$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: WYmoQSn5PN0jVz9OupFUnsTd5Kd9GL6fW83pybx2O7I= Subject key identifier: DA:A9:C8:5E:A1:00:06:F3:5D:FF:0F:F6:F3:AE:75:47:B8:11:28:D9 Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 01A180063A2DF2380D2A7E939B870A146240 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 1ACF Signing time: Wed 28 Oct 2026 01:00:54 +0000 Manifest this update: Wed 28 Oct 2026 01:00:54 +0000 Manifest next update: Thu 29 Oct 2026 01:00:54 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: DqHU1gMDpAmtq7N6DC/ccERTyeQ8l29S+TSQ8Z47xv8=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:06:3a:2d:f2:38:0d:2a:7e:93:9b:87:0a:14:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Oct 28 01:00:54 2026 GMT Not After : Oct 29 01:00:54 2026 GMT Subject: CN=daa9c85ea10006f35dff0ff6f3ae7547b81128d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:45:46:00:02:8d:59:3a:68:69:15:e8:40: 64:45:da:86:dc:07:63:da:59:cd:60:ca:01:07:46: ce:1c:92:a1:45:3b:30:dd:3f:41:d1:78:75:55:e6: 15:a3:e2:31:80:de:6b:9a:ee:e3:a1:39:28:ae:92: 2c:7e:4a:d3:ea:df:62:6b:a9:d4:16:79:89:f4:2f: 33:9f:5a:30:3e:c8:43:21:43:2d:21:ae:7b:8e:42: 10:cf:7b:8f:c8:ee:9a:fa:95:15:60:86:a4:f5:dd: df:ca:3d:d2:bc:00:a3:6b:ac:a3:a8:9b:40:1d:63: 7d:eb:f3:5b:80:cc:ad:05:8b:88:72:1f:36:2c:66: fe:00:4f:20:84:34:11:82:33:33:d2:08:59:31:50: e3:85:31:c2:be:20:45:70:c5:c2:57:da:c1:a3:fc: 9b:9d:a9:37:e5:a0:10:22:53:22:94:07:d5:a0:79: d7:af:01:82:21:4a:97:7b:c5:89:67:85:81:96:75: 79:fc:5b:ea:22:fb:dd:ba:57:bd:6e:0b:7e:97:b5: b7:de:92:51:93:87:9a:35:e5:49:3c:df:88:d2:71: 86:1b:37:9b:73:58:83:b9:77:61:0d:34:4d:93:85: f7:ab:c4:36:8c:98:4c:60:e7:09:f4:67:63:58:4f: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A9:C8:5E:A1:00:06:F3:5D:FF:0F:F6:F3:AE:75:47:B8:11:28:D9 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ca:45:2b:35:47:aa:8c:bb:7d:06:59:ba:cc:1b:0b:55:1c: 8a:61:a7:34:69:53:bc:d3:49:d3:8c:53:f2:86:1b:3b:20:19: 3c:8a:95:39:d7:f0:0a:9e:75:ef:f4:8a:2b:14:99:62:0e:6c: 53:8e:40:98:c4:fd:05:d6:42:9d:79:d8:99:66:51:d9:90:2e: f4:1c:db:cb:f1:b5:3c:6c:47:c1:16:11:34:05:73:1d:c7:72: cb:45:cc:97:99:dc:4b:54:c2:71:77:63:fd:46:dd:40:12:73: c1:6f:5e:59:8a:4d:7d:66:01:f7:ed:2c:b4:3d:ab:37:88:8f: 4f:6c:e9:34:16:f9:b9:39:fb:8b:90:96:b1:1d:7d:89:cb:1c: 2b:54:05:a9:5d:d6:2f:1c:3f:bb:9a:64:5a:6d:f1:33:22:6b: 9d:fe:77:b1:66:a8:59:bf:91:e1:13:09:30:79:ce:17:59:8b: 5f:2a:37:e3:d6:ac:ee:23:97:21:e6:76:8e:81:06:26:9d:23: e5:b5:b5:ad:d5:b8:32:a9:03:9b:fb:71:61:79:e7:bf:90:ee: 58:a5:a8:fa:82:9c:73:98:ef:89:7f:3a:7a:d5:6e:32:83:04: 11:b7:f3:fa:4c:ff:72:77:7d:fb:32:ff:4c:a3:09:d6:64:4a: c9:f1:d0:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGABjot8jgNKn6Tm4cKFGJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYxMDI4MDEwMDU0WhcNMjYxMDI5MDEwMDU0WjAzMTEwLwYDVQQD EyhkYWE5Yzg1ZWExMDAwNmYzNWRmZjBmZjZmM2FlNzU0N2I4MTEyOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqshFRgACjVk6aGkV6EBkRdqG3Adj 2lnNYMoBB0bOHJKhRTsw3T9B0Xh1VeYVo+IxgN5rmu7joTkorpIsfkrT6t9ia6nU FnmJ9C8zn1owPshDIUMtIa57jkIQz3uPyO6a+pUVYIak9d3fyj3SvACja6yjqJtA HWN96/NbgMytBYuIch82LGb+AE8ghDQRgjMz0ghZMVDjhTHCviBFcMXCV9rBo/yb nak35aAQIlMilAfVoHnXrwGCIUqXe8WJZ4WBlnV5/FvqIvvdule9bgt+l7W33pJR k4eaNeVJPN+I0nGGGzebc1iDuXdhDTRNk4X3q8Q2jJhMYOcJ9GdjWE/knwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqpyF6hAAbzXf8P9vOudUe4ESjZMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxcpFKzVH qoy7fQZZuswbC1UcimGnNGlTvNNJ04xT8oYbOyAZPIqVOdfwCp517/SKKxSZYg5s U45AmMT9BdZCnXnYmWZR2ZAu9Bzby/G1PGxHwRYRNAVzHcdyy0XMl5ncS1TCcXdj /UbdQBJzwW9eWYpNfWYB9+0stD2rN4iPT2zpNBb5uTn7i5CWsR19icscK1QFqV3W Lxw/u5pkWm3xMyJrnf53sWaoWb+R4RMJMHnOF1mLXyo349as7iOXIeZ2joEGJp0j 5bW1rdW4MqkDm/txYXnnv5DuWKWo+oKcc5jviX86etVuMoMEEbfz+kz/cnd9+zL/ TKMJ1mRKyfHQNw== -----END CERTIFICATE-----Generated at Wed Oct 28 04:40:07 2026 by rpki-client