$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: cCZsizmEYiXWEnBikT9ljtAGNpP62ChyeEJURmJ1RnI= Subject key identifier: B5:F1:80:79:F7:99:CF:3C:1D:EE:60:0A:89:B7:0A:DF:89:EF:1F:1D Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019826D94A2CAB8A8B35997B60946621D1F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 17D8 Signing time: Sun 20 Jul 2025 08:00:31 +0000 Manifest this update: Sun 20 Jul 2025 08:00:31 +0000 Manifest next update: Mon 21 Jul 2025 08:00:31 +0000 Files and hashes: 1: 3cSxaOlRCRqV_UjrirTSav-gPSE.roa (hash: HPCbE1z6//7A2Z4Y2u5Bfj49kqBcmczFKqHL+M0TrsA=) 2: 4vgCB29E8qksUTRT80hibqkfyyc.roa (hash: jmfyWEEY9JnvGnTw4OogSC5Brt6r5w8K86EHD/wwf9A=) 3: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=) 4: 5U7IE4mItmEJQybajMLicoJaq0s.roa (hash: 2OhWR8eCC/upHQ7TL7CEYQrfGqJzxh4sdcmiGXyehnQ=) 5: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=) 6: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=) 7: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=) 8: D0L0LFndzzXtixPyXy6YiMbyR7Q.roa (hash: le65wEoYAgLiuW7LHDLfiJaMqsJkMNtdkgbBI9+aSho=) 9: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=) 10: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=) 11: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=) 12: KtPtCnsNO7KrNH_mi8irxAh2a64.roa (hash: 0X6VJNdKzEQIN2KQI1h+LTGHgQgh9YXQ8FCAd7HKCL4=) 13: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=) 14: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: qUA0Cd5lDOT/ycvlgpNQiNokhcDzg2mxecrnnrRZ85g=) 15: OHtdamk3K8NdLEh-keiR2rSuuSg.roa (hash: qIQbXlJhQUZZHP5a7YOGBONxaoVnF9gndUOU4O5iAEE=) 16: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=) 17: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=) 18: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=) 19: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=) 20: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=) 21: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=) 22: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=) 23: atVw4xeqFsYkbv0YanpMvYj9YJU.roa (hash: 7v09PHKrV9HFGitf9dm+OHYN47o0kgfyg4toCmWYsN4=) 24: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=) 25: ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa (hash: INQh1RPZ3Hg+l39PdTi0B9Y2GnJwgu1gLpokQWLUkWY=) 26: lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa (hash: JgHkOVWJLhXz09JsY8CuxiPcEyyxQ/VY17v428GySkE=) 27: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=) 28: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=) 29: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 06:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:26:d9:4a:2c:ab:8a:8b:35:99:7b:60:94:66:21:d1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jul 20 08:00:31 2025 GMT Not After : Jul 21 08:00:31 2025 GMT Subject: CN=b5f18079f799cf3c1dee600a89b70adf89ef1f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:ad:c2:0b:2a:b2:67:2c:ab:fd:b4:a2:4e: 48:f9:e2:0a:69:3e:92:06:3b:3c:ad:be:3c:c3:20: f6:f5:c8:4d:bf:95:f2:8e:94:44:f2:69:2a:95:04: bc:92:52:a8:3e:85:b5:bb:bf:b0:7e:1a:82:7a:94: f0:9b:14:19:9f:f6:ae:15:7f:f6:d3:3f:a0:2c:3e: 6c:d5:3e:c4:8a:5b:36:1d:98:72:a4:47:05:f9:8c: 32:b5:37:fe:1b:5b:dc:72:a4:48:3a:4b:af:70:e8: 5f:7a:ce:e6:b7:b8:c5:25:a7:4a:62:5b:c0:e1:dc: 3b:ce:20:52:92:df:6a:07:b2:79:55:33:0a:3e:2a: 82:03:24:95:36:bb:6c:8d:f9:0f:29:9a:5f:ec:20: 52:d9:f5:11:55:36:03:82:5d:33:1c:c4:06:8e:b8: eb:8f:24:f2:4b:e1:d4:60:93:8d:f8:4e:09:0f:a2: b5:b6:bd:4a:1d:a1:31:5e:f9:e3:b9:5a:c5:74:dc: 3c:27:6e:b6:ff:f9:77:b1:4e:76:82:bb:05:e6:40: 15:3f:10:0a:2b:b2:2f:bc:01:df:f6:9c:e9:a9:5b: 8c:b3:12:88:c7:c4:bf:10:1c:a1:09:f5:9c:6f:cb: fe:f6:f8:4f:4f:2f:16:09:b6:52:a4:10:94:50:96: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F1:80:79:F7:99:CF:3C:1D:EE:60:0A:89:B7:0A:DF:89:EF:1F:1D X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3e:04:89:b6:68:3e:33:c6:05:97:d5:89:c2:77:81:95:a7: 41:5b:52:4a:e2:bd:ab:5c:62:54:c7:2b:68:87:3f:4e:11:d7: 3c:30:b1:b1:2e:10:a9:47:0e:47:db:6a:f6:81:d3:9c:99:14: 55:ee:c1:07:24:2b:8a:79:39:7e:2a:05:9a:9b:99:f5:50:c9: 20:b4:92:fd:61:e8:1c:b2:af:19:a2:aa:1a:4b:5c:a6:b5:ac: 98:a8:ad:67:76:c9:9b:b1:65:31:39:2b:c0:86:e8:4d:21:b9: 15:3f:65:fc:0b:94:1d:27:2e:94:8a:1a:8b:67:7e:20:b9:cb: c6:d6:02:e6:29:24:1c:9e:c1:81:95:bb:4e:54:3b:01:59:93: c9:da:e1:4e:07:45:18:18:b4:cd:8a:3d:54:c3:0c:df:c3:82: 31:b9:c7:52:04:3f:94:00:fe:e5:20:09:de:0b:0b:96:09:e2: 1c:9b:b6:58:67:79:b7:e1:dc:b5:2a:03:6f:eb:bc:a3:b8:0a: ca:20:69:8f:cc:6d:21:e3:95:c4:c9:31:66:64:f4:c5:c1:dc: fa:45:1d:39:29:61:f8:7a:55:34:d5:50:5b:a2:9a:34:91:4c: 1c:a1:97:81:32:d2:c8:72:7c:25:e2:04:bb:4b:b0:49:ad:6e: a0:06:24:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgm2Uosq4qLNZl7YJRmIdH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjUwNzIwMDgwMDMxWhcNMjUwNzIxMDgwMDMxWjAzMTEwLwYDVQQD EyhiNWYxODA3OWY3OTljZjNjMWRlZTYwMGE4OWI3MGFkZjg5ZWYxZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnutwgsqsmcsq/20ok5I+eIKaT6S Bjs8rb48wyD29chNv5XyjpRE8mkqlQS8klKoPoW1u7+wfhqCepTwmxQZn/auFX/2 0z+gLD5s1T7Eils2HZhypEcF+YwytTf+G1vccqRIOkuvcOhfes7mt7jFJadKYlvA 4dw7ziBSkt9qB7J5VTMKPiqCAySVNrtsjfkPKZpf7CBS2fURVTYDgl0zHMQGjrjr jyTyS+HUYJON+E4JD6K1tr1KHaExXvnjuVrFdNw8J262//l3sU52grsF5kAVPxAK K7IvvAHf9pzpqVuMsxKIx8S/EByhCfWcb8v+9vhPTy8WCbZSpBCUUJaAjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXxgHn3mc88He5gCom3Ct+J7x8dMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoz4EibZo PjPGBZfVicJ3gZWnQVtSSuK9q1xiVMcraIc/ThHXPDCxsS4QqUcOR9tq9oHTnJkU Ve7BByQrink5fioFmpuZ9VDJILSS/WHoHLKvGaKqGktcprWsmKitZ3bJm7FlMTkr wIboTSG5FT9l/AuUHSculIoai2d+ILnLxtYC5ikkHJ7BgZW7TlQ7AVmTydrhTgdF GBi0zYo9VMMM38OCMbnHUgQ/lAD+5SAJ3gsLlgniHJu2WGd5t+HctSoDb+u8o7gK yiBpj8xtIeOVxMkxZmT0xcHc+kUdOSlh+HpVNNVQW6KaNJFMHKGXgTLSyHJ8JeIE u0uwSa1uoAYktA== -----END CERTIFICATE-----Generated at Sun Jul 20 14:15:05 2025 by rpki-client