$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: hlUmTVtdWNsQlWi6UguwH+RSTp/TwHOnaWQAamde19w= Subject key identifier: F0:AE:66:B1:B3:F6:22:59:92:FD:AE:54:01:8E:71:71:D3:66:5E:57 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 0196A79D52E6F989289E4EBA98C91AC32DEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1537 Signing time: Tue 06 May 2025 22:00:27 +0000 Manifest this update: Tue 06 May 2025 22:00:27 +0000 Manifest next update: Wed 07 May 2025 22:00:27 +0000 Files and hashes: 1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=) 2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=) 3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=) 4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=) 5: MP0FknZx-rt-jXqxm1yu7mNghjg.roa (hash: 0IVLTHz5qrQC3E0s/+3I0aF+dTWKqMK9+O5p+t6rJac=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: azviLVMLT3bjUFI04Heguxsw1MypzgVLFmhaB1bJ/6Y=) 7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=) 8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=) 9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=) 10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=) 11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=) 12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=) 13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=) 14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=) 15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=) 16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=) 17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a7:9d:52:e6:f9:89:28:9e:4e:ba:98:c9:1a:c3:2d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: May 6 22:00:27 2025 GMT Not After : May 7 22:00:27 2025 GMT Subject: CN=f0ae66b1b3f6225992fdae54018e7171d3665e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:17:5e:42:b7:80:db:45:07:0f:37:0a:3a: 44:81:e1:cb:2d:33:f8:88:9d:9d:f4:94:a0:05:ed: 36:8b:8b:44:18:b6:17:d1:d0:88:32:b5:87:04:36: a4:30:74:b7:6b:4e:8b:1f:36:ce:5d:51:c0:70:1a: b4:61:fd:a4:dc:a2:d4:a9:4f:e6:f9:e1:18:1d:40: 73:dd:00:f8:8d:7f:2b:c6:b9:e6:7d:ad:32:d0:53: 07:74:d4:b7:f5:ab:49:4f:7b:da:33:79:c4:8e:5a: 71:ac:b8:2a:1a:3f:30:cb:5a:48:96:7d:95:12:63: a4:cd:d6:e6:ad:39:82:5f:c4:06:7e:aa:b1:05:73: 85:e3:48:09:1c:3b:35:5e:e7:05:65:27:c8:d7:e5: 28:92:2a:4e:74:3c:c4:c1:e7:95:9e:73:33:27:00: 76:15:07:e1:cd:28:63:b6:f1:f3:f2:cf:5c:94:c0: 3a:e3:eb:15:89:5c:1b:4a:fb:50:65:5c:33:43:85: 77:15:cb:6e:81:84:49:ba:60:65:95:35:bd:39:a1: 8e:bb:88:8f:e1:d8:f1:22:f3:00:7f:58:aa:d3:0b: 33:2e:38:fe:2c:99:3e:10:8c:d7:58:6b:d5:11:45: 65:21:5f:b0:20:a1:df:9f:9c:26:70:aa:62:da:02: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AE:66:B1:B3:F6:22:59:92:FD:AE:54:01:8E:71:71:D3:66:5E:57 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:21:75:f7:ab:e0:b6:4f:c9:d2:58:1f:be:4d:02:09:06:64: 1a:d5:ae:25:b8:dc:ea:6e:3b:75:f0:cc:7e:fb:74:0f:6e:8f: 6f:12:1a:ff:3e:f9:cd:28:cc:bd:e0:e8:e7:f5:89:fa:b6:eb: b6:d4:a9:20:eb:14:5c:b3:f5:4c:ea:48:6e:fd:3c:74:35:66: d8:55:d4:53:17:6e:e9:45:6f:af:e2:c1:ec:bf:6a:1c:fb:6e: ef:bf:12:b2:c1:f5:fc:ed:0d:d7:d1:5d:9e:43:5f:e4:ee:43: 4f:63:fa:d7:3f:70:af:04:c5:b9:30:e8:e8:9b:57:70:e6:37: ff:9b:a9:69:69:72:3e:61:28:74:dc:de:d2:70:20:1b:0c:58: 6d:f7:34:2e:4a:99:8a:67:7d:a8:84:5e:c3:5c:4c:34:c5:37: 8b:98:d8:71:de:71:b3:93:4a:25:19:b1:e7:32:0b:6f:c9:4b: fc:6f:40:c3:a0:07:5f:14:d8:f6:85:b1:f0:0f:3a:12:11:d6: 56:98:c0:df:e1:ec:37:15:43:4d:bd:57:c7:e8:ad:fb:7a:91: be:fb:bd:07:0e:65:76:4b:e5:b8:c5:3b:a8:88:b6:b6:0c:38: ce:4a:4f:b1:13:2d:b4:ba:a7:4b:b0:2d:70:0a:95:44:f7:e8: 39:5a:20:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZannVLm+Ykonk66mMkawy3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjUwNTA2MjIwMDI3WhcNMjUwNTA3MjIwMDI3WjAzMTEwLwYDVQQD EyhmMGFlNjZiMWIzZjYyMjU5OTJmZGFlNTQwMThlNzE3MWQzNjY1ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobgXXkK3gNtFBw83CjpEgeHLLTP4 iJ2d9JSgBe02i4tEGLYX0dCIMrWHBDakMHS3a06LHzbOXVHAcBq0Yf2k3KLUqU/m +eEYHUBz3QD4jX8rxrnmfa0y0FMHdNS39atJT3vaM3nEjlpxrLgqGj8wy1pIln2V EmOkzdbmrTmCX8QGfqqxBXOF40gJHDs1XucFZSfI1+UokipOdDzEweeVnnMzJwB2 FQfhzShjtvHz8s9clMA64+sViVwbSvtQZVwzQ4V3FctugYRJumBllTW9OaGOu4iP 4djxIvMAf1iq0wszLjj+LJk+EIzXWGvVEUVlIV+wIKHfn5wmcKpi2gLsTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCuZrGz9iJZkv2uVAGOcXHTZl5XMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyF196vg tk/J0lgfvk0CCQZkGtWuJbjc6m47dfDMfvt0D26PbxIa/z75zSjMveDo5/WJ+rbr ttSpIOsUXLP1TOpIbv08dDVm2FXUUxdu6UVvr+LB7L9qHPtu778SssH1/O0N19Fd nkNf5O5DT2P61z9wrwTFuTDo6JtXcOY3/5upaWlyPmEodNze0nAgGwxYbfc0LkqZ imd9qIRew1xMNMU3i5jYcd5xs5NKJRmx5zILb8lL/G9Aw6AHXxTY9oWx8A86EhHW VpjA3+HsNxVDTb1Xx+it+3qRvvu9Bw5ldkvluMU7qIi2tgw4zkpPsRMttLqnS7At cAqVRPfoOVognQ== -----END CERTIFICATE-----Generated at Wed May 7 06:49:37 2025 by rpki-client