$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: cm8ymu1mgPMo0nU61w+TQTW/HJjAmGX3uhxuiaQRZMM= Subject key identifier: E2:1A:12:ED:FD:3F:EE:61:2C:D9:23:58:CC:71:14:58:47:F0:4C:02 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 01983984229F1CAE617EB9AA07ED1CE08EEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 1609 Signing time: Wed 23 Jul 2025 23:00:17 +0000 Manifest this update: Wed 23 Jul 2025 23:00:17 +0000 Manifest next update: Thu 24 Jul 2025 23:00:17 +0000 Files and hashes: 1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: bnWxGP0Plbh5iofRyYpJ/cccoXLI5kb2r7whg9UiWqo=) 5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:39:84:22:9f:1c:ae:61:7e:b9:aa:07:ed:1c:e0:8e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Jul 23 23:00:17 2025 GMT Not After : Jul 24 23:00:17 2025 GMT Subject: CN=e21a12edfd3fee612cd92358cc71145847f04c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:ce:9c:e5:37:6e:45:ef:fa:b0:81:34:c0: fc:ad:48:3d:6c:d7:8a:33:e8:01:04:77:b8:58:5e: ad:29:34:87:08:cc:4d:94:af:7a:88:9d:16:19:bd: 9f:69:65:d9:47:f8:bb:a5:2e:68:ca:e2:f8:94:5d: 3a:18:97:bf:f7:ab:52:12:6a:4a:42:0e:aa:c8:fa: 89:6a:73:a5:bc:fa:cc:a9:f2:a2:e5:7e:cd:7c:ad: 51:9c:58:97:fd:57:9a:94:0a:27:e3:7d:fc:ac:bf: c5:b1:da:aa:76:43:15:58:08:a0:56:e3:ee:d6:58: 4b:65:82:ef:7f:8e:85:c9:43:55:4a:f9:86:27:df: fc:44:ad:4b:f6:50:25:7b:b2:bb:ea:ce:7c:5e:b2: 9f:79:ef:e1:6b:30:46:1a:5a:84:37:3d:20:47:8c: 79:63:53:d3:fe:a4:5c:24:49:dd:ac:bc:66:91:de: 76:13:b5:e5:12:c0:8e:4b:66:7d:56:df:c1:66:b7: d4:6c:a6:5b:f4:0e:45:ae:86:84:99:b3:b3:51:6b: cc:6a:fb:13:f7:01:99:4a:68:87:e8:b0:83:f2:11: 5a:3d:8d:ea:ef:63:d3:e8:f9:6e:e6:06:06:95:9d: 56:07:0d:14:ca:14:3d:b6:58:7b:70:2e:f7:83:eb: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:12:ED:FD:3F:EE:61:2C:D9:23:58:CC:71:14:58:47:F0:4C:02 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:05:81:66:cf:a1:f8:ca:34:1d:4b:6a:7c:d3:62:9b:0b:26: 87:e4:61:32:d1:47:e4:76:c1:61:b4:70:c6:d9:10:6c:0a:78: 4c:c9:44:02:1b:64:f8:1b:ad:92:11:d2:86:cb:b2:c0:93:a1: 1d:c7:99:d1:17:dd:6c:50:38:aa:76:04:c4:23:39:59:cb:58: 51:98:26:50:68:4c:32:5d:41:80:38:a1:8b:6b:58:0f:e0:cd: 1f:87:b5:50:ac:88:42:da:5b:e5:6b:f7:df:a1:cd:66:ba:cd: ff:ab:4b:ee:0f:2f:99:cb:bf:1b:af:b4:d1:07:61:d3:4e:6f: cf:ba:94:a6:2c:77:65:be:ec:21:14:9b:b2:41:d2:c9:1c:f8: 22:49:ab:8f:e9:5f:e9:c2:1c:58:bb:7b:41:73:32:f3:ac:7a: 4c:9e:61:90:90:d3:4c:75:e9:de:c2:02:d8:e1:3c:a5:6b:44: cb:0f:e4:db:cc:e8:47:b4:33:f3:bc:38:61:6f:a0:5b:55:cf: 3c:b5:bb:96:55:46:66:cc:ae:ca:e9:07:04:8c:81:89:ca:10: 68:17:35:5c:50:bf:38:19:15:70:a7:b1:3f:b9:f7:89:45:90: e0:9e:5a:af:60:2f:18:be:2e:cf:d7:57:f1:46:ac:f5:a8:96: 51:a1:42:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg5hCKfHK5hfrmqB+0c4I7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwNzIzMjMwMDE3WhcNMjUwNzI0MjMwMDE3WjAzMTEwLwYDVQQD EyhlMjFhMTJlZGZkM2ZlZTYxMmNkOTIzNThjYzcxMTQ1ODQ3ZjA0YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0rOnOU3bkXv+rCBNMD8rUg9bNeK M+gBBHe4WF6tKTSHCMxNlK96iJ0WGb2faWXZR/i7pS5oyuL4lF06GJe/96tSEmpK Qg6qyPqJanOlvPrMqfKi5X7NfK1RnFiX/VealAon4338rL/FsdqqdkMVWAigVuPu 1lhLZYLvf46FyUNVSvmGJ9/8RK1L9lAle7K76s58XrKfee/hazBGGlqENz0gR4x5 Y1PT/qRcJEndrLxmkd52E7XlEsCOS2Z9Vt/BZrfUbKZb9A5FroaEmbOzUWvMavsT 9wGZSmiH6LCD8hFaPY3q72PT6Plu5gYGlZ1WBw0UyhQ9tlh7cC73g+tgVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIaEu39P+5hLNkjWMxxFFhH8EwCMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAWBZs+h +Mo0HUtqfNNimwsmh+RhMtFH5HbBYbRwxtkQbAp4TMlEAhtk+ButkhHShsuywJOh HceZ0RfdbFA4qnYExCM5WctYUZgmUGhMMl1BgDihi2tYD+DNH4e1UKyIQtpb5Wv3 36HNZrrN/6tL7g8vmcu/G6+00Qdh005vz7qUpix3Zb7sIRSbskHSyRz4Ikmrj+lf 6cIcWLt7QXMy86x6TJ5hkJDTTHXp3sIC2OE8pWtEyw/k28zoR7Qz87w4YW+gW1XP PLW7llVGZsyuyukHBIyBicoQaBc1XFC/OBkVcKexP7n3iUWQ4J5ar2AvGL4uz9dX 8Uas9aiWUaFCWg== -----END CERTIFICATE-----Generated at Thu Jul 24 03:26:38 2025 by rpki-client