$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: faI2+Z8nMcg28e6GPvPatDMoHgC5kPTEUUMOCfxuE+I= Subject key identifier: BE:20:E6:1D:0D:69:09:C9:92:A1:C8:A3:FE:F2:81:6B:AE:5B:62:EB Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 0197D2861047CE6B8D4F5EA2CEE620BB0DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 1302 Signing time: Thu 03 Jul 2025 23:01:30 +0000 Manifest this update: Thu 03 Jul 2025 23:01:30 +0000 Manifest next update: Fri 04 Jul 2025 23:01:30 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: gJMPp7xBR4b87jmmi6dpoSGkfXNYX9Ki00UIUjbqWXY=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Jul 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:d2:86:10:47:ce:6b:8d:4f:5e:a2:ce:e6:20:bb:0d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jul 3 23:01:30 2025 GMT Not After : Jul 4 23:01:30 2025 GMT Subject: CN=be20e61d0d6909c992a1c8a3fef2816bae5b62eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:17:ab:c6:bc:0a:2b:39:bf:c6:72:ff:64: e8:39:33:5f:b4:dd:5e:eb:10:78:86:1e:d2:7d:3f: 7e:cc:2c:34:d1:30:e9:1a:cd:0e:b5:4c:f2:d0:d3: 96:49:64:83:60:d7:f1:63:77:a7:61:6f:89:7a:83: 7f:e9:75:b9:24:d2:a9:d2:a8:bf:16:e4:ba:cb:e1: 5a:d0:20:52:39:f1:b8:3f:a7:6e:14:09:fe:cf:1e: a0:2d:ef:d2:d9:97:b1:3b:3f:2a:bc:a3:79:e1:c3: 09:6b:82:65:d5:35:28:67:e8:22:5e:12:8e:5e:ab: 07:98:3b:96:ab:e0:f6:64:cd:b0:69:aa:1e:15:b7: 41:65:bc:ee:55:94:7b:a7:69:63:41:01:c0:ae:32: b7:41:a9:f2:57:bf:fe:05:f2:e0:73:76:5a:db:76: e1:74:9f:85:d7:52:cf:1e:d6:e3:0f:5f:e8:7f:6c: 4d:09:24:c4:79:7c:3f:3b:41:31:a6:4a:9f:c5:24: 7a:fd:1d:5c:ad:eb:db:3c:81:ad:44:45:f2:eb:60: 1b:c9:5b:85:02:67:b2:d4:7d:c5:67:87:b1:82:a5: 2d:47:3f:32:b0:d0:67:e9:c4:bc:df:90:1d:06:23: 2d:1d:a7:0e:df:b3:9e:0b:e4:9c:f8:47:92:93:99: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:20:E6:1D:0D:69:09:C9:92:A1:C8:A3:FE:F2:81:6B:AE:5B:62:EB X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:1e:ea:b8:b6:7f:50:91:ce:94:33:8e:53:c3:18:67:47:e4: c0:d3:90:98:eb:c1:b5:fb:1b:bc:fa:b4:af:b8:0f:33:07:28: 8c:f3:a0:39:1a:bf:df:09:72:a9:7e:64:40:f4:76:75:3a:41: e5:71:8d:4e:af:61:9e:d2:9f:24:cf:cd:61:8a:dc:20:1b:8d: 7f:bf:42:c9:c7:9e:66:82:a5:3a:93:07:f5:d6:df:10:53:60: 7b:c0:04:2a:fb:c9:1e:4f:13:e0:b5:f8:ee:a8:b7:3a:8d:b0: ab:6d:47:58:49:26:56:38:f4:13:c2:7f:a2:d1:ad:6e:f5:d7: 01:1a:5f:0e:61:ee:60:06:97:b4:88:d6:61:f1:8e:ec:52:9d: 2e:e6:f5:a4:51:55:12:98:e6:96:56:0c:eb:f6:14:40:ee:d8: 3d:68:56:e8:8e:03:f6:d8:2c:fd:59:82:81:d0:15:56:3e:bc: e0:51:ad:ae:7d:f3:db:5f:0f:8a:36:1d:1b:26:25:7e:08:97: 5c:6d:44:3a:82:4e:10:5d:cd:3d:1b:4d:0f:c2:db:e7:60:4f: 0e:53:cd:8c:1e:13:82:af:eb:ab:19:a2:de:4a:04:e0:e4:65: fc:c0:70:f6:5d:0a:9c:d9:e5:03:a3:87:66:07:14:5e:be:37: ad:81:da:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfShhBHzmuNT16izuYguw33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUwNzAzMjMwMTMwWhcNMjUwNzA0MjMwMTMwWjAzMTEwLwYDVQQD EyhiZTIwZTYxZDBkNjkwOWM5OTJhMWM4YTNmZWYyODE2YmFlNWI2MmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WMXq8a8Cis5v8Zy/2ToOTNftN1e 6xB4hh7SfT9+zCw00TDpGs0OtUzy0NOWSWSDYNfxY3enYW+JeoN/6XW5JNKp0qi/ FuS6y+Fa0CBSOfG4P6duFAn+zx6gLe/S2ZexOz8qvKN54cMJa4Jl1TUoZ+giXhKO XqsHmDuWq+D2ZM2waaoeFbdBZbzuVZR7p2ljQQHArjK3QanyV7/+BfLgc3Za23bh dJ+F11LPHtbjD1/of2xNCSTEeXw/O0ExpkqfxSR6/R1crevbPIGtREXy62AbyVuF Amey1H3FZ4exgqUtRz8ysNBn6cS835AdBiMtHacO37OeC+Sc+EeSk5kpKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4g5h0NaQnJkqHIo/7ygWuuW2LrMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIR7quLZ/ UJHOlDOOU8MYZ0fkwNOQmOvBtfsbvPq0r7gPMwcojPOgORq/3wlyqX5kQPR2dTpB 5XGNTq9hntKfJM/NYYrcIBuNf79CyceeZoKlOpMH9dbfEFNge8AEKvvJHk8T4LX4 7qi3Oo2wq21HWEkmVjj0E8J/otGtbvXXARpfDmHuYAaXtIjWYfGO7FKdLub1pFFV EpjmllYM6/YUQO7YPWhW6I4D9tgs/VmCgdAVVj684FGtrn3z218PijYdGyYlfgiX XG1EOoJOEF3NPRtND8Lb52BPDlPNjB4Tgq/rqxmi3koE4ORl/MBw9l0KnNnlA6OH ZgcUXr43rYHaZQ== -----END CERTIFICATE-----Generated at Fri Jul 4 07:53:39 2025 by rpki-client