$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: Rl/b/QFN4jNWUM1iAxRd/uh3+IFJbKtsc5iX7aTgWiM= Subject key identifier: 4D:DC:7B:13:A3:DC:4E:6C:76:49:E8:BA:F3:0C:A7:57:9C:B9:77:1B Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 01984588901FAD5538AB82416A003D68B47D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 14FD Signing time: Sat 26 Jul 2025 07:00:34 +0000 Manifest this update: Sat 26 Jul 2025 07:00:34 +0000 Manifest next update: Sun 27 Jul 2025 07:00:34 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 4: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: XJiHTzSW5aZFVMtrkreJN9TF2qenDaRq+jivwFzRnA4=) 6: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 7: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 8: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 9: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=) 10: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:45:88:90:1f:ad:55:38:ab:82:41:6a:00:3d:68:b4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jul 26 07:00:34 2025 GMT Not After : Jul 27 07:00:34 2025 GMT Subject: CN=4ddc7b13a3dc4e6c7649e8baf30ca7579cb9771b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:46:5f:f9:fb:fd:04:28:da:4e:0b:6c:68:1f: 34:06:d6:6d:a8:98:6d:4d:88:fe:73:1b:2a:68:bd: 55:f8:9d:e7:09:4f:00:32:c6:fe:25:2f:b1:8e:04: 19:54:1c:2b:35:05:de:c0:37:80:ac:f0:b8:3b:85: 45:42:69:85:a4:51:d8:42:1a:c4:84:75:93:50:29: 3b:d1:fe:d2:f4:20:83:8a:a8:dc:29:c0:b3:ca:ce: 9e:b7:51:a5:2c:70:d0:82:c0:6f:8d:53:5c:7f:fe: a0:f1:f9:f0:88:7b:cd:79:5a:64:4d:ac:73:74:be: 06:62:cb:74:59:90:03:16:05:7a:6f:ea:4b:8b:f8: 10:97:06:aa:90:09:94:97:8f:c1:c5:dd:c2:98:0c: f5:75:7b:65:a0:9c:15:64:3c:1d:60:59:fb:6a:75: ca:b3:ed:58:26:25:ea:32:d6:63:3d:ed:61:0b:e6: 2d:72:a1:d3:32:27:6a:d8:4e:9f:12:1f:4d:3b:62: 1a:9f:9f:a2:ef:8f:ab:2c:2a:f7:3c:79:4d:db:b1: bb:4e:8a:4b:34:d2:64:d4:c3:f3:c2:bb:8a:5a:f3: 6d:ed:a9:b0:1c:25:31:85:b4:6d:9e:62:8a:b6:b7: 89:7d:90:53:1c:5a:29:05:3f:bd:eb:49:ef:b9:7d: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DC:7B:13:A3:DC:4E:6C:76:49:E8:BA:F3:0C:A7:57:9C:B9:77:1B X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:9c:68:42:5a:07:eb:4a:23:b5:c0:26:50:a4:0b:55:bf:76: 01:07:3a:73:06:40:a2:91:1f:6a:96:05:79:46:36:c7:49:f2: 94:7d:80:bc:51:31:eb:8c:8e:9c:9b:ff:49:91:7f:f6:8f:2d: cd:97:b2:f6:4d:fd:db:4f:7e:c3:59:23:18:4e:52:4a:7e:75: e6:30:7c:06:e5:2e:ab:bb:3f:41:0d:ab:fa:0e:39:6b:be:ba: 5d:50:81:c5:cc:90:f1:64:86:75:4b:96:11:d2:de:aa:06:6b: 19:0c:63:bc:14:4d:1e:25:d3:ef:87:79:e8:eb:4e:ec:15:5f: a6:18:97:84:8a:38:ad:fb:eb:bf:f6:96:c8:86:25:aa:31:69: 1e:c1:50:dc:81:73:83:53:7d:1d:07:c5:cb:92:b8:06:dd:cf: 7f:f8:cf:55:f3:dd:cc:d1:d1:c7:be:02:54:9c:43:a7:28:8b: c2:a0:42:b8:46:24:7f:fe:3c:d5:9b:8d:cd:2a:d5:46:a9:56: 64:65:db:26:2f:a8:80:1a:d3:af:d6:3a:f1:a6:ff:a4:eb:33: 75:48:7c:4f:20:b2:31:b1:70:54:6b:89:7d:1b:15:b1:d4:10: e8:91:8f:ba:ee:f3:84:95:3f:de:48:a1:64:5d:95:4f:b7:a9: 5d:9b:49:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhFiJAfrVU4q4JBagA9aLR9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUwNzI2MDcwMDM0WhcNMjUwNzI3MDcwMDM0WjAzMTEwLwYDVQQD Eyg0ZGRjN2IxM2EzZGM0ZTZjNzY0OWU4YmFmMzBjYTc1NzljYjk3NzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEZf+fv9BCjaTgtsaB80BtZtqJht TYj+cxsqaL1V+J3nCU8AMsb+JS+xjgQZVBwrNQXewDeArPC4O4VFQmmFpFHYQhrE hHWTUCk70f7S9CCDiqjcKcCzys6et1GlLHDQgsBvjVNcf/6g8fnwiHvNeVpkTaxz dL4GYst0WZADFgV6b+pLi/gQlwaqkAmUl4/Bxd3CmAz1dXtloJwVZDwdYFn7anXK s+1YJiXqMtZjPe1hC+YtcqHTMidq2E6fEh9NO2Ian5+i74+rLCr3PHlN27G7TopL NNJk1MPzwruKWvNt7amwHCUxhbRtnmKKtreJfZBTHFopBT+960nvuX1QgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3cexOj3E5sdknouvMMp1ecuXcbMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpxoQloH 60ojtcAmUKQLVb92AQc6cwZAopEfapYFeUY2x0nylH2AvFEx64yOnJv/SZF/9o8t zZey9k39209+w1kjGE5SSn515jB8BuUuq7s/QQ2r+g45a766XVCBxcyQ8WSGdUuW EdLeqgZrGQxjvBRNHiXT74d56OtO7BVfphiXhIo4rfvrv/aWyIYlqjFpHsFQ3IFz g1N9HQfFy5K4Bt3Pf/jPVfPdzNHRx74CVJxDpyiLwqBCuEYkf/481ZuNzSrVRqlW ZGXbJi+ogBrTr9Y68ab/pOszdUh8TyCyMbFwVGuJfRsVsdQQ6JGPuu7zhJU/3kih ZF2VT7epXZtJcg== -----END CERTIFICATE-----Generated at Sat Jul 26 14:51:42 2025 by rpki-client