$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: EQBBWOJzWt3Cc7NTEigbyDO2mMCCwcNAX5X3GKb0GWg= Subject key identifier: 5E:9F:B0:84:57:40:19:9E:F9:08:B1:39:C7:A7:9D:9E:39:CE:7E:E8 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 01988168CC7D727CE498C679BFD5856023D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1638 Signing time: Wed 06 Aug 2025 22:03:05 +0000 Manifest this update: Wed 06 Aug 2025 22:03:05 +0000 Manifest next update: Thu 07 Aug 2025 22:03:05 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa (hash: EDky965lH+7d9zEKg3uh2UPLM5EYLdR0gznw5lmNnpo=) 4: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: vbIrpwcRN5EsEhfLFidl5qMN0uYqctp56K6qBEfsGlI=) 5: QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa (hash: rkVqPs1fexqZNRh0F63HT4hXiYiSmw86Y4ULqhqeko0=) 6: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 9: cNvBb2RRxSjoCAkb0wZvTJ3BY5k.roa (hash: oDSoGJIctW5p0rg5AbBoYa3L96DcMDhEp9yGbjF4AfU=) 10: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 11: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 12: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 13: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:81:68:cc:7d:72:7c:e4:98:c6:79:bf:d5:85:60:23:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Aug 6 22:03:05 2025 GMT Not After : Aug 7 22:03:05 2025 GMT Subject: CN=5e9fb0845740199ef908b139c7a79d9e39ce7ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:8b:20:c1:96:4f:22:de:4e:a2:d1:b1:11: 8a:87:75:dc:cc:6e:8e:d9:2a:ab:5e:b7:21:89:91: 7a:ad:7f:c5:62:e3:dd:54:4c:2d:4b:bf:96:4a:b4: 0b:70:a0:58:ac:f7:0d:d2:fa:30:34:69:23:2b:a6: 5b:b3:5d:b5:a3:a7:b6:6a:84:94:3a:68:21:b8:ac: 90:7c:ec:79:ca:ea:68:fc:40:4b:28:95:9f:67:f0: df:f1:24:5e:01:61:28:ee:bc:34:90:2f:fd:f3:14: c5:7b:50:0a:6d:5d:40:f7:4f:39:d9:8d:b7:df:c8: 7b:5b:ac:42:6d:38:3e:2a:1c:6b:5a:61:45:87:45: 33:21:a7:42:cf:64:27:58:cd:a1:be:ea:55:a6:5e: 49:a5:a3:40:ca:ec:58:c5:a7:b7:6c:a9:43:a4:ad: 92:7f:42:41:bc:fa:38:ce:e1:43:9d:fe:6f:41:9d: 28:76:e4:2c:67:6b:8f:b9:37:01:6f:39:a1:5d:4f: 0b:63:2e:9e:45:f1:17:ae:a7:d5:36:72:1c:f8:a3: 81:0b:0e:fe:29:8c:5f:ce:ac:7f:0e:94:88:51:f2: 48:c2:6c:85:c8:0b:a0:2d:cc:e4:6f:94:43:ce:c4: 4c:2a:6f:b8:52:ea:4c:ee:60:f2:8b:7c:01:cb:31: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9F:B0:84:57:40:19:9E:F9:08:B1:39:C7:A7:9D:9E:39:CE:7E:E8 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:eb:7f:37:1d:b8:d6:61:06:20:c2:09:eb:75:05:8d:1c:5b: a9:5c:6e:2b:dd:6e:65:46:3a:4a:c7:68:a9:ef:67:2b:7d:fd: 7b:64:1b:cb:ee:3c:6c:5b:7e:e8:aa:2b:97:2d:d4:b6:c2:d6: 73:e8:9d:da:f0:4b:95:dc:0c:3b:b2:2f:65:de:64:45:8b:8f: f0:f6:b9:21:6e:3d:1c:b1:b5:94:cf:6d:5a:96:01:7f:8e:74: c4:35:e5:27:d2:b8:5b:3b:a4:ba:d0:3b:ed:93:3b:8c:33:a2: eb:dc:8f:e3:3f:04:be:6a:03:7a:73:85:35:db:d3:0b:b8:d7: 0a:94:81:28:b3:13:de:fe:0f:2b:3a:f5:09:fc:2a:02:0a:fb: 77:85:38:fd:f0:8f:9a:26:34:4c:66:13:aa:5c:c2:86:fc:f9: 28:b0:7d:71:09:7f:e2:d3:51:08:0d:42:f8:4c:1e:f5:1f:75: 1d:65:8d:5b:1e:0c:32:7c:4e:0a:d9:c4:2a:33:db:07:73:46: 50:29:3c:d2:1a:b9:8b:17:63:c4:e5:de:b1:d1:86:31:a8:b2: 7e:ea:75:e3:95:12:8b:f9:38:49:29:8c:03:8c:2e:a2:ce:2a: 4c:25:3f:be:e4:d9:2c:ba:cb:cf:f0:ec:e5:01:3b:8b:e0:31: c4:c4:64:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiBaMx9cnzkmMZ5v9WFYCPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUwODA2MjIwMzA1WhcNMjUwODA3MjIwMzA1WjAzMTEwLwYDVQQD Eyg1ZTlmYjA4NDU3NDAxOTllZjkwOGIxMzljN2E3OWQ5ZTM5Y2U3ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZWLIMGWTyLeTqLRsRGKh3XczG6O 2SqrXrchiZF6rX/FYuPdVEwtS7+WSrQLcKBYrPcN0vowNGkjK6Zbs121o6e2aoSU OmghuKyQfOx5yupo/EBLKJWfZ/Df8SReAWEo7rw0kC/98xTFe1AKbV1A90852Y23 38h7W6xCbTg+KhxrWmFFh0UzIadCz2QnWM2hvupVpl5JpaNAyuxYxae3bKlDpK2S f0JBvPo4zuFDnf5vQZ0oduQsZ2uPuTcBbzmhXU8LYy6eRfEXrqfVNnIc+KOBCw7+ KYxfzqx/DpSIUfJIwmyFyAugLczkb5RDzsRMKm+4UupM7mDyi3wByzFWhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6fsIRXQBme+QixOcennZ45zn7oMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANut/Nx24 1mEGIMIJ63UFjRxbqVxuK91uZUY6Ssdoqe9nK339e2Qby+48bFt+6Korly3UtsLW c+id2vBLldwMO7IvZd5kRYuP8Pa5IW49HLG1lM9tWpYBf450xDXlJ9K4WzukutA7 7ZM7jDOi69yP4z8EvmoDenOFNdvTC7jXCpSBKLMT3v4PKzr1CfwqAgr7d4U4/fCP miY0TGYTqlzChvz5KLB9cQl/4tNRCA1C+Ewe9R91HWWNWx4MMnxOCtnEKjPbB3NG UCk80hq5ixdjxOXesdGGMaiyfup145USi/k4SSmMA4wuos4qTCU/vuTZLLrLz/Ds 5QE7i+AxxMRkZQ== -----END CERTIFICATE-----Generated at Thu Aug 7 05:07:24 2025 by rpki-client