$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: 93YGpJEe8g0rdN8F+7hyH7v/JPSuFVU3d9w9bIkWGPA= Subject key identifier: 31:FC:CA:89:44:28:BE:5F:56:1F:B5:9C:06:D8:BE:EB:5F:7A:6D:F1 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019A1F88CB467B7B7C443423BBB03B62A152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 1433 Signing time: Sun 26 Oct 2025 08:00:49 +0000 Manifest this update: Sun 26 Oct 2025 08:00:49 +0000 Manifest next update: Mon 27 Oct 2025 08:00:49 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: 9ROHFVgzm1TU0GMxmLP+d5aT+Yl1Ya+Vc4cwF5PAjkA=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Oct 2025 05:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:1f:88:cb:46:7b:7b:7c:44:34:23:bb:b0:3b:62:a1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Oct 26 08:00:49 2025 GMT Not After : Oct 27 08:00:49 2025 GMT Subject: CN=31fcca894428be5f561fb59c06d8beeb5f7a6df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4a:78:3d:e1:31:56:95:6c:b6:d9:09:1b:b0: e4:1e:e9:65:90:b8:2d:a0:bc:db:67:65:e2:d3:7b: 49:02:96:49:92:cb:c3:15:06:98:86:b8:29:1e:b6: de:84:59:19:88:a4:f2:f0:b1:05:e3:89:72:37:97: 1c:02:14:51:53:c5:c4:9c:38:c0:bb:72:f8:73:e3: a1:b8:a7:85:b8:30:db:61:c5:64:01:d9:d2:68:69: ac:28:64:ed:a4:04:86:5c:4b:21:ba:69:a8:2a:5b: 21:66:4e:1a:aa:d0:94:1d:d7:9c:c9:86:00:93:18: 92:ac:9d:0c:53:f1:8b:4e:28:6b:a3:7b:e3:a9:22: 49:13:b5:13:0a:4d:bf:b1:81:27:23:f0:d4:32:b4: 23:92:13:03:95:34:04:6b:02:d6:89:bb:fe:8d:c2: 20:a5:4f:f0:56:c0:9d:80:b7:4c:63:77:c2:b1:3f: 7e:35:ba:93:59:fe:98:ee:b5:38:82:56:73:1f:8a: 68:7e:a2:c3:c4:e2:50:6e:f9:d7:dd:ed:a3:45:8d: 9e:b3:db:65:87:1e:5f:77:84:b7:40:df:40:4e:cb: 38:64:12:14:91:3a:2d:3b:e1:f3:9c:f3:b4:04:d7: f2:59:e7:e2:56:5f:3b:03:70:62:fb:b1:e4:3a:68: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FC:CA:89:44:28:BE:5F:56:1F:B5:9C:06:D8:BE:EB:5F:7A:6D:F1 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:70:a3:4c:0d:42:8f:93:ab:e7:7b:dc:95:1b:ed:8a:44:41: a8:80:11:9e:1e:e5:04:8c:d4:27:89:bf:cf:bc:39:c5:8d:82: 0c:45:91:64:b8:9e:e5:bb:ce:57:18:ab:5c:53:c4:90:5d:37: 37:2e:fb:15:5d:cb:b9:2d:a8:29:7f:02:d3:f3:e3:88:42:bb: 62:83:88:06:f1:9b:6d:98:35:a9:84:18:c4:07:3f:8c:d2:85: 7b:12:cf:2c:a0:4c:d6:81:11:bf:59:33:17:d7:4e:03:b7:8f: ce:fc:ab:79:07:c2:d4:dd:4f:6e:97:3f:d8:6b:7b:6a:e9:cb: 97:7a:32:a7:99:b9:6b:b1:cc:f7:46:13:00:39:29:00:c6:93: ab:89:cb:1f:0b:89:7f:d1:d0:b4:85:24:45:29:00:e1:25:1e: 3a:c4:b9:7f:7e:8f:ac:0d:1b:19:0f:42:17:9c:56:68:6a:11: 79:52:47:50:04:26:04:c5:19:4a:4c:3a:87:80:a9:c1:61:e1: e8:fa:ec:39:a9:7c:93:89:fc:fe:cf:b2:4b:61:c6:81:fd:b7: 47:aa:0e:ed:c1:c1:cc:60:d6:92:c3:7e:34:85:12:3a:de:7e: f0:e4:b8:ce:49:33:9e:1a:47:3a:8a:83:8e:09:67:51:76:13: d9:84:60:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZofiMtGe3t8RDQju7A7YqFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUxMDI2MDgwMDQ5WhcNMjUxMDI3MDgwMDQ5WjAzMTEwLwYDVQQD EygzMWZjY2E4OTQ0MjhiZTVmNTYxZmI1OWMwNmQ4YmVlYjVmN2E2ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Up4PeExVpVsttkJG7DkHullkLgt oLzbZ2Xi03tJApZJksvDFQaYhrgpHrbehFkZiKTy8LEF44lyN5ccAhRRU8XEnDjA u3L4c+OhuKeFuDDbYcVkAdnSaGmsKGTtpASGXEshummoKlshZk4aqtCUHdecyYYA kxiSrJ0MU/GLTihro3vjqSJJE7UTCk2/sYEnI/DUMrQjkhMDlTQEawLWibv+jcIg pU/wVsCdgLdMY3fCsT9+NbqTWf6Y7rU4glZzH4pofqLDxOJQbvnX3e2jRY2es9tl hx5fd4S3QN9ATss4ZBIUkTotO+HznPO0BNfyWefiVl87A3Bi+7HkOmjzMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDH8yolEKL5fVh+1nAbYvutfem3xMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnCjTA1C j5Or53vclRvtikRBqIARnh7lBIzUJ4m/z7w5xY2CDEWRZLie5bvOVxirXFPEkF03 Ny77FV3LuS2oKX8C0/PjiEK7YoOIBvGbbZg1qYQYxAc/jNKFexLPLKBM1oERv1kz F9dOA7ePzvyreQfC1N1Pbpc/2Gt7aunLl3oyp5m5a7HM90YTADkpAMaTq4nLHwuJ f9HQtIUkRSkA4SUeOsS5f36PrA0bGQ9CF5xWaGoReVJHUAQmBMUZSkw6h4CpwWHh 6PrsOal8k4n8/s+yS2HGgf23R6oO7cHBzGDWksN+NIUSOt5+8OS4zkkznhpHOoqD jglnUXYT2YRgPQ== -----END CERTIFICATE-----Generated at Sun Oct 26 15:01:11 2025 by rpki-client