$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: 4Me8BBHduNAgp5+TLRe6+BEaoNBEsOcBvgu+HVt/eCI= Subject key identifier: BB:76:CA:C3:1D:63:F9:9B:7A:B1:25:1C:57:7C:7F:C6:76:2C:0A:3E Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 01A1735D793E7894F026C02C18E00B1ABACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 0A4E Signing time: Sun 25 Oct 2026 14:01:08 +0000 Manifest this update: Sun 25 Oct 2026 14:01:08 +0000 Manifest next update: Mon 26 Oct 2026 14:01:08 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: Xh7fg+yOyFrjRfhjCKzJkfql3TckP9zbFBOVuFE4MvE=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:73:5d:79:3e:78:94:f0:26:c0:2c:18:e0:0b:1a:ba:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Oct 25 14:01:08 2026 GMT Not After : Oct 26 14:01:08 2026 GMT Subject: CN=bb76cac31d63f99b7ab1251c577c7fc6762c0a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:4e:d4:46:ad:88:5b:a7:08:36:ca:17:a6: 04:7a:e3:6f:58:2a:20:b0:b4:41:ed:49:c0:2b:c2: 84:db:c3:7d:87:27:c0:9f:52:53:06:a4:26:20:96: 0c:e6:30:2d:af:4c:09:bd:33:49:6c:28:d8:57:0e: 76:e0:2d:69:bc:f3:2e:52:65:6e:1b:f9:d6:97:31: dc:09:88:99:e6:31:eb:a9:cc:5d:18:f4:c2:5c:80: f8:80:17:35:b1:00:19:01:ea:8c:9e:1c:32:d0:67: bd:cc:1a:b5:17:0a:b7:8c:4f:08:12:f8:3b:78:ce: 31:25:82:5c:2a:9a:17:51:d4:96:d0:c5:44:8d:89: d7:fe:b7:9b:b5:8d:77:c4:4f:68:21:73:0c:33:97: bc:c3:42:e5:86:ae:e5:b1:44:79:f0:47:80:45:88: c7:36:49:51:66:64:11:3f:c3:a6:d4:8f:5a:00:ca: 13:bb:41:25:53:3b:35:5c:71:02:c2:fc:c0:b3:98: a7:6c:f7:cf:6c:19:3e:4a:20:64:f1:f4:97:73:5c: ae:25:fb:f4:8c:03:82:2c:ae:a4:ba:71:68:b6:e7: 25:a0:bd:e6:6e:83:ab:2d:52:7b:5c:be:83:c8:59: af:6d:68:41:a3:f9:e2:e7:11:90:3f:4e:c3:96:e4: 1e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:76:CA:C3:1D:63:F9:9B:7A:B1:25:1C:57:7C:7F:C6:76:2C:0A:3E X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:87:ef:6a:af:38:6e:42:dc:60:e0:c9:ca:98:3e:d1:2e:d8: 00:22:cf:51:70:c2:88:aa:77:54:36:81:b1:18:62:b3:1a:85: d2:c8:d2:c8:1f:60:ba:a0:57:ab:fa:53:bf:aa:1f:08:43:32: a0:3e:c5:b9:3c:c6:3c:84:4b:dd:fc:d2:5e:8f:b3:d4:b6:29: 8e:70:ea:a2:ef:29:de:79:53:73:24:d9:ee:15:d3:30:f8:97: d0:fe:26:c8:50:4c:98:27:df:7d:26:95:53:d6:10:05:ae:97: 3e:ae:c8:c6:7f:e1:76:f9:63:a8:95:dc:d3:f2:48:ee:d9:38: e1:9a:a1:e5:45:4f:01:51:53:33:e8:3a:34:83:e9:b0:2c:a5: b7:a2:4d:d1:fa:9d:53:98:3b:dd:9d:bc:a8:66:65:f7:c7:02: 91:22:11:26:d5:39:58:52:9a:27:ba:e2:c1:3b:47:56:21:55: 16:cf:7f:89:1c:42:77:23:0b:c4:f2:40:6c:7c:c9:06:bd:31: 66:3f:42:34:d6:db:cb:fb:f1:8a:08:55:2c:23:71:42:e6:36: f2:c8:56:bd:cb:e5:d6:7e:96:1c:35:a8:d1:1c:ef:0e:10:f2: c4:2a:6c:cb:99:f6:94:67:84:87:9e:b6:3e:d4:63:4a:e3:43: a0:7b:f4:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFzXXk+eJTwJsAsGOALGrrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYxMDI1MTQwMTA4WhcNMjYxMDI2MTQwMTA4WjAzMTEwLwYDVQQD EyhiYjc2Y2FjMzFkNjNmOTliN2FiMTI1MWM1NzdjN2ZjNjc2MmMwYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO5O1EatiFunCDbKF6YEeuNvWCog sLRB7UnAK8KE28N9hyfAn1JTBqQmIJYM5jAtr0wJvTNJbCjYVw524C1pvPMuUmVu G/nWlzHcCYiZ5jHrqcxdGPTCXID4gBc1sQAZAeqMnhwy0Ge9zBq1Fwq3jE8IEvg7 eM4xJYJcKpoXUdSW0MVEjYnX/rebtY13xE9oIXMMM5e8w0Llhq7lsUR58EeARYjH NklRZmQRP8Om1I9aAMoTu0ElUzs1XHECwvzAs5inbPfPbBk+SiBk8fSXc1yuJfv0 jAOCLK6kunFotucloL3mboOrLVJ7XL6DyFmvbWhBo/ni5xGQP07DluQeyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLt2ysMdY/mberElHFd8f8Z2LAo+MB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARofvaq84 bkLcYODJypg+0S7YACLPUXDCiKp3VDaBsRhisxqF0sjSyB9guqBXq/pTv6ofCEMy oD7FuTzGPIRL3fzSXo+z1LYpjnDqou8p3nlTcyTZ7hXTMPiX0P4myFBMmCfffSaV U9YQBa6XPq7Ixn/hdvljqJXc0/JI7tk44Zqh5UVPAVFTM+g6NIPpsCylt6JN0fqd U5g73Z28qGZl98cCkSIRJtU5WFKaJ7riwTtHViFVFs9/iRxCdyMLxPJAbHzJBr0x Zj9CNNbby/vxighVLCNxQuY28shWvcvl1n6WHDWo0RzvDhDyxCpsy5n2lGeEh562 PtRjSuNDoHv0pQ== -----END CERTIFICATE-----Generated at Mon Oct 26 00:51:07 2026 by rpki-client