$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: KGn8yYjj/ITf3m+eDqQUs+ZT+ox8g76AsgMinQGuKxw= Subject key identifier: F6:C3:0B:66:D7:D4:90:50:3B:E3:46:D7:A5:C0:1E:3F:37:EB:9E:C2 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 0196A9C2B69C9CEEFDCE4D6B9B656D9A2AED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 153A Signing time: Wed 07 May 2025 08:00:32 +0000 Manifest this update: Wed 07 May 2025 08:00:32 +0000 Manifest next update: Thu 08 May 2025 08:00:32 +0000 Files and hashes: 1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: TErmPRjyz6tedCluKNSZhlcP2VZpKFOJa8wHER06UTw=) 5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a9:c2:b6:9c:9c:ee:fd:ce:4d:6b:9b:65:6d:9a:2a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: May 7 08:00:32 2025 GMT Not After : May 8 08:00:32 2025 GMT Subject: CN=f6c30b66d7d490503be346d7a5c01e3f37eb9ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:82:39:8b:43:4c:cc:83:ae:3e:e9:5e:c8: e5:6a:cc:1f:18:f5:4a:5f:c7:de:ed:65:eb:52:14: 59:97:1b:84:b6:ff:14:a3:8c:09:42:ca:df:a7:ff: 9c:c5:f3:a3:75:6c:ed:5b:b2:28:bf:cf:22:ae:ef: 46:72:41:d8:77:6c:88:5e:a8:27:6a:92:19:99:5d: 05:26:84:03:ba:bb:53:d0:c5:99:b9:24:88:81:d6: a1:5f:a7:7d:1e:d2:ae:fa:82:90:06:67:be:18:a7: 8a:96:44:b1:b0:07:e6:15:c2:fb:a6:16:0e:6b:3d: 39:77:db:29:65:c0:a9:34:04:f9:db:ab:ee:dd:a4: df:82:b0:be:f5:9a:9a:d3:ac:94:8a:0b:9b:df:45: fb:94:70:74:ce:81:1e:24:42:d6:c1:43:aa:bf:8b: df:4c:41:f6:14:01:7f:2d:02:b2:3f:8c:76:98:e1: 35:8b:02:73:09:bb:96:49:b3:c5:50:c6:c8:d3:6e: dc:ec:54:9f:60:9a:fc:ca:51:b5:48:1a:4b:5c:6b: bf:f5:f4:e9:ae:a5:06:23:c2:ca:17:32:f9:7c:f5: 0b:74:bb:3e:1a:10:cc:fe:41:c7:35:88:da:9d:2b: df:0a:9f:8e:db:b0:b2:96:e7:39:44:e1:77:4b:58: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C3:0B:66:D7:D4:90:50:3B:E3:46:D7:A5:C0:1E:3F:37:EB:9E:C2 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2d:6b:22:15:e4:a3:d7:7d:c0:ce:37:1c:c5:d1:4a:cb:bf: 8c:33:23:1f:96:07:ad:80:ab:59:9f:de:46:73:3d:15:f4:0b: 4f:9c:40:50:5c:7f:c4:52:34:27:d1:fb:cf:e5:0b:7d:b2:48: 7e:ea:41:8e:3c:f9:99:6b:42:d7:24:cb:38:ca:a7:40:7a:6b: 66:aa:25:aa:41:82:d6:a3:3c:f0:d5:8d:57:db:33:ee:c4:ef: b8:a0:0e:05:dd:aa:35:62:ad:b2:eb:70:63:8b:75:cd:d7:bb: bd:8c:a5:4e:fd:d3:2f:ac:07:20:94:aa:5e:b6:72:14:bc:b2: 67:47:1f:64:e4:ea:a2:70:d4:78:d9:b8:09:09:1a:66:e6:a1: 17:74:a2:35:f6:da:75:85:40:35:8c:de:16:07:87:c6:33:f1: 35:e1:37:67:8e:ff:f5:32:72:4b:40:fc:c8:0b:fd:87:55:cc: 68:7f:07:0e:a8:3f:75:d6:ec:a8:7e:b4:12:e9:19:f0:06:c3: 38:b7:26:66:19:ca:e0:d1:08:2f:06:aa:c2:32:c3:b3:a0:9a: 82:61:4d:69:77:8b:08:03:55:4a:f2:33:1e:07:f3:dc:d1:6b: 63:4d:9a:58:8a:cb:7b:92:66:6c:97:b0:7f:41:0c:51:9f:24: 11:05:22:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZapwracnO79zk1rm2VtmirtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwNTA3MDgwMDMyWhcNMjUwNTA4MDgwMDMyWjAzMTEwLwYDVQQD EyhmNmMzMGI2NmQ3ZDQ5MDUwM2JlMzQ2ZDdhNWMwMWUzZjM3ZWI5ZWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApayCOYtDTMyDrj7pXsjlaswfGPVK X8fe7WXrUhRZlxuEtv8Uo4wJQsrfp/+cxfOjdWztW7Iov88iru9GckHYd2yIXqgn apIZmV0FJoQDurtT0MWZuSSIgdahX6d9HtKu+oKQBme+GKeKlkSxsAfmFcL7phYO az05d9spZcCpNAT526vu3aTfgrC+9Zqa06yUigub30X7lHB0zoEeJELWwUOqv4vf TEH2FAF/LQKyP4x2mOE1iwJzCbuWSbPFUMbI027c7FSfYJr8ylG1SBpLXGu/9fTp rqUGI8LKFzL5fPULdLs+GhDM/kHHNYjanSvfCp+O27Cyluc5ROF3S1jt0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbDC2bX1JBQO+NG16XAHj83657CMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXy1rIhXk o9d9wM43HMXRSsu/jDMjH5YHrYCrWZ/eRnM9FfQLT5xAUFx/xFI0J9H7z+ULfbJI fupBjjz5mWtC1yTLOMqnQHprZqolqkGC1qM88NWNV9sz7sTvuKAOBd2qNWKtsutw Y4t1zde7vYylTv3TL6wHIJSqXrZyFLyyZ0cfZOTqonDUeNm4CQkaZuahF3SiNfba dYVANYzeFgeHxjPxNeE3Z47/9TJyS0D8yAv9h1XMaH8HDqg/ddbsqH60EukZ8AbD OLcmZhnK4NEILwaqwjLDs6CagmFNaXeLCANVSvIzHgfz3NFrY02aWIrLe5JmbJew f0EMUZ8kEQUiWQ== -----END CERTIFICATE-----Generated at Wed May 7 10:15:40 2025 by rpki-client