$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: yVSG0uEWgI14bmzE+Xo5/9S6UIhXdgc+/UvlB4mRxMw= Subject key identifier: 4F:11:4C:83:F4:2F:76:F3:18:89:0F:F5:41:67:1C:CD:FF:13:44:EA Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 0198D92BDA20B2768F72AFB01433CC3058DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 138A Signing time: Sat 23 Aug 2025 23:03:05 +0000 Manifest this update: Sat 23 Aug 2025 23:03:05 +0000 Manifest next update: Sun 24 Aug 2025 23:03:05 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: izhhv++rBhzRfr8AM5fO0GREpZ1J1xFbU+G1HHTPIdI=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 23:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d9:2b:da:20:b2:76:8f:72:af:b0:14:33:cc:30:58:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Aug 23 23:03:05 2025 GMT Not After : Aug 24 23:03:05 2025 GMT Subject: CN=4f114c83f42f76f318890ff541671ccdff1344ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:4b:a4:91:3e:8e:4f:ac:57:1f:4e:5e:a3: 07:03:91:e5:a1:0c:bc:17:32:44:bc:78:30:37:40: 73:9a:c2:f1:3f:c2:22:b0:4e:0a:9d:ca:15:04:df: 25:62:a8:3e:0c:2c:03:54:00:3e:d8:a4:c8:ef:b6: ac:77:4f:32:8a:0c:15:7b:b2:e1:73:42:4b:d8:a1: 16:6f:cb:19:4c:35:2b:fa:56:ff:d5:09:ac:cf:5c: ec:46:ba:0a:1f:c9:ed:50:35:45:68:74:78:a9:56: 02:59:84:e4:5a:a2:44:10:c5:01:2c:4c:c3:e8:a0: 0e:b2:aa:83:4a:d4:c5:8b:6f:c4:0d:3a:03:66:fe: e4:24:a2:18:3e:8a:41:7a:53:25:f1:15:38:70:d7: c6:35:a8:fa:52:92:52:c9:47:bd:d7:2c:b6:cf:b1: 6d:dd:d0:54:1d:b4:84:6d:b5:5d:96:92:47:c4:81: 2a:ef:c2:5d:27:97:f7:aa:d0:1a:31:ff:26:f5:6d: 13:5c:fa:71:c7:6e:68:c6:54:77:ee:af:cb:6b:be: dd:3a:f3:5a:e6:eb:eb:45:1d:b6:1d:46:d4:3c:63: 09:ae:4d:9d:cf:b9:5b:ce:3f:b0:03:ff:6d:b6:27: dd:63:46:ed:6a:b1:95:be:de:5c:5d:0f:6e:81:02: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:11:4C:83:F4:2F:76:F3:18:89:0F:F5:41:67:1C:CD:FF:13:44:EA X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:23:1d:d0:ba:93:78:f7:ea:43:69:c8:0d:d5:84:1a:18:b9: ea:e6:5e:56:b8:80:bd:7c:6c:96:04:54:d9:b6:da:cc:63:bd: c2:b0:17:b7:ee:a9:86:75:77:c0:5c:4a:8c:33:90:2f:a1:67: 31:c4:7c:3c:03:b0:16:43:a0:e6:fe:c9:85:c6:d4:48:be:12: be:53:38:a5:47:61:ce:9c:65:c8:01:da:ce:b6:78:2c:09:49: a5:26:51:2a:9b:18:da:df:b6:b0:93:c7:69:c1:cc:08:43:f2: 11:ac:3c:8f:a0:dc:ff:9d:5b:e1:2c:9f:b0:7f:f9:46:88:3d: ec:20:f0:81:bc:fd:20:e7:54:c8:00:1a:fd:c4:2f:e8:c0:4f: c3:41:e0:1b:d4:9b:26:58:1b:ce:cc:f5:dc:a7:f9:11:5f:d7: dc:2b:54:e0:b0:61:ac:73:fb:8b:66:9a:e2:b6:9f:0a:27:2a: ff:20:71:3a:ad:63:6b:3c:a0:5c:47:30:aa:dc:d5:fa:47:2d: cc:d6:55:1e:65:76:59:a1:2d:bf:34:5f:f5:67:0d:a9:ac:11: ae:34:48:f1:8d:35:a7:b2:dc:ac:1e:01:f0:f2:02:20:f6:90: ec:16:1a:65:65:79:99:dd:66:29:1d:07:90:db:dc:aa:51:d0: 08:f3:0f:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjZK9ogsnaPcq+wFDPMMFjaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUwODIzMjMwMzA1WhcNMjUwODI0MjMwMzA1WjAzMTEwLwYDVQQD Eyg0ZjExNGM4M2Y0MmY3NmYzMTg4OTBmZjU0MTY3MWNjZGZmMTM0NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2NLpJE+jk+sVx9OXqMHA5HloQy8 FzJEvHgwN0BzmsLxP8IisE4KncoVBN8lYqg+DCwDVAA+2KTI77asd08yigwVe7Lh c0JL2KEWb8sZTDUr+lb/1Qmsz1zsRroKH8ntUDVFaHR4qVYCWYTkWqJEEMUBLEzD 6KAOsqqDStTFi2/EDToDZv7kJKIYPopBelMl8RU4cNfGNaj6UpJSyUe91yy2z7Ft 3dBUHbSEbbVdlpJHxIEq78JdJ5f3qtAaMf8m9W0TXPpxx25oxlR37q/La77dOvNa 5uvrRR22HUbUPGMJrk2dz7lbzj+wA/9ttifdY0btarGVvt5cXQ9ugQJJCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8RTIP0L3bzGIkP9UFnHM3/E0TqMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliMd0LqT ePfqQ2nIDdWEGhi56uZeVriAvXxslgRU2bbazGO9wrAXt+6phnV3wFxKjDOQL6Fn McR8PAOwFkOg5v7JhcbUSL4SvlM4pUdhzpxlyAHazrZ4LAlJpSZRKpsY2t+2sJPH acHMCEPyEaw8j6Dc/51b4SyfsH/5Rog97CDwgbz9IOdUyAAa/cQv6MBPw0HgG9Sb Jlgbzsz13Kf5EV/X3CtU4LBhrHP7i2aa4rafCicq/yBxOq1jazygXEcwqtzV+kct zNZVHmV2WaEtvzRf9WcNqawRrjRI8Y01p7LcrB4B8PICIPaQ7BYaZWV5md1mKR0H kNvcqlHQCPMPfw== -----END CERTIFICATE-----Generated at Sun Aug 24 07:02:54 2025 by rpki-client