$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: b9Y+qxM+hJcoyBIKDo2T/jIGlNL+vH86LhkPww1+hfc= Subject key identifier: 43:0C:E0:4B:B2:E2:57:8D:18:2A:26:BF:D1:C5:3C:2D:CA:A2:BD:24 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019836BA5078046BB6008421FDD80355E0CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 1606 Signing time: Wed 23 Jul 2025 10:00:36 +0000 Manifest this update: Wed 23 Jul 2025 10:00:36 +0000 Manifest next update: Thu 24 Jul 2025 10:00:36 +0000 Files and hashes: 1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=) 2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=) 3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=) 4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=) 5: GrCJk2XTvFQ1bFg3LeF86Dm0kMU.roa (hash: //aHWa+QTi3TqyDc0NocuZ54Ser38N49WnMxWn6LdwE=) 6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: v3VxrZfJ8IhAycja37NMT7NAS0XGIq4k8rjHMV8uxOI=) 7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=) 8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=) 9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=) 10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=) 11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=) 12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=) 13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=) 14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=) 15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=) 16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=) 17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Jul 2025 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:36:ba:50:78:04:6b:b6:00:84:21:fd:d8:03:55:e0:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jul 23 10:00:36 2025 GMT Not After : Jul 24 10:00:36 2025 GMT Subject: CN=430ce04bb2e2578d182a26bfd1c53c2dcaa2bd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:6d:46:18:5d:d9:79:c7:6d:c8:c6:44:ca: 85:a3:7f:7a:e9:92:a8:d6:0d:02:7b:72:3e:ce:d0: 97:2a:0f:df:59:ad:8a:09:19:8f:ad:5c:32:ee:ec: 8f:a3:91:1c:f3:2f:22:ab:2c:4e:48:3a:a5:2e:51: ab:97:6b:1b:09:52:c1:1a:ef:d7:c4:97:08:e4:c2: 28:df:4a:57:fd:0c:1f:5d:fd:54:dd:a8:c7:f6:ef: 72:c8:a8:b4:ff:66:33:da:62:d2:82:c0:8a:5c:69: 61:d9:24:8c:ec:b4:3b:78:e8:62:6a:9d:0f:f7:6e: 77:d2:ed:c5:e0:d5:20:86:b1:c0:a4:bb:fd:d1:c4: e7:7f:93:dd:13:cf:ca:09:30:37:bc:dd:e0:be:68: 68:28:fd:7a:8e:7e:ce:18:14:8a:6a:74:f4:d0:54: b3:a4:9b:bf:6c:2d:b1:5a:ba:2e:b5:f8:d2:66:39: 67:3c:7f:82:fb:69:e5:a8:3b:12:4d:f8:0d:3d:ba: 94:5c:74:ea:c3:fc:25:09:be:c6:de:48:7f:19:dd: ae:b3:58:f1:ad:72:ac:bf:62:bd:60:23:74:3d:a6: ff:53:b4:80:17:50:e6:c1:c8:fd:9d:3d:a0:69:73: 5a:57:05:1f:68:a3:9f:5f:e5:fa:cf:aa:f5:b6:5a: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0C:E0:4B:B2:E2:57:8D:18:2A:26:BF:D1:C5:3C:2D:CA:A2:BD:24 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ca:9c:71:2b:26:db:79:17:c5:eb:67:8c:31:93:38:ce:d3: 1d:02:ec:ad:16:9f:2b:e8:f1:94:a9:dd:70:64:e3:db:8b:62: f1:e6:15:8e:0e:1b:c1:36:37:42:df:66:60:ae:ef:0a:ac:76: ba:e2:55:4b:f2:3c:45:fd:3c:e2:22:66:8f:3d:b9:6e:25:c2: c4:ba:32:3e:6f:bc:07:02:c5:fa:62:1b:a5:de:38:f0:50:a6: 7f:48:4f:5b:dd:62:8c:0b:0e:52:5e:dd:3d:f0:b1:4e:ee:fd: c8:7c:4a:3b:4e:76:62:5c:7f:03:dc:76:9c:40:d3:c8:8b:f0: ca:9d:36:67:12:23:9f:a7:de:c7:19:1a:f2:ec:78:74:39:be: 78:da:c8:54:5a:81:6e:52:32:2e:5b:b5:b5:ec:3f:9f:a9:2f: b2:fa:f3:7e:89:25:97:7d:19:5b:4d:94:0f:64:df:fb:5b:c9: 2c:4c:df:1f:b4:91:80:af:be:e8:71:a4:33:5e:b6:43:0b:8f: db:8b:ee:de:77:52:bc:b8:54:26:3b:b0:68:04:82:20:74:36: 82:8e:7e:c8:3b:c2:76:82:b7:4c:fe:06:01:a7:d4:48:fb:86: 48:04:3c:b0:5f:85:33:78:7e:27:a5:d3:a7:e9:aa:f9:70:b1: 37:b2:8e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZg2ulB4BGu2AIQh/dgDVeDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjUwNzIzMTAwMDM2WhcNMjUwNzI0MTAwMDM2WjAzMTEwLwYDVQQD Eyg0MzBjZTA0YmIyZTI1NzhkMTgyYTI2YmZkMWM1M2MyZGNhYTJiZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsJtRhhd2XnHbcjGRMqFo3966ZKo 1g0Ce3I+ztCXKg/fWa2KCRmPrVwy7uyPo5Ec8y8iqyxOSDqlLlGrl2sbCVLBGu/X xJcI5MIo30pX/QwfXf1U3ajH9u9yyKi0/2Yz2mLSgsCKXGlh2SSM7LQ7eOhiap0P 92530u3F4NUghrHApLv90cTnf5PdE8/KCTA3vN3gvmhoKP16jn7OGBSKanT00FSz pJu/bC2xWroutfjSZjlnPH+C+2nlqDsSTfgNPbqUXHTqw/wlCb7G3kh/Gd2us1jx rXKsv2K9YCN0Pab/U7SAF1Dmwcj9nT2gaXNaVwUfaKOfX+X6z6r1tloSKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMM4Euy4leNGComv9HFPC3Kor0kMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8qccSsm 23kXxetnjDGTOM7THQLsrRafK+jxlKndcGTj24ti8eYVjg4bwTY3Qt9mYK7vCqx2 uuJVS/I8Rf084iJmjz25biXCxLoyPm+8BwLF+mIbpd448FCmf0hPW91ijAsOUl7d PfCxTu79yHxKO052Ylx/A9x2nEDTyIvwyp02ZxIjn6fexxka8ux4dDm+eNrIVFqB blIyLlu1tew/n6kvsvrzfokll30ZW02UD2Tf+1vJLEzfH7SRgK++6HGkM162QwuP 24vu3ndSvLhUJjuwaASCIHQ2go5+yDvCdoK3TP4GAafUSPuGSAQ8sF+FM3h+J6XT p+mq+XCxN7KOpg== -----END CERTIFICATE-----Generated at Wed Jul 23 12:19:00 2025 by rpki-client