$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: hitsRnfUqJh4GrH83ah9WytoDEw3IxzSXvgOFI7FOB0= Subject key identifier: A9:79:62:A7:22:F8:78:63:98:AE:A6:38:40:E3:AC:77:2C:E2:3C:87 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 01992F353E069F7B69A051C377AD5528C219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 1576 Signing time: Tue 09 Sep 2025 16:00:42 +0000 Manifest this update: Tue 09 Sep 2025 16:00:42 +0000 Manifest next update: Wed 10 Sep 2025 16:00:42 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 4: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 5: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: eIV4g07S7HnW1UGjLmBDwAyxpvUC7A4075PPsEaWI3M=) 6: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 7: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 8: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 9: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=) 10: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Sep 2025 16:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:2f:35:3e:06:9f:7b:69:a0:51:c3:77:ad:55:28:c2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Sep 9 16:00:42 2025 GMT Not After : Sep 10 16:00:42 2025 GMT Subject: CN=a97962a722f8786398aea63840e3ac772ce23c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:7e:f0:c3:1b:a8:1e:cc:bc:89:3b:8f:0e: 26:3b:95:2f:46:6f:8e:06:5d:49:ea:72:99:94:80: 92:97:f9:94:b4:ab:cc:62:7c:ef:ae:3f:a5:a2:79: 16:ca:15:40:12:6f:08:4d:47:96:63:3e:52:ed:42: 24:ac:e3:91:99:1c:46:92:e8:41:1a:39:6d:34:47: d5:05:f0:09:9c:03:b4:fb:18:f9:92:2e:a9:85:b1: 43:db:18:31:9f:0b:c2:a2:7c:2b:b2:b8:4f:03:16: e3:d0:9a:3f:74:ff:f9:0a:d3:88:d1:f5:dd:a0:99: b6:4a:3b:2c:bc:64:48:3c:02:aa:e7:1f:aa:8a:da: c6:10:80:29:10:12:63:31:9e:b6:15:6e:ba:2b:74: 10:ae:43:1e:56:1b:23:07:d9:6a:1f:9c:e9:3e:29: ec:b8:67:54:79:93:ee:7f:87:08:31:1f:ed:09:90: 95:97:de:c9:c1:0e:aa:e6:06:cb:68:e0:ff:1c:54: 54:4f:3f:8b:0e:73:8a:d7:bb:eb:b7:a8:39:a6:7c: e4:7f:46:13:c3:9b:77:54:3d:3a:a6:f2:46:d0:a6: 24:06:3e:15:1e:32:bd:cf:8f:6c:e0:e9:bc:a3:2e: 10:f3:2d:02:91:dc:f7:6a:7e:96:40:9b:db:cc:63: 6e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:79:62:A7:22:F8:78:63:98:AE:A6:38:40:E3:AC:77:2C:E2:3C:87 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c7:05:e0:49:e8:dc:17:e9:9f:78:08:c3:14:71:4b:c3:da: e3:db:00:bb:2f:1c:5e:dd:1a:43:d7:2e:b4:79:b2:0f:6b:c4: bf:d0:e9:56:e9:bb:38:a4:79:d3:b8:7c:96:4e:32:a1:32:08: a9:43:2b:29:94:d7:9c:5b:02:a0:04:24:61:b3:cb:a5:80:21: 88:a7:ba:6c:bb:ed:d8:3c:2a:17:bc:c7:6a:eb:3e:66:8d:9f: 74:e8:d6:21:92:a9:37:75:d0:e5:db:b0:22:a2:d3:cd:32:10: 2b:29:75:b6:a9:3a:3b:90:37:4a:f7:22:a3:fa:21:a7:ea:5d: fc:35:48:55:99:cd:5f:2a:c9:ee:90:3f:ea:04:53:63:d0:fa: ad:66:06:a5:ec:aa:c8:57:06:8a:59:06:cf:5f:e0:bc:d9:a4: a9:ab:82:b3:65:f3:af:56:72:77:21:67:e5:87:4b:fa:0c:e9: c2:d0:87:69:ff:31:87:a3:6a:9e:d3:66:22:09:f2:a3:2d:c6: 2c:50:db:b0:b1:7b:0f:5a:48:9d:15:0b:1d:e8:bc:2e:c1:d2: 27:bd:bd:0c:5f:ba:29:25:aa:16:74:ad:a2:ce:4c:14:89:b7: 3c:4c:e8:40:d5:ab:a7:0e:0e:53:7c:a9:49:15:02:cd:8a:70: 68:e5:13:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZkvNT4Gn3tpoFHDd61VKMIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUwOTA5MTYwMDQyWhcNMjUwOTEwMTYwMDQyWjAzMTEwLwYDVQQD EyhhOTc5NjJhNzIyZjg3ODYzOThhZWE2Mzg0MGUzYWM3NzJjZTIzYzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D9+8MMbqB7MvIk7jw4mO5UvRm+O Bl1J6nKZlICSl/mUtKvMYnzvrj+lonkWyhVAEm8ITUeWYz5S7UIkrOORmRxGkuhB GjltNEfVBfAJnAO0+xj5ki6phbFD2xgxnwvConwrsrhPAxbj0Jo/dP/5CtOI0fXd oJm2SjssvGRIPAKq5x+qitrGEIApEBJjMZ62FW66K3QQrkMeVhsjB9lqH5zpPins uGdUeZPuf4cIMR/tCZCVl97JwQ6q5gbLaOD/HFRUTz+LDnOK17vrt6g5pnzkf0YT w5t3VD06pvJG0KYkBj4VHjK9z49s4Om8oy4Q8y0Ckdz3an6WQJvbzGNu3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKl5Yqci+HhjmK6mOEDjrHcs4jyHMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMcF4Eno 3Bfpn3gIwxRxS8Pa49sAuy8cXt0aQ9cutHmyD2vEv9DpVum7OKR507h8lk4yoTII qUMrKZTXnFsCoAQkYbPLpYAhiKe6bLvt2DwqF7zHaus+Zo2fdOjWIZKpN3XQ5duw IqLTzTIQKyl1tqk6O5A3Svcio/ohp+pd/DVIVZnNXyrJ7pA/6gRTY9D6rWYGpeyq yFcGilkGz1/gvNmkqauCs2Xzr1ZydyFn5YdL+gzpwtCHaf8xh6NqntNmIgnyoy3G LFDbsLF7D1pInRULHei8LsHSJ729DF+6KSWqFnStos5MFIm3PEzoQNWrpw4OU3yp SRUCzYpwaOUTMg== -----END CERTIFICATE-----Generated at Tue Sep 9 22:50:21 2025 by rpki-client