$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: f5SPov8j2PpUBhqjpP8W+d3npdNx6UPhIgKV1s/4jaY= Subject key identifier: 9C:99:C1:4D:A1:0C:D9:B1:65:28:44:FF:6F:49:B2:CD:67:DC:87:DD Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 019637D20FCDB13B6A601E05F4E054AA2548 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 14FF Signing time: Tue 15 Apr 2025 05:00:35 +0000 Manifest this update: Tue 15 Apr 2025 05:00:35 +0000 Manifest next update: Wed 16 Apr 2025 05:00:35 +0000 Files and hashes: 1: ExzZcEDDPK8coOGqZF_YdjfXfTY.roa (hash: tPyYsW2QgB+AcIghP1gBpSMfXHmZrllmzlo1OmzCBLM=) 2: Gn8W_5-ZNDFJsfiVCxmuucbwfKk.roa (hash: Rgg/jkarS1sTLeBLQCfZMMhxb1UIfrYeesbGBI5cJnk=) 3: MBTQXLr6vq1FguZXPQ1ZjnRLX0U.roa (hash: DiaDx8fvSFqfD/x6lAZDVyhLerP4wBkwuVRd6+tSH0s=) 4: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: WxHFAOzlCHWmz6uXFnsrYHgKgkoYiFSaDix1MNyW3/U=) 5: Qv7rTlC4gRPHfaKxpRdgaHHNVTA.roa (hash: XlEPB7O64MaJL4hcRAWkANJshOuG+WaN9ZFd6ghdbYU=) 6: TJKP__jRvYBXC3BBkXlRyzg2w0g.roa (hash: GHcOS4AOS4XcRUHap/0HcPOkV0jRHLBB5ZJ27pNCDaI=) 7: U5IWhBqG97b4K8O2J5yF8MO11Cg.roa (hash: 67On1isYc/HlpspA3CcCESox5lYQWgCrNwtUMTchIFw=) 8: XE56sg4j-KwhHyMOsf5OdQ2yPfQ.roa (hash: q5FJqkEGMGo0y2NyOEmtmUQTtcbbFoMSEXPs1Zzk/4s=) 9: gVbT8W2DuKQGSKyTYPlzijekpes.roa (hash: BySj2tLoj2ApXY6YZVgDXdpqUHFzskR55psIZFMLIGo=) 10: k8lkUNXkJfgLKxdnNkQeItf74mI.roa (hash: +7BizQyd5jBu8yV1kF9jWxW79lVh5H17r91ZJsNLG2M=) 11: lav_pheHCvxBgtCqNEbxkYM0umw.roa (hash: YW7brfjkvz7GVJXNTBMw1n/NGXj9Q6aDu3cCW6J9Jc0=) 12: mglBNgMdDuQJqu_ome6lp6hFg3A.roa (hash: ypf4NnUwoqhbRRy/+Y9ZZDsZslPk5UguTizNFGojpIg=) 13: mn4muSMtqf3dn_5yHyuMR1ZbTMQ.roa (hash: IK6XpF5Q2Tkc5Ny5fEX1eYhz0+eVTj1ZR6kmoLH/Zpg=) 14: p8DkltUHyoRPsRZ8wqS7HkhD_w4.roa (hash: WZ922M0yus1urQsDExc+JxOh5vKRfme8mJQQlGJgw6I=) 15: rZ9vAsmJNNOHqo4MI2omEwhOYCY.roa (hash: VzlpWQixiHZ9OCMkbuv/OS2n5wRiP2sqImjhqEZvNaE=) 16: uz7b7qFJVRiLSqWV--WgGVLTauQ.roa (hash: wpzxfmrcY85kS1F+ylqPRHNmG+YinHe9dDJOqmsBNC0=) 17: yPuhQgtDvz4rhwfbwpPAALIJ55o.roa (hash: I+ErOy+M7Yzs1SVwCt9jCXFOvf6k0f8yBGW1RCbKRIM=) 18: zyZ78bjjA4tIA3fv3utJmc55bbo.roa (hash: entrEKMQHYUvG/L8GyBbjw39lpFARYO30PpBBNqPFi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:37:d2:0f:cd:b1:3b:6a:60:1e:05:f4:e0:54:aa:25:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Apr 15 05:00:35 2025 GMT Not After : Apr 16 05:00:35 2025 GMT Subject: CN=9c99c14da10cd9b1652844ff6f49b2cd67dc87dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:db:31:3b:35:e2:74:5b:c0:70:cc:be:49: 46:88:a1:aa:34:fb:5c:fc:a9:74:b5:08:75:39:01: ca:c5:89:1e:c7:2f:89:f7:7c:1a:f7:60:dc:db:a0: 6a:c1:26:2f:d9:07:61:67:12:1f:70:c8:f2:c0:68: b4:6c:25:0b:24:2f:ca:9e:ab:03:fa:74:f2:1b:f1: 49:43:77:6b:b4:fb:36:d8:cc:e5:09:22:37:a9:8a: bd:61:74:2b:e1:f7:e2:3b:25:08:0b:a9:c8:50:55: c3:75:86:cd:05:eb:90:d5:e3:54:94:75:22:e9:60: 2d:1a:96:e0:b3:81:13:47:70:69:d3:83:c3:fd:f6: 7d:70:61:70:61:b3:96:de:34:ef:cf:6a:5f:17:89: 0b:b7:0c:3b:c9:a1:25:ff:f8:f6:3e:49:cf:7b:2a: 86:5d:10:9f:bd:a5:f7:9a:31:c0:f9:9f:e0:a0:a8: c8:ef:49:f9:44:90:a3:df:a3:d6:22:34:b9:2b:b5: ea:f5:cf:76:7a:18:e7:56:a4:fc:4e:9f:d2:93:5a: be:45:fd:59:94:51:98:eb:14:3f:97:10:c5:e1:2e: ee:40:62:2f:f3:2a:30:11:34:14:9d:b0:64:61:11: 35:b5:34:72:9b:f4:38:4b:b1:4e:ad:f6:5e:1d:ea: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:99:C1:4D:A1:0C:D9:B1:65:28:44:FF:6F:49:B2:CD:67:DC:87:DD X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:63:01:30:61:8b:ef:3a:99:3f:1e:ea:f9:6f:53:5e:5f:0c: f4:a2:57:19:a9:86:97:76:b4:80:fd:c2:7d:14:63:ea:c2:47: 36:97:95:28:73:b8:0c:20:cb:c3:d7:b8:77:8a:f5:fd:3b:97: 02:2f:84:3c:a2:b8:bc:fb:51:0d:43:b1:ea:49:0b:57:74:97: eb:5a:a2:df:c1:42:f1:1d:f6:26:46:98:21:92:43:fd:c3:d3: 56:39:ba:c3:c5:9b:59:10:93:0d:82:85:62:ea:4e:3c:7f:55: 49:af:f9:9a:45:8e:9e:2d:52:6f:d3:53:c8:b6:c5:9f:ee:7a: 53:59:b9:c0:49:32:b5:48:fa:88:ce:10:47:a6:ef:70:9a:7a: a0:d7:f1:74:dd:92:5c:c6:1a:98:18:2e:a2:c4:61:0f:af:90: e2:bd:44:c0:ff:9b:1b:01:0f:3b:2e:be:40:08:52:8a:61:a7: 12:2e:17:4c:f1:0a:36:ae:c0:af:83:06:bd:71:49:08:4f:8d: fd:83:25:cb:18:73:62:66:8c:eb:62:af:a3:f7:16:58:3e:1c: d1:1e:77:e9:dc:4a:57:77:69:a1:5c:16:b1:3a:6c:02:71:53: 02:ce:5e:f5:92:df:d7:81:bd:85:ef:52:a1:de:56:ff:16:4e: df:34:77:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY30g/NsTtqYB4F9OBUqiVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjUwNDE1MDUwMDM1WhcNMjUwNDE2MDUwMDM1WjAzMTEwLwYDVQQD Eyg5Yzk5YzE0ZGExMGNkOWIxNjUyODQ0ZmY2ZjQ5YjJjZDY3ZGM4N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T3bMTs14nRbwHDMvklGiKGqNPtc /Kl0tQh1OQHKxYkexy+J93wa92Dc26BqwSYv2QdhZxIfcMjywGi0bCULJC/KnqsD +nTyG/FJQ3drtPs22MzlCSI3qYq9YXQr4ffiOyUIC6nIUFXDdYbNBeuQ1eNUlHUi 6WAtGpbgs4ETR3Bp04PD/fZ9cGFwYbOW3jTvz2pfF4kLtww7yaEl//j2PknPeyqG XRCfvaX3mjHA+Z/goKjI70n5RJCj36PWIjS5K7Xq9c92ehjnVqT8Tp/Sk1q+Rf1Z lFGY6xQ/lxDF4S7uQGIv8yowETQUnbBkYRE1tTRym/Q4S7FOrfZeHeqcpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyZwU2hDNmxZShE/29Jss1n3IfdMB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWMBMGGL 7zqZPx7q+W9TXl8M9KJXGamGl3a0gP3CfRRj6sJHNpeVKHO4DCDLw9e4d4r1/TuX Ai+EPKK4vPtRDUOx6kkLV3SX61qi38FC8R32JkaYIZJD/cPTVjm6w8WbWRCTDYKF YupOPH9VSa/5mkWOni1Sb9NTyLbFn+56U1m5wEkytUj6iM4QR6bvcJp6oNfxdN2S XMYamBguosRhD6+Q4r1EwP+bGwEPOy6+QAhSimGnEi4XTPEKNq7Ar4MGvXFJCE+N /YMlyxhzYmaM62Kvo/cWWD4c0R536dxKV3dpoVwWsTpsAnFTAs5e9ZLf14G9he9S od5W/xZO3zR3qA== -----END CERTIFICATE-----Generated at Tue Apr 15 12:38:10 2025 by rpki-client