$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: wRRgWOmz3z3ICh8RzWjfwaF4ZJ5c/6y6F5TCJPxNyko= Subject key identifier: 29:03:80:DF:E0:F1:AA:D8:C9:21:84:4B:97:BB:3E:1D:51:A7:2F:B3 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 0197451DE5EA176ADF7459CA700A6CB1FE8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 1593 Signing time: Fri 06 Jun 2025 12:01:16 +0000 Manifest this update: Fri 06 Jun 2025 12:01:16 +0000 Manifest next update: Sat 07 Jun 2025 12:01:16 +0000 Files and hashes: 1: 1-3fiDUT6gzjtAQogV6bgofonnG4.roa (hash: pc7dIo5ndDhRJIrcZvUMyHa9aA2Wx3LxCkefIcK3Gqc=) 2: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 3: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 4: K9OoJ9oRdDGRAG9_JEraDylQYiQ.roa (hash: EDky965lH+7d9zEKg3uh2UPLM5EYLdR0gznw5lmNnpo=) 5: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: byhIvyXvBBjkKxBdV6YGXlisI9SChYp6PNbcTVOTfo4=) 6: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 7: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 8: cNvBb2RRxSjoCAkb0wZvTJ3BY5k.roa (hash: oDSoGJIctW5p0rg5AbBoYa3L96DcMDhEp9yGbjF4AfU=) 9: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 10: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 11: k2UHZLtZwVHZHXhDRCzLsU-jAfk.roa (hash: uZ7f/mqzCxj88IHBJr/+LGWTfdp9aGiRUAnubKa+rXw=) 12: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 13: qx1D6MwlFJLvd2j3wGKzaKDH1gc.roa (hash: /6Qrju93/zC5tTWH2Z6B9bYEnrkHOlHlFsFGFSYu75M=) 14: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:45:1d:e5:ea:17:6a:df:74:59:ca:70:0a:6c:b1:fe:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jun 6 12:01:16 2025 GMT Not After : Jun 7 12:01:16 2025 GMT Subject: CN=290380dfe0f1aad8c921844b97bb3e1d51a72fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:44:a3:b7:3c:b2:ee:59:2a:4b:8f:4a:9f: 4c:95:43:73:69:da:82:7e:95:08:39:85:3b:5a:0e: 93:2f:d0:f8:b7:06:e4:34:84:04:fe:a6:1e:16:4a: 6f:94:cf:79:e4:d5:ea:68:f5:9e:d7:66:9c:e1:3d: 85:cc:56:f4:6b:0d:5f:36:48:21:bd:8a:e2:87:99: 8a:98:a7:67:f0:4d:75:01:4c:78:43:46:50:35:75: a2:ee:17:63:96:f6:0e:df:cc:6d:ae:55:66:f2:7d: 19:2c:65:8a:9b:59:1e:62:a1:a3:8b:00:0b:2e:a3: 7c:07:a2:07:1d:8a:a2:b2:c1:1a:40:9e:c2:9c:18: f9:a9:d3:ce:50:88:88:83:57:ec:a2:0c:4e:54:82: 88:6d:03:c8:09:4e:3d:b7:fe:5b:a0:2d:36:e7:d0: 32:da:f7:0c:8a:73:81:1c:ba:e0:81:7f:4f:4e:af: 2e:e4:1e:aa:25:28:20:03:ee:76:ef:c2:84:62:94: 6e:58:09:f2:df:7e:4e:cd:3e:aa:9e:2c:7f:30:53: 0c:7f:fb:e1:dc:5f:64:48:66:9f:10:fe:44:d1:dd: 00:00:73:89:c3:c0:cc:51:ce:00:17:42:ea:25:00: 71:9f:96:18:bb:b6:72:9f:57:ee:69:4d:67:74:01: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:80:DF:E0:F1:AA:D8:C9:21:84:4B:97:BB:3E:1D:51:A7:2F:B3 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b7:60:50:22:30:31:0b:64:ee:23:41:b4:39:1e:70:95:38: 52:ff:e0:bb:6e:cd:81:86:7b:5b:5c:b8:ed:70:72:95:87:8b: 0c:a2:c9:5b:71:d2:d1:b8:ec:d9:85:b2:61:3a:78:92:e0:ed: 38:8e:46:75:18:f5:23:14:2d:88:43:8f:1f:ac:34:2b:57:fd: b1:57:0f:81:53:c9:77:cf:ad:dd:34:54:62:96:fe:1f:35:ce: f2:fc:79:6a:2f:b4:27:6c:15:ea:3d:48:bc:5e:cc:c3:d9:0f: 1b:eb:9e:f6:71:a4:08:f2:6b:8a:f8:8e:0c:70:5f:49:8c:1b: 69:0f:21:bb:7e:7f:a5:10:c8:45:87:a4:84:3c:61:8d:3e:98: 93:d7:c9:b9:8c:c1:59:65:4b:72:2a:77:5c:9d:79:fe:7d:ce: 24:d3:7b:8d:5a:81:f8:3a:2b:a3:47:59:68:d0:70:6d:9b:59: d2:0e:ba:1b:d7:61:87:06:58:5d:73:37:08:64:1f:57:09:da: a2:00:c5:bb:46:b5:94:cc:0a:6d:d1:34:0f:ca:42:de:a8:91: 71:c9:ae:52:13:6e:cc:17:63:32:fa:c1:03:b6:ec:40:44:65: 39:e9:a9:5c:50:9c:1d:f3:3f:a4:40:b9:76:65:dc:2d:19:36: 0a:96:e9:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdFHeXqF2rfdFnKcApssf6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUwNjA2MTIwMTE2WhcNMjUwNjA3MTIwMTE2WjAzMTEwLwYDVQQD EygyOTAzODBkZmUwZjFhYWQ4YzkyMTg0NGI5N2JiM2UxZDUxYTcyZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthtEo7c8su5ZKkuPSp9MlUNzadqC fpUIOYU7Wg6TL9D4twbkNIQE/qYeFkpvlM955NXqaPWe12ac4T2FzFb0aw1fNkgh vYrih5mKmKdn8E11AUx4Q0ZQNXWi7hdjlvYO38xtrlVm8n0ZLGWKm1keYqGjiwAL LqN8B6IHHYqissEaQJ7CnBj5qdPOUIiIg1fsogxOVIKIbQPICU49t/5boC0259Ay 2vcMinOBHLrggX9PTq8u5B6qJSggA+5278KEYpRuWAny335OzT6qnix/MFMMf/vh 3F9kSGafEP5E0d0AAHOJw8DMUc4AF0LqJQBxn5YYu7Zyn1fuaU1ndAE0ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkDgN/g8arYySGES5e7Ph1Rpy+zMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAordgUCIw MQtk7iNBtDkecJU4Uv/gu27NgYZ7W1y47XBylYeLDKLJW3HS0bjs2YWyYTp4kuDt OI5GdRj1IxQtiEOPH6w0K1f9sVcPgVPJd8+t3TRUYpb+HzXO8vx5ai+0J2wV6j1I vF7Mw9kPG+ue9nGkCPJriviODHBfSYwbaQ8hu35/pRDIRYekhDxhjT6Yk9fJuYzB WWVLcip3XJ15/n3OJNN7jVqB+Doro0dZaNBwbZtZ0g66G9dhhwZYXXM3CGQfVwna ogDFu0a1lMwKbdE0D8pC3qiRccmuUhNuzBdjMvrBA7bsQERlOempXFCcHfM/pEC5 dmXcLRk2CpbpAQ== -----END CERTIFICATE-----Generated at Fri Jun 6 19:49:16 2025 by rpki-client