$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: 3ePj/TeLCH0wIneCh5S8TWSI4n8C4hkYTq5azeGLLo0= Subject key identifier: BB:9B:7F:3A:1F:60:27:74:F9:46:D1:7E:63:F1:0C:5A:D2:E1:79:82 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 0196759EAE5197F8B0BC581D180C7778D85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 151F Signing time: Sun 27 Apr 2025 05:00:55 +0000 Manifest this update: Sun 27 Apr 2025 05:00:55 +0000 Manifest next update: Mon 28 Apr 2025 05:00:55 +0000 Files and hashes: 1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: 6+4aMurrrfRzFYc8UuGeJfN9r7Bw5kP91nSbEK55Qro=) 5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:9e:ae:51:97:f8:b0:bc:58:1d:18:0c:77:78:d8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Apr 27 05:00:55 2025 GMT Not After : Apr 28 05:00:55 2025 GMT Subject: CN=bb9b7f3a1f602774f946d17e63f10c5ad2e17982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:62:77:f9:09:53:c9:e5:e9:f2:75:b6:4d:00: 1f:1a:1b:d0:f6:d1:1d:79:6d:1a:9f:3f:a6:53:4a: 88:03:87:96:79:5e:98:8e:4c:cc:4f:2a:ad:fc:63: 51:48:13:04:40:bb:50:04:f3:80:8e:8e:1c:23:7a: 74:16:13:c8:4a:ab:19:b8:5f:09:97:6b:93:53:db: fe:b2:95:da:34:49:43:8a:05:52:59:84:3f:34:d2: ae:38:0a:e2:5a:92:f9:97:e5:3e:c8:ce:20:75:de: 54:83:dd:0d:84:2e:88:81:2e:e2:49:32:ea:7f:6a: 0b:d1:48:eb:ef:06:e2:63:10:c9:78:29:e5:27:c7: 18:65:3e:85:ef:4f:1c:39:a7:d2:34:5b:d5:dc:bc: 34:50:b4:4d:90:dd:ab:93:03:56:3e:95:ff:7e:11: 62:50:14:66:7b:59:e6:12:58:2c:f0:91:43:d4:cb: b6:8c:f5:8a:31:4d:53:84:da:4e:f6:59:17:38:fc: 8e:06:5e:5f:b7:46:95:04:b8:cf:0b:4c:53:64:54: fb:f5:c7:1e:b9:da:ea:9a:46:f7:ec:a4:e9:79:8d: 98:db:38:87:a7:09:b8:de:dd:a5:e9:fe:66:e3:1b: 13:72:03:be:02:4f:01:b7:ba:c1:60:74:4e:0e:a8: 2d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9B:7F:3A:1F:60:27:74:F9:46:D1:7E:63:F1:0C:5A:D2:E1:79:82 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9a:65:a9:3c:db:9b:66:84:81:0b:37:17:83:00:f1:41:22: 06:c1:cc:03:02:b2:30:68:34:b6:da:a8:e1:a8:26:2a:27:ac: eb:bc:44:2c:ec:9f:7a:b8:c8:1a:53:6f:5f:21:b5:12:65:f7: d3:2b:7c:dd:9e:b9:99:76:c5:24:04:93:90:3c:19:0f:51:24: 36:5c:b7:70:94:2b:d2:f2:37:14:f5:f4:75:b1:12:2d:f8:07: 54:c7:73:22:6d:eb:c0:b3:ea:27:39:4b:56:48:97:62:55:0a: de:30:63:eb:92:3a:54:d8:a0:66:02:6c:5e:0f:ca:0b:bb:94: 32:7f:5c:1e:dc:f5:15:92:65:41:23:e0:6b:38:98:39:c9:26: de:32:94:d9:8b:49:db:aa:db:00:94:f7:88:0a:6e:c9:dd:01: ed:2a:6e:8e:d0:6a:d0:50:57:04:ae:02:20:8f:69:ae:00:fd: 8d:6d:06:fb:40:76:a2:f7:21:c2:a9:b1:94:df:4d:51:e0:ca: be:4e:9c:04:99:4f:bb:58:68:29:c9:ab:9a:a1:82:dd:7c:eb: 38:b5:93:03:37:e9:53:fa:f0:03:2c:a3:c3:3d:2e:2f:a0:e6: 91:e6:2c:b9:dc:35:77:2d:95:c7:75:44:af:d8:4f:33:a5:0e: 68:db:21:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1nq5Rl/iwvFgdGAx3eNhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwNDI3MDUwMDU1WhcNMjUwNDI4MDUwMDU1WjAzMTEwLwYDVQQD EyhiYjliN2YzYTFmNjAyNzc0Zjk0NmQxN2U2M2YxMGM1YWQyZTE3OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mJ3+QlTyeXp8nW2TQAfGhvQ9tEd eW0anz+mU0qIA4eWeV6YjkzMTyqt/GNRSBMEQLtQBPOAjo4cI3p0FhPISqsZuF8J l2uTU9v+spXaNElDigVSWYQ/NNKuOAriWpL5l+U+yM4gdd5Ug90NhC6IgS7iSTLq f2oL0Ujr7wbiYxDJeCnlJ8cYZT6F708cOafSNFvV3Lw0ULRNkN2rkwNWPpX/fhFi UBRme1nmElgs8JFD1Mu2jPWKMU1ThNpO9lkXOPyOBl5ft0aVBLjPC0xTZFT79cce udrqmkb37KTpeY2Y2ziHpwm43t2l6f5m4xsTcgO+Ak8Bt7rBYHRODqgtqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLubfzofYCd0+UbRfmPxDFrS4XmCMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZplqTzb m2aEgQs3F4MA8UEiBsHMAwKyMGg0ttqo4agmKies67xELOyferjIGlNvXyG1EmX3 0yt83Z65mXbFJASTkDwZD1EkNly3cJQr0vI3FPX0dbESLfgHVMdzIm3rwLPqJzlL VkiXYlUK3jBj65I6VNigZgJsXg/KC7uUMn9cHtz1FZJlQSPgaziYOckm3jKU2YtJ 26rbAJT3iApuyd0B7SpujtBq0FBXBK4CII9prgD9jW0G+0B2ovchwqmxlN9NUeDK vk6cBJlPu1hoKcmrmqGC3XzrOLWTAzfpU/rwAyyjwz0uL6DmkeYsudw1dy2Vx3VE r9hPM6UOaNshoA== -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:27 2025 by rpki-client