$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: 3G9GQqxoZWm9tF7e55MHjXcc2br95o9SW1nGDiqKNFw= Subject key identifier: 52:B8:01:3D:6C:49:0D:FB:9E:4E:2A:0E:A3:4F:85:A5:45:87:08:69 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019A4F995EB73878EAE0B8A3DFD6B4476FE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1729 Signing time: Tue 04 Nov 2025 16:00:42 +0000 Manifest this update: Tue 04 Nov 2025 16:00:42 +0000 Manifest next update: Wed 05 Nov 2025 16:00:42 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: bLNqOEfW2Ququst/o438KlPpAhBEwGRMP7LPtxRclHE=) 4: QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa (hash: rkVqPs1fexqZNRh0F63HT4hXiYiSmw86Y4ULqhqeko0=) 5: VIvJR-ELjPDDNwtDAs7jPXPRVS8.roa (hash: xlYWOAlcQ9qUm1X3p6cNrDPlijzSwOQVXOe0gD7Wm78=) 6: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 9: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (hash: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=) 10: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 11: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 12: m8epfX6ALey9mozyTLJ0ovC6F2E.roa (hash: nEswDzlmuc7WOVjzf1OqhYzhCng69m/AkqBFVEn5Jd8=) 13: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 14: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:99:5e:b7:38:78:ea:e0:b8:a3:df:d6:b4:47:6f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Nov 4 16:00:42 2025 GMT Not After : Nov 5 16:00:42 2025 GMT Subject: CN=52b8013d6c490dfb9e4e2a0ea34f85a545870869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:e5:07:7a:9f:6e:58:13:07:78:16:19:39: 69:79:bc:45:0d:9d:98:0d:05:93:48:8f:b0:7f:1c: b2:cb:0f:f8:36:15:47:63:4c:a4:b6:6d:9c:71:50: 9e:8e:45:5b:bb:53:23:bb:7d:c6:c9:ce:23:75:d7: 17:74:49:72:2d:e9:44:aa:14:3c:21:1b:af:0c:13: b1:3d:7a:8d:71:8e:71:1c:19:37:87:23:09:ef:76: 0e:46:14:16:a9:71:d2:ba:8e:44:d9:13:97:13:2f: d1:72:4a:86:f5:ab:50:d2:1d:e2:e1:d7:64:c1:41: 0a:f4:74:1a:ac:95:3c:7f:48:2c:0f:fa:44:0c:79: 3e:4a:ea:bc:07:17:df:35:2b:43:86:e8:1a:39:b9: 61:c7:36:0e:a2:df:32:35:87:a9:f7:ab:28:3b:21: 30:19:4c:59:8f:65:22:8c:66:a8:f3:af:c8:b2:d9: 5c:6f:99:06:35:75:ea:de:4d:ae:d6:d8:2c:3a:82: 6f:79:99:14:f8:00:cf:14:16:57:64:01:b3:aa:86: d3:d9:8a:aa:82:b1:d5:07:43:dc:8a:f3:2c:e2:89: 3a:dc:e8:e5:af:15:f7:f5:b9:34:35:09:00:9b:65: ca:7e:cc:f6:9f:90:36:66:dc:85:9a:a8:d6:0c:44: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B8:01:3D:6C:49:0D:FB:9E:4E:2A:0E:A3:4F:85:A5:45:87:08:69 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:29:21:2c:91:18:a1:a9:7c:2c:49:ee:f7:90:eb:8f:32:ce: 13:63:cc:bf:25:ee:a3:9c:37:6c:0c:8f:ea:a3:98:87:e7:f0: e6:00:dd:93:0d:3a:8b:94:90:0d:59:2a:f7:5d:fb:2c:c2:8b: c2:a6:60:47:37:10:4a:05:7d:64:f8:f4:50:f9:03:e5:28:1b: bb:7f:88:5e:32:d6:ec:61:50:e8:b9:71:51:c0:5f:e0:f3:6b: 6f:73:f3:b2:ad:e0:bd:2c:10:c2:b1:8b:f7:41:39:cc:4b:af: fb:bb:25:18:71:8a:ed:8c:b0:c8:74:61:88:85:b5:98:34:ef: c1:66:d1:a6:92:a9:4c:7f:94:10:eb:a5:dd:38:0b:90:56:8f: fa:d0:ef:b0:18:0a:a5:f0:bc:37:48:ff:60:dd:e1:3e:29:6c: a7:5b:b8:b1:35:47:03:16:46:63:11:f2:4c:d7:d8:e1:8e:3d: 2a:7d:18:8c:bd:19:2e:2c:2d:f7:26:af:68:0a:5b:b0:40:7d: 3a:9c:85:8c:e2:2b:d0:5b:9f:f2:5c:23:ae:05:90:85:f1:98: fd:b8:e5:3e:c8:18:58:25:ce:d9:e8:33:56:15:b3:80:d1:d8: ad:ba:74:78:01:50:75:10:d2:42:ad:ea:67:b8:87:8d:1d:45: a3:f2:df:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPmV63OHjq4Lij39a0R2/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUxMTA0MTYwMDQyWhcNMjUxMTA1MTYwMDQyWjAzMTEwLwYDVQQD Eyg1MmI4MDEzZDZjNDkwZGZiOWU0ZTJhMGVhMzRmODVhNTQ1ODcwODY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrXlB3qfblgTB3gWGTlpebxFDZ2Y DQWTSI+wfxyyyw/4NhVHY0yktm2ccVCejkVbu1Mju33Gyc4jddcXdElyLelEqhQ8 IRuvDBOxPXqNcY5xHBk3hyMJ73YORhQWqXHSuo5E2ROXEy/RckqG9atQ0h3i4ddk wUEK9HQarJU8f0gsD/pEDHk+Suq8BxffNStDhugaOblhxzYOot8yNYep96soOyEw GUxZj2UijGao86/Istlcb5kGNXXq3k2u1tgsOoJveZkU+ADPFBZXZAGzqobT2Yqq grHVB0PcivMs4ok63OjlrxX39bk0NQkAm2XKfsz2n5A2ZtyFmqjWDETWewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFK4AT1sSQ37nk4qDqNPhaVFhwhpMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXikhLJEY oal8LEnu95DrjzLOE2PMvyXuo5w3bAyP6qOYh+fw5gDdkw06i5SQDVkq9137LMKL wqZgRzcQSgV9ZPj0UPkD5Sgbu3+IXjLW7GFQ6LlxUcBf4PNrb3Pzsq3gvSwQwrGL 90E5zEuv+7slGHGK7YywyHRhiIW1mDTvwWbRppKpTH+UEOul3TgLkFaP+tDvsBgK pfC8N0j/YN3hPilsp1u4sTVHAxZGYxHyTNfY4Y49Kn0YjL0ZLiwt9yavaApbsEB9 OpyFjOIr0Fuf8lwjrgWQhfGY/bjlPsgYWCXO2egzVhWzgNHYrbp0eAFQdRDSQq3q Z7iHjR1Fo/Lf+w== -----END CERTIFICATE-----Generated at Tue Nov 4 17:54:36 2025 by rpki-client