$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: KbHk8fdk9JObwUixu0xfda2rBN0qzpbSKG0YWRhT/lk= Subject key identifier: 0E:E0:4B:F6:93:BC:BC:9E:E4:1B:FC:54:F9:AD:32:52:F8:4C:DB:4D Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019EB6FC01A413E78710DE3B099145AAEEFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 1967 Signing time: Thu 11 Jun 2026 14:00:29 +0000 Manifest this update: Thu 11 Jun 2026 14:00:29 +0000 Manifest next update: Fri 12 Jun 2026 14:00:29 +0000 Files and hashes: 1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=) 2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=) 3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=) 4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=) 5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=) 6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=) 7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: xWaRE9OUUsXFFYpJx9hNYhUqYVFNSQTqtlJHpNgEBCE=) 8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=) 9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=) 10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=) 11: g96pKLe6ZF1dh195VH6q_6jtDKE.roa (hash: GXl5Z35Jg4C6xTmicgl5RWGF0PIPfwr7nEkhMgfzcrU=) 12: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=) 13: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=) 14: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=) 15: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=) 16: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=) 17: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=) 18: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:fc:01:a4:13:e7:87:10:de:3b:09:91:45:aa:ee:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jun 11 14:00:29 2026 GMT Not After : Jun 12 14:00:29 2026 GMT Subject: CN=0ee04bf693bcbc9ee41bfc54f9ad3252f84cdb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f6:6c:2c:35:c7:70:76:12:78:a3:a1:ad:58: e6:43:83:3e:77:76:d2:5f:ac:0e:a3:9d:93:ba:55: ee:58:e5:c6:4c:6d:6f:0c:d0:22:d8:66:29:09:2e: dd:79:cd:0e:ff:fc:24:58:76:ad:ca:95:93:3d:3f: a8:f7:ab:03:3b:e7:5c:cf:c1:95:45:be:23:25:43: 4a:4b:19:d6:ff:f4:c6:1f:ca:16:7f:d1:85:47:0e: 1a:3e:8b:dd:55:58:98:bd:15:4f:fa:be:b3:ac:d4: f1:f2:d5:37:77:55:70:49:14:ef:41:dc:68:2d:7a: 41:dd:34:0e:66:b7:6a:8c:f2:1e:4d:51:37:fe:b7: aa:46:96:4d:aa:f8:1a:7a:b4:a5:e4:86:62:b4:a2: 60:9e:a5:15:82:32:87:0e:5d:81:f0:ce:cb:d8:81: 35:e5:ad:a5:a5:2b:83:9a:4d:08:09:a7:63:fc:8a: 91:47:98:32:72:37:25:dc:3f:f3:20:f0:22:a8:db: 1a:5d:50:90:35:ea:26:93:f1:dc:7f:83:ae:5e:00: 3c:27:73:b9:f6:03:f5:5c:44:f6:3b:ec:07:d0:a4: c3:95:d1:37:a9:fb:22:6d:b8:bf:cb:f6:99:2c:57: 66:35:d0:14:ee:d0:b5:84:72:76:d1:aa:42:87:e3: bf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:4B:F6:93:BC:BC:9E:E4:1B:FC:54:F9:AD:32:52:F8:4C:DB:4D X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:3f:37:03:c4:a4:5b:aa:74:45:69:9c:68:0d:0b:d5:17:34: 11:64:51:e6:d9:dd:6b:b6:7c:33:e9:d0:9d:92:b0:74:60:46: 50:42:d9:60:ab:ce:5d:a5:13:c5:34:c4:94:43:c6:80:37:02: a5:4c:8e:a4:fd:e4:5f:a7:9d:87:0b:5a:d4:32:07:df:a7:9e: 7b:d5:26:d6:68:00:87:be:44:2f:86:5a:a7:87:27:7f:43:d1: 1e:36:57:25:bc:25:9e:61:0d:b3:55:c1:82:5e:fd:03:02:42: 45:52:ce:5f:0d:7c:31:d5:01:f3:f4:6c:78:0d:e7:28:52:94: b0:08:7c:01:75:1a:aa:1f:86:fb:9d:95:43:04:3b:7b:83:7f: 69:5b:42:99:ab:c5:d3:5d:e0:c9:cf:18:b2:4c:9c:ae:8d:39: 16:3a:53:3b:12:52:23:58:ae:4b:8b:dc:4d:ba:0c:db:3a:45: 5a:6c:1c:13:b5:02:07:14:41:8e:a9:fd:22:1f:dc:28:ff:47: 1e:1b:8a:92:59:95:82:20:d2:64:52:3e:af:cf:e7:e5:83:c2: 9c:7a:ca:e3:25:9d:08:de:f4:46:7a:dc:53:08:f3:19:58:7b: f3:25:1f:c0:85:dc:ba:e1:d5:1b:15:5d:99:f0:99:27:6a:74: f7:da:be:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62/AGkE+eHEN47CZFFqu7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjYwNjExMTQwMDI5WhcNMjYwNjEyMTQwMDI5WjAzMTEwLwYDVQQD EygwZWUwNGJmNjkzYmNiYzllZTQxYmZjNTRmOWFkMzI1MmY4NGNkYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvZsLDXHcHYSeKOhrVjmQ4M+d3bS X6wOo52TulXuWOXGTG1vDNAi2GYpCS7dec0O//wkWHatypWTPT+o96sDO+dcz8GV Rb4jJUNKSxnW//TGH8oWf9GFRw4aPovdVViYvRVP+r6zrNTx8tU3d1VwSRTvQdxo LXpB3TQOZrdqjPIeTVE3/reqRpZNqvgaerSl5IZitKJgnqUVgjKHDl2B8M7L2IE1 5a2lpSuDmk0ICadj/IqRR5gycjcl3D/zIPAiqNsaXVCQNeomk/Hcf4OuXgA8J3O5 9gP1XET2O+wH0KTDldE3qfsibbi/y/aZLFdmNdAU7tC1hHJ20apCh+O/rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7gS/aTvLye5Bv8VPmtMlL4TNtNMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArj83A8Sk W6p0RWmcaA0L1Rc0EWRR5tnda7Z8M+nQnZKwdGBGUELZYKvOXaUTxTTElEPGgDcC pUyOpP3kX6edhwta1DIH36eee9Um1mgAh75EL4Zap4cnf0PRHjZXJbwlnmENs1XB gl79AwJCRVLOXw18MdUB8/RseA3nKFKUsAh8AXUaqh+G+52VQwQ7e4N/aVtCmavF 013gyc8Yskycro05FjpTOxJSI1iuS4vcTboM2zpFWmwcE7UCBxRBjqn9Ih/cKP9H HhuKklmVgiDSZFI+r8/n5YPCnHrK4yWdCN70RnrcUwjzGVh78yUfwIXcuuHVGxVd mfCZJ2p099q+Xw== -----END CERTIFICATE-----Generated at Thu Jun 11 22:22:53 2026 by rpki-client