$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: Dnt1BDbzeuLrrLz1LmcT7/HySFhsB5jbcPM8LWGhcPk= Subject key identifier: AD:39:63:76:25:D3:32:2D:97:B1:75:98:B9:7E:88:0A:66:28:FC:8E Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 01969FACE153C1A6651F776C8A9B7B3C836C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0BCD Signing time: Mon 05 May 2025 09:00:29 +0000 Manifest this update: Mon 05 May 2025 09:00:29 +0000 Manifest next update: Tue 06 May 2025 09:00:29 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 39PEp-C5FClNcpVM5SRA1eRi9gM.roa (hash: ErKDTcSD0CajBQYYKC2yQOJqHCLtxlnT1541+9s8ftc=) 3: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 4: B66DQLeQQsfCRC70iC9ajM9O9s0.roa (hash: 3nVjFsWHA9fLdFTp0YeyDgNahl9IFCyEhT0hobMCyR0=) 5: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 6: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 7: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: CVyhpN0nLp2qRrXUYMDoy0aAnMwDN6bHXZJU/Jdeljg=) 8: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 9: fhK3spdizh-j08bDgQWAIWcvZm4.roa (hash: Nz0rdH67w5QKkf0wMH2IazVmlZq7Iwuz9Y5nbjtBWvw=) 10: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 11: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 12: tKgBqg_rLrlFGJvqmdrP_jnooGM.roa (hash: tpbpHr7/WtsAKH6NIHCmBsfYfjVLkAOk8pTuaYRtsII=) 13: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 14: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9f:ac:e1:53:c1:a6:65:1f:77:6c:8a:9b:7b:3c:83:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: May 5 09:00:29 2025 GMT Not After : May 6 09:00:29 2025 GMT Subject: CN=ad39637625d3322d97b17598b97e880a6628fc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:2f:9a:5e:4d:f7:87:11:9a:0b:13:89:d6: 33:87:8e:00:e3:d9:93:ee:88:14:a3:c4:5d:d1:f7: 80:be:91:59:af:18:7c:8b:83:16:ff:0f:9c:36:1c: 6e:9d:ab:e2:36:e8:15:b2:9e:8f:9e:56:40:a5:f5: 0e:bb:1c:61:04:a0:52:a4:43:9f:cf:45:91:d2:85: c3:9e:37:95:8d:70:ed:d8:81:5c:c3:3c:c9:d9:6d: fd:d5:e2:9a:42:90:70:ce:6e:e7:bc:bf:f7:cd:8f: d2:ab:23:65:45:db:5a:4f:7e:6c:d4:77:d3:89:0f: 93:e6:7d:48:70:88:0b:f1:7c:12:9e:75:37:bb:c1: 7f:af:a4:84:c1:a4:92:66:a3:20:4e:d9:ae:37:b9: ee:2d:64:86:82:5f:fa:69:8f:c7:c6:a4:ba:6e:79: 19:05:40:4a:ee:68:77:93:72:5d:41:23:ac:dd:b8: aa:7e:a0:55:d1:9b:42:27:30:0d:e7:09:9b:e7:9e: b0:0b:3e:ca:1f:75:f0:14:16:da:74:0f:4a:b9:85: db:80:7e:51:dc:1f:f2:07:ba:50:5f:c9:8e:e2:3d: a3:f0:f4:f3:c3:4d:85:6a:8f:74:f5:8c:e0:5f:ac: 9d:72:fa:f3:d7:45:94:a2:47:de:b3:97:9d:37:09: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:39:63:76:25:D3:32:2D:97:B1:75:98:B9:7E:88:0A:66:28:FC:8E X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:6c:51:64:9a:86:3a:92:22:ed:a7:07:d1:ac:b8:7a:16:d0: 60:78:0a:77:d0:ac:6d:15:6a:18:43:53:9f:d2:42:5b:8b:85: 7e:66:72:c0:e1:a7:af:8c:92:3e:fd:f5:28:9b:44:14:7a:d9: 41:35:07:2c:df:83:9c:ce:7a:d5:11:26:1c:38:e6:ae:95:8f: 59:5d:0e:49:c4:cd:bc:da:c1:7e:9b:9c:7f:f4:01:17:5f:cd: 1b:e4:c3:af:a5:83:14:82:20:22:1a:f4:9f:b6:ac:bd:8f:3c: 89:c8:05:12:21:25:6c:b7:04:62:ff:df:7b:d3:e3:85:b7:90: 4a:ce:0b:3b:e8:be:c2:9d:15:7c:10:c8:dc:de:67:8c:76:10: cf:5b:32:6f:39:27:d6:39:52:d8:36:a1:fa:e0:cd:dc:d1:2d: f6:84:16:b6:7e:56:ea:57:87:ad:2f:68:06:fc:55:57:db:11: f2:98:e7:1c:8b:72:8b:1d:bb:56:99:1f:3d:d1:43:d4:92:ed: ed:8e:9d:43:42:87:9f:cc:2e:bd:ac:e7:be:f7:03:c3:a1:68: c4:8a:9e:7c:cb:bd:c2:bb:f3:2c:3a:71:67:84:3b:26:ce:a1: f4:c1:0c:d4:97:b7:e0:44:c5:f1:f3:67:be:0f:f6:49:50:57: d1:6c:32:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZafrOFTwaZlH3dsipt7PINsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUwNTA1MDkwMDI5WhcNMjUwNTA2MDkwMDI5WjAzMTEwLwYDVQQD EyhhZDM5NjM3NjI1ZDMzMjJkOTdiMTc1OThiOTdlODgwYTY2MjhmYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1cvml5N94cRmgsTidYzh44A49mT 7ogUo8Rd0feAvpFZrxh8i4MW/w+cNhxunaviNugVsp6PnlZApfUOuxxhBKBSpEOf z0WR0oXDnjeVjXDt2IFcwzzJ2W391eKaQpBwzm7nvL/3zY/SqyNlRdtaT35s1HfT iQ+T5n1IcIgL8XwSnnU3u8F/r6SEwaSSZqMgTtmuN7nuLWSGgl/6aY/HxqS6bnkZ BUBK7mh3k3JdQSOs3biqfqBV0ZtCJzAN5wmb556wCz7KH3XwFBbadA9KuYXbgH5R 3B/yB7pQX8mO4j2j8PTzw02Fao909YzgX6ydcvrz10WUokfes5edNwnGbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK05Y3Yl0zItl7F1mLl+iApmKPyOMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2xRZJqG OpIi7acH0ay4ehbQYHgKd9CsbRVqGENTn9JCW4uFfmZywOGnr4ySPv31KJtEFHrZ QTUHLN+DnM561REmHDjmrpWPWV0OScTNvNrBfpucf/QBF1/NG+TDr6WDFIIgIhr0 n7asvY88icgFEiElbLcEYv/fe9PjhbeQSs4LO+i+wp0VfBDI3N5njHYQz1sybzkn 1jlS2Dah+uDN3NEt9oQWtn5W6leHrS9oBvxVV9sR8pjnHItyix27VpkfPdFD1JLt 7Y6dQ0KHn8wuvaznvvcDw6FoxIqefMu9wrvzLDpxZ4Q7Js6h9MEM1Je34ETF8fNn vg/2SVBX0WwyOg== -----END CERTIFICATE-----Generated at Mon May 5 14:27:13 2025 by rpki-client