$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: l7aeczVGNPI3+f9pwk6inPKhZVavjuj2iwxO3Pymseg= Subject key identifier: 3D:EB:C0:AD:50:2B:13:61:70:4A:30:7D:37:56:8B:1A:07:48:66:82 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 0198D515727AC8DC4EB3DE167DAFAE98B0AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1658 Signing time: Sat 23 Aug 2025 04:00:09 +0000 Manifest this update: Sat 23 Aug 2025 04:00:09 +0000 Manifest next update: Sun 24 Aug 2025 04:00:09 +0000 Files and hashes: 1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=) 2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=) 3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=) 4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=) 5: GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa (hash: //aHWa+QTi3TqyDc0NocuZ54Ser38N49WnMxWn6LdwE=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: cktqdjWqrXojpIt0v4/vHcc70eQ0ApLeuiMtD4DyrPg=) 7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=) 8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=) 9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=) 10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=) 11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=) 12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=) 13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=) 14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=) 15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=) 16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=) 17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 04:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:15:72:7a:c8:dc:4e:b3:de:16:7d:af:ae:98:b0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Aug 23 04:00:09 2025 GMT Not After : Aug 24 04:00:09 2025 GMT Subject: CN=3debc0ad502b1361704a307d37568b1a07486682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:c7:cb:7a:8f:35:0a:5c:06:36:7e:23:a4: a8:82:31:e2:e2:24:dc:f7:70:20:19:22:73:c5:cc: 50:7d:2b:fe:96:3a:ed:c3:13:c3:c3:c6:3b:36:67: 3a:5b:21:9b:bf:af:e9:3c:38:fa:1d:74:7f:5b:20: 61:dd:fe:ca:3b:62:59:95:5d:a4:ac:6b:56:4b:b4: dc:a2:f3:bd:2a:c6:fb:c0:aa:52:bc:2c:87:c1:e5: e9:00:e3:29:05:8a:6e:ad:9b:97:6a:c9:9a:bc:ca: ca:c3:06:5d:71:0c:08:fd:53:42:b2:aa:6d:bf:2a: 4a:a8:b8:b9:b1:bb:d0:e5:4f:e3:8f:6e:af:1c:3b: ab:c7:93:f3:6f:91:dc:44:b8:f5:50:e1:dc:d8:fc: 82:74:2d:bb:4e:1b:91:ba:b0:f3:b8:6e:13:70:f0: f8:d6:b8:10:32:aa:f3:83:52:8d:34:f0:bc:60:6a: 7e:16:73:be:cd:84:cb:00:35:cb:7c:a2:a0:79:80: 0c:17:6a:32:b7:5f:d9:2c:dc:24:95:84:02:09:ab: 75:3d:9d:33:87:c6:82:1c:e9:46:51:35:27:49:01: e2:8a:42:1e:8d:c6:08:fa:fb:b3:1d:0d:26:33:e2: 0f:9d:d9:23:d5:4b:91:cf:96:ee:b2:48:bb:01:fc: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EB:C0:AD:50:2B:13:61:70:4A:30:7D:37:56:8B:1A:07:48:66:82 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:02:49:ab:1c:6f:b4:73:a7:8f:99:cf:29:88:8a:39:e1:c7: 07:14:73:fb:b8:2f:95:6b:b0:92:d9:1a:e8:23:87:1f:7a:9e: 2e:cd:a2:6a:d7:65:31:95:c7:db:bd:f3:23:15:6b:55:33:7e: c6:b7:f4:94:35:9c:4d:00:a2:a9:9b:bb:6b:6f:c4:5e:ec:ff: 40:95:67:26:b9:95:f6:31:82:ea:d2:fe:c8:d8:bf:52:b8:86: 23:4c:8e:04:ae:6a:f7:d3:bc:42:ca:21:98:bd:8b:13:73:ff: f7:21:9c:60:ec:75:b0:24:d8:c0:69:b0:15:20:6f:95:07:ab: f6:09:73:10:9e:67:d7:45:26:6b:9d:c3:20:82:24:e3:26:2b: 89:8d:f5:3f:59:0d:c2:56:73:2c:04:51:39:d0:27:f4:53:ad: 3b:d8:d7:84:6c:0a:c3:79:f9:40:77:1b:82:de:86:f6:d2:80: fe:53:df:e4:45:5a:9f:1a:46:4c:75:12:bd:b9:09:63:fe:05: 2a:56:ca:f3:8d:84:93:28:48:2f:0f:54:ea:c4:46:93:28:36: e6:e8:74:c1:47:23:6d:ea:fb:93:14:e1:aa:da:3f:9f:5a:1f: 73:51:a7:5c:11:6b:55:ee:57:34:3c:a2:ab:81:c5:10:2d:59: 59:26:d0:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVFXJ6yNxOs94Wfa+umLCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjUwODIzMDQwMDA5WhcNMjUwODI0MDQwMDA5WjAzMTEwLwYDVQQD EygzZGViYzBhZDUwMmIxMzYxNzA0YTMwN2QzNzU2OGIxYTA3NDg2NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQXHy3qPNQpcBjZ+I6SogjHi4iTc 93AgGSJzxcxQfSv+ljrtwxPDw8Y7Nmc6WyGbv6/pPDj6HXR/WyBh3f7KO2JZlV2k rGtWS7TcovO9Ksb7wKpSvCyHweXpAOMpBYpurZuXasmavMrKwwZdcQwI/VNCsqpt vypKqLi5sbvQ5U/jj26vHDurx5Pzb5HcRLj1UOHc2PyCdC27ThuRurDzuG4TcPD4 1rgQMqrzg1KNNPC8YGp+FnO+zYTLADXLfKKgeYAMF2oyt1/ZLNwklYQCCat1PZ0z h8aCHOlGUTUnSQHiikIejcYI+vuzHQ0mM+IPndkj1UuRz5buski7Afw6fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3rwK1QKxNhcEowfTdWixoHSGaCMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQJJqxxv tHOnj5nPKYiKOeHHBxRz+7gvlWuwktka6COHH3qeLs2iatdlMZXH273zIxVrVTN+ xrf0lDWcTQCiqZu7a2/EXuz/QJVnJrmV9jGC6tL+yNi/UriGI0yOBK5q99O8Qsoh mL2LE3P/9yGcYOx1sCTYwGmwFSBvlQer9glzEJ5n10Uma53DIIIk4yYriY31P1kN wlZzLARROdAn9FOtO9jXhGwKw3n5QHcbgt6G9tKA/lPf5EVanxpGTHUSvbkJY/4F KlbK842EkyhILw9U6sRGkyg25uh0wUcjber7kxThqto/n1ofc1GnXBFrVe5XNDyi q4HFEC1ZWSbQCw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:37:28 2025 by rpki-client