$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: 1RJk7AzvhQEui1Kxp8LBX9UhXi4lOWcQQZh1fs+z0ds= Subject key identifier: 46:E5:F0:B3:1F:A4:DB:96:B5:ED:BB:A5:34:06:C3:09:18:49:1F:07 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 0199FC8F9EB9779C161C668F372B195CB138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 16F1 Signing time: Sun 19 Oct 2025 13:01:34 +0000 Manifest this update: Sun 19 Oct 2025 13:01:34 +0000 Manifest next update: Mon 20 Oct 2025 13:01:34 +0000 Files and hashes: 1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=) 2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=) 3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=) 4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=) 5: GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa (hash: //aHWa+QTi3TqyDc0NocuZ54Ser38N49WnMxWn6LdwE=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: H/hto50u3yx+dsj6IZkmorYdumoIm22pxdRwpOnafd8=) 7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=) 8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=) 9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=) 10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=) 11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=) 12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=) 13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=) 14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=) 15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=) 16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=) 17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:8f:9e:b9:77:9c:16:1c:66:8f:37:2b:19:5c:b1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Oct 19 13:01:34 2025 GMT Not After : Oct 20 13:01:34 2025 GMT Subject: CN=46e5f0b31fa4db96b5edbba53406c30918491f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:7c:e4:de:65:2e:b1:c2:5d:6f:00:cd:55: 87:25:5d:81:d7:7e:d7:27:19:3c:f8:cc:45:8b:91: d3:b2:6a:10:2d:35:25:d4:03:c1:ee:39:47:c9:16: 8a:b6:60:2d:bf:dc:6a:6c:69:bc:4a:26:f1:f5:54: 4c:11:57:45:bb:2e:6d:80:c0:cb:b7:4b:4e:e2:20: 42:ad:37:b0:18:78:e6:f2:be:19:2e:7c:5b:ec:20: 6d:c4:d5:e9:bd:fd:78:f6:37:87:6d:99:65:0e:96: 4c:a0:ef:e3:ce:03:79:7c:e3:83:db:af:3f:9e:66: bd:17:5e:32:4a:7d:67:79:9d:56:d2:0a:ee:b9:6f: f4:2c:83:ba:1f:80:0e:16:0e:67:63:47:b6:d9:2d: 44:b5:f7:26:79:1a:4e:29:35:1d:1f:fc:fe:55:0d: fd:42:d3:16:ee:fb:02:83:b3:58:fe:19:ed:dd:44: 77:fc:1f:18:c4:73:f2:80:ba:0b:58:ff:4b:f3:61: a8:9b:9f:a0:75:cf:de:b1:e5:43:ed:06:94:29:9f: 0d:17:ee:ab:c7:d9:6b:17:4c:0f:c8:5c:0c:82:d2: 44:f7:f7:7e:45:9a:14:1b:fe:a1:fb:dd:66:91:c9: 45:e8:b5:c5:74:16:f4:b8:3c:0b:2b:c6:19:f3:57: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E5:F0:B3:1F:A4:DB:96:B5:ED:BB:A5:34:06:C3:09:18:49:1F:07 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:9e:54:34:8c:c5:0a:1e:de:f3:53:72:39:aa:50:98:27:0a: da:cd:28:16:ca:e9:67:f0:d7:9f:66:79:2f:59:1f:1d:5f:9e: c7:97:13:a7:fe:d0:76:60:dd:2e:4a:aa:7f:bb:2e:23:6a:c9: f9:10:9a:08:ab:ce:ea:82:91:a3:ba:f4:bd:f9:7e:af:25:c2: 60:d7:8d:67:3d:0a:e2:bc:ed:89:11:24:dc:44:7b:6a:e6:50: f8:1e:12:14:95:04:ca:d8:76:40:db:be:12:f1:e2:f2:d5:3e: 4a:be:0e:04:0b:2e:ac:ae:5c:4e:24:38:52:86:b4:52:36:ac: 65:c0:60:4d:f9:68:5d:b8:bd:8d:aa:33:f1:81:a1:b4:4d:0e: 8b:21:b2:7b:a4:e9:eb:ff:0d:e5:56:ae:27:88:db:5d:f7:39: 7c:ed:d0:83:de:44:ad:fc:0f:ee:f9:3f:4a:20:a0:f8:01:6d: 9c:d5:3e:7d:0e:39:cd:5f:7e:da:30:04:17:ab:95:1b:ef:8f: c5:06:64:b1:c9:da:47:5b:63:87:ad:45:42:97:dc:f8:39:9a: a5:dc:32:f1:1f:2a:ba:67:67:0f:ef:a2:9b:a7:44:3b:54:b4: 2b:c8:02:0e:e8:6c:1d:46:c2:2f:33:cd:5a:49:ef:2e:5a:60: 11:c5:dd:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8j565d5wWHGaPNysZXLE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjUxMDE5MTMwMTM0WhcNMjUxMDIwMTMwMTM0WjAzMTEwLwYDVQQD Eyg0NmU1ZjBiMzFmYTRkYjk2YjVlZGJiYTUzNDA2YzMwOTE4NDkxZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfp85N5lLrHCXW8AzVWHJV2B137X Jxk8+MxFi5HTsmoQLTUl1APB7jlHyRaKtmAtv9xqbGm8Sibx9VRMEVdFuy5tgMDL t0tO4iBCrTewGHjm8r4ZLnxb7CBtxNXpvf149jeHbZllDpZMoO/jzgN5fOOD268/ nma9F14ySn1neZ1W0gruuW/0LIO6H4AOFg5nY0e22S1EtfcmeRpOKTUdH/z+VQ39 QtMW7vsCg7NY/hnt3UR3/B8YxHPygLoLWP9L82Gom5+gdc/eseVD7QaUKZ8NF+6r x9lrF0wPyFwMgtJE9/d+RZoUG/6h+91mkclF6LXFdBb0uDwLK8YZ81cwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbl8LMfpNuWte27pTQGwwkYSR8HMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv55UNIzF Ch7e81NyOapQmCcK2s0oFsrpZ/DXn2Z5L1kfHV+ex5cTp/7QdmDdLkqqf7suI2rJ +RCaCKvO6oKRo7r0vfl+ryXCYNeNZz0K4rztiREk3ER7auZQ+B4SFJUEyth2QNu+ EvHi8tU+Sr4OBAsurK5cTiQ4Uoa0UjasZcBgTfloXbi9jaoz8YGhtE0OiyGye6Tp 6/8N5VauJ4jbXfc5fO3Qg95ErfwP7vk/SiCg+AFtnNU+fQ45zV9+2jAEF6uVG++P xQZkscnaR1tjh61FQpfc+Dmapdwy8R8qumdnD++im6dEO1S0K8gCDuhsHUbCLzPN WknvLlpgEcXdDw== -----END CERTIFICATE-----Generated at Sun Oct 19 15:02:26 2025 by rpki-client