$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: viIPjUPWptufPxgzWV1Hiedhlc9eXaXk1G2rJf8YW4A= Subject key identifier: 81:14:EB:32:AE:8C:AA:ED:C9:0F:D5:A3:DB:EA:F1:47:27:E3:55:CD Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 0199FC21875113E8C21E2DE1D251E59759D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 15E2 Signing time: Sun 19 Oct 2025 11:01:19 +0000 Manifest this update: Sun 19 Oct 2025 11:01:19 +0000 Manifest next update: Mon 20 Oct 2025 11:01:19 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 81pkNOTzNwT3tYccVz9WH_xBvEM.roa (hash: i9/4g/HQckvFmPe3z7i7AGU3zvyTDUBKjWj3cd7//r4=) 4: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 5: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 6: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: wpqj1PJF6Wjf1Q8hkVDXLvQQuDawX4BXk0ds0DR9kys=) 7: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 8: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 9: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 10: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=) 11: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:21:87:51:13:e8:c2:1e:2d:e1:d2:51:e5:97:59:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Oct 19 11:01:19 2025 GMT Not After : Oct 20 11:01:19 2025 GMT Subject: CN=8114eb32ae8caaedc90fd5a3dbeaf14727e355cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:f3:a7:af:55:f2:16:50:34:a0:0d:d4:5b: e7:8c:4e:52:eb:6f:90:af:fe:ce:71:7d:78:96:72: 5c:0d:1e:9b:92:3b:e2:6b:77:fe:eb:ce:9a:b5:92: 97:86:e5:18:99:86:9e:8e:07:e5:9c:05:4e:b2:4f: c8:fe:cb:ff:35:a8:1b:14:17:18:e2:c4:2a:f1:72: 30:a7:58:73:85:d0:c3:32:bb:c6:1b:81:be:71:36: 0f:f6:95:65:ca:d4:8c:b1:8e:4e:b8:02:96:e2:b3: 8d:36:f9:93:f9:df:7f:47:77:9f:93:1f:11:6d:47: 44:7e:ed:88:31:80:8c:a3:ef:0f:29:a4:37:01:2c: c4:3a:cd:5e:bd:8e:88:66:4e:8e:e4:70:db:e6:a5: c7:43:8a:b7:a1:83:8a:d0:ca:29:10:3f:32:84:00: 37:ed:03:6c:d0:1f:e1:e9:96:9b:c9:93:25:83:ce: c5:1a:5c:0a:79:55:1b:b5:cc:83:7a:29:fd:92:45: 48:4b:25:94:5a:33:52:a4:06:77:a1:68:b2:4a:93: 74:0e:61:f4:05:4e:bd:f0:9d:13:a3:88:b0:43:89: 92:23:64:7e:c8:f0:84:49:f5:fa:52:47:c2:01:ba: ea:e2:c1:f4:04:49:4e:29:87:68:bf:2a:de:21:11: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:14:EB:32:AE:8C:AA:ED:C9:0F:D5:A3:DB:EA:F1:47:27:E3:55:CD X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:06:1e:21:c9:3f:35:d1:74:11:09:79:cf:e2:73:78:72:70: 56:e2:48:51:3c:38:7f:86:98:6f:8f:b1:63:1d:0a:b2:40:c8: 3f:b4:70:81:e9:96:5b:5f:bb:72:ac:80:af:77:13:bf:7e:16: 64:ba:84:8e:6f:d7:28:3a:a2:d6:68:06:26:cf:90:59:79:07: 8d:47:31:c1:ea:05:87:43:5e:6e:e5:b5:ea:5d:72:39:91:27: 73:7b:a4:8e:e3:5b:78:b8:35:71:22:19:c4:54:cf:48:a7:db: c1:01:ae:ae:a4:63:0b:c3:53:49:ee:13:b4:a4:00:6a:8a:2c: 4f:ff:4b:16:08:cd:a5:75:bd:c4:93:a9:c8:ce:90:34:ee:d2: c1:0c:a2:7f:be:91:26:81:a0:20:b5:4e:c1:8e:43:61:5e:fb: c6:39:24:98:eb:e6:8a:ac:05:8c:ea:a1:6d:e9:cf:89:aa:f1: 61:4c:cb:80:d2:95:95:7b:6d:66:b9:e9:d5:39:fe:dc:9f:ec: 0a:8e:df:0a:04:93:80:88:80:7e:ba:dd:d3:46:62:72:08:b8: cd:06:9a:b8:25:31:dd:a8:bc:76:0b:cb:98:0a:9f:74:d1:a0: 3e:03:f7:a0:bc:f8:eb:8a:2d:a1:ff:19:33:54:ff:b7:f1:1a: c9:c7:4b:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8IYdRE+jCHi3h0lHll1nWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUxMDE5MTEwMTE5WhcNMjUxMDIwMTEwMTE5WjAzMTEwLwYDVQQD Eyg4MTE0ZWIzMmFlOGNhYWVkYzkwZmQ1YTNkYmVhZjE0NzI3ZTM1NWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrXzp69V8hZQNKAN1FvnjE5S62+Q r/7OcX14lnJcDR6bkjvia3f+686atZKXhuUYmYaejgflnAVOsk/I/sv/NagbFBcY 4sQq8XIwp1hzhdDDMrvGG4G+cTYP9pVlytSMsY5OuAKW4rONNvmT+d9/R3efkx8R bUdEfu2IMYCMo+8PKaQ3ASzEOs1evY6IZk6O5HDb5qXHQ4q3oYOK0MopED8yhAA3 7QNs0B/h6ZabyZMlg87FGlwKeVUbtcyDein9kkVISyWUWjNSpAZ3oWiySpN0DmH0 BU698J0To4iwQ4mSI2R+yPCESfX6UkfCAbrq4sH0BElOKYdovyreIRH86QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEU6zKujKrtyQ/Vo9vq8Ucn41XNMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAYeIck/ NdF0EQl5z+JzeHJwVuJIUTw4f4aYb4+xYx0KskDIP7RwgemWW1+7cqyAr3cTv34W ZLqEjm/XKDqi1mgGJs+QWXkHjUcxweoFh0NebuW16l1yOZEnc3ukjuNbeLg1cSIZ xFTPSKfbwQGurqRjC8NTSe4TtKQAaoosT/9LFgjNpXW9xJOpyM6QNO7SwQyif76R JoGgILVOwY5DYV77xjkkmOvmiqwFjOqhbenPiarxYUzLgNKVlXttZrnp1Tn+3J/s Co7fCgSTgIiAfrrd00Zicgi4zQaauCUx3ai8dgvLmAqfdNGgPgP3oLz464otof8Z M1T/t/EaycdLOg== -----END CERTIFICATE-----Generated at Sun Oct 19 20:07:23 2025 by rpki-client