$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: NsG/bjD+XWTb2cXDM1xfNYAFd5FnoTTfKK+Bh1TR/ao= Subject key identifier: FB:4E:35:82:11:2D:93:B7:0F:75:70:53:1B:FD:31:BB:CC:51:75:F3 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019672D470EE5A808E468F353131F625055C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 153B Signing time: Sat 26 Apr 2025 16:00:47 +0000 Manifest this update: Sat 26 Apr 2025 16:00:47 +0000 Manifest next update: Sun 27 Apr 2025 16:00:47 +0000 Files and hashes: 1: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=) 2: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=) 3: 8iIqri7IvcauWOTMINZhQiLRKvo.roa (hash: RyqX7TgKsmeFBvLMMu3I/bH8LRWEmU571C2kQM35LYo=) 4: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=) 5: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=) 6: Ed5TudW-Ayo5Pv3FnLDtzuIV6jw.roa (hash: JZ+1BOXDLHUQHCwTqV7EVsjtmnaykI16K8e9IEOS1gQ=) 7: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=) 8: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=) 9: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=) 10: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=) 11: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=) 12: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=) 13: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=) 14: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=) 15: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=) 16: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=) 17: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: NkzDKtTKZMqrNjPtY2os4uEbt/bXqHwxvLIsZOOfwy0=) 18: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=) 19: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:d4:70:ee:5a:80:8e:46:8f:35:31:31:f6:25:05:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Apr 26 16:00:47 2025 GMT Not After : Apr 27 16:00:47 2025 GMT Subject: CN=fb4e3582112d93b70f7570531bfd31bbcc5175f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:20:9a:ab:81:c0:1d:a4:f4:00:e8:c0:a6: 4f:92:47:ed:95:c6:85:52:6e:56:b1:82:04:fb:77: 63:40:ba:b3:41:6f:72:0f:4b:66:c0:18:7a:a4:38: 57:85:4b:53:60:1e:50:93:af:48:9c:87:11:e4:fd: e0:af:59:3e:ec:b3:df:c3:ab:0d:33:14:99:7f:33: 83:4b:8a:6a:70:b9:fd:ee:ad:c7:0d:ba:1d:eb:eb: fe:26:9b:4d:ff:01:52:54:1a:43:fe:93:62:72:25: 91:19:ab:84:55:5c:83:b3:a5:83:c8:76:f5:16:d5: 9e:ac:a6:95:cd:d4:3c:39:13:5e:08:e3:19:c2:8f: f3:2f:89:23:e5:a8:1c:66:5b:ce:49:3a:19:57:89: f1:c4:8f:d1:6b:d1:ba:bd:fb:7f:20:b7:55:08:0e: 9c:80:b8:eb:5c:fe:ab:94:8c:f1:00:a3:c9:05:e7: 94:85:26:88:2b:fa:93:7c:5f:be:b8:32:98:a6:fd: ae:fe:b9:90:92:70:71:ad:06:3b:b8:17:b1:fd:aa: 1c:5e:84:38:25:e9:6f:de:6a:17:3d:78:d5:cc:2a: d1:46:e1:38:e8:7a:48:ba:0d:9a:58:2e:ee:ba:37: 16:8d:26:f7:2e:2a:1c:59:cf:2d:8a:ca:82:19:7d: 4b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4E:35:82:11:2D:93:B7:0F:75:70:53:1B:FD:31:BB:CC:51:75:F3 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:80:db:c1:1b:7f:fd:94:8b:e7:e3:23:9a:47:62:6e:3d:0a: f0:6b:12:29:88:ab:9c:79:61:8a:2f:23:e3:68:70:33:bc:39: f6:95:27:c1:b5:93:63:7d:3d:09:52:83:bf:1a:3b:8b:98:c9: 19:73:1f:f8:7f:ed:e3:ad:80:2c:db:c1:23:ba:00:e4:d5:ec: 10:6e:b5:aa:66:20:b0:57:48:3d:bc:9a:53:53:b9:ee:e3:58: 26:7d:90:62:e1:23:d6:1c:e8:98:44:ea:04:4b:05:46:f6:4c: 42:de:c2:d3:b5:85:5c:88:a7:43:da:8a:85:09:98:78:2f:14: c5:cb:7e:a4:cc:af:21:20:d5:06:29:ea:1e:d1:d0:e1:67:20: 26:30:d7:1b:f2:b7:cf:5b:88:16:96:a1:24:b4:c2:6b:25:85: 9f:0b:86:da:14:17:0a:a8:65:2b:0c:89:ce:1e:a2:63:23:3f: 43:f9:c9:6e:0f:8b:e3:2a:39:1b:cf:5d:fd:70:41:d3:fa:ad: e3:9c:e8:47:7b:30:29:be:a3:28:a9:1c:2c:f8:b8:eb:67:bd: a6:1e:91:1b:97:9a:40:4e:e1:9b:d9:3c:da:bc:d5:cc:5a:ec: 65:8f:df:b9:90:a4:15:77:77:9b:22:4d:e0:16:cc:e2:a3:b4: 9a:79:ef:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZy1HDuWoCORo81MTH2JQVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUwNDI2MTYwMDQ3WhcNMjUwNDI3MTYwMDQ3WjAzMTEwLwYDVQQD EyhmYjRlMzU4MjExMmQ5M2I3MGY3NTcwNTMxYmZkMzFiYmNjNTE3NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbIgmquBwB2k9ADowKZPkkftlcaF Um5WsYIE+3djQLqzQW9yD0tmwBh6pDhXhUtTYB5Qk69InIcR5P3gr1k+7LPfw6sN MxSZfzODS4pqcLn97q3HDbod6+v+JptN/wFSVBpD/pNiciWRGauEVVyDs6WDyHb1 FtWerKaVzdQ8ORNeCOMZwo/zL4kj5agcZlvOSToZV4nxxI/Ra9G6vft/ILdVCA6c gLjrXP6rlIzxAKPJBeeUhSaIK/qTfF++uDKYpv2u/rmQknBxrQY7uBex/aocXoQ4 Jelv3moXPXjVzCrRRuE46HpIug2aWC7uujcWjSb3LiocWc8tisqCGX1LgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtONYIRLZO3D3VwUxv9MbvMUXXzMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYDbwRt/ /ZSL5+Mjmkdibj0K8GsSKYirnHlhii8j42hwM7w59pUnwbWTY309CVKDvxo7i5jJ GXMf+H/t462ALNvBI7oA5NXsEG61qmYgsFdIPbyaU1O57uNYJn2QYuEj1hzomETq BEsFRvZMQt7C07WFXIinQ9qKhQmYeC8Uxct+pMyvISDVBinqHtHQ4WcgJjDXG/K3 z1uIFpahJLTCayWFnwuG2hQXCqhlKwyJzh6iYyM/Q/nJbg+L4yo5G89d/XBB0/qt 45zoR3swKb6jKKkcLPi462e9ph6RG5eaQE7hm9k82rzVzFrsZY/fuZCkFXd3myJN 4BbM4qO0mnnvMg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:08:04 2025 by rpki-client