$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: QtHti6q5FE9gwVyVyE3JJ1YpKUKdlvwO0d7tL48wZo0= Subject key identifier: 7C:3B:3C:EB:C1:84:EB:94:8B:D0:82:BE:C2:D0:14:ED:A7:2E:98:F6 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 0196A2E50495EF5E886580A6DAAB32F5CCBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 127E Signing time: Tue 06 May 2025 00:00:40 +0000 Manifest this update: Tue 06 May 2025 00:00:40 +0000 Manifest next update: Wed 07 May 2025 00:00:40 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 30dATcIu8PAfmLB1rzDJXt6WL+L62JD+6zjP4R0ibLE=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 18:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a2:e5:04:95:ef:5e:88:65:80:a6:da:ab:32:f5:cc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: May 6 00:00:40 2025 GMT Not After : May 7 00:00:40 2025 GMT Subject: CN=7c3b3cebc184eb948bd082bec2d014eda72e98f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:d5:3c:f2:00:31:f7:fd:c9:38:d9:ac:f8: 5e:7f:55:96:13:9b:08:72:86:43:ae:d3:3c:8c:fe: e2:47:6b:85:85:b5:21:4e:31:37:70:8a:be:17:e3: 68:d0:8f:b5:19:0e:02:47:83:42:31:1f:7f:1e:e4: 57:99:37:c4:55:cf:81:cc:a4:a0:a1:2e:8f:d9:59: bb:16:18:c4:03:af:32:f4:e2:02:f5:80:ea:7c:94: 47:93:f1:8e:5c:e3:2b:f2:b8:64:0b:23:13:fb:69: 8a:85:54:b7:75:20:55:c2:d0:7f:a6:36:52:22:ef: 66:71:2e:aa:e9:03:e3:0c:49:57:42:5e:57:2d:37: 89:6b:5d:58:a0:7a:9b:f3:f6:0b:e0:51:f5:6e:74: 66:6e:06:d3:66:dc:a3:15:c9:99:02:69:30:6c:3c: 8b:74:39:c3:47:15:b5:44:9b:8f:b3:18:42:47:f6: ce:f2:86:b5:79:9c:05:3f:2b:ef:34:fa:9e:c8:ff: d4:24:d1:bc:20:7a:32:6c:e1:7a:5c:f7:e5:b0:bc: ad:3e:46:04:2f:83:a4:2c:e3:51:51:0e:91:ac:fa: 1f:8a:75:27:79:18:c1:d4:0c:ae:0c:f1:bb:db:ff: 6c:d4:df:40:d9:bd:9d:15:a4:a8:6d:20:63:ae:a2: 61:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:3C:EB:C1:84:EB:94:8B:D0:82:BE:C2:D0:14:ED:A7:2E:98:F6 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:43:d1:0c:a2:b1:b9:d0:a4:24:5e:dc:25:36:81:de:06:9f: 1e:46:ab:c2:4b:27:ec:9a:71:2d:1f:ed:92:e6:83:8d:e9:08: c6:2f:5d:4d:9f:71:cf:d1:71:77:27:cb:af:57:64:60:cd:8f: e9:c6:e1:6b:5c:2b:33:ec:06:50:5e:83:54:08:53:f9:68:5f: 73:19:e0:6e:5d:b6:69:48:82:3c:80:5a:1d:76:30:d2:1b:01: d7:58:05:fa:b7:18:61:94:9d:c3:04:ed:01:59:e1:ea:56:db: df:38:78:d9:11:c4:b8:34:bc:27:d2:4d:c6:ff:49:e9:ac:41: 19:bb:0f:eb:b0:e6:7a:cc:f7:eb:da:e6:1f:de:d3:dd:41:f5: 05:f5:8c:32:6c:42:0a:3f:b2:f8:27:47:24:c8:f2:f6:8e:83: 49:8b:40:fa:4e:74:e9:fe:9d:55:e4:bc:79:7c:6c:c7:e8:98: 05:80:ce:53:fa:ea:b8:f2:ea:2e:de:e2:16:c0:58:60:96:7a: 9b:60:53:c4:31:6f:e9:d5:45:db:fe:81:df:d8:e6:b6:13:fb: 44:fc:83:51:50:68:d9:1f:14:cf:40:52:63:f7:5c:64:f7:5d: ff:96:22:85:8e:3d:84:68:35:de:b3:db:e9:6a:aa:93:14:0e: 8a:02:1c:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZai5QSV716IZYCm2qsy9cy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwNTA2MDAwMDQwWhcNMjUwNTA3MDAwMDQwWjAzMTEwLwYDVQQD Eyg3YzNiM2NlYmMxODRlYjk0OGJkMDgyYmVjMmQwMTRlZGE3MmU5OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRDVPPIAMff9yTjZrPhef1WWE5sI coZDrtM8jP7iR2uFhbUhTjE3cIq+F+No0I+1GQ4CR4NCMR9/HuRXmTfEVc+BzKSg oS6P2Vm7FhjEA68y9OIC9YDqfJRHk/GOXOMr8rhkCyMT+2mKhVS3dSBVwtB/pjZS Iu9mcS6q6QPjDElXQl5XLTeJa11YoHqb8/YL4FH1bnRmbgbTZtyjFcmZAmkwbDyL dDnDRxW1RJuPsxhCR/bO8oa1eZwFPyvvNPqeyP/UJNG8IHoybOF6XPflsLytPkYE L4OkLONRUQ6RrPofinUneRjB1AyuDPG72/9s1N9A2b2dFaSobSBjrqJhtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHw7POvBhOuUi9CCvsLQFO2nLpj2MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEPRDKKx udCkJF7cJTaB3gafHkarwksn7JpxLR/tkuaDjekIxi9dTZ9xz9FxdyfLr1dkYM2P 6cbha1wrM+wGUF6DVAhT+Whfcxngbl22aUiCPIBaHXYw0hsB11gF+rcYYZSdwwTt AVnh6lbb3zh42RHEuDS8J9JNxv9J6axBGbsP67Dmesz369rmH97T3UH1BfWMMmxC Cj+y+CdHJMjy9o6DSYtA+k506f6dVeS8eXxsx+iYBYDOU/rquPLqLt7iFsBYYJZ6 m2BTxDFv6dVF2/6B39jmthP7RPyDUVBo2R8Uz0BSY/dcZPdd/5YihY49hGg13rPb 6WqqkxQOigIcJQ== -----END CERTIFICATE-----Generated at Tue May 6 02:39:21 2025 by rpki-client