$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: 7Xl64xbAjE0U+4vsC2+VdUohZ9Gp4C1Au43mAeT3pcE= Subject key identifier: D6:EF:94:2E:E1:E9:0A:DB:DB:17:40:A9:31:AA:1B:A0:9F:12:5D:19 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 0197C681BF9E8450C3A3929DC7594D921115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 15D6 Signing time: Tue 01 Jul 2025 15:01:21 +0000 Manifest this update: Tue 01 Jul 2025 15:01:21 +0000 Manifest next update: Wed 02 Jul 2025 15:01:21 +0000 Files and hashes: 1: 1-3fiDUT6gzjtAQogV6bgofonnG4.roa (hash: pc7dIo5ndDhRJIrcZvUMyHa9aA2Wx3LxCkefIcK3Gqc=) 2: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 3: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 4: K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa (hash: EDky965lH+7d9zEKg3uh2UPLM5EYLdR0gznw5lmNnpo=) 5: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: F+0pL1cb1zK/8+kFwgrcxjT86i18G5IpJQZL/kONEGw=) 6: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 7: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 8: cNvBb2RRxSjoCAkb0wZvTJ3BY5k.roa (hash: oDSoGJIctW5p0rg5AbBoYa3L96DcMDhEp9yGbjF4AfU=) 9: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 10: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 11: k2UHZLtZwVHZHXhDRCzLsU-jAfk.roa (hash: uZ7f/mqzCxj88IHBJr/+LGWTfdp9aGiRUAnubKa+rXw=) 12: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 13: qx1D6MwlFJLvd2j3wGKzaKDH1gc.roa (hash: /6Qrju93/zC5tTWH2Z6B9bYEnrkHOlHlFsFGFSYu75M=) 14: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 02 Jul 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:c6:81:bf:9e:84:50:c3:a3:92:9d:c7:59:4d:92:11:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jul 1 15:01:21 2025 GMT Not After : Jul 2 15:01:21 2025 GMT Subject: CN=d6ef942ee1e90adbdb1740a931aa1ba09f125d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:a5:b9:43:27:1c:09:28:fa:81:ef:3f:8e: db:7f:d2:aa:5e:da:3b:67:59:62:1f:50:4f:dd:61: 0d:18:d1:de:ad:de:58:a9:8f:36:d2:80:5a:6c:c1: 33:1a:13:f8:ce:cf:0f:37:1c:af:96:2f:df:9e:e5: 19:34:fe:73:4d:2d:5c:db:c2:91:9f:cf:a3:da:1a: 34:b0:3f:c7:b8:e1:f2:fc:e7:db:08:e5:da:87:6c: ec:1a:76:a6:0d:03:3e:49:b5:d9:e9:bd:b8:38:e8: d1:8c:7f:e3:4f:f0:98:b9:33:75:4f:d3:04:f0:a1: d5:d5:7e:79:39:d4:0b:80:f5:58:55:86:4e:90:68: bd:37:22:0e:6d:91:cd:26:e1:35:9b:58:6d:16:6c: f7:a8:53:f8:aa:a7:36:83:20:a3:8f:97:26:62:b4: 12:0a:95:85:23:ed:39:09:04:ac:de:b9:e2:8f:41: 11:78:bf:b4:ef:b4:1b:5a:92:97:e0:96:07:02:a8: 93:c0:4e:cd:25:d1:b5:ec:58:75:cc:27:08:42:fe: 77:2b:77:c0:0a:04:b2:f9:b8:e5:43:6a:27:4d:a7: d8:8e:e0:8c:c5:80:78:25:da:63:75:6d:0b:d1:80: f4:27:0c:09:ca:91:b7:fc:e1:4e:4d:f4:3f:8e:6b: 53:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EF:94:2E:E1:E9:0A:DB:DB:17:40:A9:31:AA:1B:A0:9F:12:5D:19 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ab:95:fc:24:aa:67:a3:63:aa:13:cb:af:6a:76:30:ae:64: e5:f1:1a:72:a7:36:9d:98:bc:21:47:be:80:9f:22:e5:9f:ff: f6:78:f7:f4:9e:d6:e0:69:58:e6:77:ad:30:e5:dd:24:37:07: e4:ee:70:e2:6b:f4:a9:61:26:0c:0d:97:27:a8:5e:65:2d:0f: 09:55:cc:18:75:af:67:8a:7c:44:08:f7:b6:82:53:26:71:87: 38:d5:5b:63:74:58:78:65:13:6c:75:60:fe:63:44:19:16:88: e2:7f:23:fc:24:d8:bc:00:88:d5:3b:62:4a:05:b4:d0:20:5d: cc:ef:ed:51:ac:36:ea:20:16:74:3c:47:f8:e1:da:f5:3e:ac: b8:c2:2f:c6:aa:9c:ca:81:f0:a8:a0:28:4c:fc:aa:03:dc:57: 3a:ea:73:b0:ad:10:c1:fb:ec:e2:a7:d8:ea:d6:25:34:90:1b: 88:7b:d8:fa:b1:43:02:57:2f:9d:1f:17:2a:5e:b8:d9:6a:28: 6d:e9:b8:29:39:73:ff:87:ee:65:c6:e1:c3:d7:39:d0:7e:4d: 7e:5a:f3:80:a9:7c:d4:d2:83:05:fe:f4:4f:be:3a:80:d0:d2: 30:9b:1d:c2:c1:29:42:9c:7d:9f:71:58:b7:ff:d5:a3:db:ad: cf:27:fc:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfGgb+ehFDDo5Kdx1lNkhEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUwNzAxMTUwMTIxWhcNMjUwNzAyMTUwMTIxWjAzMTEwLwYDVQQD EyhkNmVmOTQyZWUxZTkwYWRiZGIxNzQwYTkzMWFhMWJhMDlmMTI1ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrSluUMnHAko+oHvP47bf9KqXto7 Z1liH1BP3WENGNHerd5YqY820oBabMEzGhP4zs8PNxyvli/fnuUZNP5zTS1c28KR n8+j2ho0sD/HuOHy/OfbCOXah2zsGnamDQM+SbXZ6b24OOjRjH/jT/CYuTN1T9ME 8KHV1X55OdQLgPVYVYZOkGi9NyIObZHNJuE1m1htFmz3qFP4qqc2gyCjj5cmYrQS CpWFI+05CQSs3rnij0EReL+077QbWpKX4JYHAqiTwE7NJdG17Fh1zCcIQv53K3fA CgSy+bjlQ2onTafYjuCMxYB4JdpjdW0L0YD0JwwJypG3/OFOTfQ/jmtTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbvlC7h6Qrb2xdAqTGqG6CfEl0ZMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6uV/CSq Z6NjqhPLr2p2MK5k5fEacqc2nZi8IUe+gJ8i5Z//9nj39J7W4GlY5netMOXdJDcH 5O5w4mv0qWEmDA2XJ6heZS0PCVXMGHWvZ4p8RAj3toJTJnGHONVbY3RYeGUTbHVg /mNEGRaI4n8j/CTYvACI1TtiSgW00CBdzO/tUaw26iAWdDxH+OHa9T6suMIvxqqc yoHwqKAoTPyqA9xXOupzsK0Qwfvs4qfY6tYlNJAbiHvY+rFDAlcvnR8XKl642Woo bem4KTlz/4fuZcbhw9c50H5NflrzgKl81NKDBf70T746gNDSMJsdwsEpQpx9n3FY t//Vo9utzyf8Pw== -----END CERTIFICATE-----Generated at Tue Jul 1 21:09:33 2025 by rpki-client