$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: vErPVrq8ne47UdZBETjUsowiGkn8MLOfhT2m6a4M67w= Subject key identifier: CE:12:D0:1A:BB:7D:89:C0:59:D3:A8:62:47:5E:0A:7C:28:BD:7F:47 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 0198277E50D1893B86202F304486DFAD5042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 132E Signing time: Sun 20 Jul 2025 11:00:46 +0000 Manifest this update: Sun 20 Jul 2025 11:00:46 +0000 Manifest next update: Mon 21 Jul 2025 11:00:46 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: AhtJkdbEUjlkoib8D/W7MAo5tB1PZrr9E0PsIbV5ho8=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:7e:50:d1:89:3b:86:20:2f:30:44:86:df:ad:50:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jul 20 11:00:46 2025 GMT Not After : Jul 21 11:00:46 2025 GMT Subject: CN=ce12d01abb7d89c059d3a862475e0a7c28bd7f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:3b:35:f7:36:a4:78:e1:da:10:93:0a:e5: 0d:7f:33:de:20:6c:de:26:31:19:6f:2b:0f:6d:ec: 13:b3:97:10:1e:38:4c:13:2b:2a:3c:bd:38:a7:a7: a4:83:b3:57:44:63:bd:db:0e:29:f8:0a:c5:0c:6c: 32:14:47:3f:f2:5c:ef:bf:a2:f5:ea:8a:53:34:ea: be:13:cb:17:2d:b8:ac:ab:c2:10:ed:05:c0:8f:97: 10:48:dd:88:f2:6d:89:b6:1f:b7:a9:44:7e:22:3c: e8:ba:ee:60:62:3b:5b:b2:16:0a:75:9e:36:21:bf: 67:ba:95:63:02:70:b9:d6:38:92:19:65:8c:b8:f7: 57:57:3c:a9:58:2f:5b:a7:c5:3e:cc:3e:61:5e:30: eb:4f:4c:d2:e8:de:54:d9:c1:f2:88:89:a9:60:4a: ce:79:9c:2a:67:32:8d:c3:90:66:9a:e5:56:c8:ef: a8:bd:95:9c:8f:f8:72:ed:12:df:45:90:a4:89:58: 66:73:31:e7:0d:6e:04:54:c6:28:62:f3:95:e2:10: 2a:b9:aa:61:9c:5d:e0:a5:9e:9c:86:bf:d3:12:a2: 08:58:2f:da:5b:b4:4e:a7:7c:f2:8e:13:83:d8:f4: a2:45:44:53:af:d2:89:d6:a8:18:84:35:2d:bb:f7: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:12:D0:1A:BB:7D:89:C0:59:D3:A8:62:47:5E:0A:7C:28:BD:7F:47 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3b:09:40:2b:34:b7:08:55:7c:b6:6e:b5:e5:65:e6:84:d2: 58:9a:21:29:b5:98:70:11:99:e5:46:09:9c:40:00:5c:4f:d5: 3e:bc:04:f9:05:f5:ad:17:ab:09:75:aa:eb:f8:b3:04:d2:69: b1:d3:0f:be:e2:1a:09:18:e0:0f:fb:b5:a6:59:fd:d1:84:f4: 9b:30:e6:75:57:66:b1:ee:5e:f5:a0:4d:ca:6b:0f:a7:61:79: 7c:0b:06:04:c8:06:3d:ef:6b:bc:84:d7:d9:30:c6:f5:cb:f5: 55:e8:e0:03:25:a1:76:bc:66:32:44:70:90:d1:50:3b:b3:df: d8:18:d7:08:9c:eb:43:5f:af:01:3f:99:04:a3:51:59:55:fb: a1:6c:ec:dd:59:7a:dc:fe:7c:9b:00:47:94:2d:51:21:36:59: d0:12:d5:42:6c:2f:13:da:35:b3:34:e7:15:ed:2f:7a:17:77: b0:f4:58:ad:b4:df:cf:db:db:c5:9f:6a:5d:60:8f:cb:17:35: 35:3c:26:0c:6f:32:0b:c7:44:53:b5:ef:53:a0:43:38:f7:70: c1:7b:79:a3:b5:e3:6a:bf:0d:42:dd:e9:8c:d6:dd:e3:46:21: 5a:af:4c:85:7b:2f:aa:5a:f8:c7:71:b2:b7:89:27:59:74:cb: 69:a6:89:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgnflDRiTuGIC8wRIbfrVBCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUwNzIwMTEwMDQ2WhcNMjUwNzIxMTEwMDQ2WjAzMTEwLwYDVQQD EyhjZTEyZDAxYWJiN2Q4OWMwNTlkM2E4NjI0NzVlMGE3YzI4YmQ3ZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRg7Nfc2pHjh2hCTCuUNfzPeIGze JjEZbysPbewTs5cQHjhMEysqPL04p6ekg7NXRGO92w4p+ArFDGwyFEc/8lzvv6L1 6opTNOq+E8sXLbisq8IQ7QXAj5cQSN2I8m2Jth+3qUR+Ijzouu5gYjtbshYKdZ42 Ib9nupVjAnC51jiSGWWMuPdXVzypWC9bp8U+zD5hXjDrT0zS6N5U2cHyiImpYErO eZwqZzKNw5BmmuVWyO+ovZWcj/hy7RLfRZCkiVhmczHnDW4EVMYoYvOV4hAquaph nF3gpZ6chr/TEqIIWC/aW7ROp3zyjhOD2PSiRURTr9KJ1qgYhDUtu/dteQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4S0Bq7fYnAWdOoYkdeCnwovX9HMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDsJQCs0 twhVfLZuteVl5oTSWJohKbWYcBGZ5UYJnEAAXE/VPrwE+QX1rRerCXWq6/izBNJp sdMPvuIaCRjgD/u1pln90YT0mzDmdVdmse5e9aBNymsPp2F5fAsGBMgGPe9rvITX 2TDG9cv1VejgAyWhdrxmMkRwkNFQO7Pf2BjXCJzrQ1+vAT+ZBKNRWVX7oWzs3Vl6 3P58mwBHlC1RITZZ0BLVQmwvE9o1szTnFe0vehd3sPRYrbTfz9vbxZ9qXWCPyxc1 NTwmDG8yC8dEU7XvU6BDOPdwwXt5o7Xjar8NQt3pjNbd40YhWq9MhXsvqlr4x3Gy t4knWXTLaaaJnw== -----END CERTIFICATE-----Generated at Sun Jul 20 21:21:09 2025 by rpki-client