$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: SOIHNPJZpLP5r7INHYfeLFu8HvTccC6qpHJMwOUVvrE= Subject key identifier: 22:2C:7C:B8:AD:6D:ED:DE:58:D0:83:24:7C:71:97:73:6B:21:00:3D Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 0197B70F194D21520C73A53D461A13FA95D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 15C1 Signing time: Sat 28 Jun 2025 15:01:49 +0000 Manifest this update: Sat 28 Jun 2025 15:01:49 +0000 Manifest next update: Sun 29 Jun 2025 15:01:49 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: sP/ym2CbWz7jN2VsmdkG1ZZIGVZI+k4SGhUhTkdTuy4=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0f:19:4d:21:52:0c:73:a5:3d:46:1a:13:fa:95:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jun 28 15:01:49 2025 GMT Not After : Jun 29 15:01:49 2025 GMT Subject: CN=222c7cb8ad6dedde58d083247c7197736b21003d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:b5:13:e4:2f:ee:67:96:ff:a1:e8:f2:3f: 46:f4:22:ba:dc:6f:07:60:d6:3d:f0:12:20:60:45: ab:bf:b9:3d:39:ef:d6:c8:20:aa:56:10:e7:ef:11: 61:8b:d1:84:04:d9:22:7c:de:20:12:53:a3:67:6d: d9:94:9a:e1:3a:92:22:7a:bb:30:5d:68:8f:c3:a4: a9:51:4f:33:cf:65:07:b0:d5:ff:38:97:1d:fc:9d: 10:cf:fa:57:aa:fd:db:2a:17:ee:2f:40:c0:6b:3f: 59:de:a9:9b:89:4f:1e:2f:17:d1:d4:12:91:16:8a: d2:34:84:ce:ad:e5:5b:d9:d1:47:75:c0:18:8c:7a: 69:bf:7d:f9:5f:7b:01:1a:bf:40:94:39:94:fe:ff: 4a:04:cc:63:70:0d:cf:12:61:b6:83:0a:f2:22:0d: 0d:c7:92:0d:f6:7b:4c:2f:1e:cc:1f:bb:26:1e:25: 16:db:f2:06:6a:c9:66:ed:d4:51:20:a4:dc:01:2a: 4b:39:21:e3:39:97:5e:dc:49:18:5e:23:6d:be:15: a4:9b:37:7e:86:6f:aa:ad:18:28:c1:72:e9:20:fd: a6:12:2a:1b:1c:33:e6:77:71:35:73:fd:fc:4b:1e: b1:20:6b:92:40:13:7c:6c:f0:68:22:1b:93:ac:f7: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:7C:B8:AD:6D:ED:DE:58:D0:83:24:7C:71:97:73:6B:21:00:3D X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dc:81:03:3c:59:e1:55:58:b9:05:34:cb:28:f8:92:20:80: b8:5a:74:33:1e:86:0d:2f:ee:90:de:6e:ca:4e:89:3c:7e:73: 69:ad:a4:77:fc:c7:2f:2f:d5:83:da:11:1f:22:f6:94:aa:74: 58:fb:d2:37:22:bb:6f:f4:02:d7:f8:74:bb:e4:e9:c9:31:05: 9e:c9:e9:cd:7f:c5:c9:8a:59:e1:c2:06:79:b3:60:47:f8:02: e1:e8:92:2b:b2:b8:28:e7:c2:00:c5:5b:bb:8b:0f:3d:70:7f: 75:9b:a7:65:af:0e:a2:ae:e2:52:77:e5:61:66:cb:40:a1:ca: 38:60:a2:ab:f6:88:9b:1a:e9:7b:a5:3c:38:bd:be:82:d6:4f: 70:65:09:dc:dc:fe:2c:c0:7b:8f:dd:c7:92:12:8e:aa:8d:c3: 89:1c:f3:21:af:57:73:af:18:d8:53:dc:62:82:42:28:dd:ba: b7:a2:79:05:8b:3b:cb:b6:8b:82:74:f8:25:43:91:26:38:ff: 19:98:8b:dd:15:a8:12:a6:3f:cc:44:0c:de:cc:8f:58:aa:cf: 74:2d:31:35:c0:9d:48:e1:a9:03:26:fd:3d:71:d4:97:59:fa: 59:c7:4c:0a:09:ea:bf:79:7e:83:5a:f7:31:7a:b8:fc:db:cf: fd:ce:5b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DxlNIVIMc6U9RhoT+pXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUwNjI4MTUwMTQ5WhcNMjUwNjI5MTUwMTQ5WjAzMTEwLwYDVQQD EygyMjJjN2NiOGFkNmRlZGRlNThkMDgzMjQ3YzcxOTc3MzZiMjEwMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM21E+Qv7meW/6Ho8j9G9CK63G8H YNY98BIgYEWrv7k9Oe/WyCCqVhDn7xFhi9GEBNkifN4gElOjZ23ZlJrhOpIiersw XWiPw6SpUU8zz2UHsNX/OJcd/J0Qz/pXqv3bKhfuL0DAaz9Z3qmbiU8eLxfR1BKR ForSNITOreVb2dFHdcAYjHppv335X3sBGr9AlDmU/v9KBMxjcA3PEmG2gwryIg0N x5IN9ntMLx7MH7smHiUW2/IGaslm7dRRIKTcASpLOSHjOZde3EkYXiNtvhWkmzd+ hm+qrRgowXLpIP2mEiobHDPmd3E1c/38Sx6xIGuSQBN8bPBoIhuTrPcvKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIsfLitbe3eWNCDJHxxl3NrIQA9MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9yBAzxZ 4VVYuQU0yyj4kiCAuFp0Mx6GDS/ukN5uyk6JPH5zaa2kd/zHLy/Vg9oRHyL2lKp0 WPvSNyK7b/QC1/h0u+TpyTEFnsnpzX/FyYpZ4cIGebNgR/gC4eiSK7K4KOfCAMVb u4sPPXB/dZunZa8Ooq7iUnflYWbLQKHKOGCiq/aImxrpe6U8OL2+gtZPcGUJ3Nz+ LMB7j93HkhKOqo3DiRzzIa9Xc68Y2FPcYoJCKN26t6J5BYs7y7aLgnT4JUORJjj/ GZiL3RWoEqY/zEQM3syPWKrPdC0xNcCdSOGpAyb9PXHUl1n6WcdMCgnqv3l+g1r3 MXq4/NvP/c5byw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:16:38 2025 by rpki-client