$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: FC4G4W7B0yhPDhNj6+xG1ipIgFLdTLiXADQhfXPZlOA= Subject key identifier: 43:B9:DF:A2:33:D6:11:2B:7B:F9:0C:9D:D9:9E:31:17:33:C6:C7:1C Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01A06E397D3A5911E86B99842803EC7BDC1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1CD4 Signing time: Fri 04 Sep 2026 21:00:56 +0000 Manifest this update: Fri 04 Sep 2026 21:00:56 +0000 Manifest next update: Sat 05 Sep 2026 21:00:56 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 2lOkpSCo8sZLMBMM3LPoaqV9z5Y.roa (hash: C350u0jD8Efjj60dxcRtYcZl8gmyRCscgXjm+yfTC+Y=) 3: 3H6GWkZLc_NZF1jSonS4jQCRWcI.roa (hash: R3AxMvWRSTeOTyqc1x3BVzV4vhkQWVoV9RK24Ln9bzA=) 4: 5CRzGhoU_e7eBUnAKy8O8D4EtQk.roa (hash: LJTrOsci6Dw72z3TAo1qYXwRYs/MlFjYW3VDOUG/E6w=) 5: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 6: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 7: DRQUnN7HKcdXFxaJt5OsGPcTrMk.roa (hash: pc1QrwRY7ZHDNaDimFQwB1lOCkdLv/YmCn9z7q0J2sQ=) 8: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 9: G04MQlUjNJ0-sEIPOu5fgsj9m_M.roa (hash: EcuYZ+VvzOqMojZv8AtUDs18O34NiJzfjVngmG48WEo=) 10: GLqdFHyBNivF0Mu23wp_efQJ1Yw.roa (hash: CVgYAd+e1P8gd4vLjfRU6ueccV4oKkBA5gUTEDdtI6c=) 11: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 12: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: AseNOn0FFbZvRRzppoomhyL3asjOOEsKDQ2bhYJpA5U=) 13: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 14: QwF0BlO4tk_h2m7pI4nhweiHhKA.roa (hash: /hRSobrtsj4yZ3x+jWbxAu/sV+yBO6+8QUxw1Z3nc/Q=) 15: R7SMaEEZx64vd3vB6NQCPuyOzxw.roa (hash: 41LYQglzjtpGQ9ID2LG6EuaGtt307M70zKYhurf/Lkw=) 16: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 17: Yjby7mJEeAWVb0D3T_IC7Iiunfc.roa (hash: 3AdQ1hda+06iUnNZO4ZQjjRdSJPOGRIstvmg6/2/Y74=) 18: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 19: ZjU9Qa4DlBSyEYz3tHwQdmNR5l4.roa (hash: mZ/hXIWOyw1nZePba2ku4vzRolnuQ9r/sg/ZfJza0sU=) 20: agKDW7KFVEguNXRS4bYZpMhq0l8.roa (hash: s2vIudbmaUogE9XKyDtB+ku55CWDZIzpyaBNalrrFcQ=) 21: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 22: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 23: dQcB5Ov2wE59-KcBWX_C-jPEF30.roa (hash: j3Lsz8/4/F+fGa7qOJ+aR2Em82VTSSmtIIUmkzNZHuE=) 24: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 25: kg6Fwa6XuLPGoh-Bj0e-qn66sTY.roa (hash: nyT9wV5XQhB+IJPrXJYtLhdXSnMBccRXs2tPaFdeaUU=) 26: lsbtAzP5S5qeH_4o8hGUz10ykxo.roa (hash: wE2/fg4H981VgFpKNNFOHGD8hAjJ86kt98S5FkV88xo=) 27: nSq7E5lM5UyPvCzGi2CumGFbKFY.roa (hash: tcoOtJaj6pxq095E88cEzvoHRjXiNqR98DdnEV83M7Q=) 28: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 29: sz_c26rbvH0uu179TRjeU8EM_A0.roa (hash: tMb7Bo7E7L+zeKT6DXx+zQjvZcrsYlKvO7dQ40ku1+s=) 30: uxsvjGGBw1-sHXi_WNoWxLw_oHE.roa (hash: vcXV0IpjKrN098BPQFX2AiEdWi89pGJp2tXzpCOR06Q=) 31: v_n2xkNu9bblXovWClW1tHeZUQo.roa (hash: LIYRgLN5pBDwXs11ejFLX0pO6jhGwkacrIZHfbs3JsQ=) 32: w90FegnaRGuQdEE1G_puoH9JsxU.roa (hash: MGl3WgOVweO0N+ip5QHYD3FksJJCgZGSSbkebGr25vI=) 33: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6e:39:7d:3a:59:11:e8:6b:99:84:28:03:ec:7b:dc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Sep 4 21:00:56 2026 GMT Not After : Sep 5 21:00:56 2026 GMT Subject: CN=43b9dfa233d6112b7bf90c9dd99e311733c6c71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9a:80:9c:35:b3:25:02:0f:21:6b:33:69:f0: bd:3c:fe:75:c4:6e:6a:31:16:f6:df:a7:8b:ac:85: c3:4e:dc:06:ea:d3:59:3e:ab:69:89:42:59:00:53: 98:87:c4:5c:eb:89:9a:92:52:74:34:9b:8c:b6:da: 53:ce:6c:08:1e:77:5c:0c:2d:c4:60:2b:d5:d5:9c: 01:15:5a:30:bc:ba:0b:bb:5e:a4:23:15:71:24:b5: ce:4b:66:63:78:7a:d7:b7:78:fa:59:76:85:d9:d9: 86:79:eb:f9:53:44:09:41:7e:63:cb:84:2e:3e:14: a6:66:38:cd:b9:2b:16:bb:76:ee:ba:0b:e5:5a:97: 42:dd:95:98:63:39:ed:99:b0:bd:4c:08:b7:f5:96: a9:3d:a3:e0:08:c1:6e:6e:79:b3:51:7c:71:3c:a0: 89:3e:f8:72:90:a8:00:b3:ff:e3:46:70:46:5f:dd: 75:a8:b1:20:3d:db:3b:92:73:d6:8c:94:b8:53:20: 32:8f:7c:1b:cd:bf:09:20:62:51:27:69:c8:ef:2c: 2d:97:24:6f:de:97:70:b2:0c:a5:67:e0:67:37:7e: a3:97:20:4d:ce:25:1c:ee:10:35:54:19:b1:f1:90: e9:cf:f7:78:cb:33:cf:a9:8f:ec:af:af:2b:4d:3f: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B9:DF:A2:33:D6:11:2B:7B:F9:0C:9D:D9:9E:31:17:33:C6:C7:1C X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:82:27:f3:1a:46:88:ae:78:e1:25:4d:4f:c3:17:c1:4b:31: a3:b6:26:6b:33:4f:a2:d7:8c:27:a2:7c:db:85:d0:4d:cb:0e: 81:ad:f0:c2:f3:9b:38:be:0d:18:2c:06:ee:5d:10:59:15:bc: 70:99:28:d2:5c:d3:63:7a:92:e4:4a:f7:d6:c9:34:57:86:6d: 77:48:db:88:28:f2:ce:e5:83:ab:c7:f3:d2:17:a5:e4:73:48: 46:46:77:b2:50:bc:c8:57:86:fe:34:5e:98:7c:f8:8d:9f:b0: 8c:82:ff:77:f9:ff:ff:b6:fb:22:05:d6:97:7e:71:f5:67:d6: 88:cf:b5:7f:dd:49:da:10:32:90:bd:a9:94:14:a9:17:68:24: db:0f:f0:94:b8:fd:c5:28:63:07:dd:d5:c1:e9:b3:84:0e:48: fd:f4:1f:31:84:2b:32:e0:c8:da:9b:2a:5c:23:b2:ec:02:a9: 09:67:4c:8e:9e:cb:e2:33:2f:df:bd:ac:61:87:d4:90:b2:81: 7f:45:c8:ca:4c:a2:9a:39:c0:86:7c:7a:e9:5e:40:28:07:29: 4a:e0:26:1f:64:a0:a6:45:3f:5f:ab:ab:0a:15:10:37:40:c7: c1:01:57:1f:46:73:5e:37:df:4f:61:46:52:1e:46:48:c1:06: bf:79:9e:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBuOX06WRHoa5mEKAPse9wdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwOTA0MjEwMDU2WhcNMjYwOTA1MjEwMDU2WjAzMTEwLwYDVQQD Eyg0M2I5ZGZhMjMzZDYxMTJiN2JmOTBjOWRkOTllMzExNzMzYzZjNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpqAnDWzJQIPIWszafC9PP51xG5q MRb236eLrIXDTtwG6tNZPqtpiUJZAFOYh8Rc64maklJ0NJuMttpTzmwIHndcDC3E YCvV1ZwBFVowvLoLu16kIxVxJLXOS2ZjeHrXt3j6WXaF2dmGeev5U0QJQX5jy4Qu PhSmZjjNuSsWu3buugvlWpdC3ZWYYzntmbC9TAi39ZapPaPgCMFubnmzUXxxPKCJ PvhykKgAs//jRnBGX911qLEgPds7knPWjJS4UyAyj3wbzb8JIGJRJ2nI7ywtlyRv 3pdwsgylZ+BnN36jlyBNziUc7hA1VBmx8ZDpz/d4yzPPqY/sr68rTT8BPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEO536Iz1hEre/kMndmeMRczxsccMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoIn8xpG iK544SVNT8MXwUsxo7YmazNPoteMJ6J824XQTcsOga3wwvObOL4NGCwG7l0QWRW8 cJko0lzTY3qS5Er31sk0V4Ztd0jbiCjyzuWDq8fz0hel5HNIRkZ3slC8yFeG/jRe mHz4jZ+wjIL/d/n//7b7IgXWl35x9WfWiM+1f91J2hAykL2plBSpF2gk2w/wlLj9 xShjB93VwemzhA5I/fQfMYQrMuDI2psqXCOy7AKpCWdMjp7L4jMv372sYYfUkLKB f0XIykyimjnAhnx66V5AKAcpSuAmH2SgpkU/X6urChUQN0DHwQFXH0ZzXjffT2FG Uh5GSMEGv3meGg== -----END CERTIFICATE-----Generated at Fri Sep 4 22:59:19 2026 by rpki-client