$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: x/jNcJQzcWukGwzHsC5OU/p+xmg5S821f8sJG02nBV8= Subject key identifier: 60:76:FF:1C:95:CC:B6:DD:B3:07:D3:B4:50:06:07:A4:AC:93:24:4F Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 0197B5FC1F26DDCEE6C4E2C9DDC730C43FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 15C3 Signing time: Sat 28 Jun 2025 10:01:28 +0000 Manifest this update: Sat 28 Jun 2025 10:01:28 +0000 Manifest next update: Sun 29 Jun 2025 10:01:28 +0000 Files and hashes: 1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=) 2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=) 3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=) 4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=) 5: MP0FknZx-rt-jXqxm1yu7mNghjg.roa (hash: 0IVLTHz5qrQC3E0s/+3I0aF+dTWKqMK9+O5p+t6rJac=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: PPTuknQ0WraavyKWiMryH6/rU++l33hOCy2JLmiEqzg=) 7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=) 8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=) 9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=) 10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=) 11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=) 12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=) 13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=) 14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=) 15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=) 16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=) 17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:fc:1f:26:dd:ce:e6:c4:e2:c9:dd:c7:30:c4:3f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jun 28 10:01:28 2025 GMT Not After : Jun 29 10:01:28 2025 GMT Subject: CN=6076ff1c95ccb6ddb307d3b4500607a4ac93244f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6b:9a:ed:d4:d0:42:14:47:09:67:82:3e:8f: 89:c0:d0:3b:51:27:a2:a2:0e:ea:0c:12:e4:47:7c: f5:d8:1f:a9:a8:28:c5:07:81:9f:2f:90:15:17:ba: 2b:6f:8e:4b:f8:9c:9d:19:fa:00:2f:66:09:85:9c: c6:47:52:08:d5:79:85:ec:55:4c:42:25:1e:5a:a4: db:42:25:27:35:b8:51:d9:63:44:15:7f:b7:d5:c0: 18:5e:3d:a4:2b:7a:65:a5:98:cf:ae:b6:df:e2:fa: 15:a8:28:af:ff:eb:6b:5c:d2:92:51:7d:83:52:dd: 8c:71:bc:97:2a:4b:d1:21:19:51:b6:aa:79:0c:dd: 70:04:b5:3f:c0:0c:9d:83:bf:5a:38:f9:71:79:33: 8f:15:57:15:dd:9a:84:ba:af:4a:2d:01:c5:4a:73: 1d:a2:3b:17:ca:fe:18:d5:2a:e8:22:6d:af:02:e9: ff:b3:13:36:00:21:05:10:d5:6a:3d:51:c3:65:0a: d6:32:9c:92:1a:76:15:3c:93:11:e0:a3:6c:2b:d7: 4b:06:29:08:11:bf:fe:46:7c:a7:40:7b:5c:31:3d: 93:3c:9e:6d:5c:84:4a:ef:e1:4c:69:29:f4:37:fb: 22:ea:a8:ab:b7:0c:34:80:de:22:c8:1b:ef:c4:5e: ec:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:76:FF:1C:95:CC:B6:DD:B3:07:D3:B4:50:06:07:A4:AC:93:24:4F X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:17:43:d9:46:b3:72:3e:ab:87:aa:e7:6a:a8:99:dd:5f:26: 57:7e:ad:00:ea:4c:68:e6:9e:fd:c5:de:b4:41:78:9a:fd:8d: c4:48:52:fa:a5:9c:84:76:f3:bc:f7:e7:99:a8:12:81:5b:26: 1b:ca:ce:67:ee:ff:bf:09:14:5d:6d:c7:b0:23:17:b1:4b:f7: 05:6c:89:e1:9f:1b:f4:f6:44:29:fc:47:43:44:84:df:15:e9: 7d:e2:9e:bf:3b:ad:b6:35:ef:5d:d9:f2:9f:7d:97:1b:67:df: 0e:18:1d:a2:8d:f4:eb:95:dc:18:0d:23:c5:47:35:ee:d9:32: ad:b4:be:06:63:90:fc:33:d4:40:1d:9a:a5:bc:2b:23:6f:db: 61:d7:86:59:63:f7:90:c4:a3:65:54:dd:bf:65:22:39:91:76: 09:36:3c:c4:5a:92:87:31:d0:85:78:96:11:54:5c:05:38:79: b8:f0:ec:21:78:0e:90:7e:0d:03:54:a3:d3:6c:cc:7f:7a:44: 99:40:8a:a4:78:c4:57:73:06:c7:59:99:68:4a:cb:93:be:19: b8:2d:e1:4e:88:2a:33:11:a3:87:66:af:e8:a4:7e:50:ad:7d: 8d:85:6b:1c:bc:a0:94:11:77:f2:c6:c9:e7:b9:0c:0b:28:cd: 5c:b0:d3:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1/B8m3c7mxOLJ3ccwxD+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjUwNjI4MTAwMTI4WhcNMjUwNjI5MTAwMTI4WjAzMTEwLwYDVQQD Eyg2MDc2ZmYxYzk1Y2NiNmRkYjMwN2QzYjQ1MDA2MDdhNGFjOTMyNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmua7dTQQhRHCWeCPo+JwNA7USei og7qDBLkR3z12B+pqCjFB4GfL5AVF7orb45L+JydGfoAL2YJhZzGR1II1XmF7FVM QiUeWqTbQiUnNbhR2WNEFX+31cAYXj2kK3plpZjPrrbf4voVqCiv/+trXNKSUX2D Ut2McbyXKkvRIRlRtqp5DN1wBLU/wAydg79aOPlxeTOPFVcV3ZqEuq9KLQHFSnMd ojsXyv4Y1SroIm2vAun/sxM2ACEFENVqPVHDZQrWMpySGnYVPJMR4KNsK9dLBikI Eb/+RnynQHtcMT2TPJ5tXIRK7+FMaSn0N/si6qirtww0gN4iyBvvxF7sawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB2/xyVzLbdswfTtFAGB6SskyRPMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRdD2Uaz cj6rh6rnaqiZ3V8mV36tAOpMaOae/cXetEF4mv2NxEhS+qWchHbzvPfnmagSgVsm G8rOZ+7/vwkUXW3HsCMXsUv3BWyJ4Z8b9PZEKfxHQ0SE3xXpfeKevzuttjXvXdny n32XG2ffDhgdoo3065XcGA0jxUc17tkyrbS+BmOQ/DPUQB2apbwrI2/bYdeGWWP3 kMSjZVTdv2UiOZF2CTY8xFqShzHQhXiWEVRcBTh5uPDsIXgOkH4NA1Sj02zMf3pE mUCKpHjEV3MGx1mZaErLk74ZuC3hTogqMxGjh2av6KR+UK19jYVrHLyglBF38sbJ 57kMCyjNXLDT2w== -----END CERTIFICATE-----Generated at Sat Jun 28 18:59:39 2025 by rpki-client