$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft File: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft (raw, json) Hash identifier: ExLFYQvthXEolsrRjxp8OW7M5gMoDRg1RnKJDLk+zw4= Subject key identifier: E9:9D:08:48:37:F3:99:C4:FC:F9:99:72:06:F2:52:01:CC:EC:0D:CF Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019A1918B37ED2212BA506BCD21018D4735B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft Manifest number: 15F1 Signing time: Sat 25 Oct 2025 02:00:40 +0000 Manifest this update: Sat 25 Oct 2025 02:00:40 +0000 Manifest next update: Sun 26 Oct 2025 02:00:40 +0000 Files and hashes: 1: 3R71uiQs8A2yEYIuhFU6ltMSdoA.roa (hash: q6Bu6mNsK7g3Ktdy/8WD0fy0JiscBHWIuVXEPQ7F3vc=) 2: 4SmSne42qkJfP_8H235Hb69otEg.roa (hash: Rw2BEcxlO/hT8MVd1GJXC5JIyQ4FgN6SIY1eGGUmqEM=) 3: 81pkNOTzNwT3tYccVz9WH_xBvEM.roa (hash: i9/4g/HQckvFmPe3z7i7AGU3zvyTDUBKjWj3cd7//r4=) 4: 881k6Z9AGsNKmJpB6qBRDMoI5CA.roa (hash: T+h+MOM2xrLeeEk0JPdYNuJ0bYNKkfjCHz2MRRc6zN4=) 5: H0NKaOe5bQ8Q0_5pjno5XSaRBtA.roa (hash: 23YuHYDJK8ztv50Y7XASqWUgok/NgTr64wM7KdMg6xM=) 6: OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl (hash: VxZ2IsI8yg3wmHQs5OTTkwU4XLeKccjfNAe+5VM33qw=) 7: PSgnnJoiSIw5Hv12Voa8VUomZgQ.roa (hash: aSwQ/+jyVOvQ9xtFsxD7WSERWfDCCWFCBTIigVEVgk8=) 8: YFzAJtaEN2OUk02732wPr2MSjTc.roa (hash: t8HA0RY/FulWJBCDF+XMDsn62YqIRGXDMqv2jjU6v40=) 9: p3Y3crt9wWUb6xKtKHwtfKRhpKA.roa (hash: NWTiGaZGuwbETRLnJD5VxxB23JLGGVuboYx2qrcj0Vo=) 10: snLBQzXncuCutjB-6mlkbK17Uy8.roa (hash: Cw28lHOUeHUJQIAt/a1n6lZjE3/YqZwG3kLD22GHFE8=) 11: yNgpBLQm6ELi-mIexk0YaTfXxb4.roa (hash: pd8PpO8asVpf3qyRi+SsT0Kl6uLeF6RLa31NmZBcfSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 Oct 2025 02:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:19:18:b3:7e:d2:21:2b:a5:06:bc:d2:10:18:d4:73:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Oct 25 02:00:40 2025 GMT Not After : Oct 26 02:00:40 2025 GMT Subject: CN=e99d084837f399c4fcf9997206f25201ccec0dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:96:0e:b4:1d:3c:07:b1:d9:9b:8c:4b:90:df: 3b:4c:0f:2d:ca:d6:b0:5f:96:b8:85:b7:94:dc:92: 10:f1:a1:75:a3:02:fc:0b:a5:ac:fc:77:13:8f:aa: 95:07:c4:76:b8:27:a6:77:19:e3:f5:e2:18:28:80: 44:98:3d:df:0f:d7:80:31:73:a7:f2:41:44:ed:e8: 35:5f:07:1f:b8:56:b8:62:89:3f:46:38:00:03:f5: 3d:d6:0a:c3:cd:14:0c:cb:b4:0c:3e:ac:40:63:c8: 2e:1b:0d:18:0d:a1:5e:df:a3:30:1c:d3:78:28:1e: 32:e1:a1:4b:55:dc:bd:a3:3d:28:bf:92:ac:c5:01: ff:f2:bd:8b:34:2b:ef:5a:57:e1:c7:18:51:40:42: 23:6a:4c:8e:99:bb:ec:17:65:49:1f:25:a9:fa:4d: ff:9b:6f:7a:6b:4f:a8:ef:1e:33:72:9e:2f:0e:b3: fc:44:e8:9d:3c:41:66:e3:58:00:99:57:37:6e:56: 37:e6:12:fb:b1:2a:91:a0:17:19:dc:f4:4b:79:b2: 2c:0a:52:88:41:74:c9:fa:59:18:f9:2a:98:27:9b: 8d:f9:54:1b:bf:26:4f:30:e5:b3:6a:74:d1:1d:e2: f6:3c:e9:24:bf:2d:2b:74:e8:ca:6b:ce:47:7b:e7: f7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9D:08:48:37:F3:99:C4:FC:F9:99:72:06:F2:52:01:CC:EC:0D:CF X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:04:9e:6b:8d:6f:0e:6f:11:ec:f4:a8:7f:87:be:fb:f0:46: 23:44:ad:62:f6:57:d8:1d:fa:00:40:ad:0d:a2:5c:c3:4b:61: e2:5e:a1:4d:49:ea:2d:14:1e:3b:17:05:a7:9d:91:c4:84:c3: bf:1c:d7:a0:5b:57:56:fa:00:28:0d:7f:20:26:0f:97:3a:f4: 95:da:38:11:83:ce:3e:59:c0:33:14:c1:d3:dc:be:91:48:7f: 7d:a1:a6:fb:bb:b9:9d:1a:29:d5:8b:88:92:05:74:b4:d6:b6: c8:60:75:b7:f0:d0:e9:88:46:1e:0d:dc:ab:2d:49:b7:0a:0d: da:89:4b:16:91:e9:6c:d7:dc:1d:0d:2f:cb:f6:83:28:a6:83: 02:cf:d7:37:ed:a6:66:9d:0c:52:31:be:a7:2f:92:77:5c:19: 6d:ac:f5:ac:9e:80:dc:39:be:29:6f:1a:d7:e9:2b:bf:c1:76: 33:8f:c5:d5:87:f0:a8:60:d7:89:b9:af:a8:c8:56:0f:ed:6a: ed:6f:c5:9f:7f:c6:8e:c0:59:e5:57:74:1e:02:13:54:8d:2c: 5c:53:60:45:99:b9:91:5b:65:35:b0:57:35:a5:3e:63:4f:60: ea:fa:50:8a:70:e4:5a:84:a8:57:32:aa:53:34:94:73:a1:59: 03:f0:19:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoZGLN+0iErpQa80hAY1HNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjUxMDI1MDIwMDQwWhcNMjUxMDI2MDIwMDQwWjAzMTEwLwYDVQQD EyhlOTlkMDg0ODM3ZjM5OWM0ZmNmOTk5NzIwNmYyNTIwMWNjZWMwZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZYOtB08B7HZm4xLkN87TA8tytaw X5a4hbeU3JIQ8aF1owL8C6Ws/HcTj6qVB8R2uCemdxnj9eIYKIBEmD3fD9eAMXOn 8kFE7eg1XwcfuFa4Yok/RjgAA/U91grDzRQMy7QMPqxAY8guGw0YDaFe36MwHNN4 KB4y4aFLVdy9oz0ov5KsxQH/8r2LNCvvWlfhxxhRQEIjakyOmbvsF2VJHyWp+k3/ m296a0+o7x4zcp4vDrP8ROidPEFm41gAmVc3blY35hL7sSqRoBcZ3PRLebIsClKI QXTJ+lkY+SqYJ5uN+VQbvyZPMOWzanTRHeL2POkkvy0rdOjKa85He+f38QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmdCEg385nE/PmZcgbyUgHM7A3PMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwSea41v Dm8R7PSof4e++/BGI0StYvZX2B36AECtDaJcw0th4l6hTUnqLRQeOxcFp52RxITD vxzXoFtXVvoAKA1/ICYPlzr0ldo4EYPOPlnAMxTB09y+kUh/faGm+7u5nRop1YuI kgV0tNa2yGB1t/DQ6YhGHg3cqy1JtwoN2olLFpHpbNfcHQ0vy/aDKKaDAs/XN+2m Zp0MUjG+py+Sd1wZbaz1rJ6A3Dm+KW8a1+krv8F2M4/F1YfwqGDXibmvqMhWD+1q 7W/Fn3/GjsBZ5Vd0HgITVI0sXFNgRZm5kVtlNbBXNaU+Y09g6vpQinDkWoSoVzKq UzSUc6FZA/AZbQ== -----END CERTIFICATE-----Generated at Sat Oct 25 11:24:03 2025 by rpki-client