$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: qRvV1UCW1oPQjpcd5D5BmIY5PQWEV6z31jx8Jfa9uZk= Subject key identifier: E6:7E:92:60:09:13:60:8B:19:12:0E:23:2C:D8:B6:71:BC:63:7E:14 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 0197CA5E1EFD63DD4A7BB1095558133B9A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0DB4 Signing time: Wed 02 Jul 2025 09:00:55 +0000 Manifest this update: Wed 02 Jul 2025 09:00:55 +0000 Manifest next update: Thu 03 Jul 2025 09:00:55 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 7: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 8: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 9: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 10: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: 1Fb5bz6+drsJtE5mVPmNr335Z1n3fF7iO5d49hC9aXk=) 12: xkDvueUU9N4cFlL1b_rByr6Kprs.roa (hash: zMoJ8gPfKGeY6/o4KCAGexJTMa3L8ZNYU/xVse89JJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 03 Jul 2025 09:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:ca:5e:1e:fd:63:dd:4a:7b:b1:09:55:58:13:3b:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jul 2 09:00:55 2025 GMT Not After : Jul 3 09:00:55 2025 GMT Subject: CN=e67e92600913608b19120e232cd8b671bc637e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:53:b1:1f:1b:cf:96:09:28:2f:29:6b:a7: f4:ee:76:6b:d0:19:3a:d4:d4:ff:9b:c0:ef:49:2c: 37:c3:4c:c6:db:ed:c2:71:77:e4:ee:9f:a3:69:18: dc:f3:29:0f:bb:75:df:4b:49:6c:04:e2:31:2e:fb: 62:9d:42:37:68:5d:e6:9a:d4:4b:67:f4:ad:39:e6: 44:41:ea:16:aa:63:b7:6d:2e:d1:37:60:77:77:9e: 0c:39:f0:38:7d:3f:fd:c8:f0:52:5c:40:ff:9b:46: 4d:87:60:5c:f1:21:aa:f5:9a:3d:10:38:5d:32:03: b4:2d:93:e5:56:58:2a:8c:42:7c:57:14:47:8e:60: f9:58:e6:b1:ff:22:52:95:ae:62:a9:c7:9f:6c:09: a8:f3:38:43:c0:0b:9e:d5:72:09:df:8c:7e:83:11: f2:4c:dd:42:5f:bd:73:57:67:92:91:91:7a:69:2e: a7:0d:09:e0:5f:33:fd:31:4f:52:14:fe:9b:6e:35: 18:b3:43:5c:3e:bb:73:a0:c0:41:4e:a3:cf:f9:86: 12:85:48:86:de:52:f2:a7:32:07:7a:31:b0:1c:32: 16:3c:03:b3:f4:06:b3:82:1b:75:6b:74:d5:23:81: b6:d6:63:ae:48:50:42:2a:d8:d7:77:c6:02:14:94: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7E:92:60:09:13:60:8B:19:12:0E:23:2C:D8:B6:71:BC:63:7E:14 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:12:f0:34:d6:29:d9:a0:74:04:e2:14:3b:43:b9:fe:3a:c0: 97:b5:da:a2:f1:48:ee:dd:c3:07:32:b6:ce:36:a9:1f:50:f3: e9:a1:be:8e:64:b6:ac:78:88:2d:cf:2f:17:44:9b:b6:0f:dd: 85:36:ad:14:c6:6c:c3:5f:0b:7c:66:09:a2:f7:01:f5:b2:8d: 3f:25:25:ea:9b:8b:2e:89:a7:3c:c6:59:1e:bb:19:82:77:08: f1:5b:f9:68:06:70:be:af:ba:28:9d:6c:50:60:bc:79:8e:03: 87:4c:ab:c2:1f:f3:e2:96:1f:77:bb:94:72:bc:75:a0:8e:34: 83:8a:69:2f:87:57:76:22:df:9a:dd:e8:bc:0d:88:bd:d4:01: 3e:b0:a7:c2:95:00:67:2d:bd:6c:6a:83:bc:d5:95:1d:60:a5: 26:a3:15:48:a2:a7:f7:f7:0b:f7:ef:ad:da:f8:7a:7b:89:c3: c3:8d:a6:54:14:64:50:a4:70:d7:0a:46:0d:1e:ca:3e:66:ba: d9:26:46:eb:3b:5d:11:c8:b2:b0:24:bf:d8:38:fa:ff:4e:65: 4e:cd:2f:dc:34:1c:e9:2c:2b:23:40:54:9a:bc:3f:d4:7b:99: fa:3b:04:bb:4e:30:31:a9:44:d4:58:1c:c4:5e:f2:47:30:4b: 50:fc:4c:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZfKXh79Y91Ke7EJVVgTO5qAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwNzAyMDkwMDU1WhcNMjUwNzAzMDkwMDU1WjAzMTEwLwYDVQQD EyhlNjdlOTI2MDA5MTM2MDhiMTkxMjBlMjMyY2Q4YjY3MWJjNjM3ZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokJTsR8bz5YJKC8pa6f07nZr0Bk6 1NT/m8DvSSw3w0zG2+3CcXfk7p+jaRjc8ykPu3XfS0lsBOIxLvtinUI3aF3mmtRL Z/StOeZEQeoWqmO3bS7RN2B3d54MOfA4fT/9yPBSXED/m0ZNh2Bc8SGq9Zo9EDhd MgO0LZPlVlgqjEJ8VxRHjmD5WOax/yJSla5iqcefbAmo8zhDwAue1XIJ34x+gxHy TN1CX71zV2eSkZF6aS6nDQngXzP9MU9SFP6bbjUYs0NcPrtzoMBBTqPP+YYShUiG 3lLypzIHejGwHDIWPAOz9Aazght1a3TVI4G21mOuSFBCKtjXd8YCFJQFvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZ+kmAJE2CLGRIOIyzYtnG8Y34UMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRLwNNYp 2aB0BOIUO0O5/jrAl7XaovFI7t3DBzK2zjapH1Dz6aG+jmS2rHiILc8vF0Sbtg/d hTatFMZsw18LfGYJovcB9bKNPyUl6puLLomnPMZZHrsZgncI8Vv5aAZwvq+6KJ1s UGC8eY4Dh0yrwh/z4pYfd7uUcrx1oI40g4ppL4dXdiLfmt3ovA2IvdQBPrCnwpUA Zy29bGqDvNWVHWClJqMVSKKn9/cL9++t2vh6e4nDw42mVBRkUKRw1wpGDR7KPma6 2SZG6ztdEciysCS/2Dj6/05lTs0v3DQc6SwrI0BUmrw/1HuZ+jsEu04wMalE1Fgc xF7yRzBLUPxMSw== -----END CERTIFICATE-----Generated at Wed Jul 2 15:15:44 2025 by rpki-client