$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: wKq+HjwdqGeLZKT8hsHHgK1SCJCf28lfKJD3hc+qZsA= Subject key identifier: B9:25:30:6C:CB:E9:5D:FB:57:72:45:5C:40:47:7F:D1:D0:34:6D:A3 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019A4A2003B9BB55309841EF0FFEE4C480C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 173F Signing time: Mon 03 Nov 2025 14:30:03 +0000 Manifest this update: Mon 03 Nov 2025 14:30:03 +0000 Manifest next update: Tue 04 Nov 2025 14:30:03 +0000 Files and hashes: 1: 4LkBcAsH60Y0m4sjDykqzEXI1Sk.roa (hash: JaP407qv2XroPK5rb+48crR7hUs4Usjq32UPFFAgazY=) 2: 5BICsEwf39tSfyuR3Dxq7LQhNTs.roa (hash: F1ThVBGu9zXgcyXnsxcohjmknQWFIwIuRVmf9x9GU+Q=) 3: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=) 4: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (hash: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=) 5: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=) 6: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=) 7: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=) 8: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=) 9: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=) 10: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=) 11: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=) 12: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=) 13: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=) 14: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=) 15: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=) 16: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=) 17: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=) 18: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: pZJkO7ru+N+laxkPE216qLPn10xgeMygj8GR6QF02vg=) 19: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=) 20: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4a:20:03:b9:bb:55:30:98:41:ef:0f:fe:e4:c4:80:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Nov 3 14:30:03 2025 GMT Not After : Nov 4 14:30:03 2025 GMT Subject: CN=b925306ccbe95dfb5772455c40477fd1d0346da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:fb:37:a2:d5:1b:4d:88:32:a9:77:1e:48: 55:6a:8d:f9:15:50:71:46:6e:0a:e9:c6:82:cd:ee: 39:d3:e0:3f:da:ea:db:8d:dd:53:3d:8a:93:a9:d1: a4:76:fe:c2:59:24:51:9e:b7:8c:24:b5:d5:14:c9: 71:d5:07:93:11:a5:01:02:7c:80:f3:44:06:9e:44: b1:70:f5:e3:f2:bc:85:62:26:23:c8:cd:46:9a:cf: 42:af:42:04:ca:a3:28:44:b2:69:e4:6a:49:00:33: ac:45:ad:f8:2c:b4:c1:86:ae:92:8d:dd:2e:5b:16: df:19:7d:c8:fb:9f:4d:e5:32:0c:0a:64:b3:2e:a3: bb:c9:0a:c6:b6:88:39:8f:94:b4:a0:8e:b4:b8:58: 85:3a:00:fd:7f:e3:79:1c:ce:71:9f:7a:a8:94:77: 13:4a:0d:35:0b:24:ce:58:38:0a:b2:fb:54:d8:70: 0c:cd:ee:7e:0d:ed:10:26:a5:8b:b0:ad:a9:ea:70: cb:dc:b7:bc:48:d0:41:f9:23:27:7a:20:61:30:91: ce:02:2a:a2:38:ab:92:f6:43:ec:3c:05:c2:1a:1a: 1b:6e:e1:2d:a3:8a:ec:3e:e5:cd:c5:f5:65:af:7d: 8c:10:55:d0:83:d0:b4:2e:d3:ab:24:1e:2b:d7:a0: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:25:30:6C:CB:E9:5D:FB:57:72:45:5C:40:47:7F:D1:D0:34:6D:A3 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fb:9c:b3:c4:67:7e:85:ed:7d:2b:b1:df:df:e0:b9:b9:77: 83:1b:da:1a:37:a3:1e:22:34:5f:d0:6b:52:b7:95:6c:53:07: 04:d6:63:9b:57:ba:11:6b:f6:b1:b6:1e:0c:ea:7d:88:d9:be: d9:d0:5d:ad:14:b1:35:1c:84:cc:5e:8c:89:94:2e:63:38:7c: a2:cd:a1:29:c0:8a:bc:50:d2:a2:d4:d1:17:bf:82:86:29:9e: 03:31:3e:34:3d:3d:57:0c:fc:83:56:61:7b:02:fc:39:70:2a: 9a:1e:b0:82:1c:57:0c:0e:d4:92:5f:6c:c7:b4:d9:40:00:00: 45:3d:37:f1:e2:36:11:c8:4d:c2:fe:70:b3:1c:09:98:66:01: b5:f1:03:68:35:4b:a0:57:4b:7a:5c:09:04:e5:45:d6:9d:c5: 88:08:c0:87:b7:9b:49:9d:8e:f4:04:6f:e0:e9:b7:52:e3:6f: df:78:b9:a8:8d:10:14:00:88:10:9b:d5:14:a2:58:94:0b:ca: 15:80:37:c6:dd:0b:52:71:4a:e7:d0:a3:b0:af:03:45:f3:9d: 17:78:14:1e:06:af:23:81:40:3f:a5:a1:d4:72:f9:67:4a:d3: 83:18:6d:d6:0d:08:f2:3b:41:0f:3a:21:ce:3b:5c:c8:ff:67: 1f:22:81:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpKIAO5u1UwmEHvD/7kxIDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUxMTAzMTQzMDAzWhcNMjUxMTA0MTQzMDAzWjAzMTEwLwYDVQQD EyhiOTI1MzA2Y2NiZTk1ZGZiNTc3MjQ1NWM0MDQ3N2ZkMWQwMzQ2ZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVr7N6LVG02IMql3HkhVao35FVBx Rm4K6caCze450+A/2urbjd1TPYqTqdGkdv7CWSRRnreMJLXVFMlx1QeTEaUBAnyA 80QGnkSxcPXj8ryFYiYjyM1Gms9Cr0IEyqMoRLJp5GpJADOsRa34LLTBhq6Sjd0u WxbfGX3I+59N5TIMCmSzLqO7yQrGtog5j5S0oI60uFiFOgD9f+N5HM5xn3qolHcT Sg01CyTOWDgKsvtU2HAMze5+De0QJqWLsK2p6nDL3Le8SNBB+SMneiBhMJHOAiqi OKuS9kPsPAXCGhobbuEto4rsPuXNxfVlr32MEFXQg9C0LtOrJB4r16DSnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLklMGzL6V37V3JFXEBHf9HQNG2jMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/ucs8Rn foXtfSux39/gubl3gxvaGjejHiI0X9BrUreVbFMHBNZjm1e6EWv2sbYeDOp9iNm+ 2dBdrRSxNRyEzF6MiZQuYzh8os2hKcCKvFDSotTRF7+ChimeAzE+ND09Vwz8g1Zh ewL8OXAqmh6wghxXDA7Ukl9sx7TZQAAART038eI2EchNwv5wsxwJmGYBtfEDaDVL oFdLelwJBOVF1p3FiAjAh7ebSZ2O9ARv4Om3UuNv33i5qI0QFACIEJvVFKJYlAvK FYA3xt0LUnFK59CjsK8DRfOdF3gUHgavI4FAP6Wh1HL5Z0rTgxht1g0I8jtBDzoh zjtcyP9nHyKBEg== -----END CERTIFICATE-----Generated at Mon Nov 3 16:10:53 2025 by rpki-client