$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json) Hash identifier: PGMnt37NDaobFoKhzQ3Tzo8b7cpEOsvEK8Pk1M0ztcA= Subject key identifier: 30:FC:60:74:43:60:64:83:F9:84:2A:3B:EB:D9:AF:0E:41:27:1E:41 Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Certificate serial: 0197B7EA1E3E63D31FC51F5425DA2C10DA7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft Manifest number: 15E0 Signing time: Sat 28 Jun 2025 19:01:03 +0000 Manifest this update: Sat 28 Jun 2025 19:01:03 +0000 Manifest next update: Sun 29 Jun 2025 19:01:03 +0000 Files and hashes: 1: 1bGM56MEcLFHsgzDo3baYK4aCMQ.roa (hash: oVXVqg3b1Z1hACKH4hIRJE0IPfCRY+hMDc2k4VQe4XU=) 2: 5Bs7s2hMUk5okIwnH9_6NmpdROs.roa (hash: o2DAPVOVte9ZiZJsxUltnpbHI6j6XbmRUrV+d3RHQW0=) 3: 9qoftOkUQubHrr_5Y0O0OEB0jsk.roa (hash: NpXUbKfrAE82THRrSEt65m3odGmwe5q6Rv8hzF4EGTU=) 4: Cdz1li8VqIIJV-m5kmfKj99Y7vo.roa (hash: Injt2qVEYstD1CFDA2RDhQ4n71XCzIHna09I/6r+g6s=) 5: ITP65m-ELAYrIziT1mqhAaKmFKI.roa (hash: TA6Lz6SPSkTI7bhEP+cVZ388px4lL7fPEARYK+dRI9A=) 6: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: DPjuCAwFssaBfDp1bbqzKYxSzz9xHF/dJJ4/8pVYXwU=) 7: M10xggNFEiYKiCOpaRSr9Q_E5jI.roa (hash: or9G2RnVnC9nrrlnpNuQsb0VwFoCXmXB+b6uwP7Zhns=) 8: OFoxo4tSb8S4WTnb9Arp2ooyRvw.roa (hash: RZrf7jypWJt6TvS7MztBYdDEvw+Yp5dHCbAbuiSrNfs=) 9: PxE0dP6xcqVNoXMtC1a5Dmb6n-s.roa (hash: Ybvp2SkTVaVfqhDzUmHlRC82UcW4sX3toG9HthgZ+Es=) 10: RFQq8CL00Iuq4i_jx3Jd0iwOLHI.roa (hash: +y+KD8Sa0MVn4eIucYiZ7dhXT2uIb+hoC3jKlQ4uUUg=) 11: TI9rtNLD66XYwxwHXpdPJetrLYc.roa (hash: ujb2Pqco4C4UTnNLYGJAf0pytP8/IiyRIp98qQq1a6Y=) 12: U8lnC6TG0pv6pWZXKVHzbslUv7Y.roa (hash: en2pnR7bb0v314EN8AtTeDNZJOdRSB9qKOFTcoTcCf0=) 13: ULfjtaXZKeO21K8lDdoLHe5Lbts.roa (hash: Ky4d9tu18NCNsNUD91GQmMhDdLCi4CgvFfPWYH5+Qp4=) 14: X8iQP860aal3YLOybxReqwSyPWU.roa (hash: 8p2TloT9N3iJXhSo+Uh11LexFFF6Vzvsu6ANvx+UWDA=) 15: XvUgOjjL99J51pC_sC90Y2oxW38.roa (hash: c2LYASTNBV0y11dbQezPYJYqj9am3X4y+DmSJidna/c=) 16: cT-m8k4SDtvWHlQKpD65GuRYzTQ.roa (hash: r6RkMNZjMfYtE9PPmCf0mAK1eFJX+kttY3BaDf/aAME=) 17: qaj8dW9iDUS-TbB-31kgfVvtgq0.roa (hash: D9s2T78lGzQvF6gVSlb8wUKC9SQ4rmGaAnxWF6xJcHw=) 18: tvd71H71vKZmhl1lUI4Wfg7oqjo.roa (hash: e5ndVp+pna8lqdjnskWIAOqf7gaAH2YiQgOHVw4SZNM=) 19: vS5j-9f_l8NB8D0F1O7CDV1036U.roa (hash: R1R99GD9Fbi68eCqK84dzkbtSynzzus+WGLpYqyYhxQ=) 20: wPo7xJ66CFd_mhgw0SF3bAS25Aw.roa (hash: bk8jHsNK4RwETsCkuy+UEJf07NqgjUBEWkINzx/UrXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:ea:1e:3e:63:d3:1f:c5:1f:54:25:da:2c:10:da:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Validity Not Before: Jun 28 19:01:03 2025 GMT Not After : Jun 29 19:01:03 2025 GMT Subject: CN=30fc607443606483f9842a3bebd9af0e41271e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:34:45:23:0d:54:e2:14:18:a1:5a:e9:c0: f3:ec:c8:ea:83:de:3d:94:f7:77:74:07:7b:d1:03: b2:18:3f:9c:e6:16:81:16:5b:27:94:33:d1:69:bb: af:07:72:e5:8d:f7:2f:d4:91:40:3e:1e:cd:e7:f3: 18:75:61:73:f0:a4:49:3f:fe:bf:24:d0:17:21:12: e1:c5:bf:64:ad:21:8e:4b:94:da:03:83:46:42:cf: 40:4a:ea:13:29:80:41:75:60:a8:72:fc:63:55:aa: d2:93:e1:bc:a8:53:cb:49:53:dd:b8:4e:b3:8e:41: 8f:f2:47:dd:a2:11:1f:58:d8:f5:bb:fa:99:85:f7: a6:09:8e:84:9d:c3:f7:ae:5a:b2:59:bf:70:55:c8: 0c:89:1b:b7:4e:c7:e2:a0:d5:47:a8:dd:07:20:cb: 12:4a:26:09:db:93:67:ef:60:71:4c:3e:70:15:ba: 0d:9a:d5:dd:7a:76:6f:5a:b6:64:2b:7e:f3:49:7b: 0c:40:b7:03:2f:a8:95:df:93:7a:6d:2f:7d:6e:e5: a5:ee:0b:4a:c3:77:e2:f6:c9:fa:29:72:96:1d:70: 94:f2:7a:3c:af:27:bf:f9:08:a1:55:b8:26:7f:c3: 19:92:c3:8c:b4:35:a6:8f:12:51:d6:6a:67:f7:1b: d2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FC:60:74:43:60:64:83:F9:84:2A:3B:EB:D9:AF:0E:41:27:1E:41 X509v3 Authority Key Identifier: keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0b:b7:13:76:3e:0f:ed:b7:b0:17:5e:0f:c6:58:24:05:5c: 60:56:88:b2:68:65:a9:5e:98:04:76:11:b3:6f:1b:1e:13:6c: bc:74:a2:0e:a0:b1:65:90:13:95:c2:af:94:c6:5d:41:21:46: 0b:be:49:b1:ce:8e:db:7d:58:9a:81:a8:35:d2:f8:be:0f:e3: ae:c9:11:d7:20:89:d7:f4:82:4d:67:c4:e2:26:f8:0b:53:54: 6d:57:d3:cc:ba:19:e5:04:21:c7:c0:ad:11:ef:cf:f9:e3:ba: 15:5b:0b:79:63:f2:78:13:ca:ed:84:6c:91:45:f6:17:f5:a3: b1:b4:96:4a:96:39:f2:80:cb:b5:f7:bb:ed:ce:d1:52:4f:b7: d1:8f:a7:f2:a1:8b:db:f8:ae:e1:93:1f:7e:a1:c6:73:90:d6: c1:f1:ac:98:00:72:38:f5:f1:a3:ee:4d:c3:49:b3:23:03:e1: 53:1f:ee:ff:08:80:ba:f2:74:68:92:4c:02:74:3f:a6:9c:08: 55:2f:11:f3:bd:62:fd:0a:85:a0:72:f3:3b:8a:21:ee:6c:1b: 7d:6b:af:07:1c:33:74:42:d5:f6:62:16:b4:20:95:32:f8:9c: 43:0d:6a:d2:b5:4a:65:65:cc:d5:a8:d7:0b:fd:58:13:2a:c1: 40:3f:96:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe36h4+Y9MfxR9UJdosENp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1 ZjBmZTQwHhcNMjUwNjI4MTkwMTAzWhcNMjUwNjI5MTkwMTAzWjAzMTEwLwYDVQQD EygzMGZjNjA3NDQzNjA2NDgzZjk4NDJhM2JlYmQ5YWYwZTQxMjcxZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uE0RSMNVOIUGKFa6cDz7Mjqg949 lPd3dAd70QOyGD+c5haBFlsnlDPRabuvB3Lljfcv1JFAPh7N5/MYdWFz8KRJP/6/ JNAXIRLhxb9krSGOS5TaA4NGQs9ASuoTKYBBdWCocvxjVarSk+G8qFPLSVPduE6z jkGP8kfdohEfWNj1u/qZhfemCY6EncP3rlqyWb9wVcgMiRu3TsfioNVHqN0HIMsS SiYJ25Nn72BxTD5wFboNmtXdenZvWrZkK37zSXsMQLcDL6iV35N6bS99buWl7gtK w3fi9sn6KXKWHXCU8no8rye/+QihVbgmf8MZksOMtDWmjxJR1mpn9xvS3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDD8YHRDYGSD+YQqO+vZrw5BJx5BMB8GA1UdIwQY MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt ZjJhZTdiYzdlY2M1LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1 LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigu3E3Y+ D+23sBdeD8ZYJAVcYFaIsmhlqV6YBHYRs28bHhNsvHSiDqCxZZATlcKvlMZdQSFG C75Jsc6O231YmoGoNdL4vg/jrskR1yCJ1/SCTWfE4ib4C1NUbVfTzLoZ5QQhx8Ct Ee/P+eO6FVsLeWPyeBPK7YRskUX2F/WjsbSWSpY58oDLtfe77c7RUk+30Y+n8qGL 2/iu4ZMffqHGc5DWwfGsmAByOPXxo+5Nw0mzIwPhUx/u/wiAuvJ0aJJMAnQ/ppwI VS8R871i/QqFoHLzO4oh7mwbfWuvBxwzdELV9mIWtCCVMvicQw1q0rVKZWXM1ajX C/1YEyrBQD+W9g== -----END CERTIFICATE-----Generated at Sat Jun 28 23:33:49 2025 by rpki-client