$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json) Hash identifier: y4nEqDzOXLDBugHASm354cKU9ZLTcVgnlNHSts9JQVo= Subject key identifier: 08:8F:A8:32:D3:26:91:36:B7:66:3A:B3:8C:89:9D:12:37:A0:1E:43 Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 01A1611FED1A32D10761C0564594B4D3988E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft Manifest number: 1B79 Signing time: Thu 22 Oct 2026 01:00:44 +0000 Manifest this update: Thu 22 Oct 2026 01:00:44 +0000 Manifest next update: Fri 23 Oct 2026 01:00:44 +0000 Files and hashes: 1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=) 2: 0x0ycIqzsEV14i4HIEVGA1Et-mM.roa (hash: ZJXAabgANIuAsLmcSSkOslqdNfqMZ/P+HTqBw6xDzmo=) 3: 15YRYk0OOsur4nmbjHzqrTrzfeQ.roa (hash: WZaueawVRKmmS1Xzndpi76+h8hyQuijG+xnuMLZ7DTo=) 4: 1aAL_GJtYIFnHflfbrLzTlue0yw.roa (hash: kA7YUO6rf34JuUj3z+2XycfLdAqe0ainyswO+tkNzMk=) 5: 7gLto2IkIvK_Y0NzRF8cHPmXQx0.roa (hash: LqscU9BLfMPkDhJUsV2F3O0xnc3dz85z5t65L9irr1A=) 6: AIbgyj5rJwPTdoMqpUx7rJPOJ8M.roa (hash: U67iM3Cy3xcIqgxJAbYo314HCWTV25q08Le26IrCtYQ=) 7: DCN7qq4wPLzRUWn0H0_q8xdc-DY.roa (hash: Fha9F1jlvF4i34DBSAcNOAKm7lGCGHp/5Ske1Q3szcg=) 8: JNZCYSb0eX2LiAhwYWr792VZYyk.roa (hash: 8a/oxkbq80RN3ANPAzfwubbSf0KUQs2EZXuphhCoNP8=) 9: Ja3rDxt90AroBt3QfGvg-I25W6o.roa (hash: rzFqZxATN8r1OfbR2IwYqqAdReVkWGyQF7aAc3rl7gY=) 10: QExjoLylxMIqVVNfSEYkARZyz7U.roa (hash: 7iGfr/QBgeT25Fs3rvsgXcj+O/42b1zpo4696Ym+dwQ=) 11: RVdAZHtzLerkUGY6dKLQ4-X1Rqw.roa (hash: d1Zz/Bg2xzBbSD2J97vo2VF0QZE/OLkxbprIsAfGWTg=) 12: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=) 13: U8heiNj-1DXPnLIJw67QF28AxV4.roa (hash: 5br3lEsUqAMI9+vMDkaT1x3v1/JBeCswqWMLa9dVmwI=) 14: UTOb4-f09XHl6Pk5agaVquGXszo.roa (hash: bQmABvXyichv92sPSG8W8wQDzRAXdtIXBwm8IMdKld8=) 15: cw3p8OtDCLlC1go49KS1_MxGpnE.roa (hash: Jr8ERSNb16dhdPHQwE9WASS0GyFbBKLbh+bPj3R8bhI=) 16: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: GvgiaF4YQc1HBsPuQeNmyrMwRSIWm9ibudyOZJ/4Q1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 23:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:61:1f:ed:1a:32:d1:07:61:c0:56:45:94:b4:d3:98:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Oct 22 01:00:44 2026 GMT Not After : Oct 23 01:00:44 2026 GMT Subject: CN=088fa832d3269136b7663ab38c899d1237a01e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:78:29:f6:b1:dc:fb:d7:0c:85:59:e0:fe: 5d:94:b6:c0:b2:7d:69:56:9c:62:d4:af:78:26:de: 7e:b3:e0:5c:d6:f2:45:d9:ff:ba:e7:00:de:82:44: b9:62:70:ac:63:ef:23:a3:5a:a5:e9:a5:67:36:b3: 12:ce:d9:a9:cf:a0:74:0e:f3:31:ca:4d:59:db:ae: 4b:33:24:be:00:63:83:78:86:68:49:f3:77:0a:da: 19:0f:4d:13:a9:58:ee:6b:d9:d1:f4:1a:02:70:9e: 9f:48:1d:54:f9:ae:cd:47:ec:8b:d2:90:87:b5:23: bd:51:79:e2:71:4c:50:1a:41:e9:6b:15:7e:d2:bb: 04:4f:df:0f:5a:21:2b:48:d3:ed:3f:df:ad:b0:13: e4:75:63:90:e9:18:6b:bd:1a:5b:85:1d:f1:7a:87: 02:53:c8:db:86:e6:60:b4:51:a2:ea:7f:5b:0e:fa: 91:7e:75:e1:db:6a:76:5a:95:99:0e:9e:a3:69:24: 3e:25:73:d6:97:7f:28:b1:36:28:e9:e3:26:68:3f: 80:b6:d4:58:c7:95:4f:c5:f0:4a:c5:5e:32:16:de: 7d:14:62:19:e6:9d:54:02:a5:01:95:44:80:3a:0f: e8:85:7a:0e:fe:12:7b:04:79:20:bb:0e:aa:96:0c: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8F:A8:32:D3:26:91:36:B7:66:3A:B3:8C:89:9D:12:37:A0:1E:43 X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:15:a5:d8:af:2e:99:03:0e:37:37:02:3d:3d:37:da:45:3c: ca:f3:95:df:9c:d0:c1:16:ba:80:38:4d:b6:d5:ef:7a:91:db: eb:f1:d4:6e:81:ef:9f:d2:74:79:89:28:e5:c9:36:cc:ac:92: 3e:41:18:6c:b4:2c:a2:1d:a7:42:5b:f2:2a:19:f0:3a:76:7e: 32:16:55:f8:73:af:18:4c:f2:07:04:59:51:61:f2:a5:e1:49: 2c:ee:8b:69:51:fc:58:59:28:74:1f:a0:e1:5e:34:06:d3:d2: d1:17:d1:07:28:b9:ae:12:79:14:da:59:62:ec:5e:fc:a8:90: 96:b5:48:06:7b:4a:2a:07:20:2f:df:a8:aa:44:3b:63:af:f2: f1:d4:c9:fd:f4:ab:16:be:bd:f3:d1:75:e5:7c:9b:7f:80:35: e0:f7:cf:91:7b:85:3e:07:e2:76:b8:ac:c2:48:42:2a:df:49: 0e:d8:29:0e:77:d0:9d:3d:54:bb:6d:98:63:e4:02:31:24:fc: 1e:89:8b:c9:5d:f8:0b:26:ec:35:42:09:48:85:1f:88:c5:a9: a5:08:b6:d9:34:22:f2:56:ed:60:e9:a6:53:92:72:60:55:e3: ec:1e:5d:d2:da:09:47:17:c9:b4:bc:ea:d9:f2:a0:16:b1:9e: da:0e:60:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFhH+0aMtEHYcBWRZS005iOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjYxMDIyMDEwMDQ0WhcNMjYxMDIzMDEwMDQ0WjAzMTEwLwYDVQQD EygwODhmYTgzMmQzMjY5MTM2Yjc2NjNhYjM4Yzg5OWQxMjM3YTAxZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01F4Kfax3PvXDIVZ4P5dlLbAsn1p Vpxi1K94Jt5+s+Bc1vJF2f+65wDegkS5YnCsY+8jo1ql6aVnNrMSztmpz6B0DvMx yk1Z265LMyS+AGODeIZoSfN3CtoZD00TqVjua9nR9BoCcJ6fSB1U+a7NR+yL0pCH tSO9UXnicUxQGkHpaxV+0rsET98PWiErSNPtP9+tsBPkdWOQ6RhrvRpbhR3xeocC U8jbhuZgtFGi6n9bDvqRfnXh22p2WpWZDp6jaSQ+JXPWl38osTYo6eMmaD+AttRY x5VPxfBKxV4yFt59FGIZ5p1UAqUBlUSAOg/ohXoO/hJ7BHkguw6qlgwL+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiPqDLTJpE2t2Y6s4yJnRI3oB5DMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURWl2K8u mQMONzcCPT032kU8yvOV35zQwRa6gDhNttXvepHb6/HUboHvn9J0eYko5ck2zKyS PkEYbLQsoh2nQlvyKhnwOnZ+MhZV+HOvGEzyBwRZUWHypeFJLO6LaVH8WFkodB+g 4V40BtPS0RfRByi5rhJ5FNpZYuxe/KiQlrVIBntKKgcgL9+oqkQ7Y6/y8dTJ/fSr Fr6989F15Xybf4A14PfPkXuFPgfidriswkhCKt9JDtgpDnfQnT1Uu22YY+QCMST8 HomLyV34CybsNUIJSIUfiMWppQi22TQi8lbtYOmmU5JyYFXj7B5d0toJRxfJtLzq 2fKgFrGe2g5g7A== -----END CERTIFICATE-----Generated at Thu Oct 22 05:53:19 2026 by rpki-client