$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft File: Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json) Hash identifier: 0W48AnOrpCZoeWuhp9zF+B836Q4OY9cTs+gDvjVMaiw= Subject key identifier: A9:2C:93:E9:9E:15:BD:B4:24:90:19:61:DB:E2:2E:E5:34:A9:65:A7 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019A13BB1F525BC427B5CF42F24651F95F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft Manifest number: 170A Signing time: Fri 24 Oct 2025 01:00:21 +0000 Manifest this update: Fri 24 Oct 2025 01:00:21 +0000 Manifest next update: Sat 25 Oct 2025 01:00:21 +0000 Files and hashes: 1: 2NYdjjFKUwwAHXr7ubSJv8Kzg8g.roa (hash: kjplcNAq1JXoQgnY61zJpj1+5jIDXxWAT5fT5oin7qk=) 2: AF-KFPYoLrR_wnL0SE_zW6WshRE.roa (hash: z49PjeXPIBQhRQUNgU9fm0U8o2Eum7mravj6VvfHLII=) 3: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: PeobCWAPljsI4XmJ3aBmqHb63MZ3UKIGgvpUZeq5t9o=) 4: QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa (hash: rkVqPs1fexqZNRh0F63HT4hXiYiSmw86Y4ULqhqeko0=) 5: VIvJR-ELjPDDNwtDAs7jPXPRVS8.roa (hash: xlYWOAlcQ9qUm1X3p6cNrDPlijzSwOQVXOe0gD7Wm78=) 6: WCC9rTSbJ_Cq0gmrQEQG46tRbpQ.roa (hash: VkHV+4ebPs26e57T+NHLP6p9bqcsmEKUplaKOzXFS/4=) 7: apLqK898oR7RE-dAFEvdyErBOzE.roa (hash: 7wPWjmBIQU48S3GSQT90DN//sDuxGXlKRA7f0n/Hjc8=) 8: beYTq1ZSU6CkOYAx7ryqD6bd3cM.roa (hash: x3+IsuLxOdLQwSExJVIL+EzcT73OO7RISZtN+IgQDrQ=) 9: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (hash: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=) 10: eFAtBNJzls8AgaaXT8fjcCX17mA.roa (hash: GPQ9iMR4UR3PGXp7FlfdeNJSrFumQ8WzN02VnHoIJ84=) 11: fmuUqwHIE4LJQQIBDK_3JI3axjw.roa (hash: jgYvNn+KWNnN7BXATe+H2BiIlAYgwP4SHTyKXfV03HU=) 12: m8epfX6ALey9mozyTLJ0ovC6F2E.roa (hash: nEswDzlmuc7WOVjzf1OqhYzhCng69m/AkqBFVEn5Jd8=) 13: mgVlb5y6oflmqG3d7ppnuUd0Clo.roa (hash: dzpQ0zn6slEv00KpzZGJezOhzkkJQj1vaHxpsdbRvnE=) 14: vpHvJjjgw4O3Rz8r2ZFr25OMuek.roa (hash: DjXvcuXor+t9vZEtEo50/bWiWyQCM6LNcDnznEPg0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Oct 2025 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:13:bb:1f:52:5b:c4:27:b5:cf:42:f2:46:51:f9:5f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Oct 24 01:00:21 2025 GMT Not After : Oct 25 01:00:21 2025 GMT Subject: CN=a92c93e99e15bdb424901961dbe22ee534a965a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:83:4f:3f:a5:cf:eb:61:80:8a:cc:b6:de: c2:c5:a5:d9:db:78:60:60:3f:77:b3:2c:15:67:09: a5:a9:96:f0:2e:2c:aa:df:ff:e9:a8:a4:e3:c9:42: e9:c7:9c:b6:ba:4e:d1:de:d5:6e:10:d6:c8:f8:29: 19:34:cc:1a:9a:24:fb:06:58:e2:7d:48:cb:2a:34: c7:8d:b2:02:cf:e7:81:4d:c1:34:0f:1f:0e:f0:1e: 0a:75:05:ce:c9:12:40:f2:ab:7f:a2:c7:49:b1:ac: 78:e3:d9:76:33:20:30:dd:19:6d:45:69:78:55:f7: 57:ae:54:bb:a6:60:8b:24:02:a3:08:ad:61:a3:58: 15:93:5d:a8:f9:a7:03:1c:09:8e:6a:76:68:8a:32: d0:25:7f:1b:d2:1c:24:a4:82:d5:63:70:f1:10:d0: 36:bc:5b:e0:cc:bd:ce:79:30:cb:bd:4b:74:5e:d3: 73:e1:3d:4e:b6:47:27:43:69:2c:a8:fd:62:d9:bb: 19:87:02:16:b7:80:4e:c1:7a:a3:ae:25:da:4b:53: 2f:6d:94:a0:f5:4e:03:38:b2:fc:d8:89:43:f9:5b: 59:1e:47:28:60:a5:37:51:8d:7c:09:b5:a3:71:39: 24:e8:66:ed:be:f4:d8:a1:fe:18:0c:7d:0b:18:fc: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2C:93:E9:9E:15:BD:B4:24:90:19:61:DB:E2:2E:E5:34:A9:65:A7 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9d:b6:a5:43:96:12:b1:4d:c7:bc:ee:50:d4:c0:d0:78:87: 3a:7f:41:44:0e:c7:77:88:8d:f6:22:47:9b:fe:7d:d5:d0:16: 1a:2b:66:71:03:c5:a7:41:d1:35:a4:10:70:f9:e5:9f:b5:40: 24:28:b7:74:90:96:ae:4d:b9:f5:02:a9:7d:93:ca:19:ba:52: ef:70:0f:2a:33:34:70:bf:bb:df:bf:e7:3d:07:41:a6:0e:84: 83:c2:d3:0f:8d:22:b3:65:6b:34:8f:76:fd:b7:bf:6b:a2:45: 86:5c:78:8c:e0:87:ae:e6:ff:77:90:bd:3a:61:1e:75:0b:56: f6:64:30:9f:b2:a4:15:77:7a:ca:7e:38:01:bc:b1:53:01:a5: ec:1a:50:7d:e3:2d:f0:9e:fb:aa:99:e6:88:64:28:8b:5c:94: 64:f9:8f:63:d2:7a:49:88:34:54:7b:81:d5:08:5f:d1:b4:e2: cf:51:8b:f4:78:73:3a:95:6e:41:7e:fe:1f:93:d3:0b:0f:07: 37:4e:d9:15:45:d2:ac:49:ca:4f:d7:fa:40:c2:be:da:20:d6: e4:4f:79:88:4f:6b:a4:a9:c4:a0:bb:03:9f:9a:9f:c1:98:43: 28:55:81:30:75:30:b9:9d:08:f3:d9:98:80:a7:0b:17:9e:9b: 79:35:ee:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoTux9SW8Qntc9C8kZR+V9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjUxMDI0MDEwMDIxWhcNMjUxMDI1MDEwMDIxWjAzMTEwLwYDVQQD EyhhOTJjOTNlOTllMTViZGI0MjQ5MDE5NjFkYmUyMmVlNTM0YTk2NWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHSDTz+lz+thgIrMtt7CxaXZ23hg YD93sywVZwmlqZbwLiyq3//pqKTjyULpx5y2uk7R3tVuENbI+CkZNMwamiT7Blji fUjLKjTHjbICz+eBTcE0Dx8O8B4KdQXOyRJA8qt/osdJsax449l2MyAw3RltRWl4 VfdXrlS7pmCLJAKjCK1ho1gVk12o+acDHAmOanZoijLQJX8b0hwkpILVY3DxENA2 vFvgzL3OeTDLvUt0XtNz4T1OtkcnQ2ksqP1i2bsZhwIWt4BOwXqjriXaS1MvbZSg 9U4DOLL82IlD+VtZHkcoYKU3UY18CbWjcTkk6GbtvvTYof4YDH0LGPzxSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKksk+meFb20JJAZYdviLuU0qWWnMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZ22pUOW ErFNx7zuUNTA0HiHOn9BRA7Hd4iN9iJHm/591dAWGitmcQPFp0HRNaQQcPnln7VA JCi3dJCWrk259QKpfZPKGbpS73APKjM0cL+737/nPQdBpg6Eg8LTD40is2VrNI92 /be/a6JFhlx4jOCHrub/d5C9OmEedQtW9mQwn7KkFXd6yn44AbyxUwGl7BpQfeMt 8J77qpnmiGQoi1yUZPmPY9J6SYg0VHuB1Qhf0bTiz1GL9HhzOpVuQX7+H5PTCw8H N07ZFUXSrEnKT9f6QMK+2iDW5E95iE9rpKnEoLsDn5qfwZhDKFWBMHUwuZ0I89mY gKcLF56beTXuDA== -----END CERTIFICATE-----Generated at Fri Oct 24 09:09:59 2025 by rpki-client