$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: EpIJOskkdfJMvLXahHURDL2ewIf9h+ZDKSWUd/N9ScM= Subject key identifier: 33:16:89:8A:CA:55:6E:1D:1D:F7:6A:69:DB:32:6A:C2:92:36:E0:07 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 0199FE7DDBE02BEF3273938AE6B09F6DD776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 16FF Signing time: Sun 19 Oct 2025 22:01:25 +0000 Manifest this update: Sun 19 Oct 2025 22:01:25 +0000 Manifest next update: Mon 20 Oct 2025 22:01:25 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: HGMeOV8W+89e40d9uuBSO/2qVayAUGWO6+pWDz2ZKlY=) 4: QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa (hash: rkVqPs1fexqZNRh0F63HT4hXiYiSmw86Y4ULqhqeko0=) 5: VIvJR-ELjPDDNwtDAs7jPXPRVS8.roa (hash: xlYWOAlcQ9qUm1X3p6cNrDPlijzSwOQVXOe0gD7Wm78=) 6: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 9: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (hash: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=) 10: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 11: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 12: m8epfX6ALey9mozyTLJ0ovC6F2E.roa (hash: nEswDzlmuc7WOVjzf1OqhYzhCng69m/AkqBFVEn5Jd8=) 13: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 14: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:7d:db:e0:2b:ef:32:73:93:8a:e6:b0:9f:6d:d7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Oct 19 22:01:25 2025 GMT Not After : Oct 20 22:01:25 2025 GMT Subject: CN=3316898aca556e1d1df76a69db326ac29236e007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5d:a2:17:a2:37:43:ff:52:81:f3:35:12:7d: 1d:6e:a5:1d:58:df:6d:fd:ea:85:f5:a9:d4:72:41: fe:e0:5e:dd:24:9e:ad:16:7a:da:33:70:a8:29:70: dc:54:bf:78:52:6f:5a:ec:27:91:5c:90:64:15:62: d4:74:b8:53:1d:c4:50:bd:5b:49:97:e4:df:94:95: a3:b0:82:be:1c:c0:cb:15:2e:5e:9f:c4:5e:17:7b: 69:9a:09:57:10:4b:1f:06:04:76:ab:bd:88:27:ff: 4f:fb:f3:2d:4b:38:0d:de:bb:8b:d6:47:33:0f:98: 4f:32:7f:c9:e4:16:a3:d0:4b:28:c2:61:10:18:8b: 54:71:32:3b:34:68:29:99:f6:0e:cc:38:c8:7b:d5: ce:a1:55:04:58:5a:a4:58:8a:77:28:c9:5e:27:98: ed:86:f5:ae:d3:19:6b:dc:46:eb:21:33:5c:ea:99: 60:5f:2a:59:a9:a0:c0:dc:cf:9c:e6:d8:ac:8b:45: a1:33:4f:9c:08:8c:d1:4e:f0:b9:2b:59:df:bd:18: 06:ae:56:cd:2b:af:3d:ba:06:3f:9a:c1:22:52:ef: 72:4c:0d:c7:4b:f7:ba:1d:20:de:7d:3e:d5:d6:f0: f1:b4:ad:96:8e:a1:08:6c:d6:48:67:71:81:d9:56: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:16:89:8A:CA:55:6E:1D:1D:F7:6A:69:DB:32:6A:C2:92:36:E0:07 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:87:b0:04:89:d7:2a:1a:83:1c:51:2a:10:78:0e:15:64:bf: fb:ab:9b:7b:8f:73:26:c2:98:9d:75:54:0a:b9:c0:75:e9:89: a7:be:98:53:1a:66:02:50:eb:08:aa:f3:10:dd:52:d4:a6:f8: 83:9e:b5:3d:0c:5e:a4:19:05:e4:34:45:96:8a:4d:88:d0:b8: 5a:52:d5:30:20:51:61:10:75:a0:c2:99:a8:80:c4:48:0d:be: 10:8d:45:46:72:20:91:88:02:73:82:80:2a:29:d0:b0:6e:c9: 3a:52:c6:59:3d:6c:b4:bd:8c:e5:66:71:b1:17:e8:53:b5:a6: 70:5d:38:19:fd:21:51:e8:19:a6:c6:2e:1a:8c:a3:27:06:18: 09:ce:16:05:0e:fd:a8:ad:ca:a6:21:eb:86:c5:6e:6e:3e:32: 63:21:cb:7c:eb:25:3d:9d:0e:59:95:0c:2e:0d:76:c7:36:12: e5:43:f8:53:a5:ad:f3:78:8e:43:48:b3:f2:20:fb:6c:fc:de: 62:d3:7f:ae:4c:d7:6b:49:4c:57:1a:1f:63:1f:c5:dc:4b:b8: ca:d4:c2:46:5b:b4:15:dc:7d:3e:8b:8b:36:57:2d:b9:b1:fd: 0e:61:8a:0a:a9:9c:32:fc:d6:5b:59:32:c4:9f:d4:90:a0:41: 5b:2e:6c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+fdvgK+8yc5OK5rCfbdd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUxMDE5MjIwMTI1WhcNMjUxMDIwMjIwMTI1WjAzMTEwLwYDVQQD EygzMzE2ODk4YWNhNTU2ZTFkMWRmNzZhNjlkYjMyNmFjMjkyMzZlMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz12iF6I3Q/9SgfM1En0dbqUdWN9t /eqF9anUckH+4F7dJJ6tFnraM3CoKXDcVL94Um9a7CeRXJBkFWLUdLhTHcRQvVtJ l+TflJWjsIK+HMDLFS5en8ReF3tpmglXEEsfBgR2q72IJ/9P+/MtSzgN3ruL1kcz D5hPMn/J5Baj0EsowmEQGItUcTI7NGgpmfYOzDjIe9XOoVUEWFqkWIp3KMleJ5jt hvWu0xlr3EbrITNc6plgXypZqaDA3M+c5tisi0WhM0+cCIzRTvC5K1nfvRgGrlbN K689ugY/msEiUu9yTA3HS/e6HSDefT7V1vDxtK2WjqEIbNZIZ3GB2Vbb1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMWiYrKVW4dHfdqadsyasKSNuAHMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoewBInX KhqDHFEqEHgOFWS/+6ube49zJsKYnXVUCrnAdemJp76YUxpmAlDrCKrzEN1S1Kb4 g561PQxepBkF5DRFlopNiNC4WlLVMCBRYRB1oMKZqIDESA2+EI1FRnIgkYgCc4KA KinQsG7JOlLGWT1stL2M5WZxsRfoU7WmcF04Gf0hUegZpsYuGoyjJwYYCc4WBQ79 qK3KpiHrhsVubj4yYyHLfOslPZ0OWZUMLg12xzYS5UP4U6Wt83iOQ0iz8iD7bPze YtN/rkzXa0lMVxofYx/F3Eu4ytTCRlu0Fdx9PouLNlctubH9DmGKCqmcMvzWW1ky xJ/UkKBBWy5sNA== -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:51 2025 by rpki-client