$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: lKXrNu9ujWIFCkITP92mqmA62RmmZweZchpPx27D1C8= Subject key identifier: F4:B5:98:4A:A1:DA:6C:B8:27:E5:7F:FA:06:77:B6:59:66:E2:7C:73 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 0199FE104B57B1B75A6744B3DC166C7BFFC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 12C2 Signing time: Sun 19 Oct 2025 20:01:44 +0000 Manifest this update: Sun 19 Oct 2025 20:01:44 +0000 Manifest next update: Mon 20 Oct 2025 20:01:44 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: 8zcnYkZyd09zDXCJgK7IrAbWEh1YHWxa8xwsbkIR5T0=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fe:10:4b:57:b1:b7:5a:67:44:b3:dc:16:6c:7b:ff:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Oct 19 20:01:44 2025 GMT Not After : Oct 20 20:01:44 2025 GMT Subject: CN=f4b5984aa1da6cb827e57ffa0677b65966e27c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:7f:66:99:5f:02:80:cd:f0:df:59:93:01: f2:af:3a:58:21:c6:3f:f0:00:f3:7b:b0:77:ed:7f: 40:45:5e:5f:de:c5:c2:ea:55:16:32:f7:22:14:e3: 9e:fc:44:5f:0a:e8:2b:db:f8:e1:3a:65:e2:c8:55: f2:8f:b9:a8:c2:07:bb:7c:81:49:11:2f:5d:54:3e: 24:fa:ea:22:df:60:66:37:6a:19:8b:ef:11:ac:44: fe:a9:53:56:83:65:d0:2c:8d:f6:82:ed:d3:c8:e4: 20:58:02:92:07:90:db:35:49:c1:20:b8:c0:1e:89: 69:44:1c:8a:f0:45:b2:ae:e1:db:b1:f0:87:7d:4c: 47:a7:b2:91:b0:9f:45:ed:0c:8f:fa:a7:94:ac:be: ee:08:e3:4a:7b:87:be:a1:78:1e:56:dd:b1:ad:c6: 3d:40:fd:85:de:d8:a9:22:53:1f:a2:9d:87:d0:7e: c0:03:4f:bb:ff:7c:63:88:9d:e4:0a:a8:5a:b7:e8: f9:51:b6:c4:2f:62:4e:83:a2:66:a2:62:d0:29:be: c7:db:aa:b9:d2:19:8f:72:6d:ed:b2:e2:f7:7e:ba: 03:c7:bb:b7:d5:96:b2:43:5a:2d:b6:f1:21:2c:cc: 0b:41:8d:6e:cd:01:42:9a:07:ae:c8:ad:24:31:91: c4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B5:98:4A:A1:DA:6C:B8:27:E5:7F:FA:06:77:B6:59:66:E2:7C:73 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:73:6b:5d:58:38:41:a8:0b:9c:43:5e:cd:df:74:8e:11:2a: 30:f8:14:6f:b9:26:10:0f:52:d0:08:99:68:d1:2e:e4:1d:fd: db:40:f8:1a:e4:c6:0b:54:46:bb:70:78:95:a9:af:e8:d0:dc: e6:76:bc:17:cd:07:b4:c6:4b:bb:7b:a7:33:b5:df:d2:1b:d5: 3e:1b:18:8f:9b:11:72:a8:81:6b:04:8f:ec:f8:6e:f8:94:65: 59:8c:f8:93:30:0a:c8:1b:07:8f:cd:13:26:00:d5:05:1d:03: ee:78:f5:06:08:0b:dd:7f:58:76:ea:a4:73:66:c9:19:e8:35: 9e:ab:30:0b:ab:9a:a6:64:60:24:37:68:4b:61:12:e6:23:57: b3:45:4f:ac:dd:48:67:6a:bc:0e:e0:1b:f2:36:fa:45:4d:ee: 68:06:12:dd:47:86:48:6e:00:be:2c:83:bb:00:66:9b:45:8a: c8:44:ad:15:58:bc:a7:74:60:87:ea:fa:f3:86:c9:47:01:d7: ac:61:a4:b5:1c:1c:b2:dd:fc:79:92:5b:dd:b3:29:48:08:ca: 98:cc:01:80:d4:bf:16:75:d6:de:0d:aa:1e:ef:85:78:72:09: 3b:30:39:14:b9:4a:34:9f:b8:26:b5:45:80:95:3a:40:56:a3: 6b:73:50:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn+EEtXsbdaZ0Sz3BZse//GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUxMDE5MjAwMTQ0WhcNMjUxMDIwMjAwMTQ0WjAzMTEwLwYDVQQD EyhmNGI1OTg0YWExZGE2Y2I4MjdlNTdmZmEwNjc3YjY1OTY2ZTI3YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKR/ZplfAoDN8N9ZkwHyrzpYIcY/ 8ADze7B37X9ARV5f3sXC6lUWMvciFOOe/ERfCugr2/jhOmXiyFXyj7mowge7fIFJ ES9dVD4k+uoi32BmN2oZi+8RrET+qVNWg2XQLI32gu3TyOQgWAKSB5DbNUnBILjA HolpRByK8EWyruHbsfCHfUxHp7KRsJ9F7QyP+qeUrL7uCONKe4e+oXgeVt2xrcY9 QP2F3tipIlMfop2H0H7AA0+7/3xjiJ3kCqhat+j5UbbEL2JOg6JmomLQKb7H26q5 0hmPcm3tsuL3froDx7u31ZayQ1ottvEhLMwLQY1uzQFCmgeuyK0kMZHELwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS1mEqh2my4J+V/+gZ3tllm4nxzMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXNrXVg4 QagLnENezd90jhEqMPgUb7kmEA9S0AiZaNEu5B3920D4GuTGC1RGu3B4lamv6NDc 5na8F80HtMZLu3unM7Xf0hvVPhsYj5sRcqiBawSP7Phu+JRlWYz4kzAKyBsHj80T JgDVBR0D7nj1BggL3X9Yduqkc2bJGeg1nqswC6uapmRgJDdoS2ES5iNXs0VPrN1I Z2q8DuAb8jb6RU3uaAYS3UeGSG4AviyDuwBmm0WKyEStFVi8p3Rgh+r684bJRwHX rGGktRwcst38eZJb3bMpSAjKmMwBgNS/FnXW3g2qHu+FeHIJOzA5FLlKNJ+4JrVF gJU6QFaja3NQgQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:31:07 2025 by rpki-client