$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft File: olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json) Hash identifier: UgKdEqvq6O9LzHZTHGlq5tGRiWuBBMRp3kVpZbR4Tio= Subject key identifier: AA:9A:B6:F6:0F:BD:DF:B2:90:F5:5A:5E:F3:62:B8:08:BC:49:D6:A4 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 0196029C50C352139666619BB2D2A78E0CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft Manifest number: 1500 Signing time: Fri 04 Apr 2025 21:02:00 +0000 Manifest this update: Fri 04 Apr 2025 21:02:00 +0000 Manifest next update: Sat 05 Apr 2025 21:02:00 +0000 Files and hashes: 1: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=) 2: 7X53oJLqGOE0xx3KdPazgPnRT3U.roa (hash: uSzYsB4qy63qJbEIyuqElP6d6MoCw1DtIo1FVml3qr0=) 3: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=) 4: 8iIqri7IvcauWOTMINZhQiLRKvo.roa (hash: RyqX7TgKsmeFBvLMMu3I/bH8LRWEmU571C2kQM35LYo=) 5: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=) 6: CEFPZMYki_XCGuRap8cQ4UDAZVo.roa (hash: 7Ufr7BJKn/AEyurGnL+WUKXJlpjofXPV50+llzYFi0w=) 7: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=) 8: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=) 9: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=) 10: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=) 11: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=) 12: QPlqMiWOSf78xj2rqyZ0eOqZBss.roa (hash: MCmgXObXIkG1ZJluYAKWR91hwdQnUbKcsINqcTuBS6o=) 13: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=) 14: UrXy_LDsHx2iNrccJeDCBS_jIt8.roa (hash: TsZDwaHwD4vmvW8H5SOM5KIJanIsOqNbP0SQtQy4htA=) 15: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=) 16: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=) 17: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=) 18: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=) 19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: PVU1j9Ahv8fhxrV2rC0cZdaoiq0Ehn3QhQsKQue1Tc4=) 20: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=) 21: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:9c:50:c3:52:13:96:66:61:9b:b2:d2:a7:8e:0c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Apr 4 21:02:00 2025 GMT Not After : Apr 5 21:02:00 2025 GMT Subject: CN=aa9ab6f60fbddfb290f55a5ef362b808bc49d6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:62:c8:84:52:0e:34:ad:fb:d0:92:8e:9c:09: 7b:8b:7f:94:d8:7d:c3:86:81:7c:77:f6:fc:71:40: dd:c6:e9:f1:51:20:a8:39:c6:b4:16:83:a1:de:69: bb:b8:eb:07:25:c0:4d:90:e3:ab:2f:86:da:7c:d7: 3a:a2:0b:62:09:03:ab:28:a7:5f:84:f1:65:6c:05: 1f:07:05:aa:5b:73:08:3e:a6:11:0a:95:35:68:9f: 8a:dc:dc:5e:92:84:ba:e3:e7:bc:8b:54:b2:ec:d2: 0c:4f:a7:2f:bc:68:33:49:01:e0:0e:8e:5e:1e:42: 47:b6:3e:62:79:8e:f2:96:d1:49:d4:f9:64:d9:6d: 16:2d:ed:e7:53:99:c2:4f:2e:b5:ed:f1:b0:50:31: d8:0b:75:48:5d:a0:46:08:1a:56:c7:c2:7d:15:4a: cf:db:d3:ec:02:f2:af:e8:71:b3:6d:3c:40:68:1d: 24:19:9a:81:35:3e:91:88:64:e5:27:69:b0:06:d1: d2:aa:4f:59:ed:fd:41:a7:f3:28:f7:ca:3f:32:4a: 21:16:56:74:f1:a1:ee:53:f2:f6:01:d1:a3:a8:79: 98:64:9a:ea:f9:e9:bb:c5:80:9f:eb:5b:58:bf:4d: 65:2d:9b:28:87:ab:78:e0:0e:1e:a2:48:bf:ea:ea: 74:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9A:B6:F6:0F:BD:DF:B2:90:F5:5A:5E:F3:62:B8:08:BC:49:D6:A4 X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:01:72:d2:25:7f:e3:84:14:1b:00:bf:f5:1e:f0:26:94:2b: 15:e5:26:29:8b:08:c8:f0:df:3e:55:47:b7:f5:c5:c8:41:32: d0:92:e8:b6:1c:7f:66:e4:04:4f:dc:4d:3e:a1:1d:9a:35:c1: fb:a0:5c:aa:3f:e2:30:81:53:fc:4f:6a:c6:f5:bb:dd:ba:6c: 43:ee:0d:45:96:88:4a:75:cf:5d:62:60:ea:01:0c:27:1e:e4: 1d:3d:b4:60:39:2c:bd:d8:08:c2:ce:47:54:3f:85:75:49:a9: 5d:bc:33:ee:44:64:6d:8c:14:95:c0:06:8f:3a:bd:a7:5c:4d: 10:f4:98:f5:94:e9:ea:5e:ed:b9:43:4d:68:e1:ce:57:05:a9: 1a:31:a6:c7:f0:a2:27:42:fa:70:65:f1:0d:b0:2d:61:3f:92: 04:5d:bb:53:14:8c:81:8e:f3:ae:e6:a4:f9:11:d3:33:bb:ba: a5:6d:f2:7e:07:80:77:f4:63:58:2f:55:c9:a4:ab:89:4b:9f: fa:59:70:a2:02:0b:b2:86:82:6d:f1:46:5d:56:23:2e:db:bc: 59:6b:96:f9:f3:b1:84:74:63:58:8d:ae:df:8f:56:ab:d6:c7: b0:01:e7:f7:86:3d:df:48:a0:96:94:40:de:76:a5:9b:16:65: fe:7c:8e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYCnFDDUhOWZmGbstKnjgziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjUwNDA0MjEwMjAwWhcNMjUwNDA1MjEwMjAwWjAzMTEwLwYDVQQD EyhhYTlhYjZmNjBmYmRkZmIyOTBmNTVhNWVmMzYyYjgwOGJjNDlkNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WLIhFIONK370JKOnAl7i3+U2H3D hoF8d/b8cUDdxunxUSCoOca0FoOh3mm7uOsHJcBNkOOrL4bafNc6ogtiCQOrKKdf hPFlbAUfBwWqW3MIPqYRCpU1aJ+K3NxekoS64+e8i1Sy7NIMT6cvvGgzSQHgDo5e HkJHtj5ieY7yltFJ1Plk2W0WLe3nU5nCTy617fGwUDHYC3VIXaBGCBpWx8J9FUrP 29PsAvKv6HGzbTxAaB0kGZqBNT6RiGTlJ2mwBtHSqk9Z7f1Bp/Mo98o/MkohFlZ0 8aHuU/L2AdGjqHmYZJrq+em7xYCf61tYv01lLZsoh6t44A4eoki/6up0HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqatvYPvd+ykPVaXvNiuAi8SdakMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwAFy0iV/ 44QUGwC/9R7wJpQrFeUmKYsIyPDfPlVHt/XFyEEy0JLothx/ZuQET9xNPqEdmjXB +6Bcqj/iMIFT/E9qxvW73bpsQ+4NRZaISnXPXWJg6gEMJx7kHT20YDksvdgIws5H VD+FdUmpXbwz7kRkbYwUlcAGjzq9p1xNEPSY9ZTp6l7tuUNNaOHOVwWpGjGmx/Ci J0L6cGXxDbAtYT+SBF27UxSMgY7zruak+RHTM7u6pW3yfgeAd/RjWC9VyaSriUuf +llwogILsoaCbfFGXVYjLtu8WWuW+fOxhHRjWI2u349Wq9bHsAHn94Y930iglpRA 3nalmxZl/nyOyQ== -----END CERTIFICATE-----Generated at Fri Apr 4 23:38:22 2025 by rpki-client