$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft File: OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json) Hash identifier: qHIHbUqsMLuxmV4K4jq3GqQ1dn91egG9neYjOC/Qi9Q= Subject key identifier: CE:96:DB:16:25:3D:28:3F:8D:A1:13:1B:98:91:95:92:E1:45:22:79 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 0196BE254B6EF814F0A77F1CC021F8A16A79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft Manifest number: 0B8B Signing time: Sun 11 May 2025 07:00:37 +0000 Manifest this update: Sun 11 May 2025 07:00:37 +0000 Manifest next update: Mon 12 May 2025 07:00:37 +0000 Files and hashes: 1: 0CU8gK0M0FreSaI70cF5ooIUWnA.roa (hash: 3AhvcPwm/9eRzoLDWBdCRrt2ESsUhmDJGeKMEdO3cAk=) 2: 7U36SlZapyeDS2Ak1ibKjOwXw_k.roa (hash: 8qxvJp9rWWP4iXTSuHjrQKYQTm/Cdbn1SdddAUifY+g=) 3: EhaRoUANwPr-dXqPA4rnsTVne60.roa (hash: gVnPC4//yzL2951hRjYzs0OxJc3ttq+ni7WR/2qnlFw=) 4: GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa (hash: encqJVvBdRm6B6vTFCshfVj5JBcWptS0eKrTwjTdeJk=) 5: HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa (hash: EVOBxrtD9ibYF2I1shFMN6eNa05ZrbHe+uhDMKiGbNk=) 6: IvvEQkJx_YQuA7WDKcWTwA6sjeM.roa (hash: TYlXh7A49R6hcyPJlA/asJPKwJrsxKdwQselHHTfu5Q=) 7: L9Fk346-JSHBf5lZ_ZJf-LMZGWU.roa (hash: DN183lb8EchI0WiaHaTT8jaz5o7gqV8yjOyNWGuBl80=) 8: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: xvXG3r2jW5/Mh0z+EFxvPY+UmHRE4XK5bytq0G5X4EA=) 9: Q6LsWReGKNutfUTah7q4q5FgWaw.roa (hash: T83YUz+DzOmdLi9tCj2KAPIuSjnQxbyJScLlQv1En54=) 10: S714ou8hYqjvmFB4nmghIWDuzT8.roa (hash: /BUpwNlFfWECuzcvwXarqFvS3D6dRZwllAWqKckM2JU=) 11: SlDcuXgMtJBGo8YlgFJf41C4kAo.roa (hash: SG0BWCyRtxyo4M02OYtmA2zjOWnb5KfeZ0pEnDDi914=) 12: VjGUvPYUWgp-0uedFQJC98v6fEo.roa (hash: jGCrku5NTRGndH4tqMN86FEJPJ73k9kCLkdTKB2wH5A=) 13: Z-Ur6Re147f49wwXtBgxnUTtQco.roa (hash: 6jMXEqLaJpiU5oHiEpHv2AWSooBvq9dmOPpZl+dAG7k=) 14: aFqGzzPnvGg6PPai6cgdL5YWXWI.roa (hash: a/LIbVs5CKwdoXoUSNeyQY9w3ja6VjMgxqtVYMhCu2E=) 15: atuyYpoVRKQHnFtgDV3FM-vFLxM.roa (hash: qXfV8yAI5tXvkScsLElC1FZo67Cs+dJHRWE3vQl62to=) 16: bE47TjBGbwXfU-r3q5mX8QT37TA.roa (hash: W/p8gTqazmlXb6lHv7JR1fNZM1/3zoGeNwN/AW0drkI=) 17: q2sdLUq8oTKjFXabTIHjNujteO4.roa (hash: DmdPmf4rfc5GBaM+wuurYH2BFaBH9ELo6PMdUoe2Fiw=) 18: sTodJGVa8zYAQXUyHcKityrKMhw.roa (hash: OCjCckKNvmiaHxZzqtZ4rx+ccV72o773purW+SW4YeI=) 19: tzK7bQadc-X5ERcHUFRyrLjFAic.roa (hash: pH5a6hVvwpFpvLEU3OQ9naeDuYIybxvVLAzccWIRqYM=) 20: xymeMR66aDWDmDhIlx2JEKPGuQ4.roa (hash: FDOGD9cmw7d0tSGevYfgks8MljnMa/gRurSZQ7spuUQ=) 21: yGG8haOhseC4wLjAMMMPhHZTXjA.roa (hash: lNJuGf7SRWFqIxTMR/qz5nkSoM2R54KFa9KdvNjHl+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:25:4b:6e:f8:14:f0:a7:7f:1c:c0:21:f8:a1:6a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: May 11 07:00:37 2025 GMT Not After : May 12 07:00:37 2025 GMT Subject: CN=ce96db16253d283f8da1131b98919592e1452279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1a:55:be:75:11:da:a7:9b:99:33:fd:4c:9e: 4c:66:4a:83:55:d3:02:52:04:6e:e9:02:32:49:d0: 35:c5:6c:49:22:84:fb:72:65:e0:10:34:33:0a:d5: 71:71:1d:0d:0f:a7:7e:8e:f4:82:bd:1f:b1:00:9b: 03:4d:37:de:a7:77:77:44:d7:9e:fe:75:98:b3:b4: 68:26:4a:94:18:a2:2c:25:a2:b6:0a:a0:17:50:0a: f2:fd:27:55:a8:69:35:54:94:be:96:97:a1:3e:ec: d8:e9:cd:2d:d2:76:d6:1d:7d:b6:34:73:51:d7:aa: 2c:01:81:07:4b:6c:c0:c7:91:13:27:fe:72:fd:24: a4:52:c5:5a:24:cb:2c:fd:80:66:3b:a8:4a:a1:8f: 04:69:cc:ff:5b:78:97:ae:c9:f3:57:b5:eb:45:52: fe:5b:dc:3e:cc:78:85:b1:96:f7:2f:2a:fc:a4:88: 3c:41:ef:c0:c8:60:23:0d:09:eb:b6:07:b3:3b:94: 38:4e:e7:c1:72:61:ee:1b:d2:9b:cc:3a:53:3b:87: 2d:94:0b:df:83:6d:97:e9:ab:31:56:fc:6c:66:4d: 52:04:bc:90:06:3b:b5:30:9c:b4:cd:d1:85:fc:a5: e6:3a:28:5e:9c:77:76:ac:d4:33:2f:98:ea:da:1d: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:96:DB:16:25:3D:28:3F:8D:A1:13:1B:98:91:95:92:E1:45:22:79 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:09:2f:7a:ee:ab:79:5a:45:b2:79:d3:d7:e4:0c:02:d9:a2: 87:55:37:35:de:e5:99:18:f4:88:6f:25:a5:4b:cf:83:e1:6b: 4f:ec:f1:e5:c1:29:e4:b7:99:07:9a:c3:11:6e:15:68:1a:37: 0f:fd:c9:36:02:e8:a8:83:4e:33:63:27:42:a0:8b:50:12:55: 57:14:5d:70:d0:cd:7c:85:2b:78:01:45:08:86:6f:f1:2d:6f: 26:19:12:29:d5:a7:93:da:d0:43:67:1c:42:42:18:e8:c8:15: f3:f8:a3:c4:8d:6e:ae:12:ec:37:96:ec:e3:d3:85:e1:13:25: 45:8a:7e:7a:2f:a4:bb:85:cd:59:e9:2d:c0:f5:45:fa:44:2c: 08:81:a3:ce:c0:98:43:9b:d2:8e:7f:c9:0e:be:93:06:02:2e: cb:99:df:b4:2f:16:9f:1f:ec:8d:cc:07:17:38:60:5a:7a:ac: 72:0c:f8:e3:d2:7d:ad:49:b9:38:3b:2a:e5:02:d9:37:16:35: bc:a5:df:ff:b7:bf:1b:02:b8:64:04:4a:7b:57:0d:1c:8e:b1: 5d:f7:08:50:ae:92:e5:36:a9:fa:e8:b0:cc:d6:ee:42:12:f7: 5d:d9:ec:2b:03:a2:c2:8d:10:4d:55:1d:20:24:5c:ce:8e:d0: 68:ea:a6:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+JUtu+BTwp38cwCH4oWp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUwNTExMDcwMDM3WhcNMjUwNTEyMDcwMDM3WjAzMTEwLwYDVQQD EyhjZTk2ZGIxNjI1M2QyODNmOGRhMTEzMWI5ODkxOTU5MmUxNDUyMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxpVvnUR2qebmTP9TJ5MZkqDVdMC UgRu6QIySdA1xWxJIoT7cmXgEDQzCtVxcR0ND6d+jvSCvR+xAJsDTTfep3d3RNee /nWYs7RoJkqUGKIsJaK2CqAXUAry/SdVqGk1VJS+lpehPuzY6c0t0nbWHX22NHNR 16osAYEHS2zAx5ETJ/5y/SSkUsVaJMss/YBmO6hKoY8Eacz/W3iXrsnzV7XrRVL+ W9w+zHiFsZb3Lyr8pIg8Qe/AyGAjDQnrtgezO5Q4TufBcmHuG9KbzDpTO4ctlAvf g22X6asxVvxsZk1SBLyQBju1MJy0zdGF/KXmOihenHd2rNQzL5jq2h2AOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6W2xYlPSg/jaETG5iRlZLhRSJ5MB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAkveu6r eVpFsnnT1+QMAtmih1U3Nd7lmRj0iG8lpUvPg+FrT+zx5cEp5LeZB5rDEW4VaBo3 D/3JNgLoqINOM2MnQqCLUBJVVxRdcNDNfIUreAFFCIZv8S1vJhkSKdWnk9rQQ2cc QkIY6MgV8/ijxI1urhLsN5bs49OF4RMlRYp+ei+ku4XNWektwPVF+kQsCIGjzsCY Q5vSjn/JDr6TBgIuy5nftC8Wnx/sjcwHFzhgWnqscgz449J9rUm5ODsq5QLZNxY1 vKXf/7e/GwK4ZARKe1cNHI6xXfcIUK6S5Tap+uiwzNbuQhL3XdnsKwOiwo0QTVUd ICRczo7QaOqmOg== -----END CERTIFICATE-----Generated at Sun May 11 10:23:23 2025 by rpki-client