$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json) Hash identifier: wPRmjUh3bKhM4hU5OavaNT/+h7x6ys3NoNDACfdhlRA= Subject key identifier: 2B:57:A3:C7:8D:F3:36:D8:88:B9:30:F9:EC:71:0B:62:F7:24:AC:30 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019E8F80E47FAF8480802E8D1C23584115E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft Manifest number: 19A7 Signing time: Wed 03 Jun 2026 22:00:49 +0000 Manifest this update: Wed 03 Jun 2026 22:00:49 +0000 Manifest next update: Thu 04 Jun 2026 22:00:49 +0000 Files and hashes: 1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=) 2: 1-MVE0P8P9kGWpbc5r_rVaZZuUSY.roa (hash: 9734hbydI01Mysv+mFWjt5Qw9lCJrYHGrFA7e8epJuo=) 3: 1-TiFvh7L9BQVK4wRLUj5HxxK24U.roa (hash: PTObSICX6ACJJQG4goDLXWCQj+8arc/GovctzTFGHic=) 4: 28MnuBuWMkf8YOUEK1t42dzS8iY.roa (hash: eMlMHl46n0Zt6mHyAMkeO9Sq3gX3a6oaKFf2QAyBvEs=) 5: 4P1pKbRQtxYvx-OI1i8SlS6xn-A.roa (hash: ahPJwTVvmFqQJbgCwRR8jIWKid4w8OOrLTpMnnWap4w=) 6: JNZCYSb0eX2LiAhwYWr792VZYyk.roa (hash: 8a/oxkbq80RN3ANPAzfwubbSf0KUQs2EZXuphhCoNP8=) 7: NJdPEsRzBxO2VbHj5tvn2cXKuQA.roa (hash: A3DXVRJnM+h7lL3sFBinNcnEr1bSnaMm7soZfAxHCyk=) 8: SlNzNAWQdSW1IXPYXxVEUC7qRfc.roa (hash: WpTmgBPaPSdZUg8IGZa3ER3Cw4ur6gg0dInqBPFiAuI=) 9: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=) 10: U8heiNj-1DXPnLIJw67QF28AxV4.roa (hash: 5br3lEsUqAMI9+vMDkaT1x3v1/JBeCswqWMLa9dVmwI=) 11: ZXcMeeipBn7sUUJEU91rzEI17zk.roa (hash: 5bsppIb2wCZVXZGFfEu5mwku1Y7/zmbNHcXjdaosbrc=) 12: fJuTGRvozfm4_e0aUam0wS-AlPw.roa (hash: Z1Mjes1iDe2mLSTG+5DMRvvdh4aNMNzB1Vnh815bgHo=) 13: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: BQfNbrzy4ynTCwQwOXkbwtv13BcaNxElx4xVt0WVqZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:8f:80:e4:7f:af:84:80:80:2e:8d:1c:23:58:41:15:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Jun 3 22:00:49 2026 GMT Not After : Jun 4 22:00:49 2026 GMT Subject: CN=2b57a3c78df336d888b930f9ec710b62f724ac30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:fc:b8:6c:f1:a7:e9:fd:72:90:f4:8c:e7: 89:81:74:37:b8:de:e8:ae:a3:e3:2c:3f:9d:60:43: 94:66:94:93:59:1d:1c:d9:25:58:c1:3e:a4:25:0d: a2:ed:b4:22:b4:f3:f6:31:01:36:7e:37:af:5e:1a: be:3e:a9:2b:18:da:13:06:f8:54:2f:ec:99:71:56: d5:da:5a:da:85:91:56:3b:de:fc:38:4e:33:71:3d: 0e:d1:41:f6:5f:db:0b:de:77:c9:47:17:c2:50:27: 22:f9:82:4e:4c:a8:f3:92:16:46:7e:52:80:39:14: be:82:1a:ab:24:85:67:25:7c:f0:4d:ef:92:a9:79: 47:11:b4:c7:31:3c:67:7d:62:5f:1d:a5:eb:17:f8: da:a5:34:a2:ce:09:48:db:e2:19:61:c6:df:bc:e3: b0:b2:17:47:a9:d0:74:3c:85:69:12:ff:97:6a:d5: 85:59:8c:5f:61:f6:3c:fe:10:9d:ab:ca:34:bb:79: 1d:69:3d:fe:6c:ac:c7:ff:35:6e:d5:82:6a:6b:69: 53:38:14:80:a7:d9:f3:94:d5:82:d9:2e:f0:a3:ed: 3e:b3:f3:8a:9b:e5:8a:39:2d:52:46:50:b2:2a:e5: 29:a5:da:8d:ed:b4:26:e4:15:10:30:72:83:f9:f8: d4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:57:A3:C7:8D:F3:36:D8:88:B9:30:F9:EC:71:0B:62:F7:24:AC:30 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:94:97:86:2c:21:d4:13:88:ea:a9:ce:0a:e5:84:ac:59:8d: ac:31:ee:21:6b:72:36:1a:2d:43:fb:53:59:81:fe:16:ee:c5: 82:b9:f6:89:ae:df:be:05:e1:44:4f:aa:22:29:4d:ed:c4:77: f2:37:f4:b4:66:5d:36:97:d7:da:96:61:37:c4:db:f2:d7:32: a9:16:5b:87:f7:cc:f2:9c:4c:6d:cf:d8:9e:42:6e:e0:18:ba: bb:77:79:1e:0c:c7:0b:3b:ca:28:02:4f:69:75:30:0c:5f:fa: 4a:83:84:33:62:00:de:f7:2d:93:d1:1c:67:82:32:c3:24:81: df:a8:dc:b5:fd:d6:98:2c:be:f4:05:0e:37:0d:86:a8:74:5a: 1d:d3:14:56:ea:26:12:d8:ff:ea:f7:c8:46:9e:ff:08:71:ec: 31:55:06:10:ba:95:42:48:ff:bb:ff:43:55:a1:33:ac:32:00: d9:d5:5d:39:19:23:4a:ef:e0:23:05:ae:7d:07:79:aa:f5:b8: 2f:dc:fc:79:fb:68:90:e2:1d:78:0d:11:4e:9d:ec:8d:de:53: bb:e1:d5:fc:b1:13:2f:f7:24:df:52:a9:df:00:55:3c:63:52: 0c:5c:86:d9:fc:0b:6e:e0:a3:04:0e:2f:75:41:ed:4d:dc:44: de:94:06:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6PgOR/r4SAgC6NHCNYQRXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjYwNjAzMjIwMDQ5WhcNMjYwNjA0MjIwMDQ5WjAzMTEwLwYDVQQD EygyYjU3YTNjNzhkZjMzNmQ4ODhiOTMwZjllYzcxMGI2MmY3MjRhYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJL8uGzxp+n9cpD0jOeJgXQ3uN7o rqPjLD+dYEOUZpSTWR0c2SVYwT6kJQ2i7bQitPP2MQE2fjevXhq+PqkrGNoTBvhU L+yZcVbV2lrahZFWO978OE4zcT0O0UH2X9sL3nfJRxfCUCci+YJOTKjzkhZGflKA ORS+ghqrJIVnJXzwTe+SqXlHEbTHMTxnfWJfHaXrF/japTSizglI2+IZYcbfvOOw shdHqdB0PIVpEv+XatWFWYxfYfY8/hCdq8o0u3kdaT3+bKzH/zVu1YJqa2lTOBSA p9nzlNWC2S7wo+0+s/OKm+WKOS1SRlCyKuUppdqN7bQm5BUQMHKD+fjU1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtXo8eN8zbYiLkw+exxC2L3JKwwMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJSXhiwh 1BOI6qnOCuWErFmNrDHuIWtyNhotQ/tTWYH+Fu7Fgrn2ia7fvgXhRE+qIilN7cR3 8jf0tGZdNpfX2pZhN8Tb8tcyqRZbh/fM8pxMbc/YnkJu4Bi6u3d5HgzHCzvKKAJP aXUwDF/6SoOEM2IA3vctk9EcZ4IywySB36jctf3WmCy+9AUONw2GqHRaHdMUVuom Etj/6vfIRp7/CHHsMVUGELqVQkj/u/9DVaEzrDIA2dVdORkjSu/gIwWufQd5qvW4 L9z8eftokOIdeA0RTp3sjd5Tu+HV/LETL/ck31Kp3wBVPGNSDFyG2fwLbuCjBA4v dUHtTdxE3pQGww== -----END CERTIFICATE-----Generated at Thu Jun 4 09:02:55 2026 by rpki-client