$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: OeskPYL4nRuhdEGJ8ngbi/MSGOKo129jJ8oMSDqHkOo= Subject key identifier: 93:ED:41:66:BD:9E:AC:6D:F6:15:9A:41:C5:57:B1:10:4D:4D:74:98 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019DAF7CED83A3B47519A06DBD8BD796869F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1B22 Signing time: Tue 21 Apr 2026 10:01:33 +0000 Manifest this update: Tue 21 Apr 2026 10:01:33 +0000 Manifest next update: Wed 22 Apr 2026 10:01:33 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 3: 3IhQ9wCG2kFgIc1sRSmFBXb-ZM8.roa (hash: EnSG/XC3DgOI7LrlldCKIVaACW2nlS27dHb6c+JrbfU=) 4: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 5: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 6: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 7: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 8: FpwdnH1vSeaA9IvOMd_9OlvXF-Q.roa (hash: dR81pd4Z3d3hQtP7AcMh1To0rqIYfbx/ZlCHk7Sp1DE=) 9: JCG4Vl3fbOa9WJMpBV3HxQY8vG8.roa (hash: DVY6txHaBjZO0JDN5lhSbMf8eYewf7vw0sSsJO7sDMA=) 10: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 11: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: AWdq57iF11/bQ9lkbKz3MC+ItXQI0I0Sa+4TFtROWH0=) 12: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 13: QUSad9EfoyydrwUjL6UuKzZIeMg.roa (hash: VHq9puEsGA44rdNujULet4x2g3yNOAEgK6THQ2HkMZQ=) 14: UHXvtX8IMLd4zONKPe_pIM09xQ4.roa (hash: Nr/4kqhxxX7JW0R3yp+WhJP3/Vk86QSnLpWM2aR3Dgk=) 15: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 16: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 17: _Kp7PDTcmGkJiJKewtOccSGpSgs.roa (hash: WM5hEQgIwiPSrdXKA7JsjCjXu6TD5zpoJlxCQduZru4=) 18: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 19: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 20: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 21: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 22: hnEWOJCtVBC_3GGbMtE5CXewobk.roa (hash: QUJsiM22+JACCqNzl8HDOSQ5bJmxX09zfo9cXu7awUY=) 23: iVHD7VIScc_bmYavlKZJ2ezNKcw.roa (hash: yVV/qMkCECkBEz4uxAU1f+pA2VYLLRt6TM3iu0HQ6aU=) 24: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 25: wb9qe4KF3LQGTqZJqlR8Ho2oSW0.roa (hash: 0vA8JuQi+Rd+GLMN59PTBjFp5OPsXvc6wz/nW7AdGsM=) 26: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 27: zIIfu8DaVVMD0XsvOwpHzYoyB-g.roa (hash: nAFu8qJSmPstdE0SpXNpv/f9vO79bXQFH0mxColfbbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Apr 2026 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:af:7c:ed:83:a3:b4:75:19:a0:6d:bd:8b:d7:96:86:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Apr 21 10:01:33 2026 GMT Not After : Apr 22 10:01:33 2026 GMT Subject: CN=93ed4166bd9eac6df6159a41c557b1104d4d7498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:84:bd:79:45:6b:57:64:59:da:ca:ad:c3: c2:91:05:89:84:67:df:ce:8e:71:07:bd:3d:52:3b: 70:9b:1a:f8:d5:fd:40:75:67:5a:57:4a:4d:67:4a: 31:cc:cb:f5:46:e9:d5:1e:6c:a6:5b:0a:04:a2:9e: b9:d2:b4:0b:12:ca:53:50:56:8f:97:b2:42:a3:46: 70:fb:52:70:4b:ec:cb:59:78:ba:08:05:05:0c:73: 41:73:97:3e:94:46:be:a0:88:71:60:72:29:48:ff: e5:bd:bc:83:ae:3a:87:ab:00:62:f0:aa:74:39:62: 28:a4:9f:8d:ca:62:b2:8e:16:27:95:bc:f2:6f:80: 24:41:31:e8:70:af:5d:97:d0:2c:31:bc:f1:75:81: 10:4a:65:49:83:b3:1b:bc:67:e5:03:0f:b6:aa:78: cf:81:3a:8a:85:86:20:d6:9a:45:60:25:81:5c:5b: f4:92:bb:f9:b8:d4:d5:f5:6e:38:23:0f:80:1f:b2: 44:59:1b:69:b5:44:6a:59:93:76:f3:b8:1e:20:97: bd:e5:1b:6b:55:14:d8:62:15:c2:5f:1c:63:f2:c5: 9a:67:2e:93:30:c3:5a:56:cb:3d:bf:02:5f:5e:d8: 13:01:c2:fd:7c:52:0c:29:81:d3:71:47:a0:b5:ff: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:ED:41:66:BD:9E:AC:6D:F6:15:9A:41:C5:57:B1:10:4D:4D:74:98 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0b:80:24:9e:3b:81:11:97:b9:ba:a1:0b:39:1b:6c:f1:58: 4f:a1:c8:7f:f4:7d:d6:77:5d:1a:c8:97:f5:63:36:15:e4:05: 1b:91:00:dc:54:7b:82:4e:ae:15:d2:d6:19:90:64:a8:4a:2e: bb:47:6f:30:72:af:05:df:c1:42:c2:32:b1:21:21:16:2e:37: d5:4a:1e:84:4b:ad:80:55:b9:ba:c6:ed:ab:2e:a9:45:40:41: 95:e1:5c:13:f3:da:5c:d0:38:0b:21:a5:ba:5a:db:ed:bc:0e: ad:e0:7c:60:7e:28:4e:03:b9:21:8a:77:35:3c:3e:26:9c:d7: e5:40:fc:28:0f:e6:d0:71:06:5d:74:6f:96:48:f4:48:64:7a: c1:7e:95:d6:1a:13:d2:b8:4c:02:f2:b5:df:d4:71:8e:7c:5b: 10:8a:12:c7:12:de:c1:62:67:e1:06:53:15:8a:c5:a9:a1:01: 92:ba:aa:5d:1f:fa:13:d1:47:32:a6:03:55:0a:d7:44:2d:8f: cb:0d:b3:c8:d5:b5:3d:60:92:86:38:73:aa:38:77:09:da:64: 57:58:1f:04:15:ea:fd:b7:75:ec:a9:6c:e8:70:e3:7b:1c:fd: f3:6f:5f:e0:35:30:18:23:c6:63:71:f6:4a:98:65:7c:f5:2d: bc:2a:18:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ2vfO2Do7R1GaBtvYvXloafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwNDIxMTAwMTMzWhcNMjYwNDIyMTAwMTMzWjAzMTEwLwYDVQQD Eyg5M2VkNDE2NmJkOWVhYzZkZjYxNTlhNDFjNTU3YjExMDRkNGQ3NDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7mEvXlFa1dkWdrKrcPCkQWJhGff zo5xB709Ujtwmxr41f1AdWdaV0pNZ0oxzMv1RunVHmymWwoEop650rQLEspTUFaP l7JCo0Zw+1JwS+zLWXi6CAUFDHNBc5c+lEa+oIhxYHIpSP/lvbyDrjqHqwBi8Kp0 OWIopJ+NymKyjhYnlbzyb4AkQTHocK9dl9AsMbzxdYEQSmVJg7MbvGflAw+2qnjP gTqKhYYg1ppFYCWBXFv0krv5uNTV9W44Iw+AH7JEWRtptURqWZN287geIJe95Rtr VRTYYhXCXxxj8sWaZy6TMMNaVss9vwJfXtgTAcL9fFIMKYHTcUegtf9zPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPtQWa9nqxt9hWaQcVXsRBNTXSYMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewuAJJ47 gRGXubqhCzkbbPFYT6HIf/R91nddGsiX9WM2FeQFG5EA3FR7gk6uFdLWGZBkqEou u0dvMHKvBd/BQsIysSEhFi431UoehEutgFW5usbtqy6pRUBBleFcE/PaXNA4CyGl ulrb7bwOreB8YH4oTgO5IYp3NTw+JpzX5UD8KA/m0HEGXXRvlkj0SGR6wX6V1hoT 0rhMAvK139RxjnxbEIoSxxLewWJn4QZTFYrFqaEBkrqqXR/6E9FHMqYDVQrXRC2P yw2zyNW1PWCShjhzqjh3CdpkV1gfBBXq/bd17Kls6HDjexz9829f4DUwGCPGY3H2 SphlfPUtvCoY7g== -----END CERTIFICATE-----Generated at Tue Apr 21 18:11:01 2026 by rpki-client