$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: nJ+ElZMWkMlRqRLTqFpBFx3SLSwmHcuYpGJnlcR9WaI= Subject key identifier: A4:90:CA:A5:41:96:14:FD:DF:A0:17:A8:62:CF:0E:97:18:DC:39:1E Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019F8230BFE936D0A9F2AFC3B40F228DFD4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1C46 Signing time: Tue 21 Jul 2026 01:01:00 +0000 Manifest this update: Tue 21 Jul 2026 01:01:00 +0000 Manifest next update: Wed 22 Jul 2026 01:01:00 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 3: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 4: 44Iso-j2NQAGFeTcZ6p1-8DeSFQ.roa (hash: sP9AM+BPoA0j3kdfgaDwC1UIxBZgtqrJuS1V2CbwYU0=) 5: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 6: 70bI0BpF1ACsAKCFJ6N-iV0JxII.roa (hash: eA2eEKDYDU9RId38K2W4q8Sfx9olgaplYK4PPc5MYTY=) 7: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 8: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 9: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 10: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 11: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: ggLEz7ksSz+l074qZFY4pR9vitzgNQEPVMkuhgjAeMY=) 13: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 14: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 15: YJI7jvGd5W_IPDB0udPMb_Bx1-o.roa (hash: a8yvtsf79vhvIBF4QlHXQSnPxCFcBo/UpzM0mTEa+nk=) 16: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 17: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 18: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 19: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 20: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 21: c6zz610dAPS93YECDNiRE3FFJv8.roa (hash: OsQ9xfdlBk9mMh8w37FIGirc6gzFq4ptiH5uxHMx2Y4=) 22: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 23: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 24: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 25: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 26: skwAlOpJAcdHksUYGz4EwjUIsXM.roa (hash: KLTUqEUZLvS5HlRAC1b4oFl4mIh8SOSk823xWU684vc=) 27: sz_c26rbvH0uu179TRjeU8EM_A0.roa (hash: tMb7Bo7E7L+zeKT6DXx+zQjvZcrsYlKvO7dQ40ku1+s=) 28: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 29: w90FegnaRGuQdEE1G_puoH9JsxU.roa (hash: MGl3WgOVweO0N+ip5QHYD3FksJJCgZGSSbkebGr25vI=) 30: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 31: zzbHWxJLsLUWNFdWT3RcsYaj87k.roa (hash: aYt8vEO0dk7Q0eIdeE/UvWjCj2uQYX3kR/4atzt1mVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 21 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:30:bf:e9:36:d0:a9:f2:af:c3:b4:0f:22:8d:fd:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jul 21 01:01:00 2026 GMT Not After : Jul 22 01:01:00 2026 GMT Subject: CN=a490caa5419614fddfa017a862cf0e9718dc391e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:16:0f:74:fd:28:d7:6e:8e:36:e4:3c:f0: cc:05:bf:d8:fe:52:a1:a2:2b:11:6d:47:bc:8a:7e: 07:40:0f:f5:4a:c7:b0:01:c0:1d:4d:bb:51:06:29: 84:b5:1d:22:6e:d2:54:c2:00:70:18:5f:7c:e7:91: 7e:f5:8e:fd:f3:24:84:a4:35:69:dd:ae:5c:28:4e: b5:13:c2:26:81:20:67:51:37:7a:92:b4:e5:ab:6f: 18:ac:53:ea:fa:1f:80:c8:a3:99:ab:a3:6a:32:59: 56:3a:0c:61:f0:e5:1f:1f:63:45:98:59:ec:ef:38: 24:ae:bb:82:76:6c:43:e9:e8:3f:f5:e7:a5:6e:fb: bd:1a:70:ac:7e:4b:ea:fe:19:8a:c1:7f:d8:2e:01: 4b:20:d5:ac:8d:5d:ec:3f:03:5a:eb:7c:61:0c:74: 44:a6:02:f2:e6:07:64:46:2c:27:4d:92:3a:9c:1b: 5b:7f:d0:98:f4:54:1f:09:51:08:2a:8c:45:bb:3e: dd:eb:3b:77:d6:33:40:da:ae:fe:eb:cd:3a:b0:16: 5b:1c:2a:9f:4a:dc:59:85:36:b4:13:27:aa:62:f1: 15:e0:29:4b:59:77:2c:af:7e:69:71:3a:18:6d:c6: f5:06:e1:78:67:72:ff:dd:12:22:c7:e8:3c:27:10: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:90:CA:A5:41:96:14:FD:DF:A0:17:A8:62:CF:0E:97:18:DC:39:1E X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9f:d0:47:69:38:f6:fd:bd:16:60:f3:9d:7e:e1:f3:6b:95: 4d:ec:fe:09:dd:67:11:59:44:bc:51:f2:22:e5:51:22:b5:5e: aa:02:25:0f:12:63:5e:d5:bb:84:e4:0c:2d:f2:dd:27:22:04: cb:c4:52:77:77:03:20:85:be:29:3d:c3:4d:aa:24:19:6c:5b: cd:dd:c2:cb:a9:15:6d:86:6e:c4:37:0d:8d:82:3e:9e:ac:27: 76:a7:b0:23:12:c9:91:92:65:c3:95:7a:9a:7a:99:aa:16:a4: 4b:44:2d:6c:cd:7b:11:61:cd:9c:42:6c:78:f7:7f:32:c3:6e: 5e:3b:b2:70:97:f2:fd:5d:d7:47:5f:9f:27:88:37:01:46:c9: 5d:da:5d:06:6f:84:18:ee:6c:d2:56:e0:4a:be:98:cc:57:59: 49:a7:6a:d8:ae:85:19:4c:5a:7d:e6:43:58:b8:1c:26:c8:d1: 82:37:93:12:5f:60:08:ad:76:df:35:54:30:71:95:78:81:20: 83:b0:4b:5c:17:92:88:24:1b:2a:60:90:64:23:3b:6e:63:b9: 25:2b:01:0b:68:2f:46:d5:14:86:f5:e2:b7:e1:10:ad:a1:b6: ce:d3:3e:5b:63:bd:93:a7:0e:32:e3:02:57:8c:57:34:34:bb: f0:ba:c8:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+CML/pNtCp8q/DtA8ijf1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwNzIxMDEwMTAwWhcNMjYwNzIyMDEwMTAwWjAzMTEwLwYDVQQD EyhhNDkwY2FhNTQxOTYxNGZkZGZhMDE3YTg2MmNmMGU5NzE4ZGMzOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlYWD3T9KNdujjbkPPDMBb/Y/lKh oisRbUe8in4HQA/1SsewAcAdTbtRBimEtR0ibtJUwgBwGF9855F+9Y798ySEpDVp 3a5cKE61E8ImgSBnUTd6krTlq28YrFPq+h+AyKOZq6NqMllWOgxh8OUfH2NFmFns 7zgkrruCdmxD6eg/9eelbvu9GnCsfkvq/hmKwX/YLgFLINWsjV3sPwNa63xhDHRE pgLy5gdkRiwnTZI6nBtbf9CY9FQfCVEIKoxFuz7d6zt31jNA2q7+6806sBZbHCqf StxZhTa0EyeqYvEV4ClLWXcsr35pcToYbcb1BuF4Z3L/3RIix+g8JxCYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSQyqVBlhT936AXqGLPDpcY3DkeMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ/QR2k4 9v29FmDznX7h82uVTez+Cd1nEVlEvFHyIuVRIrVeqgIlDxJjXtW7hOQMLfLdJyIE y8RSd3cDIIW+KT3DTaokGWxbzd3Cy6kVbYZuxDcNjYI+nqwndqewIxLJkZJlw5V6 mnqZqhakS0QtbM17EWHNnEJsePd/MsNuXjuycJfy/V3XR1+fJ4g3AUbJXdpdBm+E GO5s0lbgSr6YzFdZSadq2K6FGUxafeZDWLgcJsjRgjeTEl9gCK123zVUMHGVeIEg g7BLXBeSiCQbKmCQZCM7bmO5JSsBC2gvRtUUhvXit+EQraG2ztM+W2O9k6cOMuMC V4xXNDS78LrIHw== -----END CERTIFICATE-----Generated at Tue Jul 21 09:09:22 2026 by rpki-client