$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: I3pA5AoW9tAaxPqgV05BJVRPj5+Ijd1Y0XtbFU6fO5Y= Subject key identifier: D8:9E:5F:98:A6:C9:2D:E7:3F:16:F1:F6:6D:56:EB:42:50:5F:2C:ED Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 0197B6329700BD4BA4CD0497EF5BA3EF3BBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 15C5 Signing time: Sat 28 Jun 2025 11:00:58 +0000 Manifest this update: Sat 28 Jun 2025 11:00:58 +0000 Manifest next update: Sun 29 Jun 2025 11:00:58 +0000 Files and hashes: 1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: yBGEHHAveLOLDDzgoEOd/j+O8NpHTL9Sf6nkEW7w5Y4=) 5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:32:97:00:bd:4b:a4:cd:04:97:ef:5b:a3:ef:3b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jun 28 11:00:58 2025 GMT Not After : Jun 29 11:00:58 2025 GMT Subject: CN=d89e5f98a6c92de73f16f1f66d56eb42505f2ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5d:67:50:f1:34:c2:60:97:ac:b4:4f:19:22: c9:c3:e4:b7:85:0f:d6:45:26:0e:ac:cd:e0:d0:bd: b5:41:22:ed:9d:f5:83:b4:6a:ab:12:7d:e9:59:6a: 37:2f:c9:e8:ca:db:53:c9:62:eb:68:70:ee:58:22: e8:70:ac:db:21:7d:70:d9:ff:1d:71:46:d3:6a:24: b7:06:a8:b5:be:be:0b:8c:c9:38:cc:52:ec:1b:11: ce:60:8a:8a:4c:09:3b:b5:36:90:96:d5:31:61:24: 23:45:0d:68:10:c8:b1:55:9e:e3:4d:ff:27:cb:e9: 6d:87:1e:12:c3:d2:46:91:c9:be:24:18:e1:01:cb: 96:45:39:5b:ec:33:11:a1:2c:c0:65:da:f8:12:f8: 6d:3e:0a:09:62:c2:eb:32:52:4e:41:1e:d5:7a:17: 78:f2:24:1d:fb:da:71:73:fc:6b:90:f7:73:e9:9c: c8:1f:a2:55:9f:b6:07:8c:7f:68:9c:f5:26:e8:be: 1c:7d:4b:4e:0d:18:ac:02:6c:27:22:09:03:78:f1: f5:4d:2b:b5:d7:d7:69:56:04:3c:0f:ca:b9:2e:b5: b0:a2:16:69:37:73:b9:c5:8b:c4:25:0e:36:31:34: ca:65:b3:c3:ba:cc:58:c5:d6:f1:4f:7f:98:7e:3a: 7a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9E:5F:98:A6:C9:2D:E7:3F:16:F1:F6:6D:56:EB:42:50:5F:2C:ED X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:21:24:e1:d0:b1:b2:0d:b6:ef:4e:4e:da:51:b5:ca:d7:d5: e7:16:37:de:4f:d9:49:99:ed:d7:1e:9d:52:14:05:ca:6f:38: 63:67:de:95:d2:e5:a3:c8:af:af:45:4b:c1:f3:d0:d8:df:0d: 11:ee:2c:d9:48:57:6a:1c:27:84:ba:57:c5:a8:df:7f:76:e5: bc:1e:09:85:9a:b5:9a:1c:91:31:7d:de:8c:3d:ce:e1:9e:e0: 76:80:2c:e2:0d:2d:17:aa:6c:c8:5c:71:3c:44:7d:4d:fa:f4: a0:af:48:b5:dd:27:6d:c5:c0:ec:82:ae:7e:95:1c:10:04:52: 7a:be:83:66:0e:f6:d4:a5:10:6c:cf:75:33:d0:8c:3e:37:dd: 87:6a:32:56:e0:68:31:2e:fc:75:c0:4f:7a:7f:c0:38:cb:74: 6c:a5:29:ee:9d:cb:48:4f:98:87:29:fa:e8:73:49:3e:d9:4f: 2c:37:63:39:90:dc:93:5e:4c:40:cd:f8:4a:39:0d:52:d2:97: 4b:25:76:fd:f5:18:9d:1f:c8:b4:4d:61:70:93:5c:f0:a8:58: bd:8c:06:81:ac:fd:1a:ae:2a:38:fe:68:cf:89:b5:bc:f1:b6: 61:fd:52:17:a8:ff:57:f8:f8:58:53:ed:0f:93:f4:2d:05:91: 2a:d6:e9:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2MpcAvUukzQSX71uj7zu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwNjI4MTEwMDU4WhcNMjUwNjI5MTEwMDU4WjAzMTEwLwYDVQQD EyhkODllNWY5OGE2YzkyZGU3M2YxNmYxZjY2ZDU2ZWI0MjUwNWYyY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt11nUPE0wmCXrLRPGSLJw+S3hQ/W RSYOrM3g0L21QSLtnfWDtGqrEn3pWWo3L8noyttTyWLraHDuWCLocKzbIX1w2f8d cUbTaiS3Bqi1vr4LjMk4zFLsGxHOYIqKTAk7tTaQltUxYSQjRQ1oEMixVZ7jTf8n y+lthx4Sw9JGkcm+JBjhAcuWRTlb7DMRoSzAZdr4EvhtPgoJYsLrMlJOQR7Vehd4 8iQd+9pxc/xrkPdz6ZzIH6JVn7YHjH9onPUm6L4cfUtODRisAmwnIgkDePH1TSu1 19dpVgQ8D8q5LrWwohZpN3O5xYvEJQ42MTTKZbPDusxYxdbxT3+Yfjp6NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNieX5imyS3nPxbx9m1W60JQXyztMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSEk4dCx sg22705O2lG1ytfV5xY33k/ZSZnt1x6dUhQFym84Y2feldLlo8ivr0VLwfPQ2N8N Ee4s2UhXahwnhLpXxajff3blvB4JhZq1mhyRMX3ejD3O4Z7gdoAs4g0tF6psyFxx PER9Tfr0oK9Itd0nbcXA7IKufpUcEARSer6DZg721KUQbM91M9CMPjfdh2oyVuBo MS78dcBPen/AOMt0bKUp7p3LSE+Yhyn66HNJPtlPLDdjOZDck15MQM34SjkNUtKX SyV2/fUYnR/ItE1hcJNc8KhYvYwGgaz9Gq4qOP5oz4m1vPG2Yf1SF6j/V/j4WFPt D5P0LQWRKtbpxw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:27:50 2025 by rpki-client