$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: dFRlBO/parlQQeR+sVBpvR1WzDCMJ2G1v3/QnIO9mFY= Subject key identifier: 6E:31:40:5D:22:E9:64:CA:B0:93:5E:84:14:87:8F:1A:A3:25:D4:47 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 0197B5C4F500ECE70D5F6EE224A29808A380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0C5E Signing time: Sat 28 Jun 2025 09:01:13 +0000 Manifest this update: Sat 28 Jun 2025 09:01:13 +0000 Manifest next update: Sun 29 Jun 2025 09:01:13 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 4: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: QjKMwViZg7boTR7XFi4ru0SfxWScZC4QJH+lWwP5xwE=) 6: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 7: fhK3spdizh-j08bDgQWAIWcvZm4.roa (hash: Nz0rdH67w5QKkf0wMH2IazVmlZq7Iwuz9Y5nbjtBWvw=) 8: mOMaktyaCkMxZ5MZJip9rZKzZTo.roa (hash: 6nwLbfgbvPLxcE59s58vm7SzOxg6/OXQsbiUHhiUMSY=) 9: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tKgBqg_rLrlFGJvqmdrP_jnooGM.roa (hash: tpbpHr7/WtsAKH6NIHCmBsfYfjVLkAOk8pTuaYRtsII=) 12: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 13: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Jun 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:b5:c4:f5:00:ec:e7:0d:5f:6e:e2:24:a2:98:08:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jun 28 09:01:13 2025 GMT Not After : Jun 29 09:01:13 2025 GMT Subject: CN=6e31405d22e964cab0935e8414878f1aa325d447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:01:b9:71:16:28:c1:45:16:f7:8d:62:ec: 9f:a3:8b:b6:75:72:37:0b:75:43:77:97:9a:43:b2: 58:db:95:20:8e:7d:87:aa:8f:37:dd:fa:75:13:3d: 1e:d0:c3:b8:45:2f:0e:3b:e6:3e:fb:dd:04:2a:d3: b1:6f:29:bf:cc:31:54:a5:3c:6d:55:54:da:56:b0: ee:4b:3a:3d:0e:c1:90:97:b0:bd:b4:53:a8:70:c9: c3:0b:81:1c:51:82:94:bd:f2:00:70:06:e3:d6:12: 03:08:69:5c:c6:90:fb:56:93:f2:34:ed:ad:db:49: f9:e6:dd:9e:d8:54:f6:b8:dc:8b:4a:5e:be:9e:3d: 12:23:30:f9:05:f0:ae:05:d4:fd:2c:05:35:9b:c1: a4:70:69:32:a0:c0:4f:a9:6d:23:67:b2:7a:0a:e7: d3:e7:5d:74:48:bf:d2:bb:c3:8b:92:00:f9:5c:3b: ab:b3:ec:4d:7e:1b:75:4f:60:b5:6f:d0:09:34:4d: 0e:e9:12:4c:59:a1:6c:10:ff:a4:87:d5:f2:c0:b6: 00:88:74:55:12:cf:0f:1b:46:4c:00:6d:e1:51:7c: 8e:6e:9a:4d:e2:dc:f2:a6:ca:92:88:49:7f:83:64: 83:08:c5:af:8a:3b:98:d5:a8:7b:7e:83:1e:49:49: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:40:5D:22:E9:64:CA:B0:93:5E:84:14:87:8F:1A:A3:25:D4:47 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fd:e4:1d:af:34:40:87:b5:ab:ee:21:b7:a8:ec:5a:1e:3e: f5:8d:36:a9:54:8c:63:2f:d7:c2:40:40:9c:52:73:20:04:63: f1:eb:d1:7a:ee:6a:c6:0f:9d:ba:6c:99:d7:e0:1d:5d:a4:f3: f0:fd:06:1d:0a:cc:1b:f6:ed:81:a0:0a:22:8b:17:41:96:eb: 98:0e:f6:49:cd:21:79:d2:22:67:18:e4:52:99:38:9d:97:29: 9b:5c:4b:2a:4d:79:88:cc:fd:e7:ac:4f:23:3c:e4:6b:21:f2: 33:ba:30:44:80:1f:1f:fd:cd:e1:ba:69:16:2b:7b:27:ad:e8: 6b:84:e8:48:08:c4:a3:1a:fd:6f:ff:ba:e2:03:bb:a9:6e:0d: 3d:3e:58:5e:9d:8d:b7:c2:b6:c3:04:65:3b:75:9d:4f:3c:94: dd:91:eb:22:42:0e:c8:d6:e0:e9:19:72:7c:58:9f:be:97:e8: d9:9c:45:2d:b1:ac:95:5f:39:e2:17:56:c6:b0:19:3d:ec:28: e0:aa:4e:c9:87:35:7b:b4:fa:e5:cc:04:14:fb:62:a1:2b:73: 84:84:3e:33:3b:2e:3c:bf:a6:30:d8:b7:e0:13:c2:73:39:4f: 18:f1:86:1e:0e:ba:68:d6:fd:3e:86:a0:d0:67:8a:fa:2e:35: 41:93:2f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZe1xPUA7OcNX27iJKKYCKOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUwNjI4MDkwMTEzWhcNMjUwNjI5MDkwMTEzWjAzMTEwLwYDVQQD Eyg2ZTMxNDA1ZDIyZTk2NGNhYjA5MzVlODQxNDg3OGYxYWEzMjVkNDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxisBuXEWKMFFFveNYuyfo4u2dXI3 C3VDd5eaQ7JY25Ugjn2Hqo833fp1Ez0e0MO4RS8OO+Y++90EKtOxbym/zDFUpTxt VVTaVrDuSzo9DsGQl7C9tFOocMnDC4EcUYKUvfIAcAbj1hIDCGlcxpD7VpPyNO2t 20n55t2e2FT2uNyLSl6+nj0SIzD5BfCuBdT9LAU1m8GkcGkyoMBPqW0jZ7J6CufT 5110SL/Su8OLkgD5XDurs+xNfht1T2C1b9AJNE0O6RJMWaFsEP+kh9XywLYAiHRV Es8PG0ZMAG3hUXyObppN4tzypsqSiEl/g2SDCMWvijuY1ah7foMeSUnMXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4xQF0i6WTKsJNehBSHjxqjJdRHMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/3kHa80 QIe1q+4ht6jsWh4+9Y02qVSMYy/XwkBAnFJzIARj8evReu5qxg+dumyZ1+AdXaTz 8P0GHQrMG/btgaAKIosXQZbrmA72Sc0hedIiZxjkUpk4nZcpm1xLKk15iMz956xP IzzkayHyM7owRIAfH/3N4bppFit7J63oa4ToSAjEoxr9b/+64gO7qW4NPT5YXp2N t8K2wwRlO3WdTzyU3ZHrIkIOyNbg6RlyfFifvpfo2ZxFLbGslV854hdWxrAZPewo 4KpOyYc1e7T65cwEFPtioStzhIQ+MzsuPL+mMNi34BPCczlPGPGGHg66aNb9Poag 0GeK+i41QZMv/A== -----END CERTIFICATE-----Generated at Sat Jun 28 19:43:50 2025 by rpki-client