$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: P0HFB6vZSEF9e3aUaB98BawzR7zJwlFP2pbZ9M6c7P0= Subject key identifier: 11:F3:15:03:1D:BE:30:D5:67:F7:6A:B1:EF:93:2E:2C:06:06:34:E1 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 0197474273FFA920380E8D7575CF4A11461E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 15AB Signing time: Fri 06 Jun 2025 22:00:26 +0000 Manifest this update: Fri 06 Jun 2025 22:00:26 +0000 Manifest next update: Sat 07 Jun 2025 22:00:26 +0000 Files and hashes: 1: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=) 2: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=) 3: 9Qj_d73Uquzd6njLNSyQ7nRpEqE.roa (hash: xFBFRGfS3O+bazpDop3BgjkeDxLZtIdcjSO0Je/Hudk=) 4: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=) 5: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=) 6: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=) 7: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=) 8: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=) 9: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=) 10: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=) 11: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=) 12: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=) 13: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=) 14: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=) 15: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=) 16: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: JApxLjywMUDo8HwSdKuyMLWjt4i7QHwqbTS6zzDeN44=) 17: r5S-ydArr63Zw0HTZogwZDHaYvQ.roa (hash: SZ15CUAbG/7okIjWK5fb0NUgHkxOTUMNwwLuvHLTw3U=) 18: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=) 19: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 07 Jun 2025 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:47:42:73:ff:a9:20:38:0e:8d:75:75:cf:4a:11:46:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jun 6 22:00:26 2025 GMT Not After : Jun 7 22:00:26 2025 GMT Subject: CN=11f315031dbe30d567f76ab1ef932e2c060634e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:0a:7c:d2:74:f4:5c:84:6e:fc:b3:0d:b9: 4f:c3:b6:1f:36:4c:07:5d:6e:04:d5:53:2e:ba:93: 74:36:8e:63:73:0e:2a:d2:b6:10:7a:a1:97:07:d0: a3:ce:94:57:cd:3a:d6:45:0d:59:12:9b:81:8c:af: 15:97:1d:52:68:69:d5:c1:ac:14:94:ea:89:39:ad: 8c:81:19:4d:59:cd:c8:f7:ef:31:3d:77:dc:89:3f: 80:9d:8a:7f:dc:22:34:10:c0:00:36:4d:d8:1c:07: 23:b8:52:c2:aa:9a:88:ed:b6:f7:38:e0:6f:32:58: 15:83:70:a0:f4:99:f8:7a:0c:16:ee:81:e1:13:c1: c5:60:42:42:2f:0a:d2:43:8f:69:a0:f6:24:d2:f3: ef:9a:93:c7:6c:0b:ed:a6:48:4b:6f:c7:90:fe:a0: 81:4b:49:50:75:e3:32:c7:41:c0:e9:81:9c:0f:91: 0a:70:20:70:fd:c6:56:57:d8:ec:d3:43:64:1e:ab: b9:2a:ee:44:8a:bc:ff:22:f1:79:42:a4:71:4b:2d: 03:37:7f:35:90:03:35:0f:f5:6c:a0:0a:94:5b:ca: a9:bd:b1:04:3f:02:f5:e0:d8:91:39:fa:d7:e0:dc: 25:62:5c:ff:07:46:03:61:b5:01:4c:c8:a5:aa:d7: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F3:15:03:1D:BE:30:D5:67:F7:6A:B1:EF:93:2E:2C:06:06:34:E1 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:da:bb:4b:fa:75:8c:cc:ef:da:08:ad:92:8a:27:f7:48:0b: ef:2f:c6:0c:a2:a5:c1:e6:c3:6a:b8:6e:5f:60:f4:68:58:c7: 20:fd:60:49:ca:e3:c1:ec:c3:08:d9:ef:5b:9e:5a:a9:81:11: ec:c3:48:32:6a:aa:4b:01:77:e7:df:35:03:73:c6:70:08:41: fc:1c:85:02:3a:58:0f:3c:c5:0b:02:87:75:eb:f5:6c:a8:3b: 4d:ee:7d:8f:a9:29:ee:da:b0:19:b1:ab:4d:38:c6:5c:6b:e9: 0b:55:45:f4:5b:c5:2c:67:35:47:5c:d1:14:b1:cd:56:75:e6: 1e:25:0d:f8:6e:c1:c6:fc:17:42:f9:a8:eb:42:db:31:60:15: ac:64:b5:11:71:77:66:7e:66:dc:68:59:e4:77:35:0c:86:cb: 88:2e:92:1d:55:71:f8:a3:d0:f9:4d:54:7d:23:d1:57:d6:ce: 6f:24:d6:fd:37:ca:df:f5:4a:a3:42:c9:58:53:a0:15:b5:e1: a0:c7:a8:8d:ed:37:87:85:d0:fc:ce:26:9e:1c:a4:36:f3:b3: 14:b0:32:37:81:92:d0:62:f6:66:54:69:3b:f7:e7:dd:95:82: 3c:23:ac:56:92:66:be:34:e9:e3:12:45:dc:b2:6f:19:5f:aa: f9:b1:7b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdHQnP/qSA4Do11dc9KEUYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUwNjA2MjIwMDI2WhcNMjUwNjA3MjIwMDI2WjAzMTEwLwYDVQQD EygxMWYzMTUwMzFkYmUzMGQ1NjdmNzZhYjFlZjkzMmUyYzA2MDYzNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGMKfNJ09FyEbvyzDblPw7YfNkwH XW4E1VMuupN0No5jcw4q0rYQeqGXB9CjzpRXzTrWRQ1ZEpuBjK8Vlx1SaGnVwawU lOqJOa2MgRlNWc3I9+8xPXfciT+AnYp/3CI0EMAANk3YHAcjuFLCqpqI7bb3OOBv MlgVg3Cg9Jn4egwW7oHhE8HFYEJCLwrSQ49poPYk0vPvmpPHbAvtpkhLb8eQ/qCB S0lQdeMyx0HA6YGcD5EKcCBw/cZWV9js00NkHqu5Ku5Eirz/IvF5QqRxSy0DN381 kAM1D/VsoAqUW8qpvbEEPwL14NiROfrX4NwlYlz/B0YDYbUBTMilqtedUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHzFQMdvjDVZ/dqse+TLiwGBjThMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9q7S/p1 jMzv2gitkoon90gL7y/GDKKlwebDarhuX2D0aFjHIP1gScrjwezDCNnvW55aqYER 7MNIMmqqSwF35981A3PGcAhB/ByFAjpYDzzFCwKHdev1bKg7Te59j6kp7tqwGbGr TTjGXGvpC1VF9FvFLGc1R1zRFLHNVnXmHiUN+G7BxvwXQvmo60LbMWAVrGS1EXF3 Zn5m3GhZ5Hc1DIbLiC6SHVVx+KPQ+U1UfSPRV9bObyTW/TfK3/VKo0LJWFOgFbXh oMeoje03h4XQ/M4mnhykNvOzFLAyN4GS0GL2ZlRpO/fn3ZWCPCOsVpJmvjTp4xJF 3LJvGV+q+bF7og== -----END CERTIFICATE-----Generated at Sat Jun 7 01:12:59 2025 by rpki-client