$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: BISZbuYa/qyHnvKsCRwaM3KvRaOjXgHpdwdPgBoSh6o= Subject key identifier: 63:BC:1B:7A:48:2B:FA:9C:8F:33:29:00:C4:E7:04:84:5F:2A:61:38 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 0199228D0AECB6747A6C3355CE2CA94BAF79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 13B0 Signing time: Sun 07 Sep 2025 05:01:32 +0000 Manifest this update: Sun 07 Sep 2025 05:01:32 +0000 Manifest next update: Mon 08 Sep 2025 05:01:32 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: xVGIgKPw+8HbKPWF49+yB3+HQVrltU5KjkigT2Gu/Oo=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Sep 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:22:8d:0a:ec:b6:74:7a:6c:33:55:ce:2c:a9:4b:af:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Sep 7 05:01:32 2025 GMT Not After : Sep 8 05:01:32 2025 GMT Subject: CN=63bc1b7a482bfa9c8f332900c4e704845f2a6138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:78:ca:1a:88:e9:8d:a3:95:ae:63:4a:66: ec:06:85:5e:cb:14:1a:52:13:50:1b:73:6d:64:8b: d1:53:26:7b:93:aa:71:be:73:36:94:e7:ef:54:f1: 27:4b:e7:28:99:e5:fd:03:d0:f0:29:47:00:7b:15: 39:ab:6c:af:1d:1d:bd:da:bf:f6:92:26:3e:28:3d: 44:1a:bd:55:78:e7:bf:ad:20:3b:da:8a:5b:0a:df: 0c:1f:fd:ae:dd:0a:c8:f7:a7:0c:6b:c8:80:eb:92: e7:29:78:3b:6a:62:d5:31:26:78:b4:7c:a2:e7:bd: 31:0a:9f:3c:cf:dc:87:d4:ee:62:04:57:bf:a8:fc: 24:9c:58:af:7b:1f:41:f5:8b:f9:7e:37:21:8b:ec: 56:ed:fc:eb:4e:59:b8:00:9a:64:6d:77:84:7d:84: 74:52:35:ec:63:5a:16:03:12:62:ea:19:aa:e7:71: b4:dc:60:e9:f6:15:fc:9c:6d:47:c5:22:22:6c:e4: 3b:a0:0c:62:01:c0:2b:bd:1a:90:4e:ce:41:68:e8: 7c:07:7d:c6:2a:dd:04:2c:bc:0b:04:ca:77:8e:e0: 3b:87:ea:e4:b7:be:21:54:da:b0:2d:aa:7e:b3:ff: 7b:6e:6b:4e:3e:4e:fd:86:b9:bf:f1:1f:51:b5:3c: cd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BC:1B:7A:48:2B:FA:9C:8F:33:29:00:C4:E7:04:84:5F:2A:61:38 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:68:2d:ff:98:02:92:35:40:91:f1:8a:34:8b:f1:cc:ad:dd: fd:9d:ee:76:a2:44:6a:28:b1:b9:e7:53:84:34:4e:39:97:5c: ed:47:02:e0:b3:46:e5:39:c5:4e:03:f3:ad:77:a0:df:96:dc: 0c:a7:78:70:cc:09:9a:42:19:53:13:e4:83:e0:db:c7:96:4a: 25:37:96:f8:15:8d:93:7a:be:72:63:85:8e:76:15:98:a2:43: 2c:2e:92:ea:5d:3d:48:76:a5:50:ed:3c:e9:7a:8d:78:63:8d: d3:3f:29:8d:6e:a6:0c:e0:d3:da:bb:bd:e9:02:e3:5f:80:bb: 90:c6:89:fc:d3:97:04:e9:0c:e8:76:c2:bb:28:00:1a:c5:77: e7:ce:80:59:e6:31:ee:6e:d1:3b:52:a2:75:bf:f1:3e:60:ea: 18:fa:28:eb:31:82:67:d6:e9:0e:39:da:86:c9:2c:3c:0c:1f: ca:d5:81:aa:9b:b2:de:75:69:1a:24:5f:bb:37:74:bf:05:6a: d4:c5:0a:79:19:ae:1d:3a:e6:06:1e:d3:45:b9:a0:e1:26:89: 7c:bb:25:c3:97:85:03:bd:49:93:3d:b0:a9:ad:f4:0f:af:0a: 10:77:7e:f9:8d:27:0c:47:3e:47:ea:e3:62:65:5b:1a:11:83: ed:62:5f:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkijQrstnR6bDNVziypS695MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUwOTA3MDUwMTMyWhcNMjUwOTA4MDUwMTMyWjAzMTEwLwYDVQQD Eyg2M2JjMWI3YTQ4MmJmYTljOGYzMzI5MDBjNGU3MDQ4NDVmMmE2MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKR4yhqI6Y2jla5jSmbsBoVeyxQa UhNQG3NtZIvRUyZ7k6pxvnM2lOfvVPEnS+comeX9A9DwKUcAexU5q2yvHR292r/2 kiY+KD1EGr1VeOe/rSA72opbCt8MH/2u3QrI96cMa8iA65LnKXg7amLVMSZ4tHyi 570xCp88z9yH1O5iBFe/qPwknFivex9B9Yv5fjchi+xW7fzrTlm4AJpkbXeEfYR0 UjXsY1oWAxJi6hmq53G03GDp9hX8nG1HxSIibOQ7oAxiAcArvRqQTs5BaOh8B33G Kt0ELLwLBMp3juA7h+rkt74hVNqwLap+s/97bmtOPk79hrm/8R9RtTzNLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO8G3pIK/qcjzMpAMTnBIRfKmE4MB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGgt/5gC kjVAkfGKNIvxzK3d/Z3udqJEaiixuedThDROOZdc7UcC4LNG5TnFTgPzrXeg35bc DKd4cMwJmkIZUxPkg+Dbx5ZKJTeW+BWNk3q+cmOFjnYVmKJDLC6S6l09SHalUO08 6XqNeGON0z8pjW6mDODT2ru96QLjX4C7kMaJ/NOXBOkM6HbCuygAGsV3586AWeYx 7m7RO1Kidb/xPmDqGPoo6zGCZ9bpDjnahsksPAwfytWBqpuy3nVpGiRfuzd0vwVq 1MUKeRmuHTrmBh7TRbmg4SaJfLslw5eFA71Jkz2wqa30D68KEHd++Y0nDEc+R+rj YmVbGhGD7WJfRw== -----END CERTIFICATE-----Generated at Sun Sep 7 11:49:43 2025 by rpki-client