$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: ChiR9RtK8H9e9fTDTBNUT2H3+lc60X5f9nJT4frl9Gw= Subject key identifier: 7C:4C:44:30:AE:9F:8B:A4:08:83:54:C3:D8:AE:84:42:41:87:AF:51 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 0198D5BBD761B01491D6A86D218B101B1F82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0CF4 Signing time: Sat 23 Aug 2025 07:01:53 +0000 Manifest this update: Sat 23 Aug 2025 07:01:53 +0000 Manifest next update: Sun 24 Aug 2025 07:01:53 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: A5DsHdxjGronY1SlJmY-avOq7l0.roa (hash: TRbOBB2FpSmRLzGWMLyHgzyzq9dao9eG06ouQ8rU7ko=) 4: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 5: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 6: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: ICfIiS8opLqb8J4zq2gIGBuZC5yiITBzGimjBXIr518=) 7: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 8: mOMaktyaCkMxZ5MZJip9rZKzZTo.roa (hash: 6nwLbfgbvPLxcE59s58vm7SzOxg6/OXQsbiUHhiUMSY=) 9: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 12: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:bb:d7:61:b0:14:91:d6:a8:6d:21:8b:10:1b:1f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Aug 23 07:01:53 2025 GMT Not After : Aug 24 07:01:53 2025 GMT Subject: CN=7c4c4430ae9f8ba4088354c3d8ae84424187af51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:4d:5d:88:bf:c6:9b:f0:00:6d:07:e6:75: 93:51:a5:8e:99:94:0b:ca:b4:9e:2d:78:97:c8:e9: 20:d8:1b:56:d6:9d:ce:9e:a7:ec:95:6e:8d:06:5f: 3c:ae:18:23:19:79:03:99:a2:12:e2:28:8a:79:e9: 7c:79:6f:08:57:a5:3f:00:fe:48:8f:7b:87:61:72: 7e:e4:8a:e7:fa:4e:85:30:09:6e:c8:d9:95:23:e1: 02:b0:44:77:20:f3:79:12:f6:b1:33:71:e9:f9:79: 59:d8:c9:78:39:15:17:64:63:68:ac:b5:41:96:35: 6f:0d:8e:35:a2:8f:8c:81:1f:81:26:dc:27:7a:24: 1b:1a:93:6e:f6:07:4c:7f:4d:f8:2d:35:20:92:22: 9a:8f:a5:57:0c:4f:2f:de:6a:8b:af:35:11:26:01: 4c:ba:cd:b8:c7:18:de:51:2f:46:f0:4c:6b:c8:24: 7c:9a:df:51:06:86:b2:25:09:1e:36:5e:18:4b:11: b3:e1:e0:8e:33:a8:2f:35:c6:a0:57:92:fd:9b:e6: 71:08:5a:55:b8:e2:1f:85:21:b7:0c:b5:2c:3a:f0: 32:81:58:5e:ba:7b:65:df:d5:53:6d:b7:cc:e9:f6: f9:b9:44:a7:64:f4:dc:31:f2:58:bd:57:82:67:84: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4C:44:30:AE:9F:8B:A4:08:83:54:C3:D8:AE:84:42:41:87:AF:51 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a1:d3:58:5d:14:69:51:57:a1:18:63:73:5a:5f:1e:ba:c3: 6b:98:ee:30:26:43:4a:8a:52:26:13:8a:2f:b2:ab:70:71:39: 10:d7:05:9c:a6:13:6c:92:31:8b:d8:db:9b:ca:06:2e:7e:a9: e8:d1:dc:71:fa:b5:72:af:d5:7d:27:b6:84:53:98:47:65:31: 1d:9f:8c:3f:79:8f:c3:d3:1c:f9:5f:75:6f:73:cc:75:7b:33: 0c:a4:fa:62:fa:d0:da:c5:82:5d:a8:cc:0e:f0:5f:4c:c3:8d: d8:b3:bd:92:be:80:2b:6d:b8:8a:13:18:3e:af:79:fd:9c:5c: f5:73:dc:b0:56:15:c2:9c:8e:08:17:bd:f5:97:21:da:9a:66: a7:51:b5:bb:ca:35:c0:93:c2:36:b7:18:26:82:ab:6f:f9:2b: b3:0d:43:89:a2:61:bb:a5:3a:c2:ed:58:d2:06:68:94:bf:17: 27:c4:3b:2d:73:23:b3:54:5e:1b:0d:21:a1:90:de:28:f4:b4: 98:a1:02:a8:2c:dc:98:c9:b6:37:a9:25:db:22:81:55:81:b0: fb:0c:f8:7d:00:22:1c:08:f6:33:67:41:19:44:92:8d:7c:d7: 64:8d:3e:5a:0e:54:d4:1b:28:68:29:66:b7:6c:6f:20:61:ed: b8:dd:3e:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVu9dhsBSR1qhtIYsQGx+CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUwODIzMDcwMTUzWhcNMjUwODI0MDcwMTUzWjAzMTEwLwYDVQQD Eyg3YzRjNDQzMGFlOWY4YmE0MDg4MzU0YzNkOGFlODQ0MjQxODdhZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIBNXYi/xpvwAG0H5nWTUaWOmZQL yrSeLXiXyOkg2BtW1p3OnqfslW6NBl88rhgjGXkDmaIS4iiKeel8eW8IV6U/AP5I j3uHYXJ+5Irn+k6FMAluyNmVI+ECsER3IPN5EvaxM3Hp+XlZ2Ml4ORUXZGNorLVB ljVvDY41oo+MgR+BJtwneiQbGpNu9gdMf034LTUgkiKaj6VXDE8v3mqLrzURJgFM us24xxjeUS9G8ExryCR8mt9RBoayJQkeNl4YSxGz4eCOM6gvNcagV5L9m+ZxCFpV uOIfhSG3DLUsOvAygVheuntl39VTbbfM6fb5uUSnZPTcMfJYvVeCZ4Sj3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxMRDCun4ukCINUw9iuhEJBh69RMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKHTWF0U aVFXoRhjc1pfHrrDa5juMCZDSopSJhOKL7KrcHE5ENcFnKYTbJIxi9jbm8oGLn6p 6NHccfq1cq/VfSe2hFOYR2UxHZ+MP3mPw9Mc+V91b3PMdXszDKT6YvrQ2sWCXajM DvBfTMON2LO9kr6AK224ihMYPq95/Zxc9XPcsFYVwpyOCBe99Zch2ppmp1G1u8o1 wJPCNrcYJoKrb/krsw1DiaJhu6U6wu1Y0gZolL8XJ8Q7LXMjs1ReGw0hoZDeKPS0 mKECqCzcmMm2N6kl2yKBVYGw+wz4fQAiHAj2M2dBGUSSjXzXZI0+Wg5U1BsoaClm t2xvIGHtuN0+Vg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:12:32 2025 by rpki-client