$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: ALDCe+/j5sxvnJM41+S3wZhC6UWGUX0uTMsiYl3cfrE= Subject key identifier: 6F:13:B7:91:03:30:8D:37:49:E4:E9:44:07:F9:5F:D5:98:28:35:68 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 019FA0039379F235FE9EE045F271D45192E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 095C Signing time: Sun 26 Jul 2026 20:00:16 +0000 Manifest this update: Sun 26 Jul 2026 20:00:16 +0000 Manifest next update: Mon 27 Jul 2026 20:00:16 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: 847wumUIuTHrd595XSSIou4r2YFENe78c2nOnM8kzok=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 20:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:03:93:79:f2:35:fe:9e:e0:45:f2:71:d4:51:92:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Jul 26 20:00:16 2026 GMT Not After : Jul 27 20:00:16 2026 GMT Subject: CN=6f13b79103308d3749e4e94407f95fd598283568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:55:e1:46:6e:e2:ae:93:38:9b:bd:ed:ab: 37:71:26:65:9e:a1:f8:40:50:78:08:55:c8:f6:f9: 14:53:07:a0:b6:30:ac:03:8a:4b:14:e1:98:55:8b: 8f:32:5d:4c:56:5f:36:a9:c1:de:ae:d6:f0:e8:cb: 0c:7e:76:c6:81:8f:4d:b1:da:ab:a0:33:74:64:d0: 37:4e:40:d2:5f:ba:c9:cb:2e:46:6f:98:c2:55:02: 01:33:a7:5d:cd:7e:2c:b0:13:e9:b0:46:9a:a7:09: fc:21:c5:6b:40:4a:09:0c:43:82:ab:ef:c2:36:65: 15:b0:b3:c7:f8:89:41:39:30:64:33:93:d4:5c:49: 65:32:64:b3:f2:b7:94:59:0c:23:97:7e:a1:db:76: db:f6:00:e7:e5:ac:da:94:8c:01:11:7a:8c:ad:7a: b1:23:2f:f0:e1:eb:67:86:fc:df:b1:81:6d:d1:b5: 84:3b:77:de:74:dd:39:d8:00:06:ae:76:dc:05:66: fb:6e:d6:d2:6a:34:a7:0d:1d:9f:95:bf:6d:80:26: fe:03:79:99:43:2e:1b:56:01:7d:c6:e4:41:47:ab: 48:56:75:4c:b7:ba:72:03:99:fe:0c:f6:4c:04:ca: 99:43:7b:1a:9e:d8:c6:fc:1c:c1:50:6e:26:7e:e5: 1b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:13:B7:91:03:30:8D:37:49:E4:E9:44:07:F9:5F:D5:98:28:35:68 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:fb:a2:33:a6:cf:0b:62:db:c1:48:16:98:8c:a0:2a:db:f5: 83:75:11:f5:81:5a:45:57:76:d0:c6:20:05:cb:fc:ff:38:5a: f6:66:af:1b:35:2c:d6:af:c6:80:23:88:93:3b:30:cb:53:0c: 1a:de:cc:5a:94:06:78:d2:da:97:86:58:45:f4:73:88:13:ab: a2:5d:7e:66:0c:3d:e0:93:51:6c:23:cd:97:88:e7:cc:bd:69: 08:ab:5a:ab:4c:d3:e5:9d:eb:8b:b1:25:0b:92:b3:8d:72:dd: 70:17:48:e5:65:19:c1:8e:a3:27:d8:f9:cb:4c:63:5e:70:5c: a1:a7:b2:da:91:3f:97:c1:6c:5a:1a:0a:36:9c:52:4f:87:34: 49:47:b6:99:4d:fb:f5:af:4d:f8:05:9b:bd:85:03:e9:77:08: 3a:cf:e3:35:30:4b:a2:c8:93:90:20:00:28:36:56:b7:6d:1c: 5b:a3:60:ac:2c:fe:60:6d:6e:a6:27:ee:c1:b3:bc:e2:4a:9e: bc:6a:0d:85:cb:df:9b:89:93:b3:a0:8d:49:eb:a0:f0:45:c3: 3f:59:80:85:d7:98:4d:66:3a:63:d1:d1:9c:e5:f0:1d:d3:42: aa:d9:fd:3c:b7:eb:8b:8a:4b:28:9b:b2:07:c5:b4:c8:61:d6: e9:ed:48:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gA5N58jX+nuBF8nHUUZLjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwNzI2MjAwMDE2WhcNMjYwNzI3MjAwMDE2WjAzMTEwLwYDVQQD Eyg2ZjEzYjc5MTAzMzA4ZDM3NDllNGU5NDQwN2Y5NWZkNTk4MjgzNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi9V4UZu4q6TOJu97as3cSZlnqH4 QFB4CFXI9vkUUwegtjCsA4pLFOGYVYuPMl1MVl82qcHertbw6MsMfnbGgY9Nsdqr oDN0ZNA3TkDSX7rJyy5Gb5jCVQIBM6ddzX4ssBPpsEaapwn8IcVrQEoJDEOCq+/C NmUVsLPH+IlBOTBkM5PUXEllMmSz8reUWQwjl36h23bb9gDn5azalIwBEXqMrXqx Iy/w4etnhvzfsYFt0bWEO3fedN052AAGrnbcBWb7btbSajSnDR2flb9tgCb+A3mZ Qy4bVgF9xuRBR6tIVnVMt7pyA5n+DPZMBMqZQ3santjG/BzBUG4mfuUbAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8Tt5EDMI03SeTpRAf5X9WYKDVoMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfuiM6bP C2LbwUgWmIygKtv1g3UR9YFaRVd20MYgBcv8/zha9mavGzUs1q/GgCOIkzswy1MM Gt7MWpQGeNLal4ZYRfRziBOrol1+Zgw94JNRbCPNl4jnzL1pCKtaq0zT5Z3ri7El C5KzjXLdcBdI5WUZwY6jJ9j5y0xjXnBcoaey2pE/l8FsWhoKNpxST4c0SUe2mU37 9a9N+AWbvYUD6XcIOs/jNTBLosiTkCAAKDZWt20cW6NgrCz+YG1upifuwbO84kqe vGoNhcvfm4mTs6CNSeug8EXDP1mAhdeYTWY6Y9HRnOXwHdNCqtn9PLfri4pLKJuy B8W0yGHW6e1InA== -----END CERTIFICATE-----Generated at Mon Jul 27 02:04:00 2026 by rpki-client