$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: 35kGGnphNdg+lxqVuhyfV42ihqGwyScPiBH6IBdRUtU= Subject key identifier: A3:00:46:6E:17:77:0B:B7:EE:53:10:50:61:51:73:16:A3:EF:A0:0A Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 0198D4A7D553E8803779E3D14A7A617C1305 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 167C Signing time: Sat 23 Aug 2025 02:00:25 +0000 Manifest this update: Sat 23 Aug 2025 02:00:25 +0000 Manifest next update: Sun 24 Aug 2025 02:00:25 +0000 Files and hashes: 1: 5BICsEwf39tSfyuR3Dxq7LQhNTs.roa (hash: F1ThVBGu9zXgcyXnsxcohjmknQWFIwIuRVmf9x9GU+Q=) 2: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=) 3: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (hash: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=) 4: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=) 5: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=) 6: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=) 7: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=) 8: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=) 9: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=) 10: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=) 11: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=) 12: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=) 13: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=) 14: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=) 15: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=) 16: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=) 17: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: dG21OpI3nUadlOaDnkEqAKYlUrGme85e+bY6spsqyhw=) 18: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=) 19: x8Uw5Io7vkOK8zPs7hBxf0TiEjU.roa (hash: XPUCvqQGmbQXVknGSsdWcvGFgn7Y4wQAn1YOcjGGp6s=) 20: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:a7:d5:53:e8:80:37:79:e3:d1:4a:7a:61:7c:13:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Aug 23 02:00:25 2025 GMT Not After : Aug 24 02:00:25 2025 GMT Subject: CN=a300466e17770bb7ee53105061517316a3efa00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:c8:53:14:e1:60:64:06:38:f7:0c:4d:93: 97:35:91:25:72:b1:d6:a8:32:1c:b6:e0:8e:01:d7: 86:67:47:0b:80:a9:2b:e3:33:72:10:92:c3:da:d2: 58:13:0e:3e:26:a3:c4:de:12:f3:aa:01:58:2f:6b: 9c:91:57:2b:69:f0:70:70:f9:c7:6a:a1:af:d4:23: 64:23:a4:b7:73:a0:4b:eb:db:35:ea:32:e5:d5:21: 4f:82:ab:ec:f3:2f:31:f0:42:1f:93:7b:9f:c1:23: ac:52:0f:4a:1b:8e:20:41:82:ca:16:70:ce:42:a4: f7:6b:8b:92:b9:b2:96:9d:74:de:eb:2b:f1:f0:f4: 1c:c0:82:ad:6f:e1:77:f2:cc:2b:13:cc:3f:5b:56: 91:01:74:f0:17:7d:e8:ee:67:21:7f:98:54:1c:8c: 61:b3:5f:27:66:c5:28:ea:8c:62:17:e9:8c:61:fd: 0b:bc:2d:91:6d:77:af:86:2e:ca:7e:7c:61:46:90: fa:47:46:17:75:37:7b:2c:dd:0c:4c:86:ec:d0:ac: 14:2e:1f:d1:e5:7c:4d:85:9e:16:77:b6:2f:a0:92: 89:cb:20:ab:9a:7e:4b:30:24:78:26:b5:9e:36:35: fe:65:25:3d:b0:2f:cb:b2:b4:66:6e:82:dd:3f:4c: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:00:46:6E:17:77:0B:B7:EE:53:10:50:61:51:73:16:A3:EF:A0:0A X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:19:78:23:a3:fb:db:47:4d:37:b9:c8:98:bd:4b:a5:20:22: 75:53:b0:65:c2:29:39:9e:d9:63:26:5e:19:54:eb:44:a9:b0: 41:a6:0e:f4:67:2e:73:5c:af:27:62:73:20:cd:07:a1:14:82: 65:88:50:66:a1:b6:0b:40:7a:a6:59:a6:ab:cc:9a:12:d4:0c: 13:84:8a:59:5d:05:78:f4:7c:d1:9a:26:aa:5e:15:c4:1d:8a: 5e:17:b4:a7:7a:bd:5d:d0:7e:68:30:7f:a2:58:d4:ad:c4:02: 76:4b:46:b6:85:9c:f3:92:9b:e3:a1:db:2f:db:d1:09:36:2e: 43:6e:2d:18:27:02:04:bf:fa:3c:e6:d5:f1:ad:ec:0d:b0:a8: a6:ed:b4:0a:23:49:a5:f2:24:03:c6:34:28:62:20:63:f2:51: c1:3d:76:93:9f:f5:56:38:d6:4b:4e:f0:eb:de:c5:f9:76:e4: 57:2c:0a:b8:67:19:69:4d:d0:e5:76:0a:9e:87:1e:fb:78:e5: 82:58:7b:3b:1a:74:6d:5c:41:b8:f5:8d:8d:ff:a9:8b:c2:70: db:a0:6c:b5:f7:f2:75:b7:28:53:18:b4:b3:a6:37:77:86:a6: be:f0:39:3b:61:ba:96:8d:c1:81:56:d6:0a:25:cc:1f:b6:c0: 0f:4a:16:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUp9VT6IA3eePRSnphfBMFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUwODIzMDIwMDI1WhcNMjUwODI0MDIwMDI1WjAzMTEwLwYDVQQD EyhhMzAwNDY2ZTE3NzcwYmI3ZWU1MzEwNTA2MTUxNzMxNmEzZWZhMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgvIUxThYGQGOPcMTZOXNZElcrHW qDIctuCOAdeGZ0cLgKkr4zNyEJLD2tJYEw4+JqPE3hLzqgFYL2uckVcrafBwcPnH aqGv1CNkI6S3c6BL69s16jLl1SFPgqvs8y8x8EIfk3ufwSOsUg9KG44gQYLKFnDO QqT3a4uSubKWnXTe6yvx8PQcwIKtb+F38swrE8w/W1aRAXTwF33o7mchf5hUHIxh s18nZsUo6oxiF+mMYf0LvC2RbXevhi7KfnxhRpD6R0YXdTd7LN0MTIbs0KwULh/R 5XxNhZ4Wd7YvoJKJyyCrmn5LMCR4JrWeNjX+ZSU9sC/LsrRmboLdP0xtTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMARm4Xdwu37lMQUGFRcxaj76AKMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxl4I6P7 20dNN7nImL1LpSAidVOwZcIpOZ7ZYyZeGVTrRKmwQaYO9Gcuc1yvJ2JzIM0HoRSC ZYhQZqG2C0B6plmmq8yaEtQME4SKWV0FePR80Zomql4VxB2KXhe0p3q9XdB+aDB/ oljUrcQCdktGtoWc85Kb46HbL9vRCTYuQ24tGCcCBL/6PObV8a3sDbCopu20CiNJ pfIkA8Y0KGIgY/JRwT12k5/1VjjWS07w697F+XbkVywKuGcZaU3Q5XYKnoce+3jl glh7Oxp0bVxBuPWNjf+pi8Jw26BstffydbcoUxi0s6Y3d4amvvA5O2G6lo3BgVbW CiXMH7bAD0oWIg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:15:21 2025 by rpki-client