$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: LenIcBDonvxcHcIZWxl1M7rMskurRpHLzTEhee6WRgM= Subject key identifier: 1E:C1:3B:9A:A6:7F:E7:A9:86:4F:8C:D2:FE:95:3D:53:2B:A9:F8:29 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 0199FC58B62425ACC2B303B9CCB7EA270798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0D8D Signing time: Sun 19 Oct 2025 12:01:36 +0000 Manifest this update: Sun 19 Oct 2025 12:01:36 +0000 Manifest next update: Mon 20 Oct 2025 12:01:36 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 4: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: wDbxR+ZBRab20wK+zHGAShZcEzTzNgXbpGk5Pqm/gNQ=) 6: XmW1bZIMAH1eUiD8pIh2qe-nzi4.roa (hash: OGkNzBo8j0AN5nV1X1VDsvF/YywJ3+cRgQIpDFVours=) 7: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 8: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 9: oFP6X1Pf78VGMK8HY0EDx01ApW0.roa (hash: lDBxCCacRhN6uDAJG81pMtyRTm9VBKmLlVEk7CNfFXw=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 12: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:58:b6:24:25:ac:c2:b3:03:b9:cc:b7:ea:27:07:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Oct 19 12:01:36 2025 GMT Not After : Oct 20 12:01:36 2025 GMT Subject: CN=1ec13b9aa67fe7a9864f8cd2fe953d532ba9f829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:ce:03:8e:cc:55:97:49:83:5b:7e:ee:cb: 92:0f:73:43:c8:8e:be:5a:42:54:4d:f8:09:a6:4f: f9:25:da:db:09:20:6c:7d:41:b2:c1:ea:08:8e:49: 88:c1:1f:dc:0b:dd:71:71:a5:e1:c9:d5:2a:c3:6f: 4c:30:3f:83:b0:66:e9:db:1d:3a:94:b5:cd:95:61: 15:24:ff:b6:78:3b:8a:cb:55:a6:33:13:6a:b6:7c: 0b:c6:67:3b:67:3c:f7:91:ea:02:a5:7a:a8:a8:a4: 82:da:80:41:75:1f:94:3c:cc:58:11:d0:e8:59:a0: 53:5c:2a:f4:93:7d:80:4d:e3:36:f5:a9:33:95:e9: 3a:62:06:9c:34:e2:2a:64:d7:bf:b7:24:2f:6e:94: 75:f4:3c:b2:4c:b2:01:ea:4a:89:98:fa:9a:e2:84: 0c:94:9d:61:60:49:bc:28:8e:fb:bc:95:2d:6f:51: 02:a8:3b:c1:69:6f:25:aa:36:db:92:aa:d0:15:8c: f3:31:1d:14:cf:c9:c6:6f:12:68:b7:da:13:86:cf: eb:b1:ec:90:d7:0a:5e:ea:7f:72:7a:b2:60:40:09: e9:7a:ad:1c:e9:a8:fb:c5:06:e1:fe:ac:6d:3c:46: ec:7b:19:15:c0:e8:f9:32:7d:00:f8:11:29:17:95: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C1:3B:9A:A6:7F:E7:A9:86:4F:8C:D2:FE:95:3D:53:2B:A9:F8:29 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:82:24:90:15:7e:38:49:b4:5e:42:01:ea:4e:77:cc:44:d8: 03:d0:7f:8c:62:5a:ab:5f:e8:18:13:a4:b5:30:bf:4a:b5:5c: 05:94:99:99:cb:86:e6:a3:8c:80:d9:a7:8b:14:a6:f0:3f:d6: 41:72:55:0f:aa:d3:9a:69:3e:53:cd:88:e6:60:03:b7:5f:3e: 4d:33:87:3c:db:24:06:a7:03:da:2f:26:72:5d:95:14:37:36: 80:91:86:ed:27:05:d7:f7:ae:c1:97:77:85:46:36:94:65:a8: 3e:22:a7:41:c8:f4:c6:44:42:f3:41:5c:f9:e0:d7:10:27:c5: de:98:28:22:f2:d0:74:06:3f:66:89:de:ba:bc:42:a3:30:a6: 97:8c:99:50:f8:46:8e:38:78:2b:95:89:a2:b8:98:e5:7c:f4: 9d:2a:ff:d5:48:79:dd:8d:b8:54:00:f6:cd:04:47:8c:f3:b1: bd:05:a1:74:95:29:e7:46:43:0e:73:ef:51:db:87:c7:41:8d: 4a:14:2f:b0:2a:53:33:85:d7:ef:b3:54:14:6b:f2:1f:66:24: 9f:fd:1f:44:da:a3:9b:00:4a:85:7c:5f:d8:b0:ef:58:a0:5a: 5d:55:81:3a:c9:7b:7f:86:d5:fc:59:c9:1d:50:1e:c9:fd:0d: 06:5b:6f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8WLYkJazCswO5zLfqJweYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUxMDE5MTIwMTM2WhcNMjUxMDIwMTIwMTM2WjAzMTEwLwYDVQQD EygxZWMxM2I5YWE2N2ZlN2E5ODY0ZjhjZDJmZTk1M2Q1MzJiYTlmODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo3OA47MVZdJg1t+7suSD3NDyI6+ WkJUTfgJpk/5JdrbCSBsfUGyweoIjkmIwR/cC91xcaXhydUqw29MMD+DsGbp2x06 lLXNlWEVJP+2eDuKy1WmMxNqtnwLxmc7Zzz3keoCpXqoqKSC2oBBdR+UPMxYEdDo WaBTXCr0k32ATeM29akzlek6YgacNOIqZNe/tyQvbpR19DyyTLIB6kqJmPqa4oQM lJ1hYEm8KI77vJUtb1ECqDvBaW8lqjbbkqrQFYzzMR0Uz8nGbxJot9oThs/rseyQ 1wpe6n9yerJgQAnpeq0c6aj7xQbh/qxtPEbsexkVwOj5Mn0A+BEpF5XeswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7BO5qmf+ephk+M0v6VPVMrqfgpMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYIkkBV+ OEm0XkIB6k53zETYA9B/jGJaq1/oGBOktTC/SrVcBZSZmcuG5qOMgNmnixSm8D/W QXJVD6rTmmk+U82I5mADt18+TTOHPNskBqcD2i8mcl2VFDc2gJGG7ScF1/euwZd3 hUY2lGWoPiKnQcj0xkRC80Fc+eDXECfF3pgoIvLQdAY/ZoneurxCozCml4yZUPhG jjh4K5WJoriY5Xz0nSr/1Uh53Y24VAD2zQRHjPOxvQWhdJUp50ZDDnPvUduHx0GN ShQvsCpTM4XX77NUFGvyH2Ykn/0fRNqjmwBKhXxf2LDvWKBaXVWBOsl7f4bV/FnJ HVAeyf0NBltvwg== -----END CERTIFICATE-----Generated at Sun Oct 19 17:33:11 2025 by rpki-client