$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: j+Ozx+ZaR+QrNmsXiH0OwL2iydAHCY+CLSjjmoG54Ws= Subject key identifier: BD:ED:EC:A4:46:10:2C:B4:10:19:D4:9E:BB:2B:8C:16:AD:BA:30:9B Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 0198D4044195E4468077F0D72C24E465307B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 1659 Signing time: Fri 22 Aug 2025 23:01:45 +0000 Manifest this update: Fri 22 Aug 2025 23:01:45 +0000 Manifest next update: Sat 23 Aug 2025 23:01:45 +0000 Files and hashes: 1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: 45JPGxt4iz4fGyUDyDTmkvOeRdYpPmmrjIZK5LUKFsA=) 5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 23:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:04:41:95:e4:46:80:77:f0:d7:2c:24:e4:65:30:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Aug 22 23:01:45 2025 GMT Not After : Aug 23 23:01:45 2025 GMT Subject: CN=bdedeca446102cb41019d49ebb2b8c16adba309b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:19:da:9b:a7:3b:65:ba:c4:a5:e4:0b:bd: ef:e3:43:4b:46:ab:99:b1:48:d9:ec:30:32:d7:66: 27:cc:63:45:f8:87:12:df:29:92:fa:bf:74:0d:84: f6:c4:9a:bd:3a:e6:6d:82:1a:7e:79:a8:41:fa:26: 89:39:ea:4d:e8:ea:ab:76:0b:00:8c:a8:71:f0:3b: af:20:83:24:f7:dd:ce:d1:c9:05:4b:2c:51:d2:cc: 9b:e3:18:14:8e:1a:30:6f:ef:68:d5:18:9d:c0:5c: 4e:68:97:6b:42:57:1c:17:da:05:dc:3e:b3:f3:e6: 5c:d8:84:9c:77:40:ef:81:5a:40:83:ff:11:ea:4c: 71:96:5f:e6:b1:19:85:69:de:03:ef:9e:23:63:82: 29:9c:19:bf:68:58:7f:6c:b1:a3:43:e0:44:87:db: f4:7c:33:b2:db:ed:ba:e8:07:b0:d6:19:b7:a7:00: 38:da:69:18:21:03:ac:49:65:d3:fb:cd:3a:73:80: de:8c:81:e2:7c:dd:0a:fe:1c:48:7f:83:9e:d3:38: 02:69:9c:1d:fb:32:e5:e2:36:68:b2:07:ba:41:67: 13:16:0e:7a:24:95:1e:e2:8b:de:83:65:bb:9e:bc: a1:bf:ff:3b:be:21:15:7a:de:4e:cc:97:01:17:8b: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:ED:EC:A4:46:10:2C:B4:10:19:D4:9E:BB:2B:8C:16:AD:BA:30:9B X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ec:29:9b:89:ba:ac:b8:b3:b1:f6:ff:03:cc:de:19:56:fd: 47:ff:ab:a7:f1:9d:ea:b7:74:e9:3d:e1:bc:1f:af:f5:d0:cc: 0e:db:49:a2:5e:cf:bd:fa:44:32:ff:a6:07:02:0a:cd:9b:97: c0:17:15:32:cf:d4:2b:0a:ee:d5:02:9c:06:d5:8c:10:4c:df: e7:1b:4a:01:fc:fa:41:90:6f:59:ea:23:c5:7c:b7:14:32:e2: 9d:80:80:dc:0b:f2:2d:10:db:4a:68:21:98:aa:c5:f8:6d:bd: 0e:22:d6:10:1c:4c:1b:0e:ba:eb:78:92:f3:5d:41:b2:30:82: 70:58:08:68:2a:86:16:fd:13:d0:33:14:87:ee:41:88:ae:a0: 1f:21:b3:4e:0e:b4:96:31:bf:48:3f:67:50:7b:41:eb:77:d0: 05:1e:cd:ac:7e:f1:b7:83:bc:e4:a3:20:57:16:99:f3:b5:76: 69:a9:7c:74:d8:ba:6b:37:58:8d:95:61:be:5b:dd:4a:d7:ee: 46:be:45:59:ed:72:80:b8:8f:46:bf:10:cc:41:9c:bc:c3:47: 7c:f2:8e:09:db:ce:2a:55:48:2c:1f:17:29:40:c9:1d:27:d2: 26:90:75:1f:fa:ed:03:a6:bf:5a:92:e4:da:f2:e0:56:9a:b7: 65:92:cf:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUBEGV5EaAd/DXLCTkZTB7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwODIyMjMwMTQ1WhcNMjUwODIzMjMwMTQ1WjAzMTEwLwYDVQQD EyhiZGVkZWNhNDQ2MTAyY2I0MTAxOWQ0OWViYjJiOGMxNmFkYmEzMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohEZ2punO2W6xKXkC73v40NLRquZ sUjZ7DAy12YnzGNF+IcS3ymS+r90DYT2xJq9OuZtghp+eahB+iaJOepN6OqrdgsA jKhx8DuvIIMk993O0ckFSyxR0syb4xgUjhowb+9o1RidwFxOaJdrQlccF9oF3D6z 8+Zc2IScd0DvgVpAg/8R6kxxll/msRmFad4D754jY4IpnBm/aFh/bLGjQ+BEh9v0 fDOy2+266Aew1hm3pwA42mkYIQOsSWXT+806c4DejIHifN0K/hxIf4Oe0zgCaZwd +zLl4jZosge6QWcTFg56JJUe4oveg2W7nryhv/87viEVet5OzJcBF4uoAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3t7KRGECy0EBnUnrsrjBatujCbMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOwpm4m6 rLizsfb/A8zeGVb9R/+rp/Gd6rd06T3hvB+v9dDMDttJol7PvfpEMv+mBwIKzZuX wBcVMs/UKwru1QKcBtWMEEzf5xtKAfz6QZBvWeojxXy3FDLinYCA3AvyLRDbSmgh mKrF+G29DiLWEBxMGw6663iS811BsjCCcFgIaCqGFv0T0DMUh+5BiK6gHyGzTg60 ljG/SD9nUHtB63fQBR7NrH7xt4O85KMgVxaZ87V2aal8dNi6azdYjZVhvlvdStfu Rr5FWe1ygLiPRr8QzEGcvMNHfPKOCdvOKlVILB8XKUDJHSfSJpB1H/rtA6a/WpLk 2vLgVpq3ZZLPjg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:11:35 2025 by rpki-client