$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: yMk5NiYu2Z1ikf7rkL95XMMoznJFgf4hy70NURSJUuU= Subject key identifier: 30:F2:1F:38:DB:C1:8C:C5:35:47:41:00:95:57:57:DA:8B:3F:50:B9 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 0196BDEE5BBB26371EC747E808B80418DE18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1540 Signing time: Sun 11 May 2025 06:00:36 +0000 Manifest this update: Sun 11 May 2025 06:00:36 +0000 Manifest next update: Mon 12 May 2025 06:00:36 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: ZSfbJd/D4Psc1Z5x7owNJ666XPfhxzQnhe0jdIajR9E=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:ee:5b:bb:26:37:1e:c7:47:e8:08:b8:04:18:de:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: May 11 06:00:36 2025 GMT Not After : May 12 06:00:36 2025 GMT Subject: CN=30f21f38dbc18cc535474100955757da8b3f50b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:38:46:53:4c:7a:66:b1:33:3a:86:b8:52: 7e:c0:b8:39:68:44:96:a9:08:1b:74:9f:ef:1d:47: 90:41:b5:79:bc:99:db:f1:e9:cd:30:ac:35:9d:ae: 20:23:45:f5:dc:ab:08:97:a5:7b:6e:71:cc:1e:93: 19:a0:dc:98:b8:fd:0d:1e:d7:26:f8:bc:74:d9:14: 63:0f:8a:93:d3:a3:5a:ff:f2:e8:03:64:79:8d:78: 72:1b:ef:93:cb:21:b8:2b:fa:fd:27:6f:f4:b2:95: ef:24:9f:02:9a:49:4d:0e:2a:6c:fb:9a:47:1e:e7: b9:62:eb:23:23:69:58:05:4d:3b:f3:5f:4e:90:bf: 71:8b:0a:e8:19:c1:40:29:0d:a0:a4:52:0f:35:cf: 38:c4:41:b7:42:3a:bd:ef:4d:1a:88:98:1d:f7:4c: 25:ff:bb:30:bd:89:93:e9:93:a4:11:29:59:9b:38: 1a:ca:b4:26:4c:89:ec:a9:e1:3a:10:06:b1:61:51: 4d:e6:8e:db:dc:d6:88:5d:cd:c7:1c:93:cb:9c:e3: da:78:33:81:56:b5:d2:7a:18:f2:15:f6:27:ac:77: 9c:cf:a1:1d:5a:2c:64:91:86:60:52:0d:1e:fd:76: cc:51:20:55:32:86:69:83:8f:be:21:67:7f:76:fa: a4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F2:1F:38:DB:C1:8C:C5:35:47:41:00:95:57:57:DA:8B:3F:50:B9 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:db:e6:cf:97:ef:75:b3:60:69:d1:41:56:bf:7e:fd:39:8a: bb:dd:dd:0c:27:a2:ac:bc:bb:0c:6b:7f:36:5c:fe:46:bf:82: 86:bd:c6:2d:7d:c6:f4:40:4e:d8:1e:d2:37:2d:78:b1:37:8d: 7f:02:bb:68:86:51:4b:f6:31:28:6b:14:62:e0:d8:9a:35:5b: b3:49:4c:a5:9f:b9:a1:7b:ab:e0:26:7d:12:e5:87:88:0f:44: 39:29:b4:d8:05:e1:91:de:82:a6:eb:f5:40:f1:40:a8:eb:4f: 78:4a:32:7c:c3:ec:6e:65:5e:65:7a:b8:e0:2b:e0:04:1e:0e: 9a:a3:6f:cc:1b:f8:6e:a2:2d:70:50:eb:84:61:ea:ff:63:af: 8c:55:35:e1:1a:ce:b8:54:fe:b9:15:22:69:86:e3:36:5b:0b: 6a:7b:b2:14:76:af:03:51:a6:46:2d:a7:cb:e6:2b:6c:24:fc: 22:33:02:a5:26:e8:32:12:7f:cc:32:76:e4:5c:a3:4a:6f:3e: e6:b3:33:47:6d:28:2a:27:e4:92:28:51:ba:1d:95:46:b1:1c: 96:9f:10:fa:02:98:f0:87:73:2d:59:10:fa:a4:0e:57:da:c4: 6a:08:64:6d:aa:fe:e8:db:b5:a4:32:f1:53:fb:7d:e2:81:7b: 8a:f0:b8:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa97lu7Jjcex0foCLgEGN4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUwNTExMDYwMDM2WhcNMjUwNTEyMDYwMDM2WjAzMTEwLwYDVQQD EygzMGYyMWYzOGRiYzE4Y2M1MzU0NzQxMDA5NTU3NTdkYThiM2Y1MGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN04RlNMemaxMzqGuFJ+wLg5aESW qQgbdJ/vHUeQQbV5vJnb8enNMKw1na4gI0X13KsIl6V7bnHMHpMZoNyYuP0NHtcm +Lx02RRjD4qT06Na//LoA2R5jXhyG++TyyG4K/r9J2/0spXvJJ8CmklNDips+5pH Hue5YusjI2lYBU07819OkL9xiwroGcFAKQ2gpFIPNc84xEG3Qjq9700aiJgd90wl /7swvYmT6ZOkESlZmzgayrQmTInsqeE6EAaxYVFN5o7b3NaIXc3HHJPLnOPaeDOB VrXSehjyFfYnrHecz6EdWixkkYZgUg0e/XbMUSBVMoZpg4++IWd/dvqkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDyHzjbwYzFNUdBAJVXV9qLP1C5MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtvmz5fv dbNgadFBVr9+/TmKu93dDCeirLy7DGt/Nlz+Rr+Chr3GLX3G9EBO2B7SNy14sTeN fwK7aIZRS/YxKGsUYuDYmjVbs0lMpZ+5oXur4CZ9EuWHiA9EOSm02AXhkd6Cpuv1 QPFAqOtPeEoyfMPsbmVeZXq44CvgBB4OmqNvzBv4bqItcFDrhGHq/2OvjFU14RrO uFT+uRUiaYbjNlsLanuyFHavA1GmRi2ny+YrbCT8IjMCpSboMhJ/zDJ25FyjSm8+ 5rMzR20oKifkkihRuh2VRrEclp8Q+gKY8IdzLVkQ+qQOV9rEaghkbar+6Nu1pDLx U/t94oF7ivC4xA== -----END CERTIFICATE-----Generated at Sun May 11 09:35:08 2025 by rpki-client