$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: LOLcatP9ZEAkV4XiX9PifYwvxrcUNLyQM1Q1uKUyAbQ= Subject key identifier: E2:A4:A4:B1:D4:6E:84:50:B7:ED:30:55:69:C3:7E:34:94:B9:B6:E9 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 0198D4E06820ABEC25989B5145554D92A4B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1655 Signing time: Sat 23 Aug 2025 03:02:13 +0000 Manifest this update: Sat 23 Aug 2025 03:02:13 +0000 Manifest next update: Sun 24 Aug 2025 03:02:13 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: P/tfdl1FKCEJnYzGQ/0KYRIFp4ok/1neoCDqCepGA2k=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:68:20:ab:ec:25:98:9b:51:45:55:4d:92:a4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Aug 23 03:02:13 2025 GMT Not After : Aug 24 03:02:13 2025 GMT Subject: CN=e2a4a4b1d46e8450b7ed305569c37e3494b9b6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:4a:a2:1a:ea:6f:4f:4a:b2:5c:27:d8:92: 08:32:82:98:77:9d:17:84:c0:e7:5a:33:c5:c9:75: 9e:9f:cd:e1:92:42:c2:c3:aa:d2:de:7e:c3:74:b7: 5d:b2:d3:23:24:a5:55:75:78:90:e3:b6:2e:cd:27: d8:46:73:d8:7e:68:cd:24:aa:3f:ff:2b:30:b6:2e: 07:3f:52:dd:30:b3:72:96:36:66:71:32:04:34:21: da:61:fe:80:16:28:9b:ba:82:9f:16:5d:1d:8d:ff: 6f:55:30:b1:66:ac:7e:d4:0a:4e:69:a4:7d:4f:b3: 42:30:a3:b6:00:67:f6:88:4c:18:cf:d8:1d:40:98: aa:15:84:5f:a9:07:c7:84:50:b2:1c:d8:88:32:0a: 7c:07:36:85:9c:d7:7c:4f:06:98:10:b0:bb:6a:05: c8:43:c1:53:7c:00:52:ea:4f:ef:de:82:62:f5:a0: 66:d7:60:58:6d:0f:8b:54:be:a1:d1:70:8a:63:8d: 2c:d3:97:0d:da:06:c7:61:b3:ec:48:05:14:00:ac: f4:53:77:01:18:b5:d3:11:8a:28:25:95:da:93:84: 5a:3b:7f:6a:5c:dd:1d:dd:4c:21:c2:43:5e:bc:00: 95:59:a3:51:dd:4a:e0:33:92:b1:26:52:33:64:2a: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A4:A4:B1:D4:6E:84:50:B7:ED:30:55:69:C3:7E:34:94:B9:B6:E9 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e8:31:70:81:49:d4:1c:4a:16:33:e2:40:56:b4:bc:38:c7: 2f:8c:47:a3:ee:7e:4e:99:10:db:0f:6c:03:c2:19:69:16:ee: f1:78:3d:cd:91:b9:76:af:23:5a:a3:43:01:d7:37:8e:2e:09: 18:35:77:61:9f:aa:79:f2:4c:8d:5d:7b:af:e5:a1:08:7c:7f: 99:10:43:d2:b3:b5:e4:30:ba:61:32:6e:14:cf:76:56:ba:0b: 7e:32:81:6d:17:c9:a5:15:43:91:d4:ea:85:5c:37:ac:fc:af: bf:9f:3b:a5:3b:cc:fb:4e:7f:01:fc:b4:5c:d1:23:30:ad:c9: 1f:9f:56:b5:9f:4f:f8:f0:a7:52:36:61:ff:d7:20:d9:f0:b6: 5f:9c:6a:10:54:38:5e:67:d7:c8:9b:28:b2:81:02:d8:72:ca: c0:dd:03:9b:02:6b:8d:08:68:90:65:e3:4b:20:6e:ad:ea:59: 7c:0c:2c:62:f2:2d:6f:e7:83:3b:63:ed:b1:5b:e2:ff:ae:af: 45:f6:1d:3d:b4:01:e8:cd:56:db:b6:ce:b7:65:81:c8:71:69: d5:52:04:7a:82:cf:59:87:19:8f:d9:74:c3:17:d2:a9:ec:6f: a5:36:b6:61:09:00:e6:61:a3:dc:1f:7c:4e:03:36:3f:0d:d8: 06:63:41:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4Gggq+wlmJtRRVVNkqS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUwODIzMDMwMjEzWhcNMjUwODI0MDMwMjEzWjAzMTEwLwYDVQQD EyhlMmE0YTRiMWQ0NmU4NDUwYjdlZDMwNTU2OWMzN2UzNDk0YjliNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq1Kohrqb09Kslwn2JIIMoKYd50X hMDnWjPFyXWen83hkkLCw6rS3n7DdLddstMjJKVVdXiQ47YuzSfYRnPYfmjNJKo/ /yswti4HP1LdMLNyljZmcTIENCHaYf6AFiibuoKfFl0djf9vVTCxZqx+1ApOaaR9 T7NCMKO2AGf2iEwYz9gdQJiqFYRfqQfHhFCyHNiIMgp8BzaFnNd8TwaYELC7agXI Q8FTfABS6k/v3oJi9aBm12BYbQ+LVL6h0XCKY40s05cN2gbHYbPsSAUUAKz0U3cB GLXTEYooJZXak4RaO39qXN0d3UwhwkNevACVWaNR3UrgM5KxJlIzZCpx+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKkpLHUboRQt+0wVWnDfjSUubbpMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOgxcIFJ 1BxKFjPiQFa0vDjHL4xHo+5+TpkQ2w9sA8IZaRbu8Xg9zZG5dq8jWqNDAdc3ji4J GDV3YZ+qefJMjV17r+WhCHx/mRBD0rO15DC6YTJuFM92VroLfjKBbRfJpRVDkdTq hVw3rPyvv587pTvM+05/Afy0XNEjMK3JH59WtZ9P+PCnUjZh/9cg2fC2X5xqEFQ4 XmfXyJsosoEC2HLKwN0DmwJrjQhokGXjSyBurepZfAwsYvItb+eDO2PtsVvi/66v RfYdPbQB6M1W27bOt2WByHFp1VIEeoLPWYcZj9l0wxfSqexvpTa2YQkA5mGj3B98 TgM2Pw3YBmNBNw== -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:40 2025 by rpki-client