$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft File: OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json) Hash identifier: qri7SnNAe3edyB9UjSLA4eoDeWHWY/UhVbqOQupKQnM= Subject key identifier: AD:D2:D4:FA:FF:46:E8:96:FF:87:0E:62:5D:22:93:77:F4:41:F2:78 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019A4EBD3D1C24DAE07907ED0205FCA19252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft Manifest number: 0D77 Signing time: Tue 04 Nov 2025 12:00:16 +0000 Manifest this update: Tue 04 Nov 2025 12:00:16 +0000 Manifest next update: Wed 05 Nov 2025 12:00:16 +0000 Files and hashes: 1: 0CU8gK0M0FreSaI70cF5ooIUWnA.roa (hash: 3AhvcPwm/9eRzoLDWBdCRrt2ESsUhmDJGeKMEdO3cAk=) 2: 0ESHx6o_bEDdbe3bS47z5AA9_2A.roa (hash: FBbhXK+wtLEWtxbxvTb522xPc5/xwLbqkikaE9rGgWA=) 3: 1-nVBMclHTDps1NSLbwKMKR1iiTs.roa (hash: 4AkcTj0fNGL65T6WanUrryLYpvk8ooyp6N8RAfw9n+c=) 4: 46z-VA8ZxSIvEgTMHqo0Ukp0tI4.roa (hash: 1lykPvwIwXLQm3HQpScKTdZPHNhg2f4sQGOIC0Vwqhw=) 5: GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa (hash: encqJVvBdRm6B6vTFCshfVj5JBcWptS0eKrTwjTdeJk=) 6: HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa (hash: EVOBxrtD9ibYF2I1shFMN6eNa05ZrbHe+uhDMKiGbNk=) 7: IvvEQkJx_YQuA7WDKcWTwA6sjeM.roa (hash: TYlXh7A49R6hcyPJlA/asJPKwJrsxKdwQselHHTfu5Q=) 8: JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa (hash: fb4DYVb7xf+ej8L7lVMYzB+36KaoNm7ycChtN8C1vqA=) 9: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: 0b2hTT5mHry89aNTCM/gGRdoWPMOR5A9WjJjp9VRW9I=) 10: S714ou8hYqjvmFB4nmghIWDuzT8.roa (hash: /BUpwNlFfWECuzcvwXarqFvS3D6dRZwllAWqKckM2JU=) 11: SlDcuXgMtJBGo8YlgFJf41C4kAo.roa (hash: SG0BWCyRtxyo4M02OYtmA2zjOWnb5KfeZ0pEnDDi914=) 12: VjGUvPYUWgp-0uedFQJC98v6fEo.roa (hash: jGCrku5NTRGndH4tqMN86FEJPJ73k9kCLkdTKB2wH5A=) 13: Z-Ur6Re147f49wwXtBgxnUTtQco.roa (hash: 6jMXEqLaJpiU5oHiEpHv2AWSooBvq9dmOPpZl+dAG7k=) 14: ZXvQgtCwdZFH33GeNkjgldbwU0g.roa (hash: WG+LLLlTTipnD9xWrIvYnomhJk4LiYNkyxpSwcuckf4=) 15: ZckxSPgStfBNqpf_bKZ5TlHqsiw.roa (hash: ylC4RavnbVZ7xL5LPnNCb6J3es9DShqfcjOt6FoGPyw=) 16: ediJMJBzETBra22Tko9jnlFnOYA.roa (hash: oCcIPCoFUy+fyzOqy+mhQqpOzf2wz/N+TlISESEMNNs=) 17: q2sdLUq8oTKjFXabTIHjNujteO4.roa (hash: DmdPmf4rfc5GBaM+wuurYH2BFaBH9ELo6PMdUoe2Fiw=) 18: qN_rG608ZhXgRutescaS-t2N0fw.roa (hash: tfpFzdPe4QKgm7jdILeSk485+ZJMhoY/dG54ucE9Hqs=) 19: tzK7bQadc-X5ERcHUFRyrLjFAic.roa (hash: pH5a6hVvwpFpvLEU3OQ9naeDuYIybxvVLAzccWIRqYM=) 20: xY27QQkLnZ1CFYPkNRnlg2uzEHs.roa (hash: PQiNovy5zghm0pctHsesA3K/Z4xfX1dgnUxPsPukk5k=) 21: xymeMR66aDWDmDhIlx2JEKPGuQ4.roa (hash: FDOGD9cmw7d0tSGevYfgks8MljnMa/gRurSZQ7spuUQ=) 22: yGG8haOhseC4wLjAMMMPhHZTXjA.roa (hash: lNJuGf7SRWFqIxTMR/qz5nkSoM2R54KFa9KdvNjHl+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:bd:3d:1c:24:da:e0:79:07:ed:02:05:fc:a1:92:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Nov 4 12:00:16 2025 GMT Not After : Nov 5 12:00:16 2025 GMT Subject: CN=add2d4faff46e896ff870e625d229377f441f278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:cb:32:a6:45:94:1b:35:a7:e0:d6:9b:a5: 98:0d:28:4b:a6:07:c6:07:4a:a0:a8:96:34:f5:69: dc:fd:a5:38:87:1f:18:93:4a:0f:b9:56:84:92:83: 3d:47:07:9f:3e:6d:61:6b:11:7b:3b:0e:f0:67:f7: 79:b5:bc:dd:fe:1f:2e:d4:0f:7c:ec:dd:6c:8c:d3: 07:a4:21:f5:b3:a4:4a:a4:36:10:d4:49:45:4d:bf: 16:5c:88:b2:91:31:c9:05:09:8c:d9:5b:6c:02:07: c0:f8:d1:7f:dd:de:32:c1:b8:84:e0:ac:cf:f5:c0: c8:1d:db:20:a4:0d:07:ec:0f:71:17:fa:e7:1e:5a: b0:d4:e8:8b:0d:f4:28:2c:c1:38:59:81:16:ba:de: e9:55:3c:c1:16:08:af:49:4f:f8:ae:0e:7c:23:80: 05:b2:19:c5:5c:40:43:2a:5a:ee:08:be:b2:d3:6f: 6f:f6:ad:19:aa:34:da:e9:2f:e5:6f:d9:74:86:dd: d2:53:82:b4:25:ec:03:bf:4b:f6:ad:ab:de:e3:ec: 1a:41:7f:de:34:de:6e:ae:50:14:99:20:18:41:8a: 67:62:6d:ce:e4:9d:f2:59:1b:89:f6:5d:ae:d0:58: fc:c9:8d:10:ec:68:a0:61:35:4a:ce:50:a1:54:68: 58:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D2:D4:FA:FF:46:E8:96:FF:87:0E:62:5D:22:93:77:F4:41:F2:78 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:45:d0:ce:01:86:44:ed:85:da:10:aa:97:4b:90:b0:07: 9e:1d:c5:cf:73:3f:d6:aa:26:12:7b:33:fa:96:5e:31:54:f4: 2e:bf:27:85:1c:10:9c:69:62:02:c6:19:5f:45:aa:cb:75:d8: a9:76:c4:52:9b:49:4c:b7:28:5a:6e:63:03:71:76:8e:80:b7: f4:ad:d5:54:c4:bd:d6:dd:06:dd:15:0d:57:d1:f7:f0:c5:d2: 0c:e5:2e:ac:6c:38:69:bf:79:11:b2:27:8f:07:c2:5d:68:fb: cd:c0:8c:26:1e:ea:7f:8e:1e:d2:07:2d:16:31:fc:68:6f:7e: 83:ba:a3:28:be:5d:ef:06:e8:60:77:e0:e8:58:19:15:9a:6e: eb:ae:91:30:af:27:ea:9c:f9:0a:06:6c:cb:4c:df:8e:2f:b3: 81:d0:75:5a:0d:4a:d5:37:ab:a3:57:17:b0:d1:10:99:3f:15: 4b:2f:43:92:2e:28:92:73:e7:36:8e:6d:91:37:d0:ed:62:21: 5a:6c:72:25:17:09:e3:36:7c:48:e3:88:ac:f8:28:3a:34:54: af:6a:b6:67:a9:26:a0:e3:d9:0c:99:66:cf:52:bb:4c:fc:8e: 30:4c:0b:29:7b:b1:88:bb:8d:8d:5c:4a:97:5c:7e:bf:c9:ed: f1:7a:ae:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOvT0cJNrgeQftAgX8oZJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMTA0MTIwMDE2WhcNMjUxMTA1MTIwMDE2WjAzMTEwLwYDVQQD EyhhZGQyZDRmYWZmNDZlODk2ZmY4NzBlNjI1ZDIyOTM3N2Y0NDFmMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosnLMqZFlBs1p+DWm6WYDShLpgfG B0qgqJY09Wnc/aU4hx8Yk0oPuVaEkoM9RwefPm1haxF7Ow7wZ/d5tbzd/h8u1A98 7N1sjNMHpCH1s6RKpDYQ1ElFTb8WXIiykTHJBQmM2VtsAgfA+NF/3d4ywbiE4KzP 9cDIHdsgpA0H7A9xF/rnHlqw1OiLDfQoLME4WYEWut7pVTzBFgivSU/4rg58I4AF shnFXEBDKlruCL6y029v9q0ZqjTa6S/lb9l0ht3SU4K0JewDv0v2rave4+waQX/e NN5urlAUmSAYQYpnYm3O5J3yWRuJ9l2u0Fj8yY0Q7GigYTVKzlChVGhYqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3S1Pr/RuiW/4cOYl0ik3f0QfJ4MB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXZF0M4B hkTthdoQqpdLkLAHnh3Fz3M/1qomEnsz+pZeMVT0Lr8nhRwQnGliAsYZX0Wqy3XY qXbEUptJTLcoWm5jA3F2joC39K3VVMS91t0G3RUNV9H38MXSDOUurGw4ab95EbIn jwfCXWj7zcCMJh7qf44e0gctFjH8aG9+g7qjKL5d7wboYHfg6FgZFZpu666RMK8n 6pz5CgZsy0zfji+zgdB1Wg1K1Tero1cXsNEQmT8VSy9Dki4oknPnNo5tkTfQ7WIh WmxyJRcJ4zZ8SOOIrPgoOjRUr2q2Z6kmoOPZDJlmz1K7TPyOMEwLKXuxiLuNjVxK l1x+v8nt8XquZQ== -----END CERTIFICATE-----Generated at Tue Nov 4 14:49:46 2025 by rpki-client