$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: kAPKGQNOiPFWhQY3XHKafrQaP5B+GghrdKiaYKSeXbM= Subject key identifier: 98:29:67:88:54:91:F2:C3:68:26:D1:12:31:F7:0D:28:2D:43:23:43 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 0198D4E02A58C7EE9E1A26BC961BEA4B0B08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 13A1 Signing time: Sat 23 Aug 2025 03:01:57 +0000 Manifest this update: Sat 23 Aug 2025 03:01:57 +0000 Manifest next update: Sun 24 Aug 2025 03:01:57 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: H7WJXG6m7Cwy8szI6bwgZ44ME4+7topUx31TyRLiGnA=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 03:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:2a:58:c7:ee:9e:1a:26:bc:96:1b:ea:4b:0b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Aug 23 03:01:57 2025 GMT Not After : Aug 24 03:01:57 2025 GMT Subject: CN=982967885491f2c36826d11231f70d282d432343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:6e:26:b9:54:73:8a:e2:e1:df:b4:36:bf: 80:42:5e:7b:22:ef:1f:36:58:fd:92:7d:e4:9b:e2: 96:84:16:ee:bd:36:b6:d7:6b:a1:25:92:d7:f5:23: 22:64:ab:ad:b5:ba:20:50:42:d3:70:cb:86:6e:da: 74:5f:f6:17:38:47:3b:e4:68:18:7b:59:1b:64:71: 66:cb:40:48:a0:df:80:47:29:b1:46:32:72:63:79: fe:90:4b:4a:6e:87:4d:fb:12:1f:9c:fd:cf:ab:4e: b7:44:6a:84:c1:c3:e0:7a:a3:ff:ff:4c:7a:72:66: dc:be:37:7b:12:06:1f:63:03:a0:3d:52:89:8c:b0: 32:17:3a:45:6f:99:7d:ca:7a:d1:e6:a5:e8:ed:53: 48:65:0e:d3:d7:1e:18:8b:2b:f1:9a:50:86:c0:8e: 23:07:0f:46:11:97:ee:40:94:ba:f5:98:fb:da:dd: fe:b6:09:63:b0:6f:eb:af:04:25:84:62:2f:c8:11: a5:7a:d4:f1:17:4f:12:d9:74:46:dc:75:88:42:09: 8c:0d:9c:b5:6f:d6:44:65:23:ce:58:19:7b:94:2f: 2b:fa:8f:2e:f8:c9:71:47:f1:64:42:ec:b7:6d:09: fe:20:10:98:c1:68:f1:eb:4d:9e:fc:e7:66:57:79: 25:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:29:67:88:54:91:F2:C3:68:26:D1:12:31:F7:0D:28:2D:43:23:43 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:28:20:82:62:f1:59:b0:e2:2d:e6:c2:a6:0c:da:6a:ea:7f: e2:2a:37:1f:e1:ff:db:85:d1:74:67:7f:7d:ea:ad:24:c7:9f: 00:60:9e:36:6b:2f:a9:47:d7:66:92:d7:8e:a8:58:85:c8:2d: c7:7d:42:45:01:fa:75:a1:f7:a6:bb:3e:ab:f4:af:aa:9c:51: fe:9f:d2:e6:0f:a2:52:b2:f7:45:b6:bb:b7:2b:11:8f:f8:b2: c8:c3:e9:89:a5:e9:e7:d0:55:82:e9:3b:14:d4:61:0b:f4:b9: 9c:e8:ba:58:08:ce:3d:04:4b:01:71:6b:e3:6a:0c:08:33:a5: 28:64:3e:8b:4b:3b:56:f6:df:83:02:4b:65:f3:02:1f:15:64: 5a:c3:0f:20:7d:90:dc:c7:9a:e7:08:3d:ec:72:ef:02:be:b2: 34:32:b2:54:b8:35:19:75:67:88:d9:ee:40:7c:4b:c3:79:eb: fd:58:45:94:1c:ad:4b:18:19:cb:33:df:95:44:b5:db:72:86: fe:e7:ba:d0:43:04:6c:42:ac:14:e5:e2:fe:e6:bc:12:3c:fe: 70:6d:cd:64:71:5b:71:a8:6d:40:6d:ec:85:97:08:11:74:ea: b4:fb:32:9d:60:b4:a2:96:23:89:85:fe:0b:e5:4a:b1:76:94: 6c:44:e6:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4CpYx+6eGia8lhvqSwsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwODIzMDMwMTU3WhcNMjUwODI0MDMwMTU3WjAzMTEwLwYDVQQD Eyg5ODI5Njc4ODU0OTFmMmMzNjgyNmQxMTIzMWY3MGQyODJkNDMyMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA1uJrlUc4ri4d+0Nr+AQl57Iu8f Nlj9kn3km+KWhBbuvTa212uhJZLX9SMiZKuttbogUELTcMuGbtp0X/YXOEc75GgY e1kbZHFmy0BIoN+ARymxRjJyY3n+kEtKbodN+xIfnP3Pq063RGqEwcPgeqP//0x6 cmbcvjd7EgYfYwOgPVKJjLAyFzpFb5l9ynrR5qXo7VNIZQ7T1x4YiyvxmlCGwI4j Bw9GEZfuQJS69Zj72t3+tgljsG/rrwQlhGIvyBGletTxF08S2XRG3HWIQgmMDZy1 b9ZEZSPOWBl7lC8r+o8u+MlxR/FkQuy3bQn+IBCYwWjx602e/OdmV3klcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgpZ4hUkfLDaCbREjH3DSgtQyNDMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACigggmLx WbDiLebCpgzaaup/4io3H+H/24XRdGd/feqtJMefAGCeNmsvqUfXZpLXjqhYhcgt x31CRQH6daH3prs+q/SvqpxR/p/S5g+iUrL3Rba7tysRj/iyyMPpiaXp59BVguk7 FNRhC/S5nOi6WAjOPQRLAXFr42oMCDOlKGQ+i0s7VvbfgwJLZfMCHxVkWsMPIH2Q 3Mea5wg97HLvAr6yNDKyVLg1GXVniNnuQHxLw3nr/VhFlBytSxgZyzPflUS123KG /ue60EMEbEKsFOXi/ua8Ejz+cG3NZHFbcahtQG3shZcIEXTqtPsynWC0opYjiYX+ C+VKsXaUbETmZQ== -----END CERTIFICATE-----Generated at Sat Aug 23 10:50:16 2025 by rpki-client