$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: pq2ymKOPYb+r6ZLXgb6GnNsEuqxzehLOs2xYgyL0MrI= Subject key identifier: CD:35:1A:F7:F6:BE:30:95:15:5F:87:8F:A6:43:B8:06:A7:85:54:EE Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019FA33BDF18414BDCD73F4D0473A5EB8E1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 19F4 Signing time: Mon 27 Jul 2026 11:00:37 +0000 Manifest this update: Mon 27 Jul 2026 11:00:37 +0000 Manifest next update: Tue 28 Jul 2026 11:00:37 +0000 Files and hashes: 1: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 2: 9OWOKSpLigen3wmL7mhYnOHGp20.roa (hash: RW363Lgc9ijutZ++Br9twiDa8reB4RMvt+oPMke+fMw=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: /1HRyoGA+VCX5QhY5SpHhBMG3DDVTyEXziZ4J6IcVm4=) 4: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 5: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 6: gcbYT709f0hgiLNirRCxsCWINg0.roa (hash: GvONaLOScpTddKmNp/ohtdFC7YpVWBMSGSchqA80EtE=) 7: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 8: qQh8Ea6WfJPSa--99ZPG599-K5o.roa (hash: lcYkdnY9FrHkVWlxdS8gfgs1tGrcmc2midRbLooz/Uc=) 9: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 10: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a3:3b:df:18:41:4b:dc:d7:3f:4d:04:73:a5:eb:8e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jul 27 11:00:37 2026 GMT Not After : Jul 28 11:00:37 2026 GMT Subject: CN=cd351af7f6be3095155f878fa643b806a78554ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:d5:3f:26:fc:c0:72:cb:a9:18:f8:d6:04: 34:c0:a6:fc:8a:8a:8f:71:88:98:aa:fa:36:85:75: 3f:52:a9:51:34:40:46:07:fc:10:4b:94:f4:82:ab: 2e:bc:4e:59:54:22:24:b1:2f:d4:fa:92:32:41:13: 3f:57:73:67:dc:7d:89:5f:f4:d4:1e:fc:48:4d:c1: b6:b8:de:ea:4f:02:73:92:e4:5e:77:60:39:70:5c: b2:0e:98:5c:05:12:7a:5a:21:2c:3e:3c:4e:ee:f2: c5:a4:cd:e0:40:ed:6a:f2:fb:13:e7:f6:30:42:a4: 2a:6c:a7:55:52:31:66:b7:f4:d9:9a:3f:de:d3:fa: 2c:23:59:9f:75:69:59:86:d3:2c:41:af:69:e2:71: 59:4f:03:c3:54:5d:a2:50:b2:81:28:52:9b:29:83: 6e:a0:36:6d:91:32:4f:1a:c4:a6:00:4a:0e:d9:97: 05:f1:19:a4:e8:26:48:ee:07:a5:79:89:28:bb:35: d8:75:53:e0:72:a4:06:e3:4b:44:2e:e4:76:70:17: 65:20:15:ba:d5:af:b8:0a:b4:47:a3:1f:47:96:7b: 1e:51:d7:b5:b3:96:af:3f:14:9d:27:f9:73:1f:49: 91:b1:38:de:64:62:ff:86:73:85:a5:09:75:28:1a: 7c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:35:1A:F7:F6:BE:30:95:15:5F:87:8F:A6:43:B8:06:A7:85:54:EE X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3a:13:17:7d:ba:4f:2e:92:dd:6b:62:30:d2:55:84:05:cb: bd:a1:a8:33:a5:16:e6:10:e9:6e:21:dd:6e:9b:e1:ef:d6:5e: f8:83:75:a4:f7:bc:83:67:5c:c9:27:0a:e6:dc:e3:ab:7c:3e: f5:f7:b9:87:e1:f8:a7:92:20:3e:15:38:a3:58:45:a8:16:88: 48:74:b7:1f:8b:7c:b3:bc:1c:9c:dd:41:e3:05:3e:e5:fb:71: 89:d3:35:75:a0:5b:da:51:a9:b1:2c:2c:24:ad:b6:2c:e3:5c: 87:9a:ff:3b:0b:a4:b5:0f:3f:61:93:62:62:27:d8:04:8a:ba: 92:af:98:f1:28:8b:e5:b1:69:a6:a3:8f:eb:6c:43:a1:ab:df: 0f:14:81:86:2e:b1:0c:5e:b5:c9:61:3d:98:37:e8:4b:fd:26: 16:d9:22:c6:0c:10:77:8c:de:41:b3:02:ea:65:8d:7c:af:44: 5a:4b:e1:60:22:66:08:5a:aa:1a:42:97:04:8e:fe:7f:3f:b5: 0a:c4:74:b7:19:ad:6c:56:5d:7f:76:d5:fe:bd:4a:fa:b7:11: a1:de:bf:84:bc:d4:49:ba:5c:8a:52:57:34:4e:d4:d3:cb:f3: 13:8e:73:ab:cf:ad:82:2e:78:3b:a3:3c:ba:26:c5:b6:20:bd: 52:41:d4:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+jO98YQUvc1z9NBHOl644dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwNzI3MTEwMDM3WhcNMjYwNzI4MTEwMDM3WjAzMTEwLwYDVQQD EyhjZDM1MWFmN2Y2YmUzMDk1MTU1Zjg3OGZhNjQzYjgwNmE3ODU1NGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrvVPyb8wHLLqRj41gQ0wKb8ioqP cYiYqvo2hXU/UqlRNEBGB/wQS5T0gqsuvE5ZVCIksS/U+pIyQRM/V3Nn3H2JX/TU HvxITcG2uN7qTwJzkuRed2A5cFyyDphcBRJ6WiEsPjxO7vLFpM3gQO1q8vsT5/Yw QqQqbKdVUjFmt/TZmj/e0/osI1mfdWlZhtMsQa9p4nFZTwPDVF2iULKBKFKbKYNu oDZtkTJPGsSmAEoO2ZcF8Rmk6CZI7geleYkouzXYdVPgcqQG40tELuR2cBdlIBW6 1a+4CrRHox9HlnseUde1s5avPxSdJ/lzH0mRsTjeZGL/hnOFpQl1KBp8twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM01Gvf2vjCVFV+Hj6ZDuAanhVTuMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzoTF326 Ty6S3WtiMNJVhAXLvaGoM6UW5hDpbiHdbpvh79Ze+IN1pPe8g2dcyScK5tzjq3w+ 9fe5h+H4p5IgPhU4o1hFqBaISHS3H4t8s7wcnN1B4wU+5ftxidM1daBb2lGpsSws JK22LONch5r/OwuktQ8/YZNiYifYBIq6kq+Y8SiL5bFppqOP62xDoavfDxSBhi6x DF61yWE9mDfoS/0mFtkixgwQd4zeQbMC6mWNfK9EWkvhYCJmCFqqGkKXBI7+fz+1 CsR0txmtbFZdf3bV/r1K+rcRod6/hLzUSbpcilJXNE7U08vzE45zq8+tgi54O6M8 uibFtiC9UkHUaA== -----END CERTIFICATE-----Generated at Mon Jul 27 12:46:52 2026 by rpki-client