$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: /IkSd69IbhlwuZ6NfrybysUEJvTkc7Mp1/mqb884PIw= Subject key identifier: DE:9D:D0:FF:95:B1:EF:F1:C6:70:0F:76:AA:2D:84:F7:AE:A5:9D:F6 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 0196BD808F7FD710775BE718ACFFD3257C3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 154C Signing time: Sun 11 May 2025 04:00:41 +0000 Manifest this update: Sun 11 May 2025 04:00:41 +0000 Manifest next update: Mon 12 May 2025 04:00:41 +0000 Files and hashes: 1: 1-3fiDUT6gzjtAQogV6bgofonnG4.roa (hash: pc7dIo5ndDhRJIrcZvUMyHa9aA2Wx3LxCkefIcK3Gqc=) 2: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 3: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 4: K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa (hash: EDky965lH+7d9zEKg3uh2UPLM5EYLdR0gznw5lmNnpo=) 5: KXPczm1nS64dvcv4u7CYJ1l5AHI.roa (hash: IT1fLQDPUweWTezSJLi2UFJ5fUaIjncEdmdwkryAQWo=) 6: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: +bnkgGe1vwR2t+QgFki5Cn8uRCdQ6g7GXt93zJi52kM=) 7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 9: cJ5TDgfH_xk0ahokTNlv7EYdOTA.roa (hash: s1puOAMsS7Je7hdhCgv2/ytoYeU9rstzLYKCy4SNXps=) 10: cNvBb2RRxSjoCAkb0wZvTJ3BY5k.roa (hash: oDSoGJIctW5p0rg5AbBoYa3L96DcMDhEp9yGbjF4AfU=) 11: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 12: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 13: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 14: qx1D6MwlFJLvd2j3wGKzaKDH1gc.roa (hash: /6Qrju93/zC5tTWH2Z6B9bYEnrkHOlHlFsFGFSYu75M=) 15: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:80:8f:7f:d7:10:77:5b:e7:18:ac:ff:d3:25:7c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: May 11 04:00:41 2025 GMT Not After : May 12 04:00:41 2025 GMT Subject: CN=de9dd0ff95b1eff1c6700f76aa2d84f7aea59df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:6e:e5:fe:bb:87:dc:17:32:29:bf:0e:8c: 14:98:59:1a:1a:c5:7e:22:e2:5a:e8:c8:87:43:c4: d9:03:21:f3:45:2c:3f:09:14:f6:07:95:17:4f:59: 21:1e:08:b1:55:70:59:05:79:46:4e:e7:2c:e1:48: c3:fb:32:1b:c7:85:3f:39:0d:94:7b:53:da:77:3b: c9:89:56:44:cf:8c:fd:d3:f7:ef:a8:01:8a:99:72: 0a:5c:90:e3:ac:d9:97:f0:da:e8:a2:35:00:3d:e9: 21:e7:b2:00:2b:a3:02:dc:d8:6f:de:e1:fa:5d:38: e7:32:20:e6:0d:e9:9a:ce:fb:bf:d5:1f:9f:52:6f: 34:41:c0:f8:e6:19:e0:ad:47:2d:fe:38:1f:a9:d9: 0d:5f:6c:c1:63:35:a8:5c:34:7c:ba:be:b6:a8:17: 38:c4:5a:51:ea:ec:f1:42:d5:f7:4c:f9:3a:66:22: c5:85:9d:6f:11:ab:1f:97:ec:41:ed:55:15:d9:9d: 14:79:27:5e:48:43:9c:a7:47:6a:aa:6b:f4:09:06: 73:92:3a:4a:7a:d3:85:09:b3:ea:ad:e6:61:41:5f: 72:98:46:42:84:dd:c1:a2:6c:50:5f:4e:81:2d:9c: b3:96:27:d5:76:73:64:9c:43:19:90:89:4e:7a:5f: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9D:D0:FF:95:B1:EF:F1:C6:70:0F:76:AA:2D:84:F7:AE:A5:9D:F6 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f9:94:8b:8c:ac:7d:cc:6c:64:b5:33:13:21:62:e8:20:55: 07:7a:f4:c4:0c:81:12:87:da:5c:60:16:9c:5a:46:68:65:41: c5:d2:bd:bd:c6:a9:c7:d8:63:06:36:9f:e4:95:6c:89:98:2d: b4:b6:4a:a7:2c:8e:d6:c0:a2:ec:1c:64:6c:b6:bc:ef:a2:97: 67:e8:34:3a:97:23:f8:85:e8:ea:ec:a0:9e:dc:3b:bf:8e:e2: 42:5d:47:89:a7:cc:9d:35:5a:c4:a9:77:6c:78:78:63:53:3d: fc:fd:8a:1d:b9:04:c2:69:3b:c3:1d:39:62:94:35:e4:3e:e7: e7:ac:85:11:69:b5:14:69:54:ab:53:b7:17:9c:5c:ab:c6:19: a4:f6:43:47:c7:3c:fd:c0:8d:28:97:90:4b:28:e2:af:c8:82: a1:1a:8a:6b:fd:8f:08:6e:33:58:4a:1c:55:d0:7a:56:d4:01: e5:4a:12:40:a8:9f:1f:82:41:67:e8:7a:a2:3a:61:17:24:2e: 80:eb:c7:cd:c3:91:dc:40:80:2b:f4:6a:12:b9:21:f1:df:a1: 73:63:25:ca:5b:d0:f9:03:6f:4b:30:f4:33:02:d3:6b:5d:ac: fa:44:b2:44:91:df:1e:37:2b:fc:bb:1a:17:0f:02:6e:be:94: cd:3d:9e:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9gI9/1xB3W+cYrP/TJXw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUwNTExMDQwMDQxWhcNMjUwNTEyMDQwMDQxWjAzMTEwLwYDVQQD EyhkZTlkZDBmZjk1YjFlZmYxYzY3MDBmNzZhYTJkODRmN2FlYTU5ZGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ9u5f67h9wXMim/DowUmFkaGsV+ IuJa6MiHQ8TZAyHzRSw/CRT2B5UXT1khHgixVXBZBXlGTucs4UjD+zIbx4U/OQ2U e1PadzvJiVZEz4z90/fvqAGKmXIKXJDjrNmX8NroojUAPekh57IAK6MC3Nhv3uH6 XTjnMiDmDemazvu/1R+fUm80QcD45hngrUct/jgfqdkNX2zBYzWoXDR8ur62qBc4 xFpR6uzxQtX3TPk6ZiLFhZ1vEasfl+xB7VUV2Z0UeSdeSEOcp0dqqmv0CQZzkjpK etOFCbPqreZhQV9ymEZChN3BomxQX06BLZyzlifVdnNknEMZkIlOel8vFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6d0P+Vse/xxnAPdqothPeupZ32MB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPmUi4ys fcxsZLUzEyFi6CBVB3r0xAyBEofaXGAWnFpGaGVBxdK9vcapx9hjBjaf5JVsiZgt tLZKpyyO1sCi7BxkbLa876KXZ+g0Opcj+IXo6uygntw7v47iQl1HiafMnTVaxKl3 bHh4Y1M9/P2KHbkEwmk7wx05YpQ15D7n56yFEWm1FGlUq1O3F5xcq8YZpPZDR8c8 /cCNKJeQSyjir8iCoRqKa/2PCG4zWEocVdB6VtQB5UoSQKifH4JBZ+h6ojphFyQu gOvHzcOR3ECAK/RqErkh8d+hc2MlylvQ+QNvSzD0MwLTa12s+kSyRJHfHjcr/Lsa Fw8Cbr6UzT2e8A== -----END CERTIFICATE-----Generated at Sun May 11 13:28:55 2025 by rpki-client