$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: BapZTCa78w5S3p0YTXoQ0PLE5XejeUw8m17kPscmuks= Subject key identifier: 61:82:7F:79:49:B6:56:8D:AA:1B:E5:0A:E4:23:24:EA:95:5B:E0:36 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 0199FB45A0659C23682366972A02097142ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 1440 Signing time: Sun 19 Oct 2025 07:01:08 +0000 Manifest this update: Sun 19 Oct 2025 07:01:08 +0000 Manifest next update: Mon 20 Oct 2025 07:01:08 +0000 Files and hashes: 1: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 2: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: MNbm6bOOZ59qLGL3ot5eB6eVndfyJUYshKzwdehjea8=) 4: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 5: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 6: XO9hryEjXx5kgKnr74JXjzCM8w0.roa (hash: w6sYmDLnWAclOfvxxkvq1DeKbEW8wcfpI5kQA52E9OY=) 7: ZCVtB8725E04xja-A_7tFv0UGbA.roa (hash: G23IAdwlc1DMlMrfpBBsuDs0R5mxQSfAIypWEkTSgDc=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:45:a0:65:9c:23:68:23:66:97:2a:02:09:71:42:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Oct 19 07:01:08 2025 GMT Not After : Oct 20 07:01:08 2025 GMT Subject: CN=61827f7949b6568daa1be50ae42324ea955be036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:be:73:0a:c5:82:41:86:bf:1b:ea:b4:d8:e7: a2:31:4e:a0:0d:29:7d:28:b9:87:1e:e7:bc:70:6c: 8e:6f:80:3c:31:cf:4e:6a:f5:fe:83:d3:ff:24:1b: 12:d7:d4:3e:fa:09:1f:01:17:f8:c9:c0:22:bf:09: 75:a8:7b:f9:38:b1:aa:3f:5e:0f:aa:fe:3e:32:9a: f5:b4:86:2f:b3:02:47:bd:1d:ce:e2:01:3e:14:e1: c6:27:42:ed:e1:60:59:6e:0b:2b:b4:c1:45:41:2b: e1:94:d9:32:15:5b:54:d3:66:52:45:9d:31:91:42: 72:6a:ee:de:23:60:04:81:63:49:e1:bf:bd:f2:7a: 4a:ae:d0:80:91:5e:a6:cf:12:fb:8e:85:4c:0d:3b: 41:2d:73:53:14:e6:b2:2e:6a:48:8f:6b:f1:e4:04: a3:fc:0f:47:b8:37:df:93:c0:4a:86:d8:89:d8:dc: 21:12:19:8e:f3:c4:49:95:e7:c4:70:00:d0:2f:55: 52:76:4e:a7:4f:3a:25:0b:f4:c0:ac:a8:82:49:7c: fd:59:19:86:d3:e6:a1:6b:54:5c:7d:4d:e0:07:78: e0:73:dd:ca:f3:6b:ac:02:dd:3b:0d:c8:9e:d6:3e: 19:a2:2b:ce:13:b5:ea:87:da:4c:3e:8a:fa:69:f6: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:82:7F:79:49:B6:56:8D:AA:1B:E5:0A:E4:23:24:EA:95:5B:E0:36 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:03:1e:07:3b:16:5c:98:5c:67:b9:72:40:c2:97:9c:ad:f5: 89:d7:ea:87:f2:b2:f6:69:6d:18:f4:c2:2f:64:11:85:31:71: 58:04:83:65:46:7d:32:d8:0d:bf:ff:ab:a9:03:78:0d:ad:14: 4a:47:88:a6:41:3a:a2:0b:bd:d2:4c:f1:bb:26:94:ea:9b:76: f4:10:c0:77:94:95:87:f4:f8:c7:95:e7:42:3d:76:b2:ce:73: 00:b7:23:ae:cf:07:b9:f4:b2:87:a4:fc:6e:c4:30:f9:92:8c: 69:12:b5:58:a0:8f:d0:51:66:62:a3:b7:7f:52:bb:db:d9:ec: 36:f8:f0:59:1a:1f:7b:e4:d2:17:52:cf:4b:0f:c2:2f:c7:a7: 86:18:f4:40:a6:fe:87:a4:69:bf:90:80:d4:0f:38:45:23:2e: 59:ca:b7:cf:62:25:62:1c:eb:6a:0e:20:93:c2:ed:af:cc:2a: d9:7f:2d:11:c8:cd:3f:a7:bb:c5:b3:3a:97:f5:62:21:d4:40: 24:71:f4:2e:2c:7f:7b:7a:11:c1:49:59:50:8b:52:cf:b5:ab: 67:94:37:dc:38:39:12:23:76:9c:cb:5f:98:2e:45:1e:34:40: d0:36:a6:cd:27:d8:4e:5d:33:ee:9f:57:0f:cb:e1:86:ae:6b: 17:ee:60:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7RaBlnCNoI2aXKgIJcULtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUxMDE5MDcwMTA4WhcNMjUxMDIwMDcwMTA4WjAzMTEwLwYDVQQD Eyg2MTgyN2Y3OTQ5YjY1NjhkYWExYmU1MGFlNDIzMjRlYTk1NWJlMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA375zCsWCQYa/G+q02OeiMU6gDSl9 KLmHHue8cGyOb4A8Mc9OavX+g9P/JBsS19Q++gkfARf4ycAivwl1qHv5OLGqP14P qv4+Mpr1tIYvswJHvR3O4gE+FOHGJ0Lt4WBZbgsrtMFFQSvhlNkyFVtU02ZSRZ0x kUJyau7eI2AEgWNJ4b+98npKrtCAkV6mzxL7joVMDTtBLXNTFOayLmpIj2vx5ASj /A9HuDffk8BKhtiJ2NwhEhmO88RJlefEcADQL1VSdk6nTzolC/TArKiCSXz9WRmG 0+aha1RcfU3gB3jgc93K82usAt07Dcie1j4ZoivOE7Xqh9pMPor6afZvsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGCf3lJtlaNqhvlCuQjJOqVW+A2MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggMeBzsW XJhcZ7lyQMKXnK31idfqh/Ky9mltGPTCL2QRhTFxWASDZUZ9MtgNv/+rqQN4Da0U SkeIpkE6ogu90kzxuyaU6pt29BDAd5SVh/T4x5XnQj12ss5zALcjrs8HufSyh6T8 bsQw+ZKMaRK1WKCP0FFmYqO3f1K729nsNvjwWRofe+TSF1LPSw/CL8enhhj0QKb+ h6Rpv5CA1A84RSMuWcq3z2IlYhzrag4gk8Ltr8wq2X8tEcjNP6e7xbM6l/ViIdRA JHH0Lix/e3oRwUlZUItSz7WrZ5Q33Dg5EiN2nMtfmC5FHjRA0DamzSfYTl0z7p9X D8vhhq5rF+5gxQ== -----END CERTIFICATE-----Generated at Sun Oct 19 15:14:43 2025 by rpki-client