$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: EssapnS4gstsQvDoJxyy7wQTeYja4ITj/BAr2gouXjw= Subject key identifier: 94:FB:89:47:12:34:2A:B3:B3:05:0D:AE:12:1E:98:AF:E9:26:44:57 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 0198722A90D41D6361064EBA3C0EC18E15BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1648 Signing time: Sun 03 Aug 2025 23:00:48 +0000 Manifest this update: Sun 03 Aug 2025 23:00:48 +0000 Manifest next update: Mon 04 Aug 2025 23:00:48 +0000 Files and hashes: 1: 2KQAFYlh37b3rSq3n1HpcqN7OX4.roa (hash: fKQe9gApd9PuwUIjzUrjhttueSQGoqtWJ/p1DHHYpjs=) 2: 5BICsEwf39tSfyuR3Dxq7LQhNTs.roa (hash: F1ThVBGu9zXgcyXnsxcohjmknQWFIwIuRVmf9x9GU+Q=) 3: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=) 4: 8W6gEnbSbHB4zwWx578JWmNIZ9s.roa (hash: HhOmkvbfHuyLR8S9fvlNMW34CV2ZzM/vCu2LBQ3dRHc=) 5: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=) 6: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=) 7: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=) 8: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=) 9: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=) 10: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=) 11: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=) 12: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=) 13: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=) 14: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=) 15: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=) 16: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=) 17: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=) 18: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: V5VCaMy54dO5+2faSqYZVoiqVOEkte9FBHFA4h0BdDQ=) 19: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=) 20: y3IgWEC6wOfcW2mB2big0GlRakQ.roa (hash: hgID1ZyHgm6d4cBPAeKq0y34fmPvZXXFjVqgin/MNVE=) 21: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Aug 2025 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:72:2a:90:d4:1d:63:61:06:4e:ba:3c:0e:c1:8e:15:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Aug 3 23:00:48 2025 GMT Not After : Aug 4 23:00:48 2025 GMT Subject: CN=94fb894712342ab3b3050dae121e98afe9264457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:f9:cd:05:f6:72:4c:cf:7a:99:ba:8a:37: 21:04:a8:f3:80:4d:4b:4b:a1:c4:32:a1:1b:64:d6: b8:41:1d:b3:be:a8:0e:cd:f7:68:81:cd:13:77:e4: 38:1e:6e:95:18:29:bf:3b:da:1f:66:5e:ad:fb:d6: b8:9f:06:cf:70:bd:73:1a:46:58:40:52:7d:f2:56: 9b:78:c2:6f:86:47:e7:d6:da:a5:49:0b:a9:fe:d3: 35:a0:d4:db:86:e1:54:1b:94:1a:e6:c5:0f:a2:9f: f0:26:23:fb:4c:45:22:6a:a2:97:c2:a9:82:26:ad: 8b:b4:6b:a0:7c:84:57:6e:cd:d3:68:99:28:b1:d4: f8:46:eb:59:bd:57:6c:bf:a1:7c:5d:7e:a1:f4:ea: 5c:63:0d:8d:cc:28:75:f6:37:5c:1d:61:8e:4c:99: e4:44:cd:d7:1d:38:02:8f:20:82:1c:d1:92:bc:9f: aa:31:70:b4:5c:fe:4a:92:71:13:34:54:e9:f0:9a: 55:83:c2:fc:4e:ac:bc:da:c2:55:49:54:97:41:9b: c7:d8:5b:b4:0d:42:f1:e2:d7:9f:64:f9:12:18:17: 9e:b7:d2:77:33:69:40:ab:6e:f2:54:a9:1b:c1:eb: 83:cf:ad:14:75:6f:dd:dc:dd:48:f7:48:c3:0b:88: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FB:89:47:12:34:2A:B3:B3:05:0D:AE:12:1E:98:AF:E9:26:44:57 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a4:4d:35:8f:6d:c2:67:fe:dc:a3:32:0e:f9:d1:1d:e5:b8: f1:e4:98:60:5f:43:70:d6:1a:2b:b4:d2:e5:69:be:96:69:48: c4:06:91:ce:db:86:e7:35:fe:39:9c:12:5c:8a:f6:ab:d9:01: 6b:a1:34:fe:4f:de:30:8c:eb:5e:f5:29:70:ba:1d:09:f0:5c: de:0c:86:e9:80:f6:02:55:c9:b3:8c:c8:50:f6:71:40:ff:e7: cd:06:50:1f:cb:72:95:25:ad:41:83:4b:5d:74:23:a6:89:7d: 9d:34:35:00:7f:98:77:e7:12:c8:fb:db:06:6a:25:db:c6:c9: 85:d0:77:70:f6:8a:57:0d:8e:9d:63:74:9c:81:fd:68:e1:64: 88:0f:80:90:cf:73:09:3d:1f:41:2f:cd:86:f4:6f:08:18:a3: 3b:a9:ca:e4:bc:da:13:1f:2c:da:c5:1e:8a:9e:8e:70:91:32: e3:12:b7:68:87:dd:bb:40:b3:de:c7:5b:5b:7b:57:68:63:b9: 89:d8:f7:9a:84:ae:fd:5b:f6:3b:71:0f:ce:da:f3:81:62:b2: 35:c0:1a:dc:4d:f4:6b:c7:19:91:6a:ff:6a:1d:8f:0f:47:b8: 97:75:90:81:87:29:bd:25:ef:6f:16:f7:a0:9e:37:1d:e1:54: 2b:2a:30:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhyKpDUHWNhBk66PA7BjhW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUwODAzMjMwMDQ4WhcNMjUwODA0MjMwMDQ4WjAzMTEwLwYDVQQD Eyg5NGZiODk0NzEyMzQyYWIzYjMwNTBkYWUxMjFlOThhZmU5MjY0NDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1If5zQX2ckzPepm6ijchBKjzgE1L S6HEMqEbZNa4QR2zvqgOzfdogc0Td+Q4Hm6VGCm/O9ofZl6t+9a4nwbPcL1zGkZY QFJ98labeMJvhkfn1tqlSQup/tM1oNTbhuFUG5Qa5sUPop/wJiP7TEUiaqKXwqmC Jq2LtGugfIRXbs3TaJkosdT4RutZvVdsv6F8XX6h9OpcYw2NzCh19jdcHWGOTJnk RM3XHTgCjyCCHNGSvJ+qMXC0XP5KknETNFTp8JpVg8L8Tqy82sJVSVSXQZvH2Fu0 DULx4tefZPkSGBeet9J3M2lAq27yVKkbweuDz60UdW/d3N1I90jDC4jFAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT7iUcSNCqzswUNrhIemK/pJkRXMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6RNNY9t wmf+3KMyDvnRHeW48eSYYF9DcNYaK7TS5Wm+lmlIxAaRztuG5zX+OZwSXIr2q9kB a6E0/k/eMIzrXvUpcLodCfBc3gyG6YD2AlXJs4zIUPZxQP/nzQZQH8tylSWtQYNL XXQjpol9nTQ1AH+Yd+cSyPvbBmol28bJhdB3cPaKVw2OnWN0nIH9aOFkiA+AkM9z CT0fQS/NhvRvCBijO6nK5LzaEx8s2sUeip6OcJEy4xK3aIfdu0Cz3sdbW3tXaGO5 idj3moSu/Vv2O3EPztrzgWKyNcAa3E30a8cZkWr/ah2PD0e4l3WQgYcpvSXvbxb3 oJ43HeFUKyowlA== -----END CERTIFICATE-----Generated at Mon Aug 4 03:57:56 2025 by rpki-client