$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: A/WtYzE95FGr242oXRPJYgbtEnp6/czn7k3B7eFPMCs= Subject key identifier: 51:C3:D6:4D:A2:9F:54:E3:2C:A4:AD:B9:C0:13:9C:48:80:00:DC:F8 Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 019FA116D423F8C0A6D427BD9E426DC233F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 19D7 Signing time: Mon 27 Jul 2026 01:00:55 +0000 Manifest this update: Mon 27 Jul 2026 01:00:55 +0000 Manifest next update: Tue 28 Jul 2026 01:00:55 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: 0NO2llpqG6q0X3kVAiQThTEhb9V8kPhRLzeOYBniCMU=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:16:d4:23:f8:c0:a6:d4:27:bd:9e:42:6d:c2:33:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Jul 27 01:00:55 2026 GMT Not After : Jul 28 01:00:55 2026 GMT Subject: CN=51c3d64da29f54e32ca4adb9c0139c488000dcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:2f:32:1f:ea:39:41:70:ab:f8:bb:07:38: 98:77:bc:bc:a9:48:e2:7e:9d:43:74:aa:36:d1:39: e8:b6:75:4a:ec:f1:71:33:d9:19:97:c7:09:23:17: bb:e1:7c:70:60:7c:ea:2b:47:9c:15:33:b3:73:ae: a9:ba:a5:ab:6a:8e:d7:c4:a1:13:7d:99:51:22:9d: e6:f7:60:02:43:dc:29:85:a5:5d:83:f4:3a:dd:3a: 41:80:c6:91:71:83:f8:75:97:02:bf:75:e4:55:24: 60:63:ae:59:3c:d0:0b:1d:dc:f8:19:1b:a5:74:bc: 2c:a0:56:dd:fa:fb:4e:b5:68:49:0c:2f:92:1b:b3: f7:bd:d6:65:3a:5f:dd:6a:97:4b:73:e9:01:f5:3f: 7f:0b:ee:48:21:8e:bf:fc:8a:a0:b8:f3:33:21:f7: d9:c8:89:fb:e2:77:9d:00:a4:df:a6:29:79:9d:d9: 9a:bf:e8:ff:7c:5d:c9:5f:67:d3:06:7a:9e:36:cb: 76:7e:7b:01:c1:eb:95:f3:6a:f5:80:cd:86:69:cd: c4:0c:44:79:74:9f:c3:23:3e:44:d2:ab:c8:76:cc: 6c:13:c2:af:55:be:c2:dc:25:f6:9e:04:1b:c3:8d: e1:34:76:c2:01:b5:2f:46:8f:ca:6a:93:95:b9:e6: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C3:D6:4D:A2:9F:54:E3:2C:A4:AD:B9:C0:13:9C:48:80:00:DC:F8 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:15:d4:02:27:2c:01:03:ba:00:09:1f:75:e4:3e:18:42:0e: 84:b0:68:a0:0c:91:83:1a:ce:59:97:a0:71:2a:4f:18:cf:8d: f8:d6:e7:7e:6e:23:31:de:5b:7e:c9:c7:5b:7e:c2:84:d4:e8: 6c:1a:58:ab:8f:0f:14:6d:44:4d:f6:bb:ff:80:00:68:47:3e: 6d:b6:f0:5a:2a:9d:67:f8:17:41:29:7c:af:82:61:d6:4a:2b: 57:67:08:9a:98:c8:ac:ee:0b:5e:58:b3:e0:bc:7b:2c:28:2f: 11:6c:6a:9c:2c:99:ad:73:56:37:56:d8:5e:1c:5d:7c:64:77: e7:95:23:2f:4d:97:10:4e:45:fd:82:8d:22:17:d3:7f:7c:7f: c7:31:15:ab:8d:3b:e5:79:c9:0b:49:6d:89:7a:4b:16:9a:f3: 9d:eb:2f:e5:8b:6d:66:b6:03:b6:36:3e:9b:4e:be:25:73:a2: 80:76:2e:61:9c:9f:e6:aa:4d:d9:31:1c:e3:d5:18:27:49:ba: 9c:4d:36:3d:25:29:ec:59:33:22:da:f0:e8:d0:27:a5:89:29: 53:fc:01:5f:7f:13:3a:9e:05:32:d0:67:7e:ca:30:57:56:ac: 48:e6:59:c7:67:68:7d:26:5b:7a:f3:d1:7a:ab:28:f2:15:8b: eb:d2:25:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hFtQj+MCm1Ce9nkJtwjP2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwNzI3MDEwMDU1WhcNMjYwNzI4MDEwMDU1WjAzMTEwLwYDVQQD Eyg1MWMzZDY0ZGEyOWY1NGUzMmNhNGFkYjljMDEzOWM0ODgwMDBkY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRkvMh/qOUFwq/i7BziYd7y8qUji fp1DdKo20TnotnVK7PFxM9kZl8cJIxe74XxwYHzqK0ecFTOzc66puqWrao7XxKET fZlRIp3m92ACQ9wphaVdg/Q63TpBgMaRcYP4dZcCv3XkVSRgY65ZPNALHdz4GRul dLwsoFbd+vtOtWhJDC+SG7P3vdZlOl/dapdLc+kB9T9/C+5IIY6//IqguPMzIffZ yIn74nedAKTfpil5ndmav+j/fF3JX2fTBnqeNst2fnsBweuV82r1gM2Gac3EDER5 dJ/DIz5E0qvIdsxsE8KvVb7C3CX2ngQbw43hNHbCAbUvRo/KapOVuebyAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHD1k2in1TjLKStucATnEiAANz4MB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhXUAics AQO6AAkfdeQ+GEIOhLBooAyRgxrOWZegcSpPGM+N+Nbnfm4jMd5bfsnHW37ChNTo bBpYq48PFG1ETfa7/4AAaEc+bbbwWiqdZ/gXQSl8r4Jh1korV2cImpjIrO4LXliz 4Lx7LCgvEWxqnCyZrXNWN1bYXhxdfGR355UjL02XEE5F/YKNIhfTf3x/xzEVq407 5XnJC0ltiXpLFprznesv5YttZrYDtjY+m06+JXOigHYuYZyf5qpN2TEc49UYJ0m6 nE02PSUp7FkzItrw6NAnpYkpU/wBX38TOp4FMtBnfsowV1asSOZZx2dofSZbevPR eqso8hWL69IluQ== -----END CERTIFICATE-----Generated at Mon Jul 27 08:19:26 2026 by rpki-client