$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json) Hash identifier: xIRjlVIDaAziBYBdG2vej9qwto65q3Hmy4PzRl1NHHo= Subject key identifier: 0C:AB:44:51:12:D3:82:F6:45:14:6B:30:BC:14:70:E8:2D:06:C5:1B Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 0199FC8F425D8DB67682323383CAEEE71179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft Manifest number: 1739 Signing time: Sun 19 Oct 2025 13:01:10 +0000 Manifest this update: Sun 19 Oct 2025 13:01:10 +0000 Manifest next update: Mon 20 Oct 2025 13:01:10 +0000 Files and hashes: 1: 0TAxxPi4zjMfURtgArfTlTlJzoY.roa (hash: DkfnTLoQSnkxMFDufCf4Tzi91pyg3D/dKfjoKdkuvnc=) 2: 2Fz3gDQO1Ko4Uhz-WKqbPvSyHuY.roa (hash: qDVXlglB84tjlEcwlG5YSSXNovaEgcbeYtxfS2oty2U=) 3: 4en9va8jCZNwuV4bW7NKxVamz54.roa (hash: sNZVLTVL9KoD1p+QjvV2CcAfu43CsFx04jNm3+y7/uc=) 4: 9L6AVjkValDZgShbyHFIglFK-vU.roa (hash: vufq8Mys/rVjB7A0Cd1ttX4gkVYJG8tMhOrBmJ6rqrA=) 5: B3osDG38ZDrGf88ro5_cPchMPNQ.roa (hash: cHTpc3o5rIlsqZtfKdAwi89vReD0eYn50sK/4Phfd3o=) 6: F4w-QZJ9tuZ3bwCkS70XoiSwZrE.roa (hash: hgJd+IQxksq4UP4gzNVwizzj2yRg9XUuIEuXvfpX7aI=) 7: Jb1qAtrQRHkWR9yqePpnXV6kF-U.roa (hash: opwZoEWtUaeMsOhsAkDVCLoxpYSLW7EC/weSdnXl3hU=) 8: T3TYQGzkIt875WMcJue8Tlu8qcE.roa (hash: zrjAaYCf4QNugLTCHzX4Z7vGYzZPktrc0+f+lzFF6qE=) 9: edWAVfkKeL_p4SOqKwWgAG9qG9o.roa (hash: eesAWNHbi/a4/dOuceKDaMTobB00ZxoBZJAUv+VOUbI=) 10: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: 6mOnzoAs+9vVZMclb1ryr7YpEYLTe3zYzoHURkSfKjI=) 11: wt3LwVWmMnxdQ_1hnrE0QvYmwGo.roa (hash: 78DCmBR5KDCiWcDQ81Kjee3QnK4jQ7nQ69rTiAmxiSU=) 12: yS4gxCiyxv-6Eo_qaFTdHS-1_f0.roa (hash: 4bv1Fv/+FlNMdg4hH2LqipPwgjlMt4gTsStcEknTXUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:42:5d:8d:b6:76:82:32:33:83:ca:ee:e7:11:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Oct 19 13:01:10 2025 GMT Not After : Oct 20 13:01:10 2025 GMT Subject: CN=0cab445112d382f645146b30bc1470e82d06c51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:9f:7a:ad:ce:e1:45:c5:20:f0:92:19:c3: 02:68:b1:97:74:55:af:2a:01:d7:ef:b1:ac:de:15: 02:00:c4:9a:d8:18:a7:29:08:b8:57:44:5f:f1:3d: 92:8c:4d:a2:b2:ac:22:21:71:5c:e0:2f:9d:e7:db: 6e:10:73:b0:c5:f3:d6:17:ef:9c:76:06:19:e2:9a: e3:9c:a0:a4:30:12:6b:ff:fa:5a:f5:5e:cc:0b:ef: 7c:4e:24:0d:36:d1:e6:98:f2:3f:a8:8e:be:71:47: 05:27:4f:60:ee:79:14:85:5e:7a:a6:64:01:af:d6: d5:27:de:07:f6:b3:76:a0:2c:ab:99:75:d5:bd:5d: fd:df:04:03:3e:c8:4c:01:02:ce:27:cf:aa:76:d1: 55:2e:54:b4:be:1f:84:69:a0:6f:a8:4f:e2:5d:94: cc:8e:f0:db:e3:a9:3e:fc:3d:b4:61:65:50:de:2a: 82:36:9e:98:e5:f1:db:c7:fd:92:6a:d4:97:33:6d: e9:80:ea:8c:91:ca:48:19:a3:c7:38:0d:ed:0c:62: 4b:ff:e3:78:66:05:a4:3e:9b:05:3b:8d:99:40:c2: 35:5f:fc:68:31:14:e2:51:7f:b7:7a:df:b0:43:a6: b1:52:b3:42:ba:e1:cc:e2:ec:5a:b7:f0:c9:fd:61: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AB:44:51:12:D3:82:F6:45:14:6B:30:BC:14:70:E8:2D:06:C5:1B X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0d:47:6d:a4:36:bc:6f:e8:bc:9b:5a:7a:ce:3c:d2:a6:9a: 81:31:79:74:99:62:ba:19:07:71:ef:7d:dc:0d:38:f7:84:ec: 7b:10:5b:f2:64:16:a8:fb:67:2f:08:c5:f4:80:17:fb:d7:0a: 30:f1:8f:ff:7f:b1:eb:8d:cb:e6:1f:75:72:f3:fd:71:9b:15: db:c6:f3:b2:1a:42:e1:c0:8b:c5:15:42:c9:60:c5:26:22:da: b1:60:a2:57:91:42:be:7a:01:8f:5d:6c:87:82:6a:02:54:34: ad:f0:67:e6:71:98:88:eb:d4:e5:61:18:56:cc:c1:9b:5e:af: 2e:1a:78:f9:93:e4:d5:58:2d:5f:7a:33:6f:fe:5c:9d:54:43: b6:4e:ac:53:a1:1b:02:e4:f3:bb:85:42:cd:48:61:85:cc:bd: f7:2f:b3:6d:d3:a6:02:c7:20:c0:ab:4a:43:79:94:af:aa:ff: a9:56:07:ee:7c:2b:d2:64:42:ad:40:4e:77:c8:eb:7c:8f:7d: 13:e0:ae:ef:25:b6:09:17:ed:90:9e:15:56:5a:5c:78:ab:d8: 42:73:3f:69:84:d9:a9:21:94:77:b3:34:23:ca:2f:7b:b6:b1: a2:a1:84:09:6a:f0:73:f9:9c:73:5b:13:6f:94:e5:50:c9:42: 39:fe:42:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j0JdjbZ2gjIzg8ru5xF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjUxMDE5MTMwMTEwWhcNMjUxMDIwMTMwMTEwWjAzMTEwLwYDVQQD EygwY2FiNDQ1MTEyZDM4MmY2NDUxNDZiMzBiYzE0NzBlODJkMDZjNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XOfeq3O4UXFIPCSGcMCaLGXdFWv KgHX77Gs3hUCAMSa2BinKQi4V0Rf8T2SjE2isqwiIXFc4C+d59tuEHOwxfPWF++c dgYZ4prjnKCkMBJr//pa9V7MC+98TiQNNtHmmPI/qI6+cUcFJ09g7nkUhV56pmQB r9bVJ94H9rN2oCyrmXXVvV393wQDPshMAQLOJ8+qdtFVLlS0vh+EaaBvqE/iXZTM jvDb46k+/D20YWVQ3iqCNp6Y5fHbx/2SatSXM23pgOqMkcpIGaPHOA3tDGJL/+N4 ZgWkPpsFO42ZQMI1X/xoMRTiUX+3et+wQ6axUrNCuuHM4uxat/DJ/WECUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyrRFES04L2RRRrMLwUcOgtBsUbMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGA1HbaQ2 vG/ovJtaes480qaagTF5dJliuhkHce993A0494TsexBb8mQWqPtnLwjF9IAX+9cK MPGP/3+x643L5h91cvP9cZsV28bzshpC4cCLxRVCyWDFJiLasWCiV5FCvnoBj11s h4JqAlQ0rfBn5nGYiOvU5WEYVszBm16vLhp4+ZPk1VgtX3ozb/5cnVRDtk6sU6Eb AuTzu4VCzUhhhcy99y+zbdOmAscgwKtKQ3mUr6r/qVYH7nwr0mRCrUBOd8jrfI99 E+Cu7yW2CRftkJ4VVlpceKvYQnM/aYTZqSGUd7M0I8ove7axoqGECWrwc/mcc1sT b5TlUMlCOf5CCA== -----END CERTIFICATE-----Generated at Sun Oct 19 22:30:20 2025 by rpki-client