$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: ZhTqbPlMxruLZExIqd792j1jtLBmZEhHcrdo9mO/+rs= Subject key identifier: 63:CB:04:47:03:95:B6:A8:46:D7:3C:E8:4D:08:D6:E6:19:58:DD:AC Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 0197B70E725D9771CE386F78E0F22BAD3DCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 130D Signing time: Sat 28 Jun 2025 15:01:06 +0000 Manifest this update: Sat 28 Jun 2025 15:01:06 +0000 Manifest next update: Sun 29 Jun 2025 15:01:06 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 5srdo3u4tfMcqUuKtV8JW7yrktFiRtcZotFuGNY/RsI=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:72:5d:97:71:ce:38:6f:78:e0:f2:2b:ad:3d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jun 28 15:01:06 2025 GMT Not After : Jun 29 15:01:06 2025 GMT Subject: CN=63cb04470395b6a846d73ce84d08d6e61958ddac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:19:0d:04:7b:3f:43:57:c3:1e:48:7f:e0: ad:dd:21:3e:e4:17:62:51:86:37:83:f0:e8:f2:d3: b5:7e:31:3e:a8:5f:23:d4:8e:8e:0f:a0:d0:f4:6d: 10:d8:4e:68:6e:b8:03:9a:ce:c7:a2:5c:28:6a:6f: 01:44:09:06:2e:cc:cc:3d:88:00:57:36:2f:50:fe: e4:8b:81:1f:fc:8e:f0:39:47:5b:c8:55:47:d3:a1: 8b:68:76:88:1f:dc:88:15:de:c9:6d:de:9c:4e:df: 2c:f7:ae:11:8c:65:b9:f2:6e:c2:ae:3d:12:9a:ca: 79:87:53:07:6c:e5:3b:75:60:b4:19:1b:e2:8d:89: a9:16:fe:81:8e:3d:5b:6e:c3:0a:bd:86:f4:83:6b: bd:4a:bf:f0:60:51:94:b3:59:42:56:3f:4b:20:5c: c4:0b:48:7d:fe:ef:9c:f7:27:05:fb:a2:02:13:2f: d6:0b:9d:b1:30:31:d5:ad:69:26:14:14:fc:20:4c: 6f:e6:8c:7d:07:77:45:95:d0:e2:20:71:aa:a8:11: 1e:e3:7b:f6:1f:b1:df:8c:9f:a4:af:d4:f2:e2:c0: e7:3e:1c:65:9c:fc:bc:6a:da:2d:10:76:f2:cc:6b: 3e:ef:65:6f:a3:a9:a3:8a:23:e9:dc:b0:b2:ed:45: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CB:04:47:03:95:B6:A8:46:D7:3C:E8:4D:08:D6:E6:19:58:DD:AC X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:9f:d2:34:23:cc:a8:67:55:2e:d7:72:e1:6c:ba:84:42:30: 58:ce:c1:7d:43:05:d2:61:45:78:2c:62:aa:c8:c0:d3:8e:fb: 14:cc:6f:e3:1f:d5:2c:5a:5c:82:34:77:c5:f1:c6:85:df:66: 91:12:8b:68:64:00:c0:5f:56:ad:01:5b:c2:0b:9d:c3:dc:f8: b2:5e:b1:1e:d9:d6:15:5d:4e:33:13:55:c8:e1:b1:2d:f5:75: f1:05:a4:82:0d:a1:af:ec:41:ab:f9:6c:b1:6d:47:9c:99:a6: 38:67:70:34:7d:84:e5:5d:0e:bd:f0:4e:3e:e1:63:69:7e:34: 18:09:74:58:9b:f9:47:ed:f8:91:68:e2:6b:87:09:a1:cb:bb: 0d:42:93:6c:1d:eb:3f:32:22:4b:40:80:21:4e:39:38:6b:26: cc:8f:3f:60:b3:ad:1b:8b:5c:f0:d8:1a:21:ed:63:8f:c3:a6: 79:2b:4c:df:c3:d9:43:9b:70:5a:d6:86:ec:9b:8a:91:af:34: 72:ca:12:54:8f:a6:a2:8c:28:c5:23:77:dd:95:e4:df:5a:73: ae:a9:96:cd:15:0d:f5:62:13:5d:24:c8:af:21:10:30:94:80: 8e:15:a4:8a:67:ca:15:c2:35:b5:c6:9a:d2:9e:97:2c:b8:47: 85:3c:d4:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DnJdl3HOOG944PIrrT3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwNjI4MTUwMTA2WhcNMjUwNjI5MTUwMTA2WjAzMTEwLwYDVQQD Eyg2M2NiMDQ0NzAzOTViNmE4NDZkNzNjZTg0ZDA4ZDZlNjE5NThkZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBUZDQR7P0NXwx5If+Ct3SE+5Bdi UYY3g/Do8tO1fjE+qF8j1I6OD6DQ9G0Q2E5obrgDms7Holwoam8BRAkGLszMPYgA VzYvUP7ki4Ef/I7wOUdbyFVH06GLaHaIH9yIFd7Jbd6cTt8s964RjGW58m7Crj0S msp5h1MHbOU7dWC0GRvijYmpFv6Bjj1bbsMKvYb0g2u9Sr/wYFGUs1lCVj9LIFzE C0h9/u+c9ycF+6ICEy/WC52xMDHVrWkmFBT8IExv5ox9B3dFldDiIHGqqBEe43v2 H7HfjJ+kr9Ty4sDnPhxlnPy8atotEHbyzGs+72Vvo6mjiiPp3LCy7UV63QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPLBEcDlbaoRtc86E0I1uYZWN2sMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZ/SNCPM qGdVLtdy4Wy6hEIwWM7BfUMF0mFFeCxiqsjA0477FMxv4x/VLFpcgjR3xfHGhd9m kRKLaGQAwF9WrQFbwgudw9z4sl6xHtnWFV1OMxNVyOGxLfV18QWkgg2hr+xBq/ls sW1HnJmmOGdwNH2E5V0OvfBOPuFjaX40GAl0WJv5R+34kWjia4cJocu7DUKTbB3r PzIiS0CAIU45OGsmzI8/YLOtG4tc8NgaIe1jj8OmeStM38PZQ5twWtaG7JuKka80 csoSVI+moowoxSN33ZXk31pzrqmWzRUN9WITXSTIryEQMJSAjhWkimfKFcI1tcaa 0p6XLLhHhTzUHQ== -----END CERTIFICATE-----Generated at Sat Jun 28 19:21:03 2025 by rpki-client