$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft File: oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json) Hash identifier: WNOjnib+/qhqzg4KJJxLREV0830RbQV++oVU8Anpxa8= Subject key identifier: 3C:13:17:0C:3D:7D:23:26:4D:58:AC:5D:BF:38:9B:C7:33:73:8C:DF Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 01978546320A04D959148A8700F969EE5019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft Manifest number: 165D Signing time: Wed 18 Jun 2025 23:00:59 +0000 Manifest this update: Wed 18 Jun 2025 23:00:59 +0000 Manifest next update: Thu 19 Jun 2025 23:00:59 +0000 Files and hashes: 1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=) 2: 1-l8IN9WmFAM_8sHp6ULKXINOpuo.roa (hash: OepTW0KIexB7Ma6Qq1vDY3wE1ZrCvSqnaxM/NAfOK20=) 3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=) 4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=) 5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=) 6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=) 7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=) 8: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=) 9: GPv7Cu3AAIV17OB2hoOeeln0z0U.roa (hash: n6wsikUe3lM4uYpVDKStgKJqtWUTWWFr66jlTc1qP8w=) 10: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=) 11: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=) 12: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=) 13: OS_CktR-hc4-NmLRLJBYinV6euI.roa (hash: 9QN9UeCEXOiGtg3kQ+agPvu30JRzcGfSpwpa4N4C9hs=) 14: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=) 15: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=) 16: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=) 17: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=) 18: XS6PxuLhSit4pPummN3D9rt_XyI.roa (hash: 947+sGtOkf9LWyXo/fSAaJ6OjjRfkyNgwZLg86SCJxI=) 19: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=) 20: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=) 21: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=) 22: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=) 23: eVJksg_tZC1gqJ4CxgC15n-SEdQ.roa (hash: btGXQHg2mYfMjcjWbTYHZ2mr0/LxHLYRT3vdfCLuDdg=) 24: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=) 25: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=) 26: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=) 27: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: EGWZr0OL3hgHU8f1hiXvaWMonStrQglDFxXTlOyIdKU=) 28: q-kzFzWdHxYVd9BrFrKLJ4d0RIQ.roa (hash: GMAkDMrzsWCnVos+xh1WbimGMP/CqMUvIS+tRaFTcOw=) 29: rTXg68wsMIftLmpexV7EYbNGuq0.roa (hash: oUuz6Mh1F7BCjTAodcbrClwpt+TS4kM1ywRGR/A1/uk=) 30: rYugMFgVZ8X-I2-jsX4dF3aTxvQ.roa (hash: k+GFKByMw5K8SoNqNuEda0gdRBQB4x51TeQEsjZVh6w=) 31: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=) 32: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=) 33: ubTG6wM5WMjPJjVlRxDKUEK_Sr4.roa (hash: hK1TX6u9txAOjU3mw0jZQz1mYIY2Z4Fk7zlDvmJpl3A=) 34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=) 35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Jun 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:85:46:32:0a:04:d9:59:14:8a:87:00:f9:69:ee:50:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jun 18 23:00:59 2025 GMT Not After : Jun 19 23:00:59 2025 GMT Subject: CN=3c13170c3d7d23264d58ac5dbf389bc733738cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1c:f3:e5:74:07:71:f6:d0:b9:01:39:90:fc: ea:04:23:48:a9:fd:29:07:0d:52:a3:3b:8d:5b:6c: de:e0:f6:55:cd:31:34:16:18:1e:a4:b6:10:08:2b: 0c:a0:42:68:bb:97:82:9d:83:6e:84:4d:e4:85:2c: 58:46:61:9a:22:fd:41:ae:14:dc:63:cd:4f:b3:75: e1:06:d8:5d:97:94:11:1a:22:d0:16:09:53:f5:1d: 4d:c0:20:56:ef:fa:f2:91:85:2c:cd:90:27:0e:61: 0e:fd:fa:ca:d9:26:ea:54:48:67:39:09:f1:09:96: 13:57:82:e3:87:47:5d:f2:a1:58:ec:34:cd:97:17: 3b:5f:74:49:0c:e5:20:b0:78:86:d5:7a:47:45:e9: 9e:3f:4c:4f:d4:8b:7e:b5:c9:97:a2:0b:b5:54:b3: 0a:3e:86:f7:03:ed:ba:03:92:5b:2c:7e:7f:6e:4c: 88:cc:30:91:5d:5b:0d:3d:eb:23:3e:32:df:ce:0c: 7b:4a:73:6d:80:09:c2:ff:40:9d:65:a8:3a:32:d4: ca:be:f0:25:3d:b4:ec:69:f4:b2:9b:54:a5:82:b6: d1:7e:d7:a6:80:50:16:ef:64:32:2c:5f:6e:77:29: 55:b9:c6:7f:57:bd:b3:1c:4f:74:b4:0f:97:76:8e: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:13:17:0C:3D:7D:23:26:4D:58:AC:5D:BF:38:9B:C7:33:73:8C:DF X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:cb:bc:c3:57:7f:32:e9:5c:89:a6:ff:44:5a:2f:c1:7e:7b: 48:97:07:8d:a4:9e:26:b0:ee:d6:ef:c8:fe:d8:65:8a:d2:3e: 99:2b:46:e0:df:fe:79:1a:b0:99:3f:16:f0:46:17:28:ab:f2: 80:9e:63:8d:56:d5:51:e4:f9:49:f3:ea:53:89:06:34:6b:1b: 39:b8:3a:fc:7a:9c:ca:8d:2f:2b:5c:9a:de:ca:a5:b4:88:e3: 26:51:f5:dc:32:37:45:a5:e2:81:48:9b:c6:ae:a9:02:df:90: 9a:a5:60:b0:41:47:08:c7:a9:55:8d:54:6c:5c:12:d4:b2:45: 41:50:c9:a8:4b:a4:b8:37:1c:e9:85:1c:79:eb:69:db:8f:ff: 7e:e2:dd:09:a1:2e:f6:80:bc:13:fb:70:3f:2e:a4:db:49:fe: 79:83:63:1c:13:9b:0c:3a:4f:d3:1e:4d:55:66:88:89:ce:df: 58:54:98:87:d2:c2:a3:11:e2:e8:ed:db:5e:13:b8:96:05:db: f1:6d:fc:95:2f:21:51:99:e2:5d:e6:84:1d:5c:d3:23:ba:bf: 28:0e:f8:ca:58:91:0f:be:2c:54:cd:21:f9:ab:d2:b2:43:74: e1:17:f2:8d:15:5b:63:46:a1:8d:30:6b:45:cd:ba:b7:b0:57: 97:36:fb:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeFRjIKBNlZFIqHAPlp7lAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjUwNjE4MjMwMDU5WhcNMjUwNjE5MjMwMDU5WjAzMTEwLwYDVQQD EygzYzEzMTcwYzNkN2QyMzI2NGQ1OGFjNWRiZjM4OWJjNzMzNzM4Y2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xzz5XQHcfbQuQE5kPzqBCNIqf0p Bw1SozuNW2ze4PZVzTE0FhgepLYQCCsMoEJou5eCnYNuhE3khSxYRmGaIv1BrhTc Y81Ps3XhBthdl5QRGiLQFglT9R1NwCBW7/rykYUszZAnDmEO/frK2SbqVEhnOQnx CZYTV4Ljh0dd8qFY7DTNlxc7X3RJDOUgsHiG1XpHRemeP0xP1It+tcmXogu1VLMK Pob3A+26A5JbLH5/bkyIzDCRXVsNPesjPjLfzgx7SnNtgAnC/0CdZag6MtTKvvAl PbTsafSym1SlgrbRftemgFAW72QyLF9udylVucZ/V72zHE90tA+Xdo7oeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwTFww9fSMmTVisXb84m8czc4zfMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcu8w1d/ Mulciab/RFovwX57SJcHjaSeJrDu1u/I/thlitI+mStG4N/+eRqwmT8W8EYXKKvy gJ5jjVbVUeT5SfPqU4kGNGsbObg6/Hqcyo0vK1ya3sqltIjjJlH13DI3RaXigUib xq6pAt+QmqVgsEFHCMepVY1UbFwS1LJFQVDJqEukuDcc6YUceetp24//fuLdCaEu 9oC8E/twPy6k20n+eYNjHBObDDpP0x5NVWaIic7fWFSYh9LCoxHi6O3bXhO4lgXb 8W38lS8hUZniXeaEHVzTI7q/KA74yliRD74sVM0h+avSskN04RfyjRVbY0ahjTBr Rc26t7BXlzb7uQ== -----END CERTIFICATE-----Generated at Thu Jun 19 05:58:39 2025 by rpki-client