$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: qSzoIwgaw/2dU1OfYqJoaANF9SyhLi9QOTz0yhmrCpE= Subject key identifier: E2:46:42:B0:05:BD:BB:DB:00:11:A7:AE:0C:9B:B1:7B:39:08:71:30 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 0198D473FFBE26EF343E2D5EE33808FB5702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1547 Signing time: Sat 23 Aug 2025 01:03:48 +0000 Manifest this update: Sat 23 Aug 2025 01:03:48 +0000 Manifest next update: Sun 24 Aug 2025 01:03:48 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 4: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: 8C021CCfGB3m5iJc8e6Hm8jTHqCAQvXZT4XVmkiA6KA=) 6: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 7: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 8: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 9: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=) 10: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:73:ff:be:26:ef:34:3e:2d:5e:e3:38:08:fb:57:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Aug 23 01:03:48 2025 GMT Not After : Aug 24 01:03:48 2025 GMT Subject: CN=e24642b005bdbbdb0011a7ae0c9bb17b39087130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:b0:10:84:e3:a7:9c:02:7c:d5:01:86:64: e2:43:51:21:33:23:02:da:9c:ca:9c:94:8e:cc:ef: 12:18:d1:24:60:21:4e:47:d1:22:66:78:38:bf:81: 51:c4:1e:03:6d:af:a3:d9:bc:7a:d7:6b:60:05:2f: 42:ce:0a:fd:c5:0e:ff:a6:99:c3:e6:47:55:50:3f: 8e:6a:18:72:9e:40:bf:e4:5a:58:1f:32:e6:44:fc: 99:95:8a:0c:f3:e5:1f:1f:e7:22:47:f4:eb:19:c1: 4b:13:8a:01:6b:aa:a0:d8:f3:cb:36:0e:19:03:5e: 2c:19:ea:9f:4e:cf:fa:3f:2a:95:79:20:2d:c3:1e: 50:38:e4:61:63:dc:1f:e8:29:b0:43:37:dd:56:11: 06:75:e7:d0:c9:69:a6:19:8b:2e:97:c6:8f:ba:9e: e2:fa:a8:ae:71:c3:b8:8e:4a:26:0e:e6:81:7b:98: 9f:eb:3f:0f:3f:1d:01:30:60:3a:b6:d3:ca:9a:e8: 43:ae:64:c7:9d:27:f3:d9:ac:8c:71:99:46:0e:b6: 58:9b:e6:6c:8f:30:e3:80:a1:67:10:5c:d4:43:73: fa:c0:c1:48:d7:93:14:76:40:99:f1:dd:ac:c6:20: ba:5d:5b:af:36:eb:20:b5:e0:eb:ad:15:12:a3:45: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:46:42:B0:05:BD:BB:DB:00:11:A7:AE:0C:9B:B1:7B:39:08:71:30 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e0:8f:5c:0c:ef:dc:d7:61:8b:05:7f:e6:72:3c:3e:a8:f1: d2:f3:cd:67:58:2e:2f:2b:42:a0:cb:4e:60:ae:a1:87:82:7e: 16:2f:b7:4d:be:41:11:1d:e9:58:f8:85:94:57:ae:12:c4:e6: 63:9d:6a:96:18:64:d0:ed:e0:be:75:f4:a0:b3:d8:85:d6:ab: cb:a2:4b:6b:2d:60:3b:35:5f:46:c5:28:c9:77:c1:cf:38:86: 3b:f2:65:c2:ab:dd:f1:ef:eb:1e:14:10:d0:cb:42:31:6a:89: ee:c2:92:48:e4:7e:02:19:07:bd:c5:e8:21:88:ae:60:0e:c7: 37:e6:75:ff:3b:46:f0:56:80:81:a3:8c:2c:43:39:ed:0b:2d: 60:34:8d:2c:bb:86:25:5a:69:20:96:4f:5e:3a:2c:8f:10:ad: 10:97:58:8a:2e:f0:29:b4:f1:d6:b7:93:b8:82:8c:8c:bb:69: c4:2f:c3:20:4e:28:69:e7:9d:23:43:29:89:bf:98:94:51:65: ed:ad:e4:4e:97:3e:42:01:10:e6:06:3f:21:19:db:23:97:19: 4b:cc:c1:ba:45:6d:98:ee:a7:e8:fc:35:14:c1:bf:d6:d4:42: e1:2a:91:c8:f2:10:44:a3:7d:ca:35:5b:0d:fb:24:8d:f8:7a: 36:6d:89:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjUc/++Ju80Pi1e4zgI+1cCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUwODIzMDEwMzQ4WhcNMjUwODI0MDEwMzQ4WjAzMTEwLwYDVQQD EyhlMjQ2NDJiMDA1YmRiYmRiMDAxMWE3YWUwYzliYjE3YjM5MDg3MTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNqwEITjp5wCfNUBhmTiQ1EhMyMC 2pzKnJSOzO8SGNEkYCFOR9EiZng4v4FRxB4Dba+j2bx612tgBS9Czgr9xQ7/ppnD 5kdVUD+OahhynkC/5FpYHzLmRPyZlYoM8+UfH+ciR/TrGcFLE4oBa6qg2PPLNg4Z A14sGeqfTs/6PyqVeSAtwx5QOORhY9wf6CmwQzfdVhEGdefQyWmmGYsul8aPup7i +qiuccO4jkomDuaBe5if6z8PPx0BMGA6ttPKmuhDrmTHnSfz2ayMcZlGDrZYm+Zs jzDjgKFnEFzUQ3P6wMFI15MUdkCZ8d2sxiC6XVuvNusgteDrrRUSo0WuQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJGQrAFvbvbABGnrgybsXs5CHEwMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuCPXAzv 3NdhiwV/5nI8Pqjx0vPNZ1guLytCoMtOYK6hh4J+Fi+3Tb5BER3pWPiFlFeuEsTm Y51qlhhk0O3gvnX0oLPYhdary6JLay1gOzVfRsUoyXfBzziGO/Jlwqvd8e/rHhQQ 0MtCMWqJ7sKSSOR+AhkHvcXoIYiuYA7HN+Z1/ztG8FaAgaOMLEM57QstYDSNLLuG JVppIJZPXjosjxCtEJdYii7wKbTx1reTuIKMjLtpxC/DIE4oaeedI0Mpib+YlFFl 7a3kTpc+QgEQ5gY/IRnbI5cZS8zBukVtmO6n6Pw1FMG/1tRC4SqRyPIQRKN9yjVb Dfskjfh6Nm2Jlw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:18:26 2025 by rpki-client