$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: okslrZUT7cpxheb8FQyJal2QOMTFynZE9oW9UG9ZINk= Subject key identifier: 2A:C3:1F:F4:36:CF:80:B3:05:EC:E9:1A:75:11:3F:2B:C3:4B:1E:73 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019A4D06D2A9E269B4B400713DB4DB270F98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 171D Signing time: Tue 04 Nov 2025 04:01:23 +0000 Manifest this update: Tue 04 Nov 2025 04:01:23 +0000 Manifest next update: Wed 05 Nov 2025 04:01:23 +0000 Files and hashes: 1: DZz0HwqqARibmrSZa6SW5rPMqjw.roa (hash: RrKpz2JATQa7eOyKwCGmO2SKLZQ3cFfCVCyUkvbItu4=) 2: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 3: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 4: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 5: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: DhCwvJ4f2olOHBOavE5pzCJa2OvDpogtMC6pbZCXolI=) 6: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 7: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 8: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 9: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 10: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 11: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 12: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 13: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 14: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 15: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 16: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 17: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 18: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 19: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:06:d2:a9:e2:69:b4:b4:00:71:3d:b4:db:27:0f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Nov 4 04:01:23 2025 GMT Not After : Nov 5 04:01:23 2025 GMT Subject: CN=2ac31ff436cf80b305ece91a75113f2bc34b1e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:50:61:38:6a:0f:f5:6a:bc:79:97:cd:43: b2:62:1c:a1:42:68:cd:cc:47:72:0b:43:7e:54:f1: 56:62:fd:05:97:f5:b3:75:7d:17:6f:2e:26:c3:1e: 6b:b7:29:bc:11:fc:1b:4b:0b:1c:49:a7:bb:8d:4e: a8:a8:2f:4d:17:e5:54:26:36:6b:5d:42:00:55:1b: 42:71:89:27:ef:00:d8:d5:0f:63:08:82:4d:9e:d2: ba:8a:e4:d1:ad:46:a5:27:9f:af:eb:a9:29:e2:61: 40:85:e7:d5:31:f3:32:03:d0:e4:af:4b:e7:a2:ac: 22:bc:49:d7:b0:0a:3c:18:5b:e1:6b:25:29:6d:62: 5c:09:58:ab:f4:a7:b4:b2:f3:62:7f:66:cb:e6:c5: ad:fa:b4:2b:5e:9e:3f:96:0e:2d:5b:d6:cf:4f:d1: 77:53:7e:16:a7:b4:25:6b:5c:95:46:92:2e:9a:7e: 04:9a:57:ae:5f:87:c0:a3:2e:23:2b:bf:1e:a6:4c: ae:d1:c8:ea:c8:c6:15:ab:7c:9e:2a:94:4e:0c:4b: 32:14:ce:44:c9:0b:0a:fc:d8:5f:c3:bd:8b:ef:69: 93:90:c2:8c:e2:4e:30:1b:29:e0:64:1c:90:4e:f3: dd:2a:b2:3e:24:64:41:87:a4:de:70:4d:71:66:d3: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C3:1F:F4:36:CF:80:B3:05:EC:E9:1A:75:11:3F:2B:C3:4B:1E:73 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:cb:a6:37:d5:0d:08:02:98:24:51:73:2b:05:85:ab:91:28: c5:13:09:84:e5:86:f3:44:67:a6:21:eb:a0:39:e3:ec:56:42: d0:af:c1:3c:92:79:61:7d:d7:24:bb:11:b0:d3:92:bd:32:27: 76:5b:8d:0e:67:dd:db:bd:69:22:7d:01:f1:de:a4:e9:26:fe: f1:12:f6:bb:06:eb:4e:69:b7:cc:dc:03:da:66:38:05:8e:b3: 80:70:3e:3a:8e:9f:2d:b5:58:e4:08:84:20:dc:cf:53:65:15: d6:4a:12:c0:a7:33:83:e6:9a:a7:9e:83:6f:ad:08:6e:a6:2b: 66:4c:74:7a:e7:1a:79:7b:f1:6b:47:7d:d4:0e:aa:66:23:e0: 4d:c1:af:51:40:f7:03:00:ea:d0:1d:15:87:99:74:d3:d7:13: 3f:0b:9c:5d:a3:59:8d:bc:84:ab:f3:83:35:34:07:d0:33:a1: 15:7c:84:6f:74:83:e0:f2:97:62:f3:6c:7d:3b:28:2f:85:c4: 93:51:22:20:81:02:c4:50:29:c7:86:15:00:01:f5:a3:8d:4a: c4:d2:bc:c3:a6:2e:ec:60:8f:ca:66:61:42:6a:eb:35:49:c1: 81:ba:39:e1:94:2a:46:c0:69:5a:1f:f3:69:d1:fc:b3:c5:a4: ab:99:55:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNBtKp4mm0tABxPbTbJw+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUxMTA0MDQwMTIzWhcNMjUxMTA1MDQwMTIzWjAzMTEwLwYDVQQD EygyYWMzMWZmNDM2Y2Y4MGIzMDVlY2U5MWE3NTExM2YyYmMzNGIxZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom1QYThqD/VqvHmXzUOyYhyhQmjN zEdyC0N+VPFWYv0Fl/WzdX0Xby4mwx5rtym8EfwbSwscSae7jU6oqC9NF+VUJjZr XUIAVRtCcYkn7wDY1Q9jCIJNntK6iuTRrUalJ5+v66kp4mFAhefVMfMyA9Dkr0vn oqwivEnXsAo8GFvhayUpbWJcCVir9Ke0svNif2bL5sWt+rQrXp4/lg4tW9bPT9F3 U34Wp7Qla1yVRpIumn4EmleuX4fAoy4jK78epkyu0cjqyMYVq3yeKpRODEsyFM5E yQsK/Nhfw72L72mTkMKM4k4wGyngZByQTvPdKrI+JGRBh6TecE1xZtPsfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrDH/Q2z4CzBezpGnURPyvDSx5zMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMumN9UN CAKYJFFzKwWFq5EoxRMJhOWG80RnpiHroDnj7FZC0K/BPJJ5YX3XJLsRsNOSvTIn dluNDmfd271pIn0B8d6k6Sb+8RL2uwbrTmm3zNwD2mY4BY6zgHA+Oo6fLbVY5AiE INzPU2UV1koSwKczg+aap56Db60IbqYrZkx0eucaeXvxa0d91A6qZiPgTcGvUUD3 AwDq0B0Vh5l009cTPwucXaNZjbyEq/ODNTQH0DOhFXyEb3SD4PKXYvNsfTsoL4XE k1EiIIECxFApx4YVAAH1o41KxNK8w6Yu7GCPymZhQmrrNUnBgbo54ZQqRsBpWh/z adH8s8Wkq5lVnA== -----END CERTIFICATE-----Generated at Tue Nov 4 10:47:27 2025 by rpki-client