$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft File: 1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json) Hash identifier: h+j7YRP46+q6nUSsXGC20Ohs6YKGw0gpEMxwbHCDEyI= Subject key identifier: 20:E4:8D:E1:60:AB:90:E3:BC:13:E0:D8:A3:14:27:69:12:80:DF:67 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 0197B70EE3C1753C642C65A2A11E81688700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft Manifest number: 050B Signing time: Sat 28 Jun 2025 15:01:35 +0000 Manifest this update: Sat 28 Jun 2025 15:01:35 +0000 Manifest next update: Sun 29 Jun 2025 15:01:35 +0000 Files and hashes: 1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: zSELy8qqYlg7cRSiJ4e0ai3EGeWi19ca6Nfng2O3Coo=) 2: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=) 3: AOEdRgC2KnnjFRPOSor0TGfTqko.roa (hash: h4iYaW3n704sndPDHJop9dcyOTnBY6St+ymRxKcU3pk=) 4: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=) 5: F3TFrLyovb8XvAopBK7JOYa2mwI.roa (hash: pEvX4onxvm1t0Llqu8JqybLkNG3FnmVsK+ePV2bdtbk=) 6: HQIobtONI1G40MS_8ITqTez4Rko.roa (hash: AlFPXCJjSmf2aSomPDGJ7WLLpUe0E+Zr2L8hqxbR0NM=) 7: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=) 8: NsgOA-1id7O8y0I1KluO4AjxAZY.roa (hash: oK2TTCtzVKd/uAXSxJ+dtk6Q+IUdmIHjff7L2ZkXhxk=) 9: XnSGdaCJ3eKb4i-6Nu6dhvAlrx4.roa (hash: wQcutn0UQG9+UbR3j8U6CVNcG7YhBuHIXfvYXpQN+ao=) 10: Yw1DL4n3FWC67KL8P9tumDcnyZE.roa (hash: kPAh3h9z93w4ldeG3DZ18aXthzPwd8/sa1w8KSR09RU=) 11: fXZxZECOBESkXdqSheKL7JFJXmc.roa (hash: wc57DcsZzhUbF/DYBnLMnOofYpKtZEPYrrulR+13Oq4=) 12: im8w3Xx-iUAQD6wX6N09-EJJW8c.roa (hash: /qbFQ2xM1Cro7Sw3CCIT5woLdLgqxh07N/rM/Vszw70=) 13: wlhdY45PRDciluR9WhbC6ZZOrs8.roa (hash: Ryz2mCCSLVnTNY18Fx3rxy3P0z4W8mDtgl5U20yegmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b7:0e:e3:c1:75:3c:64:2c:65:a2:a1:1e:81:68:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jun 28 15:01:35 2025 GMT Not After : Jun 29 15:01:35 2025 GMT Subject: CN=20e48de160ab90e3bc13e0d8a31427691280df67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:85:d8:d7:2c:9d:0d:a8:c2:39:ab:8d:71:8d: ea:f1:1e:b2:1f:b4:6b:f3:65:e6:c9:c9:31:5e:a0: 68:86:63:17:d8:30:66:02:3f:8b:ac:7f:49:e9:37: be:fd:d4:30:60:ed:ac:1d:82:04:37:0f:b8:48:49: 3d:0f:59:03:f3:bc:80:23:ff:75:45:f5:ca:58:78: da:a1:25:9f:3b:4e:8a:01:da:df:c3:2e:ed:b5:55: 3c:70:c4:3f:2d:d0:43:b0:67:08:92:b3:b0:29:a4: 99:0b:d2:c0:eb:da:74:b9:73:fe:8f:d0:f5:50:c5: 8f:66:7b:ac:c5:4f:46:c1:a9:b7:e9:98:8b:10:b4: 14:28:c8:49:a1:dc:c4:3e:99:01:25:f7:ef:e1:2c: 63:92:61:2d:56:d4:f6:af:6e:3a:3f:b9:40:16:9d: aa:1f:45:90:e0:58:dd:e5:2c:61:7a:4c:de:b8:0b: de:83:96:98:6d:80:69:fd:1d:70:31:70:f4:4e:e4: ae:21:01:f2:e3:03:68:35:26:0a:67:77:60:92:f3: 51:dd:32:af:76:82:30:f8:b1:7b:04:92:53:69:1f: 02:4f:d1:70:0d:98:02:61:88:5b:42:22:49:1c:3f: 4b:a2:0f:8b:34:5e:28:6b:a4:27:cb:01:c8:a3:15: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E4:8D:E1:60:AB:90:E3:BC:13:E0:D8:A3:14:27:69:12:80:DF:67 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:2a:e3:79:a4:32:e2:c4:3f:a2:47:2c:10:5f:40:41:49:55: 50:08:2a:72:7f:0a:98:5c:f1:14:e6:8f:73:49:33:44:eb:c7: d7:e8:d5:a7:43:9b:0f:cf:5a:17:d7:1c:d0:2c:f6:87:ff:f4: 24:e9:f9:3c:c9:a7:bd:29:38:5a:fa:68:5c:26:96:d6:f2:30: 2a:cb:e7:71:18:ea:18:4d:1d:66:fe:b1:49:b8:96:02:06:40: be:80:96:a3:d6:b1:aa:05:ee:c5:33:2f:ca:a5:07:df:13:67: 46:5e:97:26:7c:2a:12:46:71:aa:89:bf:44:c1:18:8e:26:02: 0b:b5:b5:85:d7:65:9c:89:37:d9:f9:96:de:08:71:0f:4d:df: 38:f1:8c:6d:07:85:f2:e5:06:a0:70:55:3d:f6:aa:43:e9:74: c6:9e:01:7d:fb:86:23:62:6a:18:dd:45:88:34:0c:61:3c:7b: d2:56:37:73:3d:8d:af:07:db:3b:50:a0:fa:f9:98:9e:32:95: 0c:52:18:7f:ef:50:6c:42:88:03:66:27:72:53:db:d6:33:91: 45:1b:a3:d1:ab:b7:72:5f:56:a9:c3:bf:9c:59:d8:58:5b:18: 41:be:f0:75:6d:8c:47:a9:20:09:ea:aa:4d:c0:20:3f:ca:65: 6a:e5:0c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe3DuPBdTxkLGWioR6BaIcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjUwNjI4MTUwMTM1WhcNMjUwNjI5MTUwMTM1WjAzMTEwLwYDVQQD EygyMGU0OGRlMTYwYWI5MGUzYmMxM2UwZDhhMzE0Mjc2OTEyODBkZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YXY1yydDajCOauNcY3q8R6yH7Rr 82XmyckxXqBohmMX2DBmAj+LrH9J6Te+/dQwYO2sHYIENw+4SEk9D1kD87yAI/91 RfXKWHjaoSWfO06KAdrfwy7ttVU8cMQ/LdBDsGcIkrOwKaSZC9LA69p0uXP+j9D1 UMWPZnusxU9Gwam36ZiLELQUKMhJodzEPpkBJffv4SxjkmEtVtT2r246P7lAFp2q H0WQ4Fjd5SxhekzeuAveg5aYbYBp/R1wMXD0TuSuIQHy4wNoNSYKZ3dgkvNR3TKv doIw+LF7BJJTaR8CT9FwDZgCYYhbQiJJHD9Log+LNF4oa6QnywHIoxXTgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDkjeFgq5DjvBPg2KMUJ2kSgN9nMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3irjeaQy 4sQ/okcsEF9AQUlVUAgqcn8KmFzxFOaPc0kzROvH1+jVp0ObD89aF9cc0Cz2h//0 JOn5PMmnvSk4WvpoXCaW1vIwKsvncRjqGE0dZv6xSbiWAgZAvoCWo9axqgXuxTMv yqUH3xNnRl6XJnwqEkZxqom/RMEYjiYCC7W1hddlnIk32fmW3ghxD03fOPGMbQeF 8uUGoHBVPfaqQ+l0xp4BffuGI2JqGN1FiDQMYTx70lY3cz2NrwfbO1Cg+vmYnjKV DFIYf+9QbEKIA2YnclPb1jORRRuj0au3cl9WqcO/nFnYWFsYQb7wdW2MR6kgCeqq TcAgP8plauUMXA== -----END CERTIFICATE-----Generated at Sat Jun 28 20:37:23 2025 by rpki-client