$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: 4zh9Ef4K9+NNJZFOzMVWenH3HjbOA8oKeEHG/+Q4MIk= Subject key identifier: 83:B1:66:75:72:88:F8:C9:FF:E6:54:53:A7:62:DF:05:FD:BF:87:19 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 01987374522F9733DD23378B23495CB9BCB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 1627 Signing time: Mon 04 Aug 2025 05:00:59 +0000 Manifest this update: Mon 04 Aug 2025 05:00:59 +0000 Manifest next update: Tue 05 Aug 2025 05:00:59 +0000 Files and hashes: 1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: 147te6pZG4cCVFLd5lqyMhkdLnELUI5VHjwtjheXqlc=) 5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:74:52:2f:97:33:dd:23:37:8b:23:49:5c:b9:bc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Aug 4 05:00:59 2025 GMT Not After : Aug 5 05:00:59 2025 GMT Subject: CN=83b166757288f8c9ffe65453a762df05fdbf8719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:62:29:d4:7f:13:9a:6e:48:96:9f:74:52:c3: 10:90:d2:97:a2:ff:81:90:ba:95:b2:0d:5c:ec:4b: 20:ce:f2:b3:c5:81:07:26:4d:8a:31:a5:29:f2:5a: 1b:7b:9e:d0:16:76:e2:8a:98:d6:03:4e:67:44:6a: ab:03:f9:fa:07:0c:3e:8c:b4:71:e0:47:79:25:17: 94:20:0f:08:08:e6:ef:eb:30:e1:e3:72:44:0f:09: 0f:80:71:a4:92:c8:8a:22:88:b8:da:97:34:47:38: ea:97:e4:07:d9:34:28:85:90:75:9f:0e:18:be:03: 6b:80:02:53:39:70:94:4b:96:79:52:8a:b0:15:1a: bc:89:4c:65:3d:58:f6:c2:82:81:87:97:6f:15:bf: 4d:83:32:db:27:6d:24:b9:32:bd:d8:9c:31:e7:3b: 86:60:84:44:a3:46:70:27:90:ca:03:8a:a0:8b:ee: 5a:75:d2:1b:5f:1d:35:00:19:77:b1:ba:cf:e1:72: e3:d6:51:f2:19:d2:b7:4d:63:74:77:91:39:16:09: 1f:91:5c:c6:56:1b:f5:5a:05:93:ac:6d:46:30:5e: 23:8c:8d:b0:99:1b:c9:77:3d:0b:6b:ac:51:6e:cd: 46:20:a0:49:f2:59:02:1a:71:ab:d7:a3:af:68:42: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B1:66:75:72:88:F8:C9:FF:E6:54:53:A7:62:DF:05:FD:BF:87:19 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9b:3f:05:2d:7c:b3:70:d6:3a:bf:d7:a1:38:84:b5:b0:c8: e3:c9:aa:d3:16:87:03:e7:3c:37:8f:59:8e:3d:45:f5:57:a4: dc:87:ed:c0:02:f6:e3:93:8a:03:43:87:6f:09:83:a3:a6:b1: 22:2f:bd:8a:4d:a1:ec:a8:be:82:85:1a:2f:6d:e9:eb:0d:c3: 12:bf:1c:d3:b7:e0:5c:20:96:54:90:43:ab:53:5c:7a:c7:e6: 00:1d:64:9c:69:a1:20:e0:85:19:96:5d:f5:57:bc:41:14:40: ed:a9:cf:3a:94:ba:90:43:94:a4:b8:3f:e9:15:a1:c3:09:f4: 27:35:68:56:6d:4e:d3:3f:99:21:2c:83:6b:ec:2e:4b:76:d2: b4:5e:26:83:58:ef:a5:b2:27:c3:1e:63:6c:32:a7:11:1a:3c: 86:a0:9b:84:ce:90:dc:9f:d0:d4:8d:97:7b:bf:d0:3c:ae:57: ef:3c:bb:a8:43:7b:eb:1f:f8:3e:29:18:53:cf:4f:54:9f:26: 8a:2e:84:68:da:36:e0:c5:07:c4:1e:c7:fb:73:37:66:03:93: 8f:d3:af:bf:db:07:58:90:f3:84:5f:ff:df:41:58:26:c3:cf: c3:5e:d4:a3:f1:be:0c:38:c9:ee:9f:3e:e5:b5:e2:a8:de:c6: 7b:bf:bf:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhzdFIvlzPdIzeLI0lcubywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwODA0MDUwMDU5WhcNMjUwODA1MDUwMDU5WjAzMTEwLwYDVQQD Eyg4M2IxNjY3NTcyODhmOGM5ZmZlNjU0NTNhNzYyZGYwNWZkYmY4NzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGIp1H8Tmm5Ilp90UsMQkNKXov+B kLqVsg1c7EsgzvKzxYEHJk2KMaUp8lobe57QFnbiipjWA05nRGqrA/n6Bww+jLRx 4Ed5JReUIA8ICObv6zDh43JEDwkPgHGkksiKIoi42pc0Rzjql+QH2TQohZB1nw4Y vgNrgAJTOXCUS5Z5UoqwFRq8iUxlPVj2woKBh5dvFb9NgzLbJ20kuTK92Jwx5zuG YIREo0ZwJ5DKA4qgi+5addIbXx01ABl3sbrP4XLj1lHyGdK3TWN0d5E5FgkfkVzG Vhv1WgWTrG1GMF4jjI2wmRvJdz0La6xRbs1GIKBJ8lkCGnGr16OvaEKX8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOxZnVyiPjJ/+ZUU6di3wX9v4cZMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJs/BS18 s3DWOr/XoTiEtbDI48mq0xaHA+c8N49Zjj1F9Vek3IftwAL245OKA0OHbwmDo6ax Ii+9ik2h7Ki+goUaL23p6w3DEr8c07fgXCCWVJBDq1NcesfmAB1knGmhIOCFGZZd 9Ve8QRRA7anPOpS6kEOUpLg/6RWhwwn0JzVoVm1O0z+ZISyDa+wuS3bStF4mg1jv pbInwx5jbDKnERo8hqCbhM6Q3J/Q1I2Xe7/QPK5X7zy7qEN76x/4PikYU89PVJ8m ii6EaNo24MUHxB7H+3M3ZgOTj9Ovv9sHWJDzhF//30FYJsPPw17Uo/G+DDjJ7p8+ 5bXiqN7Ge7+/6Q== -----END CERTIFICATE-----Generated at Mon Aug 4 11:12:45 2025 by rpki-client