$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: HfDxy3+nDdiirZg8IY1jrpzKfS5wx35mKg/Bs1oX+3s= Subject key identifier: 0D:6B:B2:BE:E8:32:70:72:A2:8B:87:8C:F1:6A:4A:92:B1:71:ED:CF Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01A158C24FF6047178ECCEE4C10D06309C28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1D64 Signing time: Tue 20 Oct 2026 10:01:31 +0000 Manifest this update: Tue 20 Oct 2026 10:01:31 +0000 Manifest next update: Wed 21 Oct 2026 10:01:31 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 3: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 4: 3kdkXs-Im4X4WxDF387Kz58kORA.roa (hash: 1WD5Nbn4e/aPX7Ez9Elfw89SdkV6nUX+vasnfRGAOWw=) 5: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 6: 7Sh8qXKnoV8f_LGY164eeeVzWwY.roa (hash: h/eQK/wLOp5ta++3VeBPvQxzXRr/Q6UnPMs4Xvr7Ojc=) 7: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 8: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 9: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 10: H5ZYe_Ag7prsC3TXqbV6CRa9FlY.roa (hash: 3IwOGJbM2WxEKxC9Fa9yZDt79Q/TfZFjPHgrWJIXGcU=) 11: HWbYB_DmGeXYNXnb_W2jLtWLINI.roa (hash: AP3CLrLM8qm1AIBNge70pBO7qQX28XeGqFK58Es6e0E=) 12: HrxcodrvVIM_GMxKhZQudNRip6c.roa (hash: MTdn9qnsxs92sBTi2UkM6k+YAlFOUGhoYZbEqur9JIg=) 13: JO3cl0A4eeWZrlb6YYE6b3QgQVY.roa (hash: kcTQU5997oY8OpgCn62LAmPoorNvkv8hEcl9ToSuUFo=) 14: KAv0a2aBh2HKZaJ11jodxywws-4.roa (hash: H3aWrK0K0iZNqy3EQ3BRXNZTYMg5/3AIf1FGtpEowbk=) 15: MA5ChwX7hJLPtaK0A61gfidNeYM.roa (hash: Ifjk5eYYVB3yuQD1wDmm2RSOQcphaXwcDI2PqLcEXlc=) 16: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 17: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: Q6dpOilkdOUsOdaVcm0AuApVvl30abn5pvAC/jQpIUk=) 18: WtWX_AKcvGcWMQX9EqLnmLKQeEk.roa (hash: ZoB6xp2dZxliYKtdyb5XBTNX0yR6OqjtAm3u4SbSsSk=) 19: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 20: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 21: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 22: ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa (hash: mZ/hXIWOyw1nZePba2ku4vzRolnuQ9r/sg/ZfJza0sU=) 23: _SBs4pCKKhk6pMcCKSMOStF2zLs.roa (hash: K5M4wzgI5IwgTsBzGfeMMvXNqnGoMX/i5D4sN0k8DcM=) 24: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 25: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 26: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 27: f2jgN13vsLBBFFDE9L3XqIO-zZI.roa (hash: 6jwpW+Gz/4278/TgiUlJbdacPgd1+h1QmRHWgV41/1A=) 28: f32IN8X8VX0IYse4UWL7OQvSP60.roa (hash: rb+UUhOxd1nri0jZfCETT05e9Y4KfO4sAh9g9cW0pPI=) 29: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 30: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 31: rwIxl0xSpx6cLwOck58lc13Z1LA.roa (hash: tTGUty/PmeIj7uvxFb0523AV7tRjEIfSVI+SkDAItjw=) 32: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 33: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 08:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:58:c2:4f:f6:04:71:78:ec:ce:e4:c1:0d:06:30:9c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Oct 20 10:01:31 2026 GMT Not After : Oct 21 10:01:31 2026 GMT Subject: CN=0d6bb2bee8327072a28b878cf16a4a92b171edcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:b8:e1:9c:4b:54:4f:7f:cb:36:2a:f9:d6: cf:09:8b:45:ad:ca:d8:15:c3:a9:dc:0c:b7:05:fe: 5d:c7:59:79:bd:2f:87:5b:53:04:ef:b7:a3:9f:e8: 91:d8:1b:37:45:75:30:48:0e:91:2b:89:d9:54:24: 1e:37:03:09:50:be:0c:a3:0d:6d:f9:ba:ec:fc:2a: b0:9b:ea:8d:83:82:af:53:c5:27:1b:40:a0:e4:96: 27:fb:f7:53:4a:58:ce:a7:02:e6:39:6d:78:2b:65: 36:dd:cd:09:89:8e:7b:4b:b3:ef:2e:40:0d:34:a9: 59:d1:d8:33:bf:5c:ea:14:cb:0a:22:9c:39:83:61: 16:44:f5:49:29:57:05:91:af:4f:ce:6a:09:63:4f: da:50:dc:d6:fd:b3:0b:1b:52:cf:54:6b:69:42:d2: b9:d4:8e:5c:47:9a:52:10:74:e0:10:3c:8f:fc:bc: 69:82:e6:a5:67:3d:1f:f4:94:fc:36:ef:83:30:75: 27:2d:71:fa:09:01:33:33:76:6c:7f:63:7a:56:50: 75:10:80:b8:fa:f9:b4:3d:57:cb:95:0b:38:34:49: ce:8f:03:0c:81:89:b7:f0:51:26:1e:e6:33:eb:18: ff:32:d6:85:47:48:b2:c1:89:aa:21:79:bb:64:34: 8d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6B:B2:BE:E8:32:70:72:A2:8B:87:8C:F1:6A:4A:92:B1:71:ED:CF X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6b:53:ae:a3:f9:de:8d:d2:89:e3:f9:84:4a:45:32:27:0e: b2:c0:4e:b8:48:a1:cf:91:d6:c4:e6:6a:01:f3:39:3e:f9:b7: 89:56:0c:54:64:33:7e:ef:09:95:06:9e:bc:cd:bc:f9:8f:08: 16:99:27:b6:ee:df:ec:fb:0d:75:6d:3b:78:b0:26:0d:fc:b8: fa:29:f9:4a:03:66:64:73:b6:f7:12:ee:c5:12:bc:4c:d5:d1: 26:42:33:4c:19:4f:0c:2e:a4:e5:7d:32:33:7b:d3:f4:64:06: 68:51:be:35:6d:67:e4:f2:81:9d:42:f7:6c:1c:41:0a:25:fd: 55:8c:06:ee:b5:d2:c0:20:44:25:7d:5b:c0:f5:1b:47:9d:ca: e6:9c:eb:8c:a5:c5:6b:20:fc:61:98:44:57:57:14:6f:ec:ae: d8:3a:c7:31:8d:93:c4:3f:09:2a:6e:4e:81:6f:fd:a3:9d:a0: 08:e0:c0:11:23:7f:e6:0d:3e:a4:eb:d1:97:76:01:e3:6b:c1: 05:93:71:ba:cd:e8:86:ef:c8:7a:c0:de:8e:c8:eb:ef:ee:e1: 7e:4e:fd:dc:da:35:22:b5:81:6d:f8:c1:12:e9:81:20:f1:00: c5:4a:9c:7a:67:31:a4:5e:54:15:80:54:ff:02:cd:53:ea:df: 98:ba:7c:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFYwk/2BHF47M7kwQ0GMJwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYxMDIwMTAwMTMxWhcNMjYxMDIxMTAwMTMxWjAzMTEwLwYDVQQD EygwZDZiYjJiZWU4MzI3MDcyYTI4Yjg3OGNmMTZhNGE5MmIxNzFlZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHa44ZxLVE9/yzYq+dbPCYtFrcrY FcOp3Ay3Bf5dx1l5vS+HW1ME77ejn+iR2Bs3RXUwSA6RK4nZVCQeNwMJUL4Mow1t +brs/Cqwm+qNg4KvU8UnG0Cg5JYn+/dTSljOpwLmOW14K2U23c0JiY57S7PvLkAN NKlZ0dgzv1zqFMsKIpw5g2EWRPVJKVcFka9PzmoJY0/aUNzW/bMLG1LPVGtpQtK5 1I5cR5pSEHTgEDyP/LxpgualZz0f9JT8Nu+DMHUnLXH6CQEzM3Zsf2N6VlB1EIC4 +vm0PVfLlQs4NEnOjwMMgYm38FEmHuYz6xj/MtaFR0iywYmqIXm7ZDSNtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1rsr7oMnByoouHjPFqSpKxce3PMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmtTrqP5 3o3SieP5hEpFMicOssBOuEihz5HWxOZqAfM5Pvm3iVYMVGQzfu8JlQaevM28+Y8I Fpkntu7f7PsNdW07eLAmDfy4+in5SgNmZHO29xLuxRK8TNXRJkIzTBlPDC6k5X0y M3vT9GQGaFG+NW1n5PKBnUL3bBxBCiX9VYwG7rXSwCBEJX1bwPUbR53K5pzrjKXF ayD8YZhEV1cUb+yu2DrHMY2TxD8JKm5OgW/9o52gCODAESN/5g0+pOvRl3YB42vB BZNxus3ohu/IesDejsjr7+7hfk793No1IrWBbfjBEumBIPEAxUqcemcxpF5UFYBU /wLNU+rfmLp8Ug== -----END CERTIFICATE-----Generated at Tue Oct 20 18:36:36 2026 by rpki-client