$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: IJWadD2l7ExU75RfIR2SWu3y0foRJMzXJM4bQt8vxX8= Subject key identifier: 3E:A9:BE:3C:2D:6B:79:A1:AE:BE:06:E7:53:82:32:ED:60:0B:4E:CF Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 0199FA6A45BDCDDCEDE4FAE91328EEBC57FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 16ED Signing time: Sun 19 Oct 2025 03:01:32 +0000 Manifest this update: Sun 19 Oct 2025 03:01:32 +0000 Manifest next update: Mon 20 Oct 2025 03:01:32 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: IOexEyaBx+9AX3FZIyrqshW/RM/wmGI4AhFESZZzxb4=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 03:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fa:6a:45:bd:cd:dc:ed:e4:fa:e9:13:28:ee:bc:57:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Oct 19 03:01:32 2025 GMT Not After : Oct 20 03:01:32 2025 GMT Subject: CN=3ea9be3c2d6b79a1aebe06e7538232ed600b4ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:92:14:8e:42:be:11:66:ad:3d:e6:b5:41: 5f:64:5b:f2:04:9d:bc:8f:d1:00:7b:5f:65:0d:64: dd:e5:67:cd:9a:17:80:4a:4b:c2:f2:c4:32:80:1b: a2:0e:a1:a3:65:f6:50:0f:03:45:f1:15:0b:e9:fe: 87:38:a6:e1:72:8e:04:f4:1b:7d:44:9e:6f:73:fe: 59:3a:88:fd:a7:1a:fa:4c:97:13:2a:e3:4d:95:bd: c0:24:c4:57:ef:bd:f5:4c:cd:5e:2e:29:6e:ca:68: d5:94:51:d3:44:fb:20:8b:fd:66:49:cc:d1:6d:bd: d7:fa:54:e5:41:5b:76:1d:66:6b:73:05:c4:fa:f6: 4c:0d:a7:4e:eb:ce:56:08:cd:f9:70:3b:1c:b6:e2: 22:5b:e2:7f:10:93:cc:af:4a:e7:ef:e6:e4:17:f7: 4f:92:9d:f7:13:71:33:1c:45:ee:21:a2:72:40:e3: 83:ed:ce:b0:0f:4b:32:b6:9d:1c:6d:33:de:87:dd: a4:15:03:3d:27:4a:0c:60:5f:99:2b:7f:a7:b5:10: 3a:b9:ad:58:ca:2b:1d:ad:d4:7e:e6:ab:74:b9:18: 0d:3d:a8:8e:98:b4:a2:46:37:0c:b1:6d:42:b9:fd: 7f:8e:67:1e:f6:8f:a2:3d:96:6f:54:ec:62:47:95: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A9:BE:3C:2D:6B:79:A1:AE:BE:06:E7:53:82:32:ED:60:0B:4E:CF X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f6:f1:09:93:73:c1:48:b2:b8:52:c0:3c:2f:5c:64:3c:8f: 9b:2c:07:d7:45:90:f9:17:50:e6:80:5b:c6:e8:ec:5a:db:ea: c6:bc:8b:8b:6a:a8:9f:95:e3:5b:62:39:d0:a7:ab:b5:c9:93: 63:2e:b7:c0:9c:43:82:f1:a3:2c:46:56:56:51:eb:ef:36:59: 8c:90:d4:70:e2:bd:be:40:5b:b4:d6:e3:df:04:6a:c0:89:a0: 72:a5:5a:a0:65:7b:85:3a:c2:50:26:3f:c2:e1:43:92:bb:62: 2f:42:1e:62:d2:32:c9:dd:cb:0d:56:80:d8:b3:c1:63:81:35: c5:79:d7:a2:cd:2b:99:dd:67:ad:ad:fa:3f:6a:e3:c5:a1:c3: 25:5a:bc:f4:be:25:77:3f:db:5a:b0:b0:13:ef:9d:d2:53:ac: 80:29:3c:92:fa:53:1d:2a:26:9f:19:15:ba:ff:57:83:63:7e: de:aa:23:e9:6c:4d:63:f1:3b:e7:9b:a8:a9:4a:c9:f0:b7:cc: 17:ff:3c:f6:d6:6b:bb:88:5e:ca:bb:6a:5d:dd:6d:9d:b4:d1: 9d:19:c8:46:52:fa:8d:7b:20:4a:fa:ab:c0:78:e4:9c:52:46: b6:85:de:04:43:5c:5d:f1:6b:42:09:14:45:ae:21:d7:16:d2: 53:b0:75:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn6akW9zdzt5PrpEyjuvFf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUxMDE5MDMwMTMyWhcNMjUxMDIwMDMwMTMyWjAzMTEwLwYDVQQD EygzZWE5YmUzYzJkNmI3OWExYWViZTA2ZTc1MzgyMzJlZDYwMGI0ZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL+SFI5CvhFmrT3mtUFfZFvyBJ28 j9EAe19lDWTd5WfNmheASkvC8sQygBuiDqGjZfZQDwNF8RUL6f6HOKbhco4E9Bt9 RJ5vc/5ZOoj9pxr6TJcTKuNNlb3AJMRX7731TM1eLiluymjVlFHTRPsgi/1mSczR bb3X+lTlQVt2HWZrcwXE+vZMDadO685WCM35cDsctuIiW+J/EJPMr0rn7+bkF/dP kp33E3EzHEXuIaJyQOOD7c6wD0sytp0cbTPeh92kFQM9J0oMYF+ZK3+ntRA6ua1Y yisdrdR+5qt0uRgNPaiOmLSiRjcMsW1Cuf1/jmce9o+iPZZvVOxiR5VSiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6pvjwta3mhrr4G51OCMu1gC07PMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifbxCZNz wUiyuFLAPC9cZDyPmywH10WQ+RdQ5oBbxujsWtvqxryLi2qon5XjW2I50KertcmT Yy63wJxDgvGjLEZWVlHr7zZZjJDUcOK9vkBbtNbj3wRqwImgcqVaoGV7hTrCUCY/ wuFDkrtiL0IeYtIyyd3LDVaA2LPBY4E1xXnXos0rmd1nra36P2rjxaHDJVq89L4l dz/bWrCwE++d0lOsgCk8kvpTHSomnxkVuv9Xg2N+3qoj6WxNY/E755uoqUrJ8LfM F/889tZru4heyrtqXd1tnbTRnRnIRlL6jXsgSvqrwHjknFJGtoXeBENcXfFrQgkU Ra4h1xbSU7B1ZQ== -----END CERTIFICATE-----Generated at Sun Oct 19 13:10:59 2025 by rpki-client