$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: 62MfR1sS0ANuH0UV3I72/sF5tUvAyS8kT5rwl31afgo= Subject key identifier: 09:7B:5E:27:36:6C:80:B0:C1:75:D6:3A:DF:63:CB:ED:89:B7:86:E8 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019768F302ADB6E88188705CDB406CF27826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 159D Signing time: Fri 13 Jun 2025 11:00:45 +0000 Manifest this update: Fri 13 Jun 2025 11:00:45 +0000 Manifest next update: Sat 14 Jun 2025 11:00:45 +0000 Files and hashes: 1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: i7YnSaS7Mn9GlxDFyUstNrFSwDZKABgTe0a04EZAFfI=) 5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Jun 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:f3:02:ad:b6:e8:81:88:70:5c:db:40:6c:f2:78:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jun 13 11:00:45 2025 GMT Not After : Jun 14 11:00:45 2025 GMT Subject: CN=097b5e27366c80b0c175d63adf63cbed89b786e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:49:3e:65:ea:2d:fd:59:66:87:aa:3a:95: 4b:28:99:89:80:4e:af:2a:fd:52:b9:fd:e6:86:a1: d0:0d:a0:09:eb:6e:5f:b5:af:7b:c2:3b:77:8a:94: f5:e5:4c:a6:c6:6e:b8:49:32:cb:05:b1:36:3c:9f: 49:4b:49:d0:40:9a:19:ad:cb:05:76:07:21:f4:ab: 9f:f9:d0:c8:29:58:ce:e2:8b:64:dd:1b:89:13:65: d4:b4:75:5c:96:ec:f9:48:ba:f1:54:57:7f:ba:e4: d2:9c:4a:06:3e:95:03:8e:6f:76:4c:d2:38:05:43: 90:2a:ae:2d:d8:aa:e2:67:5c:ff:c2:01:39:d6:e5: 99:46:e9:2e:15:5a:1e:0b:17:05:28:3c:67:b7:b9: 60:93:14:ab:02:18:b7:a0:39:5a:a1:46:50:6b:fd: 20:52:96:23:02:6f:20:56:96:ed:22:fa:63:9e:03: fc:77:af:79:ff:b3:7c:e4:42:62:45:1f:45:fd:e3: ec:3f:65:55:27:d4:5b:de:0e:86:51:ce:99:12:f9: 2c:d6:cd:3a:59:fc:1c:e8:5c:af:c5:90:31:46:c3: 74:1b:cf:a5:13:77:08:61:43:dc:9a:4f:50:04:fc: 94:38:8d:b0:d0:de:0f:a2:ee:fa:57:fc:40:30:f2: 99:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7B:5E:27:36:6C:80:B0:C1:75:D6:3A:DF:63:CB:ED:89:B7:86:E8 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:fb:3d:63:6b:fd:cd:41:a3:2d:ee:2f:cd:65:a3:c7:b6:59: 28:96:ef:d5:fe:6c:4f:ec:cb:4e:a8:9d:f7:79:63:f1:e2:00: a4:82:f3:a3:ef:15:ab:90:ab:5e:41:b8:d2:ae:d0:1d:3b:21: 9e:f7:cc:2c:93:91:6b:6b:0c:44:30:a2:7d:e2:9e:05:4a:43: 6c:90:a6:4b:48:63:24:d7:39:7f:07:6e:7d:03:7a:78:62:97: 31:1e:89:95:16:29:b4:88:5d:14:10:3c:67:20:6e:eb:d4:01: a9:0d:18:be:45:ab:54:94:33:7c:f3:92:b7:2d:62:f9:35:3d: e4:c3:67:ef:29:c3:e1:ea:48:ec:7f:9e:eb:f2:d3:49:9a:82: 4e:7a:6a:33:82:62:51:7b:39:0e:8e:0b:d8:fa:78:00:08:4e: 96:b8:40:14:19:48:c2:a5:65:d3:40:d5:6e:c7:97:64:8f:16: 36:d7:70:c9:4e:18:63:f8:1b:ff:e4:1c:c0:57:a1:b4:38:7d: 91:31:d8:a2:f0:ae:7e:34:1a:cd:9b:f1:35:ae:a6:2c:50:71: bf:b2:9e:8e:35:15:3a:3c:3a:b0:67:aa:2a:2d:c9:da:fa:c1: 39:9b:39:e3:03:88:f5:23:2a:d4:9e:3f:78:a9:17:be:94:dd: 8a:42:95:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdo8wKttuiBiHBc20Bs8ngmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwNjEzMTEwMDQ1WhcNMjUwNjE0MTEwMDQ1WjAzMTEwLwYDVQQD EygwOTdiNWUyNzM2NmM4MGIwYzE3NWQ2M2FkZjYzY2JlZDg5Yjc4NmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodVJPmXqLf1ZZoeqOpVLKJmJgE6v Kv1Suf3mhqHQDaAJ625fta97wjt3ipT15Uymxm64STLLBbE2PJ9JS0nQQJoZrcsF dgch9Kuf+dDIKVjO4otk3RuJE2XUtHVcluz5SLrxVFd/uuTSnEoGPpUDjm92TNI4 BUOQKq4t2KriZ1z/wgE51uWZRukuFVoeCxcFKDxnt7lgkxSrAhi3oDlaoUZQa/0g UpYjAm8gVpbtIvpjngP8d695/7N85EJiRR9F/ePsP2VVJ9Rb3g6GUc6ZEvks1s06 Wfwc6FyvxZAxRsN0G8+lE3cIYUPcmk9QBPyUOI2w0N4Pou76V/xAMPKZwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAl7Xic2bICwwXXWOt9jy+2Jt4boMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvs9Y2v9 zUGjLe4vzWWjx7ZZKJbv1f5sT+zLTqid93lj8eIApILzo+8Vq5CrXkG40q7QHTsh nvfMLJORa2sMRDCifeKeBUpDbJCmS0hjJNc5fwdufQN6eGKXMR6JlRYptIhdFBA8 ZyBu69QBqQ0YvkWrVJQzfPOSty1i+TU95MNn7ynD4epI7H+e6/LTSZqCTnpqM4Ji UXs5Do4L2Pp4AAhOlrhAFBlIwqVl00DVbseXZI8WNtdwyU4YY/gb/+QcwFehtDh9 kTHYovCufjQazZvxNa6mLFBxv7KejjUVOjw6sGeqKi3J2vrBOZs54wOI9SMq1J4/ eKkXvpTdikKVgg== -----END CERTIFICATE-----Generated at Fri Jun 13 19:09:14 2025 by rpki-client