$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft File: OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft (raw, json) Hash identifier: 5dG1OYP3XqeZUSVR78tV+goh3Msqjnmqw6A/QeC39is= Subject key identifier: EC:A6:DA:37:66:AC:A6:86:00:BC:EE:FC:95:63:35:6A:58:73:34:00 Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 0197304D629B4008B614716C473C6D46B80E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft Manifest number: 12AE Signing time: Mon 02 Jun 2025 11:01:07 +0000 Manifest this update: Mon 02 Jun 2025 11:01:07 +0000 Manifest next update: Tue 03 Jun 2025 11:01:07 +0000 Files and hashes: 1: 0Fmh8eaTe-TA8TzJaqV0xDv1Pzo.roa (hash: ZxN3vaamtDqMo8xYPJBI33oBeaqJ8QIz0amzm/bnvtg=) 2: 3nej7O_5-sZXCWeuqPyGbja9XnQ.roa (hash: p+MNFJ74eHqjwkPNS5+3QDf8dfQpJUlMjkJWwIsIN5s=) 3: JpI0mKHoKJGb5HpwhqpgQJ-989w.roa (hash: +p1PcccuIrfXBOI8p25PVV972uHT5dceE6dg0Tn0L/g=) 4: OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl (hash: sXr45DNtuIguDpOPLZTaB9urZ5yN70eA83IyZITS7wg=) 5: Q718Z9XRXwbb8eAv-JSYxNy8m3E.roa (hash: QwKiyK2H3mBEUzLEautBF28TXwWRoI+nh+WAF8i9ayk=) 6: eapLNVKWkPJvIKSSw8FvjnbqKM4.roa (hash: lQyg7ma6RsIJVyHbW0BuPsXW31hRi/B1a2UZgfzLbWY=) 7: flTVx8-F7E37FHcVoN5708sXexM.roa (hash: snTHoXZxUjfO9kURa3StUkh2LzhC8cP2m56/uoBtpVA=) 8: itNeHRmlhkmkLNFMeFLLpwNO4FY.roa (hash: iZAIvlpDGBx0E4icQgD8R/hQnWve6QmLhqITJu2cuoY=) 9: ktpnhSV94n1dgI9-LO5orxsroMo.roa (hash: HdTZITsdNE12a7HbwFoAmzx8Exmybo0iwACkTzBDWZ0=) 10: p6yu9K0prb-3wy95x-qc7KcMywQ.roa (hash: bNVvwouaPK4oyavhTkisO8oVhR1iolZntv1z6WFieUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Jun 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:30:4d:62:9b:40:08:b6:14:71:6c:47:3c:6d:46:b8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jun 2 11:01:07 2025 GMT Not After : Jun 3 11:01:07 2025 GMT Subject: CN=eca6da3766aca68600bceefc9563356a58733400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:aa:7c:b0:b4:5b:50:05:f6:82:3f:14:38:71: 63:b7:b3:a2:22:19:49:89:d8:19:13:c1:bb:70:0e: 2c:62:42:b6:8e:36:92:1c:1f:b7:86:af:ac:66:09: ef:27:99:f7:2f:f9:db:03:90:f1:93:b0:4c:c2:ec: 6f:a0:20:bc:25:87:1c:17:f3:47:b9:be:27:67:c0: eb:4b:36:c6:c7:c3:94:4b:0d:fc:7f:a2:40:6c:de: 0e:41:a7:50:4b:f1:86:56:f4:6b:ef:b2:12:a9:3c: 11:90:e1:10:98:76:7a:5e:59:d2:f6:36:14:c0:72: d5:20:c9:76:25:58:f8:34:39:09:c1:37:e6:20:9a: 7d:f4:96:cd:31:2f:f0:1c:b2:93:56:31:be:13:89: f4:36:68:85:4a:69:0d:6f:8c:bb:60:9e:af:e4:38: f7:91:67:45:9b:5d:d1:db:9a:3b:40:36:23:e0:28: 2e:11:16:ea:72:a6:80:21:74:77:a9:8e:a7:fa:0a: 1b:a6:32:48:1a:1a:fd:0c:f3:6f:33:c2:d0:1e:d0: e9:da:bb:32:11:4c:d9:fe:cd:34:fe:d1:0c:cf:de: 2c:9a:e2:be:3d:48:4d:3b:bb:ec:93:be:9a:63:26: df:cc:9f:5b:ed:dc:38:5e:16:4d:83:39:68:d8:ca: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:DA:37:66:AC:A6:86:00:BC:EE:FC:95:63:35:6A:58:73:34:00 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a1:c2:5a:fc:1a:92:ff:2c:8d:4d:1c:09:df:3e:49:59:4c: 05:5c:11:46:ec:cd:f9:75:3f:2c:6a:d4:9c:b4:92:18:f0:b5: ea:b0:af:d3:aa:88:73:bf:e6:78:2f:f8:1e:82:d5:b5:05:b4: e3:e2:4b:cd:a8:f7:ef:d9:9b:3d:2c:62:b2:26:bd:ee:23:f4: 19:28:00:39:53:d4:db:42:21:e0:4f:31:1a:84:f1:99:d2:8e: fd:45:aa:e2:37:74:4d:57:91:6f:b1:ba:b2:19:0d:ac:2d:17: c5:a9:3b:29:e0:5d:f0:5c:72:40:d3:34:3f:41:b3:a7:2d:33: ab:2c:f0:17:2b:df:c9:c5:22:24:5b:23:b5:c9:d5:b5:5b:1d: cb:c8:8f:15:15:b5:de:fa:48:ab:64:22:72:d8:28:b2:80:b7: bb:fc:ba:30:c6:d5:e9:64:98:a4:d7:41:6b:13:92:92:a6:f2: ca:76:bf:04:1b:54:46:87:03:3d:eb:c3:d2:d1:2a:14:98:1d: 71:5c:6f:ca:fa:8e:83:56:75:9e:f8:04:1e:b7:a8:96:2c:40: 72:39:5f:85:4d:d5:f9:69:fb:4c:ce:49:ee:f6:ec:93:84:23: af:f7:f3:10:59:e9:07:01:5a:c4:38:4e:52:82:af:58:01:7f: 40:ca:58:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZcwTWKbQAi2FHFsRzxtRrgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjUwNjAyMTEwMTA3WhcNMjUwNjAzMTEwMTA3WjAzMTEwLwYDVQQD EyhlY2E2ZGEzNzY2YWNhNjg2MDBiY2VlZmM5NTYzMzU2YTU4NzMzNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66p8sLRbUAX2gj8UOHFjt7OiIhlJ idgZE8G7cA4sYkK2jjaSHB+3hq+sZgnvJ5n3L/nbA5Dxk7BMwuxvoCC8JYccF/NH ub4nZ8DrSzbGx8OUSw38f6JAbN4OQadQS/GGVvRr77ISqTwRkOEQmHZ6XlnS9jYU wHLVIMl2JVj4NDkJwTfmIJp99JbNMS/wHLKTVjG+E4n0NmiFSmkNb4y7YJ6v5Dj3 kWdFm13R25o7QDYj4CguERbqcqaAIXR3qY6n+gobpjJIGhr9DPNvM8LQHtDp2rsy EUzZ/s00/tEMz94smuK+PUhNO7vsk76aYybfzJ9b7dw4XhZNgzlo2MoJeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOym2jdmrKaGALzu/JVjNWpYczQAMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaHCWvwa kv8sjU0cCd8+SVlMBVwRRuzN+XU/LGrUnLSSGPC16rCv06qIc7/meC/4HoLVtQW0 4+JLzaj379mbPSxisia97iP0GSgAOVPU20Ih4E8xGoTxmdKO/UWq4jd0TVeRb7G6 shkNrC0Xxak7KeBd8FxyQNM0P0Gzpy0zqyzwFyvfycUiJFsjtcnVtVsdy8iPFRW1 3vpIq2QictgosoC3u/y6MMbV6WSYpNdBaxOSkqbyyna/BBtURocDPevD0tEqFJgd cVxvyvqOg1Z1nvgEHreolixAcjlfhU3V+Wn7TM5J7vbsk4Qjr/fzEFnpBwFaxDhO UoKvWAF/QMpYdg== -----END CERTIFICATE-----Generated at Mon Jun 2 17:05:41 2025 by rpki-client