$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: k1GJp+RNhLP7+RPiw6KyRWU8vCIwW9+KHsHtZmixDAY= Subject key identifier: 1B:C3:04:B1:EA:89:65:BE:02:A6:EE:E9:00:A1:3C:B6:FB:F5:F9:A4 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 01976D3DEBB580F05E88C551D79214E18126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 148D Signing time: Sat 14 Jun 2025 07:01:03 +0000 Manifest this update: Sat 14 Jun 2025 07:01:03 +0000 Manifest next update: Sun 15 Jun 2025 07:01:03 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 4: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: p86B5Tqt2fZ4Gdjfpb2xjvjokZhmB7Er+UEsmc6gOR0=) 6: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 7: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 8: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 9: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=) 10: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:3d:eb:b5:80:f0:5e:88:c5:51:d7:92:14:e1:81:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jun 14 07:01:03 2025 GMT Not After : Jun 15 07:01:03 2025 GMT Subject: CN=1bc304b1ea8965be02a6eee900a13cb6fbf5f9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:ce:a1:e2:0f:d0:67:91:83:69:e3:81:fe: 58:3e:34:37:a0:6f:b7:b9:2d:8e:cd:ba:3e:bd:1e: e9:47:c2:15:a2:f8:93:48:fb:8a:0f:c1:c1:2d:9e: db:5a:71:ce:20:51:a3:ef:01:39:34:8d:0d:18:24: a5:15:c1:41:9c:6a:5e:14:7d:8b:cd:6f:8f:cd:46: d1:64:e5:81:a5:d7:d5:c8:43:80:75:f0:c6:eb:2f: 61:f5:f1:75:5c:54:ff:ed:e0:99:28:78:af:5f:75: ed:88:25:2f:c0:40:46:cb:65:3d:67:45:be:11:88: 51:56:bd:dd:ec:2e:13:50:04:b1:38:ca:b5:1a:48: df:ad:72:19:62:57:ef:cd:c8:94:f6:7d:b2:a3:af: 05:ef:ae:b1:81:72:60:6f:91:2e:a8:95:78:a8:08: 0b:f3:92:77:52:07:31:06:29:0e:2e:ab:71:41:06: 4b:19:61:36:a4:75:a6:b9:04:59:5c:ec:1c:90:32: 57:9c:06:30:fb:21:e5:55:7a:23:5e:01:b5:aa:05: 35:7b:5b:05:b8:c6:2b:b8:41:6e:fc:87:c2:5e:5f: 77:db:79:f2:0d:5b:a0:26:74:74:b8:df:cf:d8:50: 37:e3:ff:45:67:80:68:b7:17:10:4d:89:1d:bf:06: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C3:04:B1:EA:89:65:BE:02:A6:EE:E9:00:A1:3C:B6:FB:F5:F9:A4 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c4:4d:7b:72:48:93:53:c4:38:d2:9b:77:99:f0:10:ef:7f: 35:29:90:fa:28:fd:f1:0d:65:1a:96:79:82:9e:60:c2:ae:3c: f5:0a:46:e9:71:a2:ba:e3:eb:15:f1:70:fa:f8:b7:dd:7d:f8: c4:f3:ac:da:42:b7:ff:b0:b9:e4:e5:a8:8c:73:a2:c0:cf:c1: 03:f9:0d:6b:ab:48:47:c0:95:04:93:3b:49:b2:4c:02:a1:cb: 81:9b:7c:20:1b:cc:94:50:cb:96:b2:a1:40:38:03:d2:c1:08: d8:a3:a6:33:90:0f:70:02:45:6d:56:5c:44:ac:ae:32:8a:4e: 27:86:aa:7c:b0:38:72:f6:bf:3f:fd:9b:c3:08:60:65:d4:83: 80:0e:99:48:bd:9a:37:ec:a8:c1:55:54:25:7e:6c:9b:1e:4e: b9:11:49:6e:63:0e:f1:21:d6:6a:29:e3:b3:65:a8:8f:28:89: 62:0e:b8:b6:cc:ba:fd:78:22:d5:72:b9:81:0f:1f:85:fe:ca: e8:af:f5:49:d9:de:8e:fc:5d:f8:83:42:b4:c1:6b:e7:bb:eb: 9f:46:46:f7:b5:c5:fe:38:0c:fd:11:d4:3f:5d:72:01:4c:67: 60:76:0c:9e:2d:8a:ab:a1:1d:31:24:27:72:29:f2:de:1b:12: a5:e6:7c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtPeu1gPBeiMVR15IU4YEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUwNjE0MDcwMTAzWhcNMjUwNjE1MDcwMTAzWjAzMTEwLwYDVQQD EygxYmMzMDRiMWVhODk2NWJlMDJhNmVlZTkwMGExM2NiNmZiZjVmOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUjOoeIP0GeRg2njgf5YPjQ3oG+3 uS2Ozbo+vR7pR8IVoviTSPuKD8HBLZ7bWnHOIFGj7wE5NI0NGCSlFcFBnGpeFH2L zW+PzUbRZOWBpdfVyEOAdfDG6y9h9fF1XFT/7eCZKHivX3XtiCUvwEBGy2U9Z0W+ EYhRVr3d7C4TUASxOMq1GkjfrXIZYlfvzciU9n2yo68F766xgXJgb5EuqJV4qAgL 85J3UgcxBikOLqtxQQZLGWE2pHWmuQRZXOwckDJXnAYw+yHlVXojXgG1qgU1e1sF uMYruEFu/IfCXl9323nyDVugJnR0uN/P2FA34/9FZ4BotxcQTYkdvwYhKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvDBLHqiWW+Aqbu6QChPLb79fmkMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8RNe3JI k1PEONKbd5nwEO9/NSmQ+ij98Q1lGpZ5gp5gwq489QpG6XGiuuPrFfFw+vi33X34 xPOs2kK3/7C55OWojHOiwM/BA/kNa6tIR8CVBJM7SbJMAqHLgZt8IBvMlFDLlrKh QDgD0sEI2KOmM5APcAJFbVZcRKyuMopOJ4aqfLA4cva/P/2bwwhgZdSDgA6ZSL2a N+yowVVUJX5smx5OuRFJbmMO8SHWainjs2WojyiJYg64tsy6/Xgi1XK5gQ8fhf7K 6K/1Sdnejvxd+INCtMFr57vrn0ZG97XF/jgM/RHUP11yAUxnYHYMni2Kq6EdMSQn ciny3hsSpeZ8gw== -----END CERTIFICATE-----Generated at Sat Jun 14 11:51:03 2025 by rpki-client