$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft File: oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json) Hash identifier: DYkUcgRtMTC4wyV8SsRkIuAQnyWuMEaJ8y7RfXhdbz0= Subject key identifier: 49:42:63:77:4F:46:21:BE:1E:CA:8E:EA:B1:55:6F:53:C0:3A:A5:DA Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 01992066B9057D43AB039AA3A74E9E60E0D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft Manifest number: 173F Signing time: Sat 06 Sep 2025 19:00:26 +0000 Manifest this update: Sat 06 Sep 2025 19:00:26 +0000 Manifest next update: Sun 07 Sep 2025 19:00:26 +0000 Files and hashes: 1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=) 2: 2smUB5D8W7tuf_xW5EH9jWoz4DM.roa (hash: rTDJvm0oMNC8IUj5+JS+3prpnZefKwYKD4MK14dTYOE=) 3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=) 4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=) 5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=) 6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=) 7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=) 8: FCOv2wASvqJQtZIKiccAO2bxvnc.roa (hash: B9ypN+FqEfvSTJg5rp5zO4aGYGOKJguLQr8AmroSDF8=) 9: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=) 10: IStNe4e6LhEN0WqF0khMmbBnvEQ.roa (hash: SucxZMcCMGO/p9cXrgX+1VRtuUi5NI2PuW6+EwcCJx8=) 11: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=) 12: Khdam5ye6nHBc4YW_yrjL25Chls.roa (hash: zu0nJg15zErx3dxZklgiK5ZzU5CwLzliF0MMLUaHiLs=) 13: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=) 14: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=) 15: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=) 16: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=) 17: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=) 18: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=) 19: VV3pVQmA3jL8s0bmbKamtZwlCt0.roa (hash: vCwn19zgG2GXQkWTrwcbkBf3n2pPD744DQga4uWIovg=) 20: VXguZ1IP4OPQ2wSfFG2Zt-8rRmU.roa (hash: FYCub9tLigFfu6QRGXOsYxtNUaq1jqWty883jSxTd34=) 21: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=) 22: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=) 23: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=) 24: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=) 25: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=) 26: fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa (hash: Aef8TeyLWHEX0HhoAhmS5O45O1FHLWTrY+cesMIs6t4=) 27: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=) 28: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=) 29: mygN9EXv15Mv_R2x5EM_di5X8p4.roa (hash: +hnEnqUqGPQ5/+etnnWXKfILgh8ttS98q0vUC8Q5rns=) 30: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: QTsjbHgsH6h6KI7Xj8Hll8+kg6HPo7wHKPcC3c3EyFA=) 31: q-kzFzWdHxYVd9BrFrKLJ4d0RIQ.roa (hash: GMAkDMrzsWCnVos+xh1WbimGMP/CqMUvIS+tRaFTcOw=) 32: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=) 33: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=) 34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=) 35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Sep 2025 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:20:66:b9:05:7d:43:ab:03:9a:a3:a7:4e:9e:60:e0:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Sep 6 19:00:26 2025 GMT Not After : Sep 7 19:00:26 2025 GMT Subject: CN=494263774f4621be1eca8eeab1556f53c03aa5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:58:b3:b3:a4:78:7f:7e:17:68:62:0c:a6: f0:de:b4:37:32:bd:25:ac:c2:b4:46:7b:8a:17:2b: 20:e9:38:7d:50:dc:6e:e7:24:26:3e:ea:88:14:52: 25:57:8a:ae:79:a5:4a:08:1e:2c:7d:83:c8:fa:41: ae:6b:c5:15:1d:c2:4d:0a:1b:17:ee:bf:11:53:e6: 8f:d7:aa:f0:1f:0a:b1:ab:bc:1c:3f:c0:b3:85:04: 00:60:66:8a:da:2c:e3:5e:c7:c6:87:43:23:34:c0: 33:3e:c1:76:a5:03:a1:55:2e:e1:3d:5a:b1:68:a5: de:3c:39:27:82:92:63:9e:70:1c:97:42:c2:15:b4: 79:bc:91:ed:8f:cc:7a:4f:33:84:4e:51:28:28:e9: 38:9c:c0:e5:ef:32:d6:36:89:8c:63:30:17:39:df: 29:89:af:4a:f5:4e:63:5f:98:ca:01:f0:b7:c5:de: fe:45:53:e6:88:48:fd:2c:d1:65:c9:81:e6:c1:5f: 43:3d:b5:dc:37:14:f0:8b:ca:ad:fd:0c:85:76:87: 9f:85:91:46:cb:9f:26:63:cc:4d:53:70:b1:41:87: 67:1a:00:3a:58:25:29:a9:9a:75:98:3c:71:af:09: 99:2f:8e:78:59:f9:61:69:2b:5d:e2:95:32:e8:4d: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:42:63:77:4F:46:21:BE:1E:CA:8E:EA:B1:55:6F:53:C0:3A:A5:DA X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d2:cb:ee:82:de:47:ed:2a:fc:99:25:8e:7e:b2:77:aa:25: 97:19:b1:2e:7c:00:f5:37:5b:a8:e3:7d:84:ea:1c:e4:c5:42: cf:79:35:f7:58:64:a0:56:25:a3:51:20:c3:98:0b:b9:c2:65: 4b:c2:ab:d2:17:47:97:57:eb:16:8a:11:04:a7:1b:c7:b9:ef: 5c:13:7c:b7:e9:2f:48:5a:85:59:f4:41:d9:df:1d:22:da:0d: 69:22:d9:b6:ac:76:fc:a0:b7:ef:d4:74:ec:61:0e:e7:d1:6a: e9:e7:31:94:92:95:55:c9:c3:35:e1:15:5b:7a:d6:3a:30:3a: 31:17:b9:9e:d5:25:05:54:04:0f:89:7b:16:5f:0f:85:11:bf: 48:c7:4d:a0:2e:65:84:e7:c2:1a:53:18:1c:c1:0b:a4:aa:59: 7a:e3:0b:b3:52:0f:b7:9a:97:d9:70:32:2f:ff:48:ce:9c:6e: 0a:61:45:29:74:39:25:01:0f:1b:7c:2c:c3:1e:2d:e7:02:cb: 41:e2:ba:b7:73:27:53:82:3f:cc:9e:67:12:68:4e:fb:b3:32: c6:9a:3a:dd:61:8f:4c:ce:f3:7e:9e:85:91:29:de:cf:97:2f: a0:84:0f:cd:e8:39:ff:f4:c0:7e:ca:42:a4:ff:7f:be:78:52: fa:18:51:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkgZrkFfUOrA5qjp06eYODVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjUwOTA2MTkwMDI2WhcNMjUwOTA3MTkwMDI2WjAzMTEwLwYDVQQD Eyg0OTQyNjM3NzRmNDYyMWJlMWVjYThlZWFiMTU1NmY1M2MwM2FhNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPlYs7OkeH9+F2hiDKbw3rQ3Mr0l rMK0RnuKFysg6Th9UNxu5yQmPuqIFFIlV4queaVKCB4sfYPI+kGua8UVHcJNChsX 7r8RU+aP16rwHwqxq7wcP8CzhQQAYGaK2izjXsfGh0MjNMAzPsF2pQOhVS7hPVqx aKXePDkngpJjnnAcl0LCFbR5vJHtj8x6TzOETlEoKOk4nMDl7zLWNomMYzAXOd8p ia9K9U5jX5jKAfC3xd7+RVPmiEj9LNFlyYHmwV9DPbXcNxTwi8qt/QyFdoefhZFG y58mY8xNU3CxQYdnGgA6WCUpqZp1mDxxrwmZL454WflhaStd4pUy6E1bUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElCY3dPRiG+HsqO6rFVb1PAOqXaMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdLL7oLe R+0q/Jkljn6yd6ollxmxLnwA9TdbqON9hOoc5MVCz3k191hkoFYlo1Egw5gLucJl S8Kr0hdHl1frFooRBKcbx7nvXBN8t+kvSFqFWfRB2d8dItoNaSLZtqx2/KC379R0 7GEO59Fq6ecxlJKVVcnDNeEVW3rWOjA6MRe5ntUlBVQED4l7Fl8PhRG/SMdNoC5l hOfCGlMYHMELpKpZeuMLs1IPt5qX2XAyL/9IzpxuCmFFKXQ5JQEPG3wswx4t5wLL QeK6t3MnU4I/zJ5nEmhO+7Myxpo63WGPTM7zfp6FkSnez5cvoIQPzeg5//TAfspC pP9/vnhS+hhRxg== -----END CERTIFICATE-----Generated at Sun Sep 7 03:28:22 2025 by rpki-client