$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: Dy7IAhLZ9CPeHpHqRB5vfaEHoB6nn9T0FJzwW1V/+fE= Subject key identifier: C1:17:F3:26:01:1B:E2:2D:EC:CE:63:3F:B6:29:15:10:D0:88:EC:41 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 0197B6A1AF84295269191E0142D8EDE70101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 14B3 Signing time: Sat 28 Jun 2025 13:02:18 +0000 Manifest this update: Sat 28 Jun 2025 13:02:18 +0000 Manifest next update: Sun 29 Jun 2025 13:02:18 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 4: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: +sitsWiTSmYu6BzBBmbdnElylrhFZ8NwrIm1auqo/oY=) 6: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 7: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 8: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 9: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=) 10: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 13:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a1:af:84:29:52:69:19:1e:01:42:d8:ed:e7:01:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jun 28 13:02:18 2025 GMT Not After : Jun 29 13:02:18 2025 GMT Subject: CN=c117f326011be22decce633fb6291510d088ec41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:04:e4:62:bb:05:e7:9e:95:e9:da:3a:e9: 60:be:67:de:6f:23:e6:3b:7d:8d:52:5f:9f:33:54: 08:ca:0e:dc:db:a0:6f:74:67:56:8b:58:dd:44:04: a4:73:ac:b0:c5:ea:07:43:8c:02:b5:ae:19:4e:19: 85:e0:e1:f6:af:59:27:82:09:0e:22:4d:63:ee:69: 23:ae:ff:86:ef:c2:bf:49:71:d2:1b:b0:3f:38:49: 0c:44:87:02:b7:04:aa:27:94:bd:46:20:61:d8:55: 68:b7:6e:b3:38:15:7e:c2:36:88:98:e7:f1:87:ee: 84:43:89:42:d5:4b:fe:5a:40:56:f2:64:1b:dc:93: 6f:5f:58:e2:76:51:ae:22:b9:a4:d9:74:a9:6f:30: ea:d8:75:85:3f:a0:0f:dd:64:b3:64:e2:8b:33:36: bd:be:db:73:26:da:7c:31:f7:b6:bc:26:96:fa:ac: 65:13:55:fb:ae:67:ce:f3:d9:e7:4e:63:b4:03:83: cf:06:95:48:12:57:6d:c3:94:f8:cd:4b:aa:a1:56: 0b:52:c5:01:8c:8f:04:27:8e:c6:59:c1:02:f3:08: a6:80:37:23:0c:94:31:8e:0c:79:aa:68:c7:5b:30: 7a:2f:70:c9:10:85:3c:bf:c6:3e:f0:08:2f:02:2b: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:17:F3:26:01:1B:E2:2D:EC:CE:63:3F:B6:29:15:10:D0:88:EC:41 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b3:b4:9b:a7:f8:2d:3b:4f:17:6f:05:76:af:2c:9e:47:4f: d3:95:a7:78:69:1a:81:6a:06:1f:51:0c:03:10:15:a3:1c:91: b6:5b:b3:14:49:ed:f0:f2:93:9d:34:30:0d:05:10:6a:a0:46: bd:5c:78:5c:63:3f:b1:7d:78:05:73:0b:de:24:a6:5e:53:38: fc:7b:d7:b2:1d:06:e1:28:62:42:6a:f8:eb:f6:0e:c5:0e:d4: 29:39:ee:f3:d2:c1:fb:0b:c5:26:8a:0f:4c:8b:8b:ed:41:5c: 19:01:fa:00:58:a2:86:8b:fe:4f:f2:43:f4:d3:e5:47:3a:7a: 4f:24:df:9b:cb:a7:4b:7b:d4:60:d7:4d:03:a1:47:e7:47:68: 80:2b:6b:ff:d6:ef:94:53:6f:03:c7:ef:e1:99:f1:45:42:5d: cc:ea:df:3d:46:af:56:51:b2:82:c5:e9:87:a9:53:f9:71:86: b1:97:d3:fd:89:e9:6c:f3:65:1a:9b:c2:bb:53:69:5b:db:e2: 1a:83:e4:17:43:49:b1:cb:4a:27:25:f1:d8:2b:94:6c:3a:8c: 70:7b:4e:05:9c:c2:31:e8:39:c6:66:c7:69:b8:5a:50:ca:7a: 1c:46:4c:d7:38:db:f8:7a:c3:c5:50:2f:bd:09:dd:27:c4:74: 18:33:52:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oa+EKVJpGR4BQtjt5wEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUwNjI4MTMwMjE4WhcNMjUwNjI5MTMwMjE4WjAzMTEwLwYDVQQD EyhjMTE3ZjMyNjAxMWJlMjJkZWNjZTYzM2ZiNjI5MTUxMGQwODhlYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0wE5GK7BeeelenaOulgvmfebyPm O32NUl+fM1QIyg7c26BvdGdWi1jdRASkc6ywxeoHQ4wCta4ZThmF4OH2r1knggkO Ik1j7mkjrv+G78K/SXHSG7A/OEkMRIcCtwSqJ5S9RiBh2FVot26zOBV+wjaImOfx h+6EQ4lC1Uv+WkBW8mQb3JNvX1jidlGuIrmk2XSpbzDq2HWFP6AP3WSzZOKLMza9 vttzJtp8Mfe2vCaW+qxlE1X7rmfO89nnTmO0A4PPBpVIEldtw5T4zUuqoVYLUsUB jI8EJ47GWcEC8wimgDcjDJQxjgx5qmjHWzB6L3DJEIU8v8Y+8AgvAiuhzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEX8yYBG+It7M5jP7YpFRDQiOxBMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7O0m6f4 LTtPF28Fdq8snkdP05WneGkagWoGH1EMAxAVoxyRtluzFEnt8PKTnTQwDQUQaqBG vVx4XGM/sX14BXML3iSmXlM4/HvXsh0G4ShiQmr46/YOxQ7UKTnu89LB+wvFJooP TIuL7UFcGQH6AFiihov+T/JD9NPlRzp6TyTfm8unS3vUYNdNA6FH50dogCtr/9bv lFNvA8fv4ZnxRUJdzOrfPUavVlGygsXph6lT+XGGsZfT/YnpbPNlGpvCu1NpW9vi GoPkF0NJsctKJyXx2CuUbDqMcHtOBZzCMeg5xmbHabhaUMp6HEZM1zjb+HrDxVAv vQndJ8R0GDNSnQ== -----END CERTIFICATE-----Generated at Sat Jun 28 22:32:30 2025 by rpki-client