$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: flIfq9P8Yf8FOTxeQ3aud67ZSGnlZjPgI7uN/ABIHTc= Subject key identifier: DE:2A:92:0B:FB:AA:9D:84:99:4B:36:71:64:F4:58:8F:A1:25:3D:9F Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019875D115EAD02A1B14302BAE38620FDA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1516 Signing time: Mon 04 Aug 2025 16:01:33 +0000 Manifest this update: Mon 04 Aug 2025 16:01:33 +0000 Manifest next update: Tue 05 Aug 2025 16:01:33 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 4: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: vPHRssQYOMOdJMQ+Wrw9mZwWPE6sNeyNCksVeOA5Y2Y=) 6: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 7: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 8: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 9: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=) 10: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:75:d1:15:ea:d0:2a:1b:14:30:2b:ae:38:62:0f:da:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Aug 4 16:01:33 2025 GMT Not After : Aug 5 16:01:33 2025 GMT Subject: CN=de2a920bfbaa9d84994b367164f4588fa1253d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:7f:5c:d2:30:88:11:3f:92:bf:8c:4b:05: 9a:ad:38:6b:bb:6e:89:8e:75:41:23:4f:78:74:16: f7:31:f4:ae:ad:be:53:f8:f2:fa:5d:13:1e:cd:d8: 10:e8:11:ab:ac:84:cf:54:db:2b:f3:33:d3:b1:a4: 12:21:bd:ea:23:5c:ba:f2:fe:26:e0:8f:06:0d:ff: 94:84:9c:f2:ba:2c:da:14:59:63:25:e5:32:c0:af: 18:25:1b:4e:d3:f8:01:e7:a5:72:ad:b3:30:96:6d: 37:c8:32:21:63:f0:3d:eb:16:3c:86:b5:87:8a:0b: 30:9f:f1:c0:c5:ca:8a:dc:30:9c:56:d9:66:bd:ec: 06:c7:bf:02:2c:43:75:13:77:e5:21:63:59:d0:d4: 60:fb:ac:77:30:2a:70:29:d4:49:a5:f1:ac:db:ec: a4:5f:f6:15:d1:77:1c:b5:3f:17:18:a4:e4:e9:10: 10:45:6f:29:56:9d:e4:29:08:d1:fc:6d:9e:5e:e0: f4:58:8c:0c:5a:da:a8:09:18:fb:1a:c7:d1:98:76: d6:ea:73:ca:a5:5d:fc:4c:cf:73:d5:5c:49:8f:e6: 12:35:a5:31:0e:cb:90:f8:61:7e:6d:64:f4:4c:47: 80:fb:3d:79:1b:11:5e:22:16:8e:ca:22:70:2f:04: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2A:92:0B:FB:AA:9D:84:99:4B:36:71:64:F4:58:8F:A1:25:3D:9F X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:84:5c:d3:46:8b:c4:b3:7c:5b:6c:d7:54:d2:0a:b0:da:c0: 3e:c4:da:2d:06:67:ed:ea:e8:2d:0b:ef:05:9b:8b:51:1b:b4: b9:f0:38:b6:f1:7f:0c:bc:0d:cd:10:72:8f:03:e6:68:bc:ef: fd:61:36:73:67:3b:bb:5d:24:f2:e7:c9:18:32:db:33:87:d7: 13:e8:05:fa:89:a8:13:cb:ed:66:1b:3a:be:23:c5:b2:49:93: b7:aa:d6:fa:68:0c:6e:f4:75:b7:1e:19:1e:6c:14:ff:fc:fc: 01:db:df:ae:35:88:c5:9b:fc:20:6c:27:f0:3f:d5:99:20:f8: ce:47:3b:fb:a6:72:30:ea:9a:fa:60:e6:56:f1:f7:10:6b:0e: 59:30:73:e2:71:ce:76:07:af:f0:ab:0e:16:43:c2:59:1e:9d: df:19:92:cd:fb:6d:be:f5:fb:26:f4:85:85:ef:cc:ca:67:d2: 80:0e:ec:6d:2c:31:01:51:66:c5:83:55:7b:61:54:af:52:31: cc:67:50:92:fb:7f:28:23:f0:45:43:f0:b7:bc:21:a1:c7:53: 2f:ef:b2:fa:af:1d:89:d9:b1:5d:92:d8:1a:64:66:44:96:0a: 81:05:f3:06:25:db:f6:a2:b2:c2:e9:8c:a4:6b:d8:52:2c:15: 4c:69:06:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh10RXq0CobFDArrjhiD9qPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUwODA0MTYwMTMzWhcNMjUwODA1MTYwMTMzWjAzMTEwLwYDVQQD EyhkZTJhOTIwYmZiYWE5ZDg0OTk0YjM2NzE2NGY0NTg4ZmExMjUzZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw91/XNIwiBE/kr+MSwWarThru26J jnVBI094dBb3MfSurb5T+PL6XRMezdgQ6BGrrITPVNsr8zPTsaQSIb3qI1y68v4m 4I8GDf+UhJzyuizaFFljJeUywK8YJRtO0/gB56VyrbMwlm03yDIhY/A96xY8hrWH igswn/HAxcqK3DCcVtlmvewGx78CLEN1E3flIWNZ0NRg+6x3MCpwKdRJpfGs2+yk X/YV0XcctT8XGKTk6RAQRW8pVp3kKQjR/G2eXuD0WIwMWtqoCRj7GsfRmHbW6nPK pV38TM9z1VxJj+YSNaUxDsuQ+GF+bWT0TEeA+z15GxFeIhaOyiJwLwS+BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4qkgv7qp2EmUs2cWT0WI+hJT2fMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYRc00aL xLN8W2zXVNIKsNrAPsTaLQZn7eroLQvvBZuLURu0ufA4tvF/DLwNzRByjwPmaLzv /WE2c2c7u10k8ufJGDLbM4fXE+gF+omoE8vtZhs6viPFskmTt6rW+mgMbvR1tx4Z HmwU//z8AdvfrjWIxZv8IGwn8D/VmSD4zkc7+6ZyMOqa+mDmVvH3EGsOWTBz4nHO dgev8KsOFkPCWR6d3xmSzfttvvX7JvSFhe/MymfSgA7sbSwxAVFmxYNVe2FUr1Ix zGdQkvt/KCPwRUPwt7whocdTL++y+q8didmxXZLYGmRmRJYKgQXzBiXb9qKywumM pGvYUiwVTGkGaA== -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:23 2025 by rpki-client