$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: seDfclOAchAUZlsn6AgoS5eWLh1ilcQlbgz7lpB0jZw= Subject key identifier: 9C:25:0C:68:60:97:38:41:9E:D1:2D:64:F6:2F:AD:28:D5:3D:01:B7 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 01A08D1FC5369C7EFEFF2F7764059E3DA1B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1A73 Signing time: Thu 10 Sep 2026 21:01:04 +0000 Manifest this update: Thu 10 Sep 2026 21:01:04 +0000 Manifest next update: Fri 11 Sep 2026 21:01:04 +0000 Files and hashes: 1: 1-NctZe8vhMIEpxqRZfogneyZnss.roa (hash: O9B7bZUbmdxOtEzLWoybtmceSxfD5CNuo8HAAtzb55I=) 2: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=) 3: BRXS8WksgQGorqrTdTtIcF8abbc.roa (hash: H6oWB2BSrLhU8bgXcNznIqpE1qVSjPaDVS8xGNQ6mzg=) 4: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: a07W/17Ih+bB0GZbjNuDty6+yXuth2KIBlogsiBNZ3o=) 5: QOSsFP4pJdHyAdvhrxqntGTF7CM.roa (hash: ssD4wTN37iJatIhwr04F+twAvK3unQGE6FHRrwNf19Y=) 6: XmiRYshUyB2akhlLCuIKj5Mc-zY.roa (hash: 5H0zHiziwXNzgkD5ITdW8jtnCIOr1tqVB5AZu+3gNBk=) 7: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=) 8: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=) 9: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=) 10: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=) 11: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8d:1f:c5:36:9c:7e:fe:ff:2f:77:64:05:9e:3d:a1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Sep 10 21:01:04 2026 GMT Not After : Sep 11 21:01:04 2026 GMT Subject: CN=9c250c68609738419ed12d64f62fad28d53d01b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:56:09:3c:b6:52:d1:05:9d:51:32:c3:b8:68: 20:ee:17:38:4e:61:65:64:ad:ae:0a:46:6f:43:85: dc:f3:00:56:31:26:a9:cf:4b:f7:7c:44:ce:bf:d1: 5b:54:13:1c:a9:22:db:5f:77:1a:a9:63:f5:c7:ca: ae:2a:95:27:7c:7f:7d:d4:21:9d:d5:21:0c:f7:9d: 01:88:d6:16:31:05:fb:0b:fe:0a:1e:63:0d:b4:24: 1c:c3:39:ea:61:0f:60:df:9e:77:e4:b5:3f:75:0b: 30:29:25:f3:cb:fa:6d:04:0b:39:80:25:1e:19:91: 1f:43:72:90:cd:b4:71:e6:3b:02:bd:bd:80:f4:40: e7:ae:74:6e:26:65:9c:f1:b9:3a:29:35:54:5d:3c: ad:c9:30:a9:43:6d:ee:0f:3b:bf:ce:2c:e8:7b:22: 31:53:80:21:06:b9:d7:de:04:84:7e:ae:89:e8:99: e4:06:06:a7:a7:67:9a:8e:38:71:1c:b6:91:53:f8: 8a:7e:aa:66:c5:50:99:fd:c0:b4:51:55:33:09:30: e3:56:81:9f:8c:23:c9:5a:4a:2e:17:51:b0:f2:fe: aa:54:43:d4:a4:11:37:95:59:4e:21:ef:72:85:a2: 95:8d:2e:9a:9b:6c:ed:8a:6b:43:d0:9d:00:f1:56: 16:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:25:0C:68:60:97:38:41:9E:D1:2D:64:F6:2F:AD:28:D5:3D:01:B7 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bd:89:e9:96:6c:28:22:83:51:0e:f6:f7:f8:83:88:6c:46: 93:00:d4:82:d1:89:aa:c6:fe:3f:2c:45:5f:a5:23:b8:ed:8f: 6c:5f:66:e4:35:b1:19:1b:96:9d:f4:3d:af:d1:a5:cb:75:4d: cf:11:22:98:0b:2d:0f:66:ec:b2:36:c9:71:51:af:f9:88:54: a9:df:49:7a:13:d1:f3:77:b7:1e:12:c0:2e:04:c8:5f:9a:ab: 97:8e:69:af:38:cb:1d:2d:77:d2:e4:a0:9b:52:30:6a:1c:9a: 69:a5:51:99:6b:01:1d:60:21:2b:6b:8d:95:fd:a6:8d:49:b3: c0:a7:05:ee:fe:73:17:9a:40:dc:1c:54:b0:b6:02:17:cc:97: cc:6a:0c:eb:ed:5b:ce:e0:f9:10:5a:11:0a:94:82:b9:81:50: 5c:f9:b5:71:b8:4d:20:66:dc:20:5c:29:c1:1e:72:44:1e:6b: ca:b9:7b:b4:ee:5c:3b:19:83:5a:3e:ca:cc:ed:37:a2:60:1e: 1e:0d:4f:60:8d:ba:d1:60:96:a7:be:05:cc:90:c4:72:08:ff: 7b:5e:20:80:c4:cf:ce:ba:02:65:04:88:7c:a4:4f:86:5c:ca: e6:36:93:18:08:f5:a3:56:ec:1e:bf:10:10:06:70:e8:b0:68: 88:ad:4a:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCNH8U2nH7+/y93ZAWePaGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwOTEwMjEwMTA0WhcNMjYwOTExMjEwMTA0WjAzMTEwLwYDVQQD Eyg5YzI1MGM2ODYwOTczODQxOWVkMTJkNjRmNjJmYWQyOGQ1M2QwMWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFYJPLZS0QWdUTLDuGgg7hc4TmFl ZK2uCkZvQ4Xc8wBWMSapz0v3fETOv9FbVBMcqSLbX3caqWP1x8quKpUnfH991CGd 1SEM950BiNYWMQX7C/4KHmMNtCQcwznqYQ9g35535LU/dQswKSXzy/ptBAs5gCUe GZEfQ3KQzbRx5jsCvb2A9EDnrnRuJmWc8bk6KTVUXTytyTCpQ23uDzu/zizoeyIx U4AhBrnX3gSEfq6J6JnkBganp2eajjhxHLaRU/iKfqpmxVCZ/cC0UVUzCTDjVoGf jCPJWkouF1Gw8v6qVEPUpBE3lVlOIe9yhaKVjS6am2ztimtD0J0A8VYWPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwlDGhglzhBntEtZPYvrSjVPQG3MB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr2J6ZZs KCKDUQ729/iDiGxGkwDUgtGJqsb+PyxFX6UjuO2PbF9m5DWxGRuWnfQ9r9Gly3VN zxEimAstD2bssjbJcVGv+YhUqd9JehPR83e3HhLALgTIX5qrl45przjLHS130uSg m1IwahyaaaVRmWsBHWAhK2uNlf2mjUmzwKcF7v5zF5pA3BxUsLYCF8yXzGoM6+1b zuD5EFoRCpSCuYFQXPm1cbhNIGbcIFwpwR5yRB5ryrl7tO5cOxmDWj7KzO03omAe Hg1PYI260WCWp74FzJDEcgj/e14ggMTPzroCZQSIfKRPhlzK5jaTGAj1o1bsHr8Q EAZw6LBoiK1K3w== -----END CERTIFICATE-----Generated at Fri Sep 11 02:09:16 2026 by rpki-client