$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: XYU6vsDK5JTMe5A38+zKkUrtCtcfLNHzCOQFqSQwb2E= Subject key identifier: E8:D1:10:98:22:26:39:D5:0C:AA:A9:11:C7:7D:95:A4:39:91:78:C9 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 0196CFBDAD83EC7802BB789DFA1C53217E54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 127C Signing time: Wed 14 May 2025 17:00:36 +0000 Manifest this update: Wed 14 May 2025 17:00:36 +0000 Manifest next update: Thu 15 May 2025 17:00:36 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: FQVXHs/NSIFgVFmvLlvlMfNYBq1zcoEOTxKZKeIbGQM=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 May 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:cf:bd:ad:83:ec:78:02:bb:78:9d:fa:1c:53:21:7e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: May 14 17:00:36 2025 GMT Not After : May 15 17:00:36 2025 GMT Subject: CN=e8d11098222639d50caaa911c77d95a4399178c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:4c:6c:1f:9b:0a:a1:7b:b6:55:fe:41:59: 4b:99:95:8e:8e:b4:f7:c9:62:b7:95:96:ea:65:1b: ea:fc:69:4b:ea:9d:ec:2a:1f:bd:03:65:c0:5a:99: 69:62:03:e9:9d:9e:5d:11:b2:76:e7:0e:68:d5:c0: 19:c7:d3:28:20:8a:9f:cf:7d:1c:0e:7a:ba:b0:d3: 18:4b:55:7c:e9:68:60:56:6f:d7:ce:92:1f:e0:a6: e2:4c:bb:5e:62:b1:67:90:23:63:67:44:82:c3:1a: de:50:a7:53:6b:cc:2d:4a:4e:19:98:e0:40:2b:f5: 5a:07:5c:cb:4d:fd:6b:82:2e:54:ad:1e:ed:31:87: 61:d6:1c:f5:87:2a:84:b6:5b:19:d9:b9:c6:78:71: 0c:ce:48:4e:66:f9:55:9f:b4:b0:5f:68:af:c2:06: d9:d3:d6:ab:90:59:32:74:7b:c2:14:96:7e:e7:fe: 58:67:42:83:47:e9:f0:94:00:9a:c8:63:ee:a6:f4: ed:e6:9b:b4:e6:3c:bc:d6:3f:40:a5:e5:cd:89:23: 43:e2:fa:2e:7a:ea:50:2c:d1:cb:8c:48:86:45:d8: 68:91:f4:93:06:9b:68:ae:3a:22:e0:b8:12:ad:34: c4:89:d7:66:c1:15:1f:13:41:8a:d3:24:66:3f:fd: ce:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D1:10:98:22:26:39:D5:0C:AA:A9:11:C7:7D:95:A4:39:91:78:C9 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2e:01:82:b8:d4:76:6c:68:ae:8b:94:5f:a6:6d:52:53:cc: 5d:1c:2c:59:a7:62:9e:c6:98:27:fc:83:64:db:dd:af:d2:c2: 0f:3c:aa:58:7d:e9:65:b1:39:d2:0d:82:66:4d:83:62:7b:16: eb:bd:43:6d:91:88:70:53:8f:51:83:48:95:f9:a5:7e:39:01: 1b:53:74:32:71:08:3c:0e:8f:86:07:74:27:15:54:23:bc:dd: 9a:33:3b:5f:4e:41:d4:3a:63:fa:b8:70:69:62:3d:fd:ab:62: a4:61:85:de:07:50:74:87:9f:fd:3f:06:60:08:3b:fe:5d:62: 4d:8c:3f:0b:d2:36:b0:21:2f:b1:ba:9d:2b:3c:17:b5:b4:0d: 74:9e:10:a6:63:9f:23:c2:6f:24:70:3a:f5:10:1b:35:b5:4d: 7b:c5:03:42:05:f6:11:fc:e3:ec:6e:fa:fe:d2:a2:4a:ac:0c: 5d:a8:24:60:f9:f4:1d:07:04:8f:35:2e:70:08:f1:77:f6:28: 0d:f2:9e:10:1b:60:55:6b:d2:45:be:63:a4:9d:a6:45:66:6e: 45:78:d3:7d:8c:c5:5a:97:39:43:0c:b3:85:b2:bf:c9:ee:d8: 68:27:b4:40:cf:d2:3f:61:10:7b:ee:f1:21:cd:04:df:84:9b: b8:b6:36:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbPva2D7HgCu3id+hxTIX5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUwNTE0MTcwMDM2WhcNMjUwNTE1MTcwMDM2WjAzMTEwLwYDVQQD EyhlOGQxMTA5ODIyMjYzOWQ1MGNhYWE5MTFjNzdkOTVhNDM5OTE3OGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DVMbB+bCqF7tlX+QVlLmZWOjrT3 yWK3lZbqZRvq/GlL6p3sKh+9A2XAWplpYgPpnZ5dEbJ25w5o1cAZx9MoIIqfz30c Dnq6sNMYS1V86WhgVm/XzpIf4KbiTLteYrFnkCNjZ0SCwxreUKdTa8wtSk4ZmOBA K/VaB1zLTf1rgi5UrR7tMYdh1hz1hyqEtlsZ2bnGeHEMzkhOZvlVn7SwX2ivwgbZ 09arkFkydHvCFJZ+5/5YZ0KDR+nwlACayGPupvTt5pu05jy81j9ApeXNiSND4vou eupQLNHLjEiGRdhokfSTBptorjoi4LgSrTTEiddmwRUfE0GK0yRmP/3OHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjREJgiJjnVDKqpEcd9laQ5kXjJMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPC4BgrjU dmxorouUX6ZtUlPMXRwsWadinsaYJ/yDZNvdr9LCDzyqWH3pZbE50g2CZk2DYnsW 671DbZGIcFOPUYNIlfmlfjkBG1N0MnEIPA6Phgd0JxVUI7zdmjM7X05B1Dpj+rhw aWI9/atipGGF3gdQdIef/T8GYAg7/l1iTYw/C9I2sCEvsbqdKzwXtbQNdJ4QpmOf I8JvJHA69RAbNbVNe8UDQgX2Efzj7G76/tKiSqwMXagkYPn0HQcEjzUucAjxd/Yo DfKeEBtgVWvSRb5jpJ2mRWZuRXjTfYzFWpc5QwyzhbK/ye7YaCe0QM/SP2EQe+7x Ic0E34SbuLY2gw== -----END CERTIFICATE-----Generated at Thu May 15 00:31:37 2025 by rpki-client