$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft File: QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json) Hash identifier: mRsyk/FgP0R2/PJMK6Om7uDaHGvshQi6KaoF/Gmmw9Q= Subject key identifier: B9:92:24:67:93:91:CA:98:87:EE:D2:83:03:E4:9A:5B:AB:6A:56:0C Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 0198D5BB96A542DA40C541856C292EC0AB61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft Manifest number: 1661 Signing time: Sat 23 Aug 2025 07:01:37 +0000 Manifest this update: Sat 23 Aug 2025 07:01:37 +0000 Manifest next update: Sun 24 Aug 2025 07:01:37 +0000 Files and hashes: 1: 0esZKuZd06vTF3egbk7SFqajsIo.roa (hash: P0O/NDwq3sTeK/AsSKKPK6Qr+cdWA34yW0U7UgVxZHg=) 2: 1-F-5SWsecFgzI5NahgeczUF5j-k.roa (hash: AjzylbQuDtMZ4CoZ2EqAKKte+m5xBNBNs+Oy65Y8EM0=) 3: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (hash: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=) 4: 4URO2C3ml1u1p3j0aVym-OypCmw.roa (hash: FBodq3AGj9I/WrFusJYGhp0BteIh9N9SY38AbrciYWk=) 5: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (hash: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=) 6: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (hash: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=) 7: GAgtr-CLltTm3C54wjvqWFoClvc.roa (hash: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=) 8: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (hash: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=) 9: HxipHT46tv6qA61seP-3FDc3m84.roa (hash: dvYRTvtnN6xoSKyBzydQ1i2HWHdep/QnlIOV+ZIODek=) 10: JcQ4XnNNuhCFCptegJ4OikKt6EI.roa (hash: V4uiHg1qNVTGH4cwLosCcAcAuUHU5FHwvSgPuESRx7Y=) 11: Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa (hash: R9xWi9BNSSwcGXEc8iJXQHOFaaQnnZvq83WcJjO5BE8=) 12: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: r19Rx2ibXYzaYt5RnaMUb+cO/bpe02KBBzeOsATZ3kg=) 13: QVpDsEjXaPZQ4FGjN9dHcrQXvHg.roa (hash: HCD6w2XxMAQn0SFhGHQKXXLIjCxVrY39/u5TIy7CNM8=) 14: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (hash: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=) 15: RNDoaXvvOX22MpXmc3Ff_6K2Zr0.roa (hash: 9ScFJyBJ0ntBcGgka6vn0/EsUriLP41MonbDidIqsxk=) 16: UtpSRhJuNLlPda0ealCAV2oOOIs.roa (hash: 6zNva/R7MgFInq/rTlig5RzR+MH92GbfZMeRaso1csA=) 17: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (hash: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=) 18: aCzvft-4bbV7rBYNhvjtTU8ZwVY.roa (hash: LyfD0ZqEZ95kmtswsVkI/tj5kthO2U488G+9z2mp6gg=) 19: anyb0S2isVZ6Se4Mftij8iSLpPk.roa (hash: 8kZzLUilTF5CneX4LxuRFJNuwebJiucwE+f4bJOwZpY=) 20: cLHJ9pzG4jNGxgoAoRMirT2Ejso.roa (hash: Jzxa7wOrH3SZg3F+/QPuNnZeQarhGQ5yhFav2kPWjJ0=) 21: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (hash: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=) 22: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (hash: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=) 23: glVWs7IQA6E4icmC8qXaL1BO1oU.roa (hash: wAwxqn0T2Tg7SmJ7QKis7shqbxTq4mypLKV5b5C3kXg=) 24: kL3chxghDnQX5YSzwgkNCMx_3uM.roa (hash: ARDIceVeEM1YjdBNdcn8ziSYK6i63yZ+Nxd3mBgB/OM=) 25: khxB07onbtl0gHz8-6pLaDUUqYo.roa (hash: MoQ9KdSAj5hEESTK4yNZR+E8klzqWct22REysr25b/w=) 26: lKXrokKPFOF3aznjmWojVE7APiQ.roa (hash: PRGVlrmspET+S9gMw9HSgp3fT7nUxwmOOvlgERWds3M=) 27: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (hash: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=) 28: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (hash: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=) 29: nGljitgno8Zg_3gTd1NL8ga4UlY.roa (hash: rg8O6DW4r5DhXeJAjPcwuhjgZqT37lpRRlPUN2MFmGk=) 30: pfnbvP54fI2mKR09iIt0xfdp0co.roa (hash: TpvSBeXjgBs6iHcMA91RD8MXDqtM3kW6rNOmftw2zXc=) 31: twN006NWSqIAzyJjBefGoakpUcI.roa (hash: Dw9Jbr5s1oT+R6tnGBJCmZXohfgBB+1HIADmJwaJ7IA=) 32: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (hash: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:96:a5:42:da:40:c5:41:85:6c:29:2e:c0:ab:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Aug 23 07:01:37 2025 GMT Not After : Aug 24 07:01:37 2025 GMT Subject: CN=b99224679391ca9887eed28303e49a5bab6a560c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:e6:3e:18:43:9f:9b:36:fe:70:03:e9:e3: 1f:40:a9:ad:b7:ec:cd:eb:93:d4:74:c1:18:06:21: 64:20:7d:9c:58:a0:b2:8a:67:e3:db:c6:e5:06:47: 6e:ff:f1:63:63:ae:53:d0:b9:3e:dd:b1:b3:be:a7: fb:b3:3a:87:93:0d:84:3a:1c:33:4a:00:83:0f:57: 58:56:f0:3c:16:6e:0e:cd:b6:f7:9e:8b:ed:77:9f: 0d:a8:83:4a:b1:09:80:fa:36:72:a3:bc:ad:a6:cc: e4:be:d6:3a:d5:e4:b2:83:16:42:81:36:24:a5:1c: 68:43:81:b5:3d:8e:7b:d3:03:a4:ea:b2:b1:8a:b5: 15:e3:da:7e:84:7e:50:e6:26:e6:73:2e:50:47:db: 5c:71:b4:45:06:50:cf:c8:51:e5:be:b4:ed:d6:b9: 75:0a:37:26:83:a4:6e:de:d7:d2:d8:b6:e7:85:a4: b7:b6:83:88:c9:84:bd:7e:44:b6:d3:05:b5:f9:51: fd:28:c5:24:a1:12:a3:32:8e:03:95:9f:4e:3b:07: 94:d3:58:f6:42:45:90:4b:9a:5c:45:6b:4c:5d:8f: 74:b4:36:85:f7:59:26:ea:fe:bd:2b:2b:b8:b6:9e: e5:11:b2:a8:2b:5e:4f:b3:71:09:dc:7b:e7:9b:f8: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:92:24:67:93:91:CA:98:87:EE:D2:83:03:E4:9A:5B:AB:6A:56:0C X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5e:16:11:ad:e7:ba:90:fc:e4:e4:94:dc:8a:c9:b5:82:c6: e6:f3:e4:25:75:61:11:ca:94:a3:13:90:ff:ea:35:c4:1c:6f: af:01:39:84:08:3f:36:ee:9f:4c:89:79:5e:7b:a3:e3:0e:11: 5f:07:50:5f:8f:82:a4:24:0e:d3:40:e1:e3:e5:18:bf:50:77: 5b:55:1a:2b:fe:f9:9e:40:57:be:d4:d9:32:dd:64:0a:38:db: 0a:f9:1b:7d:d5:b6:15:43:93:b0:53:4d:de:3c:b9:59:35:0b: 8a:3e:a3:18:b7:a2:7d:d2:6f:bd:a5:d1:ba:8e:0c:7f:da:c9: 4f:66:4f:c5:92:63:86:43:30:06:88:69:d6:74:f5:34:50:4d: be:60:18:aa:d7:44:12:9e:9e:9c:c8:89:c9:c4:2f:10:18:2c: 79:3d:df:da:8c:01:ec:c8:fa:dd:80:32:8b:51:e8:21:46:1c: 4e:f8:c5:4c:fb:80:f9:38:05:3b:dd:46:20:3c:a2:9a:01:e0: 27:20:61:72:9f:31:1d:ee:10:fb:27:1d:d7:4f:55:49:9c:e7: 89:ab:07:b4:14:f5:01:ec:51:43:6b:90:1c:33:75:a7:a3:6a: 5f:0e:01:53:dc:89:f0:97:bf:1e:97:1b:d1:41:dd:df:1f:8f: 66:20:92:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu5alQtpAxUGFbCkuwKthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjUwODIzMDcwMTM3WhcNMjUwODI0MDcwMTM3WjAzMTEwLwYDVQQD EyhiOTkyMjQ2NzkzOTFjYTk4ODdlZWQyODMwM2U0OWE1YmFiNmE1NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcXmPhhDn5s2/nAD6eMfQKmtt+zN 65PUdMEYBiFkIH2cWKCyimfj28blBkdu//FjY65T0Lk+3bGzvqf7szqHkw2EOhwz SgCDD1dYVvA8Fm4Ozbb3novtd58NqINKsQmA+jZyo7ytpszkvtY61eSygxZCgTYk pRxoQ4G1PY570wOk6rKxirUV49p+hH5Q5ibmcy5QR9tccbRFBlDPyFHlvrTt1rl1 Cjcmg6Ru3tfS2LbnhaS3toOIyYS9fkS20wW1+VH9KMUkoRKjMo4DlZ9OOweU01j2 QkWQS5pcRWtMXY90tDaF91km6v69Kyu4tp7lEbKoK15Ps3EJ3Hvnm/jqxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmSJGeTkcqYh+7SgwPkmluralYMMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV4WEa3n upD85OSU3IrJtYLG5vPkJXVhEcqUoxOQ/+o1xBxvrwE5hAg/Nu6fTIl5Xnuj4w4R XwdQX4+CpCQO00Dh4+UYv1B3W1UaK/75nkBXvtTZMt1kCjjbCvkbfdW2FUOTsFNN 3jy5WTULij6jGLeifdJvvaXRuo4Mf9rJT2ZPxZJjhkMwBohp1nT1NFBNvmAYqtdE Ep6enMiJycQvEBgseT3f2owB7Mj63YAyi1HoIUYcTvjFTPuA+TgFO91GIDyimgHg JyBhcp8xHe4Q+ycd109VSZzniasHtBT1AexRQ2uQHDN1p6NqXw4BU9yJ8Je/Hpcb 0UHd3x+PZiCSdw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:15:22 2025 by rpki-client