L3XqIO-zZI.roa (hash: 6jwpW+Gz/4278/TgiUlJbdacPgd1+h1QmRHWgV41/1A=) 29: f32IN8X8VX0IYse4UWL7OQvSP60.roa (hash: rb+UUhOxd1nri0jZfCETT05e9Y4KfO4sAh9g9cW0pPI=) 30: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 31: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 32: rwIxl0xSpx6cLwOck58lc13Z1LA.roa (hash: tTGUty/PmeIj7uvxFb0523AV7tRjEIfSVI+SkDAItjw=) 33: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 34: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:82:2b:c4:9f:f4:d1:e9:cd:91:62:7a:79:e6:e5:01:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Oct 28 11:01:08 2026 GMT Not After : Oct 29 11:01:08 2026 GMT Subject: CN=3d12593ea764436e5c9ed872605d66cabe1d1a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:b2:a7:19:d0:e1:38:0a:c9:32:1f:3b:b8: 9e:98:dc:8b:fa:86:a3:3f:4a:cd:4d:58:48:28:c7: 9a:85:3c:4e:4c:f3:d5:5a:54:9c:81:03:f3:85:1e: 73:cd:49:b7:b6:bc:a7:e0:c5:e9:e8:bf:6a:27:96: 48:dc:84:28:b8:59:19:e8:32:8f:49:34:ea:53:61: 75:ee:dd:cb:23:86:cb:2a:96:c6:0d:41:62:22:13: 91:f4:76:f2:82:4c:bd:5b:67:d6:27:e0:a1:2c:f3: dc:24:af:a0:e6:a2:1f:de:45:4a:83:8a:27:ec:d9: 83:b8:72:dc:c5:21:09:84:d9:eb:fc:43:ed:e8:8c: 28:48:89:cd:c7:ae:26:2a:b0:38:0f:0d:fa:98:3c: 68:54:4f:73:8f:1d:62:11:31:6d:6a:f2:91:5b:35: 4b:cd:3c:69:5f:e9:58:7e:d9:ec:92:1f:e3:bf:25: cd:6b:5e:83:60:9b:ef:39:d5:a4:af:1e:67:39:97: d0:fe:71:78:0b:a9:ff:d8:03:07:0d:0c:6c:a1:6f: 65:74:84:da:a1:85:fc:89:c2:a9:35:72:48:e5:0c: 2c:e1:41:ef:91:27:59:3d:2a:cd:e8:cf:a3:06:ab: 5e:3d:cb:b8:ab:47:8b:42:53:0a:ea:e4:9f:17:5f: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:12:59:3E:A7:64:43:6E:5C:9E:D8:72:60:5D:66:CA:BE:1D:1A:25 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5c:0b:a8:36:f0:55:c2:e2:39:0c:ad:b1:08:0e:84:f2:2e: a2:40:ca:44:1d:d2:5b:7c:6b:52:d0:1b:13:53:5f:07:cd:79: f5:bd:c2:39:6a:5d:34:4e:48:7f:8d:5d:e2:e2:7a:9f:f9:f4: ae:99:4d:39:a9:d1:8f:f7:db:64:6a:1b:68:6d:04:61:26:c9: 91:1d:1e:c5:5a:9a:0c:b9:9f:c5:8a:88:cb:c7:98:07:61:09: f0:a5:e3:aa:31:6f:0a:5c:64:aa:6c:74:32:83:ea:e6:87:03: 2a:84:19:4f:e3:d6:ad:dd:ed:1d:42:6a:2e:f6:69:73:60:b6: b3:64:67:df:94:bd:2f:a9:9b:a0:8d:ba:60:73:7f:62:40:1b: 3f:53:e5:4b:a4:3a:ea:1a:e1:86:a6:dd:4d:69:62:59:a7:fb: 0f:87:3e:8a:9e:2a:fd:b8:24:94:93:7d:cc:56:b1:d4:d5:ea: d8:78:ca:4c:e7:c6:db:a8:f4:84:2b:cd:a1:c0:24:22:9b:74: f4:ad:fd:69:94:e7:d9:3a:0c:23:ab:16:72:65:ac:9c:22:c6: 0a:d3:4f:22:99:a6:4c:a7:d4:40:86:30:88:44:2a:a5:a4:dd: 02:92:59:97:ef:52:a1:30:31:db:01:6b:1a:83:62:d5:e8:e5: 0d:47:ff:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGCK8Sf9NHpzZFiennm5QEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYxMDI4MTEwMTA4WhcNMjYxMDI5MTEwMTA4WjAzMTEwLwYDVQQD EygzZDEyNTkzZWE3NjQ0MzZlNWM5ZWQ4NzI2MDVkNjZjYWJlMWQxYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJeypxnQ4TgKyTIfO7iemNyL+oaj P0rNTVhIKMeahTxOTPPVWlScgQPzhR5zzUm3tryn4MXp6L9qJ5ZI3IQouFkZ6DKP STTqU2F17t3LI4bLKpbGDUFiIhOR9Hbygky9W2fWJ+ChLPPcJK+g5qIf3kVKg4on 7NmDuHLcxSEJhNnr/EPt6IwoSInNx64mKrA4Dw36mDxoVE9zjx1iETFtavKRWzVL zTxpX+lYftnskh/jvyXNa16DYJvvOdWkrx5nOZfQ/nF4C6n/2AMHDQxsoW9ldITa oYX8icKpNXJI5Qws4UHvkSdZPSrN6M+jBqtePcu4q0eLQlMK6uSfF1/iPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0SWT6nZENuXJ7YcmBdZsq+HRolMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVwLqDbw VcLiOQytsQgOhPIuokDKRB3SW3xrUtAbE1NfB8159b3COWpdNE5If41d4uJ6n/n0 rplNOanRj/fbZGobaG0EYSbJkR0exVqaDLmfxYqIy8eYB2EJ8KXjqjFvClxkqmx0 MoPq5ocDKoQZT+PWrd3tHUJqLvZpc2C2s2Rn35S9L6mboI26YHN/YkAbP1PlS6Q6 6hrhhqbdTWliWaf7D4c+ip4q/bgklJN9zFax1NXq2HjKTOfG26j0hCvNocAkIpt0 9K39aZTn2ToMI6sWcmWsnCLGCtNPIpmmTKfUQIYwiEQqpaTdApJZl+9SoTAx2wFr GoNi1ejlDUf/vA== -----END CERTIFICATE-----Generated at Wed Oct 28 15:14:21 2026 by rpki-client