$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: 5tloGo8KWfVFOtapMWzGyyFr8fI1cN99DtH2wyC6vp4= Subject key identifier: 9F:38:38:BF:06:3F:A0:77:65:B8:DF:7B:03:06:9B:75:F4:F3:17:ED Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019827B560220DD1403F70D1486FEA82A0A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 1619 Signing time: Sun 20 Jul 2025 12:00:54 +0000 Manifest this update: Sun 20 Jul 2025 12:00:54 +0000 Manifest next update: Mon 21 Jul 2025 12:00:54 +0000 Files and hashes: 1: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=) 2: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=) 3: F7JXtoqYAnfTjuecjcOTuo1qCkw.roa (hash: OEFPqG5xW1fNzTGExyHBZVtQ+HvaVdHh6rDRxCBiNXc=) 4: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=) 5: IMZsLst-i3zLkfnvqryos4hVmUw.roa (hash: i5YfMzxIGSy0m8WqoPL2plr7dDe0Vlfs7aCvCgRQqk8=) 6: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=) 7: JLwtTQi8VNVHhaVDu0kN5D34KjI.roa (hash: 8veoK+i1W9Fs1rw5NS+3eYVP4YbxUV5xVG3SSE+qpqo=) 8: LWbif0B1GjIE18I7vwELt-c9l-w.roa (hash: d8IrvYkKiZyuhb8k6fQb7RXqEUdNoQvoKy7SfXCWzdQ=) 9: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=) 10: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: hae5ArxC+f+NyX6lHXy8zSMzduqUhduX/C1T+jMcCho=) 11: RT2actreI4xxkte646TUz02XjFQ.roa (hash: Wy64shTeipgQtErWNwSOYTNCSt9UxR/a78WDAuspKQ4=) 12: V9Ig1pXUbN50LMFOuKXdZ5mkCig.roa (hash: y87CF5Ma433/41wTDv6chywUFnZfYbGNq95lOWwWnTA=) 13: bpV8b7AtbhXdGFm5LUSeu0J87Js.roa (hash: dlLYGpRMWUx9YdT08Q5m5VPvbiMJH/5+liPq9p5+8YQ=) 14: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=) 15: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=) 16: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=) 17: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=) 18: mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa (hash: Ly2x9jR74YwOV4U+ROUU4l7SCpCPjv3zvv96qJ1in/E=) 19: nPqUpg1aR7hnc6HTlLtA9BuMCTE.roa (hash: KwhXJO05kwAc7WcWDrPEDKsnvptXZGJFAiZEMHkerdU=) 20: nfdXz1IG7b_z6nn3ZM-dFbFrj0o.roa (hash: 16xUnfqni5W44fEXrAqCEswn3RFCkRKYxijUqdQX43o=) 21: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=) 22: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=) 23: zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa (hash: 1zSkkqDH7rhfTGP6CblxxApp8yosaiHxrLIiFpb9d40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Jul 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:27:b5:60:22:0d:d1:40:3f:70:d1:48:6f:ea:82:a0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jul 20 12:00:54 2025 GMT Not After : Jul 21 12:00:54 2025 GMT Subject: CN=9f3838bf063fa07765b8df7b03069b75f4f317ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:23:4a:cd:39:44:e3:eb:9e:1b:98:aa:61: f6:1c:ef:69:fe:59:08:c3:5e:bb:56:72:57:c2:99: 33:83:22:bf:f6:e0:91:f4:62:3c:6a:0d:f8:ca:71: 88:08:14:3f:8d:ce:df:58:27:1e:92:ff:61:d1:76: 59:f6:56:62:53:23:64:ff:a5:ae:fe:02:46:63:0f: 38:d4:6f:6e:0d:51:16:c6:5d:84:74:61:3f:99:6a: a9:d0:73:11:a1:c1:ea:db:e4:6e:86:a4:7d:34:a5: 0f:4f:88:68:d8:8a:42:0b:f7:73:ae:76:49:73:73: 6e:66:9a:68:76:ba:2d:f5:d4:14:8d:2c:dc:5a:4f: 4b:52:d1:d2:5e:96:ab:37:00:de:b6:ed:fd:61:1a: 3e:ba:31:19:15:3d:7b:a2:de:47:d9:78:dd:9f:7f: 23:ad:23:6d:14:58:91:5e:fb:60:46:d1:12:af:e4: 80:b4:7f:b4:48:03:c4:ed:41:59:5f:2a:95:8e:b6: 64:e9:48:1f:9e:8d:09:95:de:c2:29:de:70:d1:52: 29:99:9a:20:90:a4:10:2a:5b:8b:fa:79:c8:a8:87: 39:72:b2:7f:10:3e:f7:c7:b1:10:76:22:8b:ba:c8: d3:8a:76:8b:e0:d5:25:3b:80:8f:c1:77:bc:35:d4: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:38:38:BF:06:3F:A0:77:65:B8:DF:7B:03:06:9B:75:F4:F3:17:ED X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2a:ed:5c:26:82:85:e7:43:b5:48:c1:1e:26:b9:a3:09:82: a4:cb:da:37:5f:43:bd:8b:87:96:33:1d:90:49:95:4d:c7:44: af:6e:2d:4f:27:f4:d3:78:60:eb:5f:d7:ce:5e:7a:25:1d:e9: e3:bc:f3:7a:15:6f:fe:ea:94:e2:f3:e9:53:f8:35:bd:54:dc: d4:54:99:07:ca:62:3e:ea:50:3d:28:6e:bf:18:b8:fe:22:24: 82:01:d4:18:d4:db:19:6a:0d:c0:f1:5d:e1:cc:84:cd:a5:ca: f2:4c:c8:fc:39:ad:8f:03:7b:3a:f5:0b:c1:28:69:37:fc:1a: 23:58:4e:c1:48:be:ad:8b:47:fe:e9:a5:52:c1:a7:1d:3a:c2: e6:1c:e9:84:2d:0b:8a:ff:9c:0f:96:f6:15:b9:87:a4:0e:f4: 5d:7b:07:13:f6:15:f1:07:24:25:28:dc:83:b7:ba:27:ed:3c: d1:80:76:7a:6b:17:22:67:71:c9:f1:b2:94:5d:fa:41:62:a1: 60:94:c3:cf:33:e1:ae:95:e9:d9:4f:07:d5:72:51:8c:bf:8b: 4c:08:e3:db:8d:df:62:02:26:42:3a:53:bb:b4:4b:b6:b2:05: 2b:a5:fb:b2:6e:78:3c:6d:8b:38:84:eb:eb:bc:c7:36:de:02: c1:35:bd:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZgntWAiDdFAP3DRSG/qgqCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjUwNzIwMTIwMDU0WhcNMjUwNzIxMTIwMDU0WjAzMTEwLwYDVQQD Eyg5ZjM4MzhiZjA2M2ZhMDc3NjViOGRmN2IwMzA2OWI3NWY0ZjMxN2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6ojSs05ROPrnhuYqmH2HO9p/lkI w167VnJXwpkzgyK/9uCR9GI8ag34ynGICBQ/jc7fWCcekv9h0XZZ9lZiUyNk/6Wu /gJGYw841G9uDVEWxl2EdGE/mWqp0HMRocHq2+RuhqR9NKUPT4ho2IpCC/dzrnZJ c3NuZppodrot9dQUjSzcWk9LUtHSXparNwDetu39YRo+ujEZFT17ot5H2Xjdn38j rSNtFFiRXvtgRtESr+SAtH+0SAPE7UFZXyqVjrZk6Ugfno0Jld7CKd5w0VIpmZog kKQQKluL+nnIqIc5crJ/ED73x7EQdiKLusjTinaL4NUlO4CPwXe8NdRQrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ84OL8GP6B3ZbjfewMGm3X08xftMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACrtXCaC hedDtUjBHia5owmCpMvaN19DvYuHljMdkEmVTcdEr24tTyf003hg61/Xzl56JR3p 47zzehVv/uqU4vPpU/g1vVTc1FSZB8piPupQPShuvxi4/iIkggHUGNTbGWoNwPFd 4cyEzaXK8kzI/DmtjwN7OvULwShpN/waI1hOwUi+rYtH/umlUsGnHTrC5hzphC0L iv+cD5b2FbmHpA70XXsHE/YV8QckJSjcg7e6J+080YB2emsXImdxyfGylF36QWKh YJTDzzPhrpXp2U8H1XJRjL+LTAjj243fYgImQjpTu7RLtrIFK6X7sm54PG2LOITr 67zHNt4CwTW9Fw== -----END CERTIFICATE-----Generated at Sun Jul 20 16:31:45 2025 by rpki-client