$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json) Hash identifier: 2YabnNNwZT6gIdeAXz8yUiYh+DcXEJYZ8O1s9piU5gU= Subject key identifier: 81:95:C4:2E:A2:FB:DE:75:90:50:9C:04:B3:20:49:D4:CA:11:10:84 Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Certificate serial: 01A089B0E853075526856076079B9A2E8DB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft Manifest number: 09D5 Signing time: Thu 10 Sep 2026 05:01:07 +0000 Manifest this update: Thu 10 Sep 2026 05:01:07 +0000 Manifest next update: Fri 11 Sep 2026 05:01:07 +0000 Files and hashes: 1: 1-EbrvxNY7jUJJte1JMBcOC69EBk.roa (hash: /M4gkvV/7tnw4BlBdpuc1viYnL0XhtHAFXwLDGq3QCg=) 2: NjOJ8tUpqLJAAfHhfTTwUysAm7s.roa (hash: 3a42jEcgSU6c6ZDozj7GhmcER8SN0dScIEdBDzntTP4=) 3: OA81K4GFXKVrjD-M584jTyFYST8.roa (hash: C4S9fMtXlXuIFqggmB3QlimOTqdUpyywlGKQgdOtY5w=) 4: YpbC5jk8lzSJpred_IHkkCVUCKE.roa (hash: Zo4+zcIWbT83bhve20wlbO77GzQpKYPsD28KLD9jN8Y=) 5: YxQb53gzYd0iTmUe7A41D-2rnY8.roa (hash: q+Z1iMu62RV5K/wK7fU9JbtFm1jSO7NLnuxYy0Ettbk=) 6: h_aNMTHSod3zvEv_zlqSsdV20TQ.roa (hash: GccHbmvEFlhiHjnJ+i3nG2pD81e9dD/oLrnSrArj6ig=) 7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: pNjeNjXBDp8pJOFzGcXnAENvF2xWYOGblGyjSsX1ws8=) 8: oh53IB-aUH2plypNUq8_qw59tUU.roa (hash: k/rLC3QFD8nEmci+tQAmE7NOGPMxS4KDVOpLNqgFsg4=) 9: ondT0lA34VONX208YudOD0r79Fo.roa (hash: Q5xYjBiSMcwIIASL37DpTBEnCFikNHHBxM8KVMbJfYU=) 10: vyjCA1W9-6KFsgjaGvfzXuiMYLQ.roa (hash: 7JV7egLgY4Bzr/UvgYj0RPwIqhuXjEo3YWECD7QdwW0=) 11: wtolA6HMGVvPA6gYljfUXhGgO9w.roa (hash: 9lH1rM52hRaE2Kxe2ZgcgE2kAZOcfeGaiUJXArzl1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:b0:e8:53:07:55:26:85:60:76:07:9b:9a:2e:8d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7 Validity Not Before: Sep 10 05:01:07 2026 GMT Not After : Sep 11 05:01:07 2026 GMT Subject: CN=8195c42ea2fbde7590509c04b32049d4ca111084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:f8:9c:37:b9:ba:29:43:cc:7c:d8:0b:e0: 47:d0:68:66:c0:ad:1e:c4:56:8b:bf:ef:21:c9:e1: 9e:c6:93:c3:c8:91:8d:95:5d:70:46:99:8e:5f:a9: 04:6c:c7:1a:85:e5:45:b0:37:e9:49:28:83:99:01: 6b:45:73:23:1d:6c:67:47:c6:39:ac:bc:71:ae:7f: e9:9f:72:02:07:47:0f:b1:cb:91:58:26:b9:1c:94: a0:b4:fa:b4:88:a3:d5:31:8b:3d:11:98:ad:48:64: 16:97:80:8f:2a:98:67:bc:9b:eb:8e:82:d6:a9:29: a5:90:ec:e1:df:71:6e:93:9d:d5:cf:85:a9:b0:08: d8:e2:1e:96:06:78:f1:5b:fe:21:b0:18:9c:37:f0: f9:7a:8b:fc:dd:e2:87:07:ee:81:54:58:b8:ad:a7: 06:74:2d:79:cb:d2:60:07:2c:51:da:a8:7b:72:a7: cf:af:0d:25:0f:5d:83:3c:02:f9:2e:ba:9e:71:25: 08:62:77:7e:9e:3d:7b:f4:6a:4d:a9:31:57:9a:61: 0e:5e:69:ab:00:77:f5:ee:54:7a:93:22:a9:47:1c: 5e:57:7c:86:85:88:bf:19:f7:09:3f:e5:d9:55:da: a8:40:83:ac:8d:a8:13:94:ad:51:a9:47:fe:c4:8e: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:95:C4:2E:A2:FB:DE:75:90:50:9C:04:B3:20:49:D4:CA:11:10:84 X509v3 Authority Key Identifier: keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:8d:bb:72:e7:8a:9e:15:2b:be:68:64:7d:c7:43:0b:b4:7c: c9:cc:82:97:02:18:76:08:2b:dd:e0:35:ad:cb:bf:b6:af:0c: 1c:70:fe:25:52:f7:dd:89:18:2f:95:e8:90:88:b1:d5:c4:ce: ff:5b:45:93:fc:a8:85:fa:fe:51:6a:d7:74:87:1b:f0:17:ba: 17:19:47:bd:5f:3a:e1:22:36:6d:ff:38:e4:d4:3b:d1:28:7c: 55:ba:3c:19:6e:2c:f2:b8:1a:ae:b6:8a:65:6b:ca:0a:ec:55: 24:ad:74:25:ca:59:87:06:68:11:f0:93:6f:cb:a0:66:4c:4a: 13:9e:a5:4b:9f:a7:d1:38:67:ed:88:e9:df:50:3b:3b:f7:a5: 0a:6a:14:19:46:d1:7e:9b:76:31:79:8b:e8:58:50:31:28:01: c6:38:9d:e1:c4:3c:92:92:4c:cc:03:5a:ef:8c:43:3a:fd:2d: 1a:3e:d7:38:9b:bc:1c:a7:2b:fc:8b:cc:60:6d:fe:66:63:67: 2d:b5:a6:c3:14:c6:cc:5b:e4:ce:38:74:1e:5d:fe:ee:0d:47: de:80:2c:24:45:8e:30:ce:e5:8c:d3:28:ce:44:1f:01:69:d6: ba:01:eb:da:4c:4c:4a:15:e7:c3:c8:50:06:c8:06:5e:a4:37: 2f:bb:90:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJsOhTB1UmhWB2B5uaLo24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMjRjY2RkNzBmM2VjNzYyY2JkNjVlMDRkZDZmNzZiZTIz NmE4YTcwHhcNMjYwOTEwMDUwMTA3WhcNMjYwOTExMDUwMTA3WjAzMTEwLwYDVQQD Eyg4MTk1YzQyZWEyZmJkZTc1OTA1MDljMDRiMzIwNDlkNGNhMTExMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhH4nDe5uilDzHzYC+BH0GhmwK0e xFaLv+8hyeGexpPDyJGNlV1wRpmOX6kEbMcaheVFsDfpSSiDmQFrRXMjHWxnR8Y5 rLxxrn/pn3ICB0cPscuRWCa5HJSgtPq0iKPVMYs9EZitSGQWl4CPKphnvJvrjoLW qSmlkOzh33Fuk53Vz4WpsAjY4h6WBnjxW/4hsBicN/D5eov83eKHB+6BVFi4racG dC15y9JgByxR2qh7cqfPrw0lD12DPAL5LrqecSUIYnd+nj179GpNqTFXmmEOXmmr AHf17lR6kyKpRxxeV3yGhYi/GfcJP+XZVdqoQIOsjagTlK1RqUf+xI5V3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGVxC6i+951kFCcBLMgSdTKERCEMB8GA1UdIwQY MBaAFKEkzN1w8+x2LL1l4E3W92viNqinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEt N2IzNTM5N2FmMmY3LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjk0YjgtODIxMS00YzA2LTljODEtN2IzNTM5N2FmMmY3 LzEvb1NUTTNYRHo3SFlzdldYZ1RkYjNhLUkycUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE427cueK nhUrvmhkfcdDC7R8ycyClwIYdggr3eA1rcu/tq8MHHD+JVL33YkYL5XokIix1cTO /1tFk/yohfr+UWrXdIcb8Be6FxlHvV864SI2bf845NQ70Sh8Vbo8GW4s8rgarraK ZWvKCuxVJK10JcpZhwZoEfCTb8ugZkxKE56lS5+n0Thn7Yjp31A7O/elCmoUGUbR fpt2MXmL6FhQMSgBxjid4cQ8kpJMzANa74xDOv0tGj7XOJu8HKcr/IvMYG3+ZmNn LbWmwxTGzFvkzjh0Hl3+7g1H3oAsJEWOMM7ljNMozkQfAWnWugHr2kxMShXnw8hQ BsgGXqQ3L7uQzw== -----END CERTIFICATE-----Generated at Thu Sep 10 12:04:59 2026 by rpki-client