$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: EFW3OXXi6pWkJrxQ7PjoGqjVx3iMhtfxBSAnb8zYI7s= Subject key identifier: 48:98:28:49:17:BC:C8:47:38:23:3A:1F:7E:18:9E:8B:EC:22:21:A6 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 0199FCC66532A7270EE00A8FE6FABB794353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 1421 Signing time: Sun 19 Oct 2025 14:01:24 +0000 Manifest this update: Sun 19 Oct 2025 14:01:24 +0000 Manifest next update: Mon 20 Oct 2025 14:01:24 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: 3SSWDfN1SH393BFOpXqsECuYzSPCQAycthvxe06wfEA=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:65:32:a7:27:0e:e0:0a:8f:e6:fa:bb:79:43:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Oct 19 14:01:24 2025 GMT Not After : Oct 20 14:01:24 2025 GMT Subject: CN=4898284917bcc84738233a1f7e189e8bec2221a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:dd:58:ce:e3:49:24:01:1a:b4:a5:c2:7b: ca:7d:e7:02:ff:4d:4b:db:be:d2:8d:f4:a6:6c:9d: 7b:7e:7e:42:36:9d:ca:b7:05:20:14:9d:02:21:6e: 4e:aa:c6:7b:0d:4c:28:f9:49:4b:74:92:89:b2:91: 1c:1a:68:6d:81:e4:e0:76:f9:cd:e2:fe:d5:e7:6a: 33:df:fc:40:65:b1:07:70:80:12:0b:de:8d:f6:c5: 7c:28:bf:cf:7a:72:50:4d:86:89:1f:6f:92:ce:b0: be:12:c2:08:70:b4:ad:88:c9:da:6b:46:12:e1:1b: 68:e4:bb:20:55:38:81:08:c2:8d:04:1b:b9:a0:ec: 88:14:94:97:ef:67:d1:f3:c9:19:44:7b:20:61:34: fc:a7:d6:91:0c:48:4e:ab:4d:18:93:c1:50:cf:00: e4:bd:ca:13:c2:be:9e:57:ca:37:2c:51:26:42:32: 1f:d3:e1:d9:59:91:86:f6:ee:49:28:04:16:e6:bb: bd:1d:36:f1:71:33:7c:df:44:e5:55:f3:2d:e8:1a: 1b:fa:c8:a0:15:63:a4:d0:ec:22:cb:ee:bd:47:36: d4:0f:16:14:b7:3a:86:47:d3:71:7e:2b:31:9e:34: 66:b4:e7:a3:aa:be:15:ad:8e:55:9c:1c:c2:61:2c: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:98:28:49:17:BC:C8:47:38:23:3A:1F:7E:18:9E:8B:EC:22:21:A6 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fe:68:fe:71:1a:50:ff:94:31:f5:2e:21:f0:67:6a:14:33: 71:5f:9d:d6:4c:66:80:1b:07:3d:e3:50:55:b6:e5:43:66:c6: 02:05:27:b6:ad:08:41:ef:43:2c:ea:4a:12:7f:8d:98:f8:5f: bd:5e:fe:97:c1:92:b9:3e:1d:8d:05:ca:7e:b4:d4:55:15:af: e9:98:9b:8d:d9:b2:e8:37:e5:01:af:9d:c6:36:38:98:78:e4: e8:ae:15:e9:18:2f:b3:86:42:29:b1:51:25:b1:75:55:6d:b1: 43:98:23:0b:3e:37:f0:a7:c7:52:80:c6:f6:b4:67:60:e1:c5: 10:9d:d0:8e:72:22:bf:1a:d9:07:8d:ff:af:c1:5a:48:aa:30: 3f:8a:11:4a:cd:33:22:ac:3c:aa:33:9a:40:04:17:9d:d8:2d: 70:b5:77:da:a8:52:67:53:3c:2b:c0:8a:6c:67:e9:55:74:9e: a7:37:d9:c0:25:4a:32:2c:b5:20:02:a3:f1:62:59:c6:f9:63: 70:d6:4e:28:20:34:d7:ee:5b:e9:05:7a:30:30:bc:f3:0a:ac: 8f:11:47:01:e8:0d:98:5e:32:81:7a:cd:11:e1:60:b0:65:02: d3:b5:6e:fa:bc:22:61:1e:67:e5:c3:00:cb:2e:b0:58:8b:fc: e1:07:78:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xmUypycO4AqP5vq7eUNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUxMDE5MTQwMTI0WhcNMjUxMDIwMTQwMTI0WjAzMTEwLwYDVQQD Eyg0ODk4Mjg0OTE3YmNjODQ3MzgyMzNhMWY3ZTE4OWU4YmVjMjIyMWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIPdWM7jSSQBGrSlwnvKfecC/01L 277SjfSmbJ17fn5CNp3KtwUgFJ0CIW5OqsZ7DUwo+UlLdJKJspEcGmhtgeTgdvnN 4v7V52oz3/xAZbEHcIASC96N9sV8KL/PenJQTYaJH2+SzrC+EsIIcLStiMnaa0YS 4Rto5LsgVTiBCMKNBBu5oOyIFJSX72fR88kZRHsgYTT8p9aRDEhOq00Yk8FQzwDk vcoTwr6eV8o3LFEmQjIf0+HZWZGG9u5JKAQW5ru9HTbxcTN830TlVfMt6Bob+sig FWOk0Owiy+69RzbUDxYUtzqGR9NxfisxnjRmtOejqr4VrY5VnBzCYSwHpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiYKEkXvMhHOCM6H34YnovsIiGmMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnf5o/nEa UP+UMfUuIfBnahQzcV+d1kxmgBsHPeNQVbblQ2bGAgUntq0IQe9DLOpKEn+NmPhf vV7+l8GSuT4djQXKfrTUVRWv6Zibjdmy6DflAa+dxjY4mHjk6K4V6Rgvs4ZCKbFR JbF1VW2xQ5gjCz438KfHUoDG9rRnYOHFEJ3QjnIivxrZB43/r8FaSKowP4oRSs0z Iqw8qjOaQAQXndgtcLV32qhSZ1M8K8CKbGfpVXSepzfZwCVKMiy1IAKj8WJZxvlj cNZOKCA01+5b6QV6MDC88wqsjxFHAegNmF4ygXrNEeFgsGUC07Vu+rwiYR5n5cMA yy6wWIv84Qd4Ww== -----END CERTIFICATE-----Generated at Sun Oct 19 18:06:04 2025 by rpki-client