$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: AGfgGsdUl/AkcC9LiGKDXuLUg73EUi+/C/KwDzxh7Qc= Subject key identifier: 5B:1D:F1:DF:F8:A4:62:E9:09:0E:50:3E:CE:BD:79:33:F5:6A:FF:F6 Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 01992D489A1271F684AE86337F981FD571BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 1688 Signing time: Tue 09 Sep 2025 07:02:36 +0000 Manifest this update: Tue 09 Sep 2025 07:02:36 +0000 Manifest next update: Wed 10 Sep 2025 07:02:36 +0000 Files and hashes: 1: DZz0HwqqARibmrSZa6SW5rPMqjw.roa (hash: RrKpz2JATQa7eOyKwCGmO2SKLZQ3cFfCVCyUkvbItu4=) 2: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 3: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 4: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 5: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: UlrRwIxEEaozYvB/nNB9WWspK8vN6Xq+YrVq5N/nLZk=) 6: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 7: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 8: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 9: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 10: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 11: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 12: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 13: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 14: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 15: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 16: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 17: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 18: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 19: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 07:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2d:48:9a:12:71:f6:84:ae:86:33:7f:98:1f:d5:71:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Sep 9 07:02:36 2025 GMT Not After : Sep 10 07:02:36 2025 GMT Subject: CN=5b1df1dff8a462e9090e503ecebd7933f56afff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:e3:ea:1a:06:09:4a:dd:9d:3e:49:fc:13: e2:ed:ba:ed:e8:f8:ee:99:26:72:d1:b3:5c:aa:69: bb:b4:75:9a:d3:85:e8:c8:05:a2:bd:ed:31:7e:51: 8d:5f:99:ac:52:7c:3e:4c:72:9e:1c:f3:a7:a9:05: a9:c5:ad:02:40:4d:eb:ee:2c:41:9d:12:b4:5d:8b: eb:8e:bb:38:55:2e:8f:d7:72:6e:33:29:b9:a4:35: 23:27:8e:40:e1:3f:2f:0e:ff:9f:2c:dd:f4:77:3b: 6c:96:f9:ad:60:15:f4:47:7a:ba:54:96:c6:e0:93: 1a:dd:b4:11:b9:4f:10:72:87:6f:44:14:1f:83:cd: 0a:60:0f:56:09:6c:d8:ce:1b:4a:cb:b3:18:c6:8e: 5b:41:51:fb:da:52:6f:a2:45:43:0a:a5:23:05:fd: e4:7c:c4:7b:88:81:17:84:7f:43:f1:de:bb:23:80: 6b:59:7b:e1:b5:ad:33:b9:eb:9d:cb:c0:f5:db:a7: 30:78:7f:d7:35:4f:c1:fc:bb:d1:36:e3:bb:fe:53: c2:09:73:0d:81:c2:86:82:9e:b7:db:a7:53:82:82: c9:71:15:d9:43:86:47:d4:f9:d8:cf:a9:71:f5:c4: 26:09:a4:cb:f9:5e:05:c6:df:67:9a:f2:11:9d:e9: 57:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1D:F1:DF:F8:A4:62:E9:09:0E:50:3E:CE:BD:79:33:F5:6A:FF:F6 X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:de:3e:78:08:f6:56:84:12:f6:5f:74:4c:9a:da:0f:27:4c: fa:36:de:72:6f:79:de:aa:a9:a6:44:d2:a4:03:29:ba:5a:23: 73:90:9b:b9:f0:6e:11:56:02:48:1a:aa:6b:5a:15:9a:08:41: 69:0f:1b:81:48:fe:e0:78:12:31:d4:92:13:6f:3b:d1:b5:12: bd:26:29:55:ae:d9:db:16:85:12:91:38:41:dd:14:0a:78:2d: cf:9a:a0:39:6c:ba:01:85:a0:c6:62:fa:1a:53:51:9d:a3:a4: 7c:67:c3:1e:6b:1c:a1:df:1c:69:74:87:3c:be:d0:6a:d0:03: 5a:f1:6f:48:f5:9f:3b:89:74:cf:9d:d0:8b:6d:af:f3:a0:5f: ac:ee:1d:de:b6:cd:f3:9a:31:cc:17:b4:23:70:a1:a5:0c:d4: bc:6d:3c:73:5e:59:11:13:18:d5:35:69:f8:05:fb:10:35:0c: d1:04:ea:4c:0d:09:33:89:9a:1f:c9:9d:7c:cf:ba:4d:d4:70: 48:cf:50:8d:4e:d8:48:04:22:38:8a:04:79:22:0e:ae:6e:73: 03:62:4e:44:34:49:2a:0d:70:28:b0:b5:21:3f:00:96:9d:cc: 6d:76:e9:10:1d:6b:d9:fb:6c:64:8b:35:35:d7:44:9b:7f:94: 0d:97:d8:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZktSJoScfaEroYzf5gf1XG6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwOTA5MDcwMjM2WhcNMjUwOTEwMDcwMjM2WjAzMTEwLwYDVQQD Eyg1YjFkZjFkZmY4YTQ2MmU5MDkwZTUwM2VjZWJkNzkzM2Y1NmFmZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAvj6hoGCUrdnT5J/BPi7brt6Pju mSZy0bNcqmm7tHWa04XoyAWive0xflGNX5msUnw+THKeHPOnqQWpxa0CQE3r7ixB nRK0XYvrjrs4VS6P13JuMym5pDUjJ45A4T8vDv+fLN30dztslvmtYBX0R3q6VJbG 4JMa3bQRuU8QcodvRBQfg80KYA9WCWzYzhtKy7MYxo5bQVH72lJvokVDCqUjBf3k fMR7iIEXhH9D8d67I4BrWXvhta0zueudy8D126cweH/XNU/B/LvRNuO7/lPCCXMN gcKGgp6326dTgoLJcRXZQ4ZH1PnYz6lx9cQmCaTL+V4Fxt9nmvIRnelXkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsd8d/4pGLpCQ5QPs69eTP1av/2MB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo94+eAj2 VoQS9l90TJraDydM+jbecm953qqppkTSpAMpulojc5CbufBuEVYCSBqqa1oVmghB aQ8bgUj+4HgSMdSSE2870bUSvSYpVa7Z2xaFEpE4Qd0UCngtz5qgOWy6AYWgxmL6 GlNRnaOkfGfDHmscod8caXSHPL7QatADWvFvSPWfO4l0z53Qi22v86BfrO4d3rbN 85oxzBe0I3ChpQzUvG08c15ZERMY1TVp+AX7EDUM0QTqTA0JM4maH8mdfM+6TdRw SM9QjU7YSAQiOIoEeSIOrm5zA2JORDRJKg1wKLC1IT8Alp3MbXbpEB1r2ftsZIs1 NddEm3+UDZfY7Q== -----END CERTIFICATE-----Generated at Tue Sep 9 10:22:17 2025 by rpki-client