$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: 3MJ2wwlnWVCyGk5dAbRO7U3xeI9AIQ1PWBnyb63wKCk= Subject key identifier: AD:41:C4:D0:23:20:DE:D6:F9:D9:CF:88:9B:12:7B:5B:00:C4:DD:A4 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 01995C44B9DF50A005B636E8902582129BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 16C3 Signing time: Thu 18 Sep 2025 10:00:31 +0000 Manifest this update: Thu 18 Sep 2025 10:00:31 +0000 Manifest next update: Fri 19 Sep 2025 10:00:31 +0000 Files and hashes: 1: 4LkBcAsH60Y0m4sjDykqzEXI1Sk.roa (hash: JaP407qv2XroPK5rb+48crR7hUs4Usjq32UPFFAgazY=) 2: 5BICsEwf39tSfyuR3Dxq7LQhNTs.roa (hash: F1ThVBGu9zXgcyXnsxcohjmknQWFIwIuRVmf9x9GU+Q=) 3: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=) 4: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (hash: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=) 5: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=) 6: 8k6ClTzEe4SSsmZAgXUSnPK9Ii8.roa (hash: m+6p5azzOSpvaAx4gZnWGAghzk+PpdZC6bfHiCkS+NQ=) 7: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=) 8: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=) 9: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=) 10: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=) 11: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=) 12: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=) 13: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=) 14: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=) 15: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=) 16: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=) 17: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=) 18: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: OXM6wXR96AwBwPicVSbxrE5u7woLIgDOQeJIxUFIt0M=) 20: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=) 21: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Sep 2025 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:5c:44:b9:df:50:a0:05:b6:36:e8:90:25:82:12:9b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Sep 18 10:00:31 2025 GMT Not After : Sep 19 10:00:31 2025 GMT Subject: CN=ad41c4d02320ded6f9d9cf889b127b5b00c4dda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:79:9a:97:fe:21:3c:95:6a:91:93:5d:6e: d8:a0:a6:d0:62:4e:b0:d8:bb:aa:1c:bd:7b:8f:61: 47:b8:ea:34:75:87:79:03:63:b0:e9:e6:86:17:90: 70:fe:2e:8a:14:ca:41:a1:9d:78:71:7a:36:6b:c3: 3c:87:2b:6e:29:d7:dd:91:2f:8e:8f:7d:3e:3a:77: 4e:65:9b:a2:db:e8:65:e6:ce:38:ac:aa:27:5e:e3: 64:8c:fb:81:87:bd:18:7a:49:fc:5c:01:bb:52:22: 91:58:7b:97:04:4c:64:6c:eb:f6:30:af:c9:9f:6a: ed:70:e8:b5:dc:44:d1:78:aa:60:23:2c:ba:07:33: 55:cc:53:60:6e:d9:59:f9:aa:89:a2:5e:2e:58:96: 03:3b:71:1f:a5:73:a6:5e:86:30:9a:45:11:df:39: c2:59:34:12:f8:82:13:66:a2:e3:bf:82:8c:0f:43: d0:ef:ff:68:e2:ae:b8:b9:60:25:01:e9:94:bd:35: 18:00:42:ea:5f:61:86:b6:8d:78:54:75:ec:cc:24: 67:d6:c1:13:43:04:c2:78:f2:11:0c:04:55:e7:e8: 96:f4:49:44:39:d8:ef:d4:89:6d:1a:41:d6:52:11: d0:dd:bb:01:e8:0a:69:aa:6a:b0:9e:61:ce:72:6d: 1c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:C4:D0:23:20:DE:D6:F9:D9:CF:88:9B:12:7B:5B:00:C4:DD:A4 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0b:ca:39:50:3c:13:50:16:85:a5:8d:83:af:76:ec:29:39: dc:35:1c:ed:c7:d3:c2:43:2a:ec:b4:74:57:33:c0:66:e6:d9: 2e:f6:51:60:8c:cd:55:bc:b5:0c:44:47:60:9d:67:61:9f:18: 02:6f:b6:75:6f:1a:b0:79:27:0a:8f:d7:42:2a:4a:de:4a:89: a3:71:10:41:0f:8a:66:e1:e0:99:06:31:9c:64:11:7d:ec:83: 92:d4:95:4e:9d:0b:b2:1f:1a:f4:61:32:d2:99:5b:b7:e7:d6: ba:56:86:ee:40:7a:0e:59:3a:9e:3c:fc:b5:d4:e8:31:ef:78: 49:b8:3c:c0:bd:06:43:fc:0a:44:12:5a:05:64:47:86:c9:d3: 66:f3:88:2f:b5:ad:69:cb:29:9e:bc:d6:54:90:d9:38:ee:01: 3f:15:fe:a2:15:30:e5:50:99:5a:3b:93:fa:f7:57:f8:2b:a1: 2c:63:59:19:b0:db:16:c7:6d:3e:9b:fe:21:04:8c:43:71:35: 7b:ea:2c:e5:73:a2:6f:89:77:5d:a8:d1:b5:fc:d6:1b:90:81: 31:be:19:88:8d:34:a7:f7:04:4e:f7:0c:3f:ba:06:3b:be:1d: 31:c0:7c:0c:b1:b7:97:28:ff:ad:9a:88:5d:00:e1:a2:86:d5: 1a:da:9e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZlcRLnfUKAFtjbokCWCEpuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUwOTE4MTAwMDMxWhcNMjUwOTE5MTAwMDMxWjAzMTEwLwYDVQQD EyhhZDQxYzRkMDIzMjBkZWQ2ZjlkOWNmODg5YjEyN2I1YjAwYzRkZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcx5mpf+ITyVapGTXW7YoKbQYk6w 2LuqHL17j2FHuOo0dYd5A2Ow6eaGF5Bw/i6KFMpBoZ14cXo2a8M8hytuKdfdkS+O j30+OndOZZui2+hl5s44rKonXuNkjPuBh70Yekn8XAG7UiKRWHuXBExkbOv2MK/J n2rtcOi13ETReKpgIyy6BzNVzFNgbtlZ+aqJol4uWJYDO3EfpXOmXoYwmkUR3znC WTQS+IITZqLjv4KMD0PQ7/9o4q64uWAlAemUvTUYAELqX2GGto14VHXszCRn1sET QwTCePIRDARV5+iW9ElEOdjv1IltGkHWUhHQ3bsB6AppqmqwnmHOcm0c0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1BxNAjIN7W+dnPiJsSe1sAxN2kMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgvKOVA8 E1AWhaWNg6927Ck53DUc7cfTwkMq7LR0VzPAZubZLvZRYIzNVby1DERHYJ1nYZ8Y Am+2dW8asHknCo/XQipK3kqJo3EQQQ+KZuHgmQYxnGQRfeyDktSVTp0Lsh8a9GEy 0plbt+fWulaG7kB6Dlk6njz8tdToMe94Sbg8wL0GQ/wKRBJaBWRHhsnTZvOIL7Wt acspnrzWVJDZOO4BPxX+ohUw5VCZWjuT+vdX+CuhLGNZGbDbFsdtPpv+IQSMQ3E1 e+os5XOib4l3XajRtfzWG5CBMb4ZiI00p/cETvcMP7oGO74dMcB8DLG3lyj/rZqI XQDhoobVGtqexQ== -----END CERTIFICATE-----Generated at Thu Sep 18 13:14:19 2025 by rpki-client