$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft File: OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json) Hash identifier: ijH1cmPqp8pJVBQWfPVVFTlrIEyV3tvRNz5rw1ZDoHw= Subject key identifier: 8A:25:4C:8A:91:90:85:E8:C1:41:BF:B6:22:08:20:8D:5F:13:A9:32 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019A07B7024C8DBB862F432448177932E582 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft Manifest number: 0D51 Signing time: Tue 21 Oct 2025 17:00:25 +0000 Manifest this update: Tue 21 Oct 2025 17:00:25 +0000 Manifest next update: Wed 22 Oct 2025 17:00:25 +0000 Files and hashes: 1: 0CU8gK0M0FreSaI70cF5ooIUWnA.roa (hash: 3AhvcPwm/9eRzoLDWBdCRrt2ESsUhmDJGeKMEdO3cAk=) 2: 0ESHx6o_bEDdbe3bS47z5AA9_2A.roa (hash: FBbhXK+wtLEWtxbxvTb522xPc5/xwLbqkikaE9rGgWA=) 3: 1-nVBMclHTDps1NSLbwKMKR1iiTs.roa (hash: 4AkcTj0fNGL65T6WanUrryLYpvk8ooyp6N8RAfw9n+c=) 4: GbOTYXVRE4nGIgwOQA6zBXlj2Xo.roa (hash: encqJVvBdRm6B6vTFCshfVj5JBcWptS0eKrTwjTdeJk=) 5: HyPgpAuvMsNI5L6SLPPAdnBnPdo.roa (hash: EVOBxrtD9ibYF2I1shFMN6eNa05ZrbHe+uhDMKiGbNk=) 6: IvvEQkJx_YQuA7WDKcWTwA6sjeM.roa (hash: TYlXh7A49R6hcyPJlA/asJPKwJrsxKdwQselHHTfu5Q=) 7: JY5i8EzBZBxEJHFfrehIcHiV5Ro.roa (hash: fb4DYVb7xf+ej8L7lVMYzB+36KaoNm7ycChtN8C1vqA=) 8: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: xxoow8+iEziWsdxpD+QetMfx9im62Kf5AUIgsx4IXrs=) 9: S714ou8hYqjvmFB4nmghIWDuzT8.roa (hash: /BUpwNlFfWECuzcvwXarqFvS3D6dRZwllAWqKckM2JU=) 10: SlDcuXgMtJBGo8YlgFJf41C4kAo.roa (hash: SG0BWCyRtxyo4M02OYtmA2zjOWnb5KfeZ0pEnDDi914=) 11: VjGUvPYUWgp-0uedFQJC98v6fEo.roa (hash: jGCrku5NTRGndH4tqMN86FEJPJ73k9kCLkdTKB2wH5A=) 12: Z-Ur6Re147f49wwXtBgxnUTtQco.roa (hash: 6jMXEqLaJpiU5oHiEpHv2AWSooBvq9dmOPpZl+dAG7k=) 13: ZXvQgtCwdZFH33GeNkjgldbwU0g.roa (hash: WG+LLLlTTipnD9xWrIvYnomhJk4LiYNkyxpSwcuckf4=) 14: ZckxSPgStfBNqpf_bKZ5TlHqsiw.roa (hash: ylC4RavnbVZ7xL5LPnNCb6J3es9DShqfcjOt6FoGPyw=) 15: ae1asIbAb-e5SyUNe51ydaRR_nY.roa (hash: yOGfZbRrzHyb+JzDB6JXG8IJPfNrdjx+yFCHPncQpcA=) 16: ediJMJBzETBra22Tko9jnlFnOYA.roa (hash: oCcIPCoFUy+fyzOqy+mhQqpOzf2wz/N+TlISESEMNNs=) 17: kvfcSwJmOPsGaE4UqRy5AFACNvk.roa (hash: mCRRZZho096ABVffpIbHwpLxCtigtZ+8SR52PBec3Zk=) 18: q2sdLUq8oTKjFXabTIHjNujteO4.roa (hash: DmdPmf4rfc5GBaM+wuurYH2BFaBH9ELo6PMdUoe2Fiw=) 19: tzK7bQadc-X5ERcHUFRyrLjFAic.roa (hash: pH5a6hVvwpFpvLEU3OQ9naeDuYIybxvVLAzccWIRqYM=) 20: w3Kp3s-sTEuoH4oX7JnGBKn3s-8.roa (hash: 0MKKDPIYI2wCqbxNuvdGAiCQ40jdnrfiT6qIjV19qZg=) 21: xY27QQkLnZ1CFYPkNRnlg2uzEHs.roa (hash: PQiNovy5zghm0pctHsesA3K/Z4xfX1dgnUxPsPukk5k=) 22: xymeMR66aDWDmDhIlx2JEKPGuQ4.roa (hash: FDOGD9cmw7d0tSGevYfgks8MljnMa/gRurSZQ7spuUQ=) 23: yGG8haOhseC4wLjAMMMPhHZTXjA.roa (hash: lNJuGf7SRWFqIxTMR/qz5nkSoM2R54KFa9KdvNjHl+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Oct 2025 14:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:07:b7:02:4c:8d:bb:86:2f:43:24:48:17:79:32:e5:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Oct 21 17:00:25 2025 GMT Not After : Oct 22 17:00:25 2025 GMT Subject: CN=8a254c8a919085e8c141bfb62208208d5f13a932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e6:aa:90:1f:d7:f6:8e:3a:c7:68:70:36:1c: 6f:ad:1f:7f:8a:45:60:a2:0c:95:85:02:2e:d8:fb: 0b:c7:fa:d5:30:8c:6d:7a:89:ac:85:b7:e4:00:cc: a3:c9:f4:8a:38:56:c6:b5:4a:2e:d6:32:6d:06:46: d9:c9:1f:32:a7:48:a1:2e:8d:c7:a3:84:2a:a2:f1: 72:5f:26:1c:eb:0c:a8:8e:05:53:8f:c8:ac:42:f9: 86:5f:c5:1f:fe:fb:54:54:04:0e:25:ed:68:19:31: 8f:a9:09:5a:59:1b:6e:00:54:e1:e4:49:6b:0a:b7: 70:2c:db:d4:19:45:86:6a:28:1e:ad:4d:6e:ec:89: 9b:47:99:89:c8:3f:be:59:17:f4:60:48:cd:4f:b7: 70:a0:1b:34:32:6d:96:b3:cd:c7:dc:e1:53:f4:6e: 06:7b:bd:9a:22:21:12:72:7d:60:50:16:ba:75:de: b3:20:81:56:71:12:fe:29:29:69:b7:34:c3:f9:cd: 48:f1:39:8d:87:29:c5:37:f4:bb:0e:8e:b8:7a:bc: 50:b9:34:7d:40:2c:b4:13:e6:8d:6f:a5:6f:1a:ad: af:6a:e8:ce:83:e6:4c:ea:10:5b:c0:2c:df:36:e7: d9:d6:14:a8:58:8b:ed:81:75:08:5d:f2:91:ee:37: 72:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:4C:8A:91:90:85:E8:C1:41:BF:B6:22:08:20:8D:5F:13:A9:32 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:63:c2:8e:f5:b1:78:5e:03:0e:16:9a:90:b1:98:fa:d7:31: ed:b0:01:7c:1e:29:df:f4:0d:3f:25:cd:c7:2d:6d:4e:7b:ac: 3a:93:bd:d6:c2:ab:97:52:97:54:f2:71:1f:7a:b1:fd:f3:0b: 7d:28:82:2f:78:61:19:78:8c:b4:0c:31:c8:cc:b6:a9:2b:d1: 75:0c:d6:a1:94:81:06:54:c1:68:e5:a7:08:33:02:0b:83:16: 77:24:be:4d:23:1b:54:91:60:cc:10:32:d5:73:e2:eb:d2:96: 1f:90:a4:06:17:87:7b:3f:f7:c0:bd:0e:3c:06:2f:6b:d5:a0: 60:e2:09:4d:84:51:6e:dd:34:83:52:d8:8d:33:0b:81:66:79: ca:dc:99:eb:d6:f4:0f:e4:e0:30:28:a8:23:bf:6b:d2:e8:3a: 9a:9f:d4:50:bf:59:95:e0:92:de:86:be:f5:6b:da:b5:b5:7d: 27:c0:14:b8:c3:73:1b:2e:b4:a6:40:9b:a7:27:39:ea:2a:fc: 4e:39:9f:37:0e:10:ca:0b:4c:e5:55:72:49:d1:ee:84:3a:10: 05:f3:fb:7c:4a:df:9e:f9:dd:b5:af:ce:a1:30:62:7b:2c:0c: 3d:09:68:50:9d:0a:66:37:0e:1f:58:00:40:50:07:81:78:12: c4:a1:db:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoHtwJMjbuGL0MkSBd5MuWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMDIxMTcwMDI1WhcNMjUxMDIyMTcwMDI1WjAzMTEwLwYDVQQD Eyg4YTI1NGM4YTkxOTA4NWU4YzE0MWJmYjYyMjA4MjA4ZDVmMTNhOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OaqkB/X9o46x2hwNhxvrR9/ikVg ogyVhQIu2PsLx/rVMIxteomshbfkAMyjyfSKOFbGtUou1jJtBkbZyR8yp0ihLo3H o4QqovFyXyYc6wyojgVTj8isQvmGX8Uf/vtUVAQOJe1oGTGPqQlaWRtuAFTh5Elr CrdwLNvUGUWGaigerU1u7ImbR5mJyD++WRf0YEjNT7dwoBs0Mm2Ws83H3OFT9G4G e72aIiEScn1gUBa6dd6zIIFWcRL+KSlptzTD+c1I8TmNhynFN/S7Do64erxQuTR9 QCy0E+aNb6VvGq2vaujOg+ZM6hBbwCzfNufZ1hSoWIvtgXUIXfKR7jdyhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIolTIqRkIXowUG/tiIIII1fE6kyMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2PCjvWx eF4DDhaakLGY+tcx7bABfB4p3/QNPyXNxy1tTnusOpO91sKrl1KXVPJxH3qx/fML fSiCL3hhGXiMtAwxyMy2qSvRdQzWoZSBBlTBaOWnCDMCC4MWdyS+TSMbVJFgzBAy 1XPi69KWH5CkBheHez/3wL0OPAYva9WgYOIJTYRRbt00g1LYjTMLgWZ5ytyZ69b0 D+TgMCioI79r0ug6mp/UUL9ZleCS3oa+9WvatbV9J8AUuMNzGy60pkCbpyc56ir8 TjmfNw4QygtM5VVySdHuhDoQBfP7fErfnvndta/OoTBieywMPQloUJ0KZjcOH1gA QFAHgXgSxKHb6w== -----END CERTIFICATE-----Generated at Tue Oct 21 22:55:44 2025 by rpki-client