$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: 8C82GmixIW0rn7nm4cfSZFuH4ia9tadRt8dz05Z3Jhw= Subject key identifier: AA:01:29:99:90:F3:93:16:43:93:5F:F5:23:48:53:C8:82:D0:16:C2 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 0197B6A0BF90AE06A729C44D926809DDDDF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 15D2 Signing time: Sat 28 Jun 2025 13:01:17 +0000 Manifest this update: Sat 28 Jun 2025 13:01:17 +0000 Manifest next update: Sun 29 Jun 2025 13:01:17 +0000 Files and hashes: 1: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=) 2: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=) 3: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=) 4: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: G1F4t7xCrMbdQRTjGd9xxSX6oCLkSUDOQUPFr/W8nwQ=) 5: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=) 6: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (hash: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=) 7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=) 8: i4BvPEbIU0LE_KGbaw2Du_jwtCU.roa (hash: /Y2NvzZtZ5IYW3kWzP26GGHk2SWDVIrWTwCk4pyyB7E=) 9: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=) 10: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=) 11: ys5vmqUy51MsJ0ygo_iK-V09VLk.roa (hash: 0bEBsx5vAAoh9m1hQ5TVct9tCZkHxHVWgyiCpF/cLSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b6:a0:bf:90:ae:06:a7:29:c4:4d:92:68:09:dd:dd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Jun 28 13:01:17 2025 GMT Not After : Jun 29 13:01:17 2025 GMT Subject: CN=aa01299990f3931643935ff5234853c882d016c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:4b:49:4e:3d:1b:aa:b9:ad:11:18:6f:ba: a9:cc:fb:0a:7b:a6:bd:1d:22:52:6d:a1:d7:78:83: b1:a8:81:26:d1:9e:be:77:12:6a:1c:9a:73:b9:65: 40:cd:f1:d6:5d:a5:9c:df:8e:f6:1a:ae:b9:8a:7b: f2:fe:f4:5b:7a:4e:4e:73:71:4e:98:b6:99:e4:2f: a0:e0:e2:5a:50:7c:99:33:e4:25:7f:7a:73:4c:15: cf:4c:29:d6:a5:7d:6e:c3:2b:8f:07:fe:d8:05:c5: 9e:50:12:27:d9:01:89:86:0d:bb:33:a8:98:a2:a0: 78:cd:c9:66:3f:44:79:64:84:08:d7:eb:b0:1e:f1: 12:cb:d7:d7:a8:7f:56:1e:4d:9c:05:55:02:0e:c1: f1:46:68:b3:aa:04:e6:e1:be:f4:05:d2:3b:ff:fd: 00:12:cf:59:d1:52:76:c2:6c:39:88:97:b8:20:43: 08:50:51:ba:cb:ae:7c:8d:47:57:ff:3a:b3:49:6a: 53:3d:cc:36:03:9c:8b:24:d0:b9:44:54:d0:0d:58: c2:f1:8f:14:e8:5e:c7:ab:78:77:5b:d6:c5:9a:85: 27:36:df:ca:2b:0b:dc:b7:ef:73:d6:e5:2b:d6:03: 9f:24:20:a6:8e:59:5a:05:cc:6a:01:0d:e3:68:f5: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:29:99:90:F3:93:16:43:93:5F:F5:23:48:53:C8:82:D0:16:C2 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0d:6a:42:ad:56:c7:84:77:cd:d5:c4:2f:5d:60:0d:cd:b8: 8f:fc:12:1f:bf:a7:89:bf:09:78:ad:5d:fa:4b:27:3b:0e:c4: ec:51:3a:01:e6:9a:a2:35:27:65:c1:66:57:ab:16:84:79:f5: 63:85:9f:51:d9:1e:6b:eb:67:6d:f0:98:2f:e5:ea:8b:01:d1: ac:b3:bf:2e:0d:cc:8e:fe:42:9c:10:02:36:8c:93:f9:0a:db: c8:ee:b2:1a:a1:c1:9f:70:8d:df:c2:9f:02:6a:c8:6a:ac:14: 31:cd:87:7e:a3:cc:6b:6b:ac:57:ef:82:ba:ee:05:f0:5a:11: 3d:89:6f:a9:82:06:3e:74:63:e0:12:ab:50:ab:b9:11:70:b7: 0f:64:a8:f0:9e:b5:eb:9c:95:92:cd:21:ca:be:d1:ab:ff:b2: ab:9f:01:79:1a:9e:7e:05:f9:72:eb:28:b0:d4:d5:1d:a8:b0: a7:f0:8c:f5:dd:07:03:81:97:48:3d:1f:64:5d:6b:ac:14:b5: 75:1d:d1:63:8f:ce:b8:21:69:94:02:bd:2b:c1:de:2d:24:f6: 0e:43:b0:9d:6e:01:68:8a:32:e7:00:1d:3d:d3:26:35:9a:55: d7:4d:98:0d:9d:c1:25:16:b2:3a:67:3c:c7:84:33:1e:26:17: df:ff:99:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe2oL+QrganKcRNkmgJ3d3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjUwNjI4MTMwMTE3WhcNMjUwNjI5MTMwMTE3WjAzMTEwLwYDVQQD EyhhYTAxMjk5OTkwZjM5MzE2NDM5MzVmZjUyMzQ4NTNjODgyZDAxNmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQlLSU49G6q5rREYb7qpzPsKe6a9 HSJSbaHXeIOxqIEm0Z6+dxJqHJpzuWVAzfHWXaWc3472Gq65invy/vRbek5Oc3FO mLaZ5C+g4OJaUHyZM+Qlf3pzTBXPTCnWpX1uwyuPB/7YBcWeUBIn2QGJhg27M6iY oqB4zclmP0R5ZIQI1+uwHvESy9fXqH9WHk2cBVUCDsHxRmizqgTm4b70BdI7//0A Es9Z0VJ2wmw5iJe4IEMIUFG6y658jUdX/zqzSWpTPcw2A5yLJNC5RFTQDVjC8Y8U 6F7Hq3h3W9bFmoUnNt/KKwvct+9z1uUr1gOfJCCmjllaBcxqAQ3jaPWIxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoBKZmQ85MWQ5Nf9SNIU8iC0BbCMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQ1qQq1W x4R3zdXEL11gDc24j/wSH7+nib8JeK1d+ksnOw7E7FE6AeaaojUnZcFmV6sWhHn1 Y4WfUdkea+tnbfCYL+XqiwHRrLO/Lg3Mjv5CnBACNoyT+QrbyO6yGqHBn3CN38Kf AmrIaqwUMc2HfqPMa2usV++Cuu4F8FoRPYlvqYIGPnRj4BKrUKu5EXC3D2So8J61 65yVks0hyr7Rq/+yq58BeRqefgX5cusosNTVHaiwp/CM9d0HA4GXSD0fZF1rrBS1 dR3RY4/OuCFplAK9K8HeLST2DkOwnW4BaIoy5wAdPdMmNZpV102YDZ3BJRayOmc8 x4QzHiYX3/+Zqw== -----END CERTIFICATE-----Generated at Sat Jun 28 19:49:54 2025 by rpki-client