$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: MzqZm5NW/jP/mECest+ihWb423D11vJfobCZWPV8+GY= Subject key identifier: 0B:50:F0:8E:F0:DD:9B:8C:D8:92:FC:5F:AE:E5:7B:7F:74:CE:ED:9C Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019CC675946E678631552BDEF1C3F36EB365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1AA0 Signing time: Sat 07 Mar 2026 04:02:00 +0000 Manifest this update: Sat 07 Mar 2026 04:02:00 +0000 Manifest next update: Sun 08 Mar 2026 04:02:00 +0000 Files and hashes: 1: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 2: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 3: B-4Y5enlVk_Sd-7mbbGmudhFVWs.roa (hash: VrFv29MZjRI9WiKBoXLP+DEm/34C4C5KG6TpaM7VLEg=) 4: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 5: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 6: FpwdnH1vSeaA9IvOMd_9OlvXF-Q.roa (hash: dR81pd4Z3d3hQtP7AcMh1To0rqIYfbx/ZlCHk7Sp1DE=) 7: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 8: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: UaX/v447HLhLYaTuQXf2vZytHUedUfh5J08783R9ZU0=) 9: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 10: PWAh_2RuxDnoNmntOECVPDH6RBE.roa (hash: pdhSdMiMMvaP56G3c7nm7TelYNCSzBk95cSLrOqWNUU=) 11: QUSad9EfoyydrwUjL6UuKzZIeMg.roa (hash: VHq9puEsGA44rdNujULet4x2g3yNOAEgK6THQ2HkMZQ=) 12: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 13: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 14: _Kp7PDTcmGkJiJKewtOccSGpSgs.roa (hash: WM5hEQgIwiPSrdXKA7JsjCjXu6TD5zpoJlxCQduZru4=) 15: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 16: br6ophJ_seKpgle-GRBelvZMVCQ.roa (hash: xvaIA/IEe05JlJTHof0J+fBcnGDDmy2RurdQ52mdItM=) 17: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 18: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 19: iVHD7VIScc_bmYavlKZJ2ezNKcw.roa (hash: yVV/qMkCECkBEz4uxAU1f+pA2VYLLRt6TM3iu0HQ6aU=) 20: iytQpP8cOKt_SZr-dWu1mE4wm4s.roa (hash: yu00tFptzGFBvQTaVZf5FqouszpkfBRiVtW4WyFln90=) 21: ro4RN7jq-5YSJ6Tl2uyshgIvk0M.roa (hash: SsVpapMOjceHmjPuKSzNdDwvqoNheCyzL+Hv9TkqdM8=) 22: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 23: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) 24: zIIfu8DaVVMD0XsvOwpHzYoyB-g.roa (hash: nAFu8qJSmPstdE0SpXNpv/f9vO79bXQFH0mxColfbbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Mar 2026 04:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:c6:75:94:6e:67:86:31:55:2b:de:f1:c3:f3:6e:b3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Mar 7 04:02:00 2026 GMT Not After : Mar 8 04:02:00 2026 GMT Subject: CN=0b50f08ef0dd9b8cd892fc5faee57b7f74ceed9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:aa:66:3a:4d:8a:39:57:f8:e8:b6:4d:32:d7: cd:86:cc:d1:06:de:c1:b2:46:67:0f:07:a6:80:04: a4:02:6b:aa:fe:34:08:3d:72:55:92:ba:e2:f4:eb: e1:55:f8:f0:4e:25:c1:6d:e2:be:b0:e9:c1:db:21: 02:1b:44:30:4e:fd:d8:81:30:4b:fa:fe:43:7e:e4: b2:64:cb:e1:60:d7:50:a1:ae:b8:e9:ce:df:a7:77: 4f:90:47:b7:39:4f:9a:d6:4b:65:1c:0f:7f:c1:f6: 0b:1a:89:70:f6:a7:42:0a:70:c7:93:7d:f3:ae:2e: d9:6f:9f:e7:e7:b1:30:7a:87:c4:7e:51:39:06:6d: 78:79:60:b2:17:79:2e:b0:2e:cf:3a:b4:af:15:b7: 72:a2:28:be:bc:52:63:2e:b9:16:88:aa:37:aa:29: a4:cf:b3:31:3d:28:cf:5e:a9:9c:aa:dd:cb:95:e6: 1d:32:88:12:65:03:bf:37:ba:b0:88:6d:3e:c2:6b: d0:e8:53:cb:36:8d:4b:19:58:63:7b:d9:24:fd:47: 30:c7:90:d2:3a:ed:35:73:a9:fa:97:2f:fa:c7:30: 67:4d:39:e5:4b:16:47:e7:81:4e:88:f7:f0:f9:57: dc:ec:bf:c7:a2:7f:d0:5e:7e:71:b9:83:e5:71:c0: 27:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:50:F0:8E:F0:DD:9B:8C:D8:92:FC:5F:AE:E5:7B:7F:74:CE:ED:9C X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2f:37:91:32:12:44:f2:8c:b7:ed:9b:b0:d4:3a:12:9d:e3: e9:7d:fd:cb:90:61:83:5a:63:f1:d3:21:f7:90:87:f9:5b:16: 63:52:20:0d:42:8a:af:08:f6:f9:5b:21:aa:b2:bf:bf:d6:68: 2d:3f:8a:1d:55:ce:ac:4c:94:18:7d:ad:84:28:cd:c9:12:ae: 8b:18:c9:e6:51:f6:7e:d5:64:84:96:88:c3:39:ce:59:14:cc: f9:f1:14:f9:43:81:e0:f6:56:2c:a9:a2:28:30:7c:95:41:c9: 31:f9:70:58:a6:98:84:fc:e8:79:e0:cc:c3:63:68:12:87:ab: f9:6a:3c:6c:28:03:d4:1b:91:57:08:c4:0a:1a:3f:ab:c3:cf: de:c9:21:9a:8f:d7:6b:c6:1b:eb:ed:c1:62:81:be:d3:25:1b: e6:3b:80:63:56:54:a8:2d:50:8d:0b:60:df:b0:07:a9:14:b0: 50:78:66:f7:75:a6:c1:98:96:a2:f2:f4:bb:dc:95:cb:1a:f4: 3b:73:58:b2:09:0c:7a:32:b9:29:2c:4d:e0:a1:c8:ec:74:a2: d1:56:c6:d8:55:ca:9a:ae:0f:21:40:f3:f8:cc:e4:67:2d:3e: 01:52:03:74:85:1d:19:ee:00:bc:76:00:5a:08:30:99:de:b1: df:67:74:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzGdZRuZ4YxVSve8cPzbrNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMzA3MDQwMjAwWhcNMjYwMzA4MDQwMjAwWjAzMTEwLwYDVQQD EygwYjUwZjA4ZWYwZGQ5YjhjZDg5MmZjNWZhZWU1N2I3Zjc0Y2VlZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KpmOk2KOVf46LZNMtfNhszRBt7B skZnDwemgASkAmuq/jQIPXJVkrri9OvhVfjwTiXBbeK+sOnB2yECG0QwTv3YgTBL +v5DfuSyZMvhYNdQoa646c7fp3dPkEe3OU+a1ktlHA9/wfYLGolw9qdCCnDHk33z ri7Zb5/n57EweofEflE5Bm14eWCyF3kusC7POrSvFbdyoii+vFJjLrkWiKo3qimk z7MxPSjPXqmcqt3LleYdMogSZQO/N7qwiG0+wmvQ6FPLNo1LGVhje9kk/Ucwx5DS Ou01c6n6ly/6xzBnTTnlSxZH54FOiPfw+Vfc7L/Hon/QXn5xuYPlccAnxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtQ8I7w3ZuM2JL8X67le390zu2cMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC83kTIS RPKMt+2bsNQ6Ep3j6X39y5Bhg1pj8dMh95CH+VsWY1IgDUKKrwj2+VshqrK/v9Zo LT+KHVXOrEyUGH2thCjNyRKuixjJ5lH2ftVkhJaIwznOWRTM+fEU+UOB4PZWLKmi KDB8lUHJMflwWKaYhPzoeeDMw2NoEoer+Wo8bCgD1BuRVwjECho/q8PP3skhmo/X a8Yb6+3BYoG+0yUb5juAY1ZUqC1QjQtg37AHqRSwUHhm93WmwZiWovL0u9yVyxr0 O3NYsgkMejK5KSxN4KHI7HSi0VbG2FXKmq4PIUDz+MzkZy0+AVIDdIUdGe4AvHYA Wggwmd6x32d02Q== -----END CERTIFICATE-----Generated at Sat Mar 7 14:38:37 2026 by rpki-client