$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: FWyehsiPgRGZPTfPhRoawxFUFwON7a3WAFy1obPq4k4= Subject key identifier: 69:81:74:F5:75:D0:2A:51:50:CE:FC:7C:F5:07:64:EC:CE:BA:BF:A9 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 0198D54E77CBA342352DFEBD484147C84FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0E43 Signing time: Sat 23 Aug 2025 05:02:26 +0000 Manifest this update: Sat 23 Aug 2025 05:02:26 +0000 Manifest next update: Sun 24 Aug 2025 05:02:26 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: VXF78lG/oas9+oLXUBcSGX8mycZZwoA9mkXsNekC62U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d5:4e:77:cb:a3:42:35:2d:fe:bd:48:41:47:c8:4f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Aug 23 05:02:26 2025 GMT Not After : Aug 24 05:02:26 2025 GMT Subject: CN=698174f575d02a5150cefc7cf50764eccebabfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:f0:d9:7a:bc:50:a3:3e:88:71:ba:47:f2: 3f:7d:92:41:b5:3d:d3:7c:31:9e:1b:d1:47:f3:4b: 9b:fa:2d:bd:55:54:b1:0a:1e:48:4f:6c:4a:a4:27: 38:47:57:29:3b:e2:c5:70:ef:c5:89:62:7d:73:84: 9e:83:8a:9e:22:88:61:d1:d5:c9:e4:25:86:dc:a9: b2:3f:f8:c1:61:47:4a:e8:9c:17:13:16:71:66:2b: ee:4b:74:07:b3:07:32:f0:42:32:c7:25:5e:d6:17: 9d:36:c4:73:e8:ef:e0:be:7a:1c:9a:a8:15:52:1d: 6e:7e:a3:df:e8:d1:e2:85:65:df:63:43:29:fd:9c: 49:8a:45:8b:07:0f:14:12:f0:0a:38:c6:8c:1f:d0: d6:ca:af:85:8f:19:a6:10:06:9d:e3:eb:bc:03:de: f6:7a:29:dc:2a:f6:1e:4d:d7:a4:db:fe:49:49:96: 3e:46:e3:2e:e5:e1:35:76:8b:d7:ed:2c:81:2d:6d: 48:4d:94:5e:8f:62:24:d1:8f:80:38:94:6f:b0:f1: b8:4b:1f:8c:d7:8f:83:94:08:60:c4:3b:7e:6f:8e: e6:9c:ad:94:85:21:99:0e:cc:89:d5:f8:1f:83:d7: ce:8a:27:8d:4b:03:04:5c:e9:ae:6f:06:76:42:36: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:81:74:F5:75:D0:2A:51:50:CE:FC:7C:F5:07:64:EC:CE:BA:BF:A9 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f7:2d:d2:2d:61:e9:17:b7:a0:82:cf:af:0f:f1:07:99:32: 02:ec:26:9d:8f:22:7c:f1:53:78:e7:8c:87:40:a8:d9:27:66: 55:72:04:fd:7a:21:64:a1:f4:98:e0:d2:8b:8a:aa:d6:80:ce: 91:42:60:d4:8f:6b:cb:72:bb:d9:8a:bb:5f:e6:a1:9d:98:cc: ca:9f:a1:46:72:63:58:34:70:bb:1e:d7:67:ed:9a:fd:a1:e1: 54:96:7e:ce:a6:96:3d:e2:df:3c:8e:33:6c:a5:b3:8b:00:7a: 8a:ca:4f:c9:63:55:01:05:6a:b8:e1:e3:fa:a8:fe:d0:3c:62: 8e:be:24:10:84:ef:0c:9c:61:ce:91:7a:30:eb:c0:f3:85:a8: a3:18:54:ad:df:e1:8e:03:ed:ba:fa:da:1c:fc:bf:77:90:f0: 7a:61:24:a8:bb:7c:4c:0a:d2:4a:03:4c:bb:74:6a:ae:b5:71: 66:b1:e7:7e:90:19:a1:e5:7a:f0:bc:26:fd:33:31:40:37:c7: e6:be:f0:b7:77:85:25:e5:5d:51:5e:d7:b0:96:b7:4f:a3:ac: 90:ed:19:56:94:d7:ae:36:e1:04:3a:4c:c7:08:c4:fa:14:18: cc:c1:04:d0:3e:99:67:f9:a8:ad:83:d3:52:2b:86:85:d8:bd: 7a:27:e0:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjVTnfLo0I1Lf69SEFHyE/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwODIzMDUwMjI2WhcNMjUwODI0MDUwMjI2WjAzMTEwLwYDVQQD Eyg2OTgxNzRmNTc1ZDAyYTUxNTBjZWZjN2NmNTA3NjRlY2NlYmFiZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXTw2Xq8UKM+iHG6R/I/fZJBtT3T fDGeG9FH80ub+i29VVSxCh5IT2xKpCc4R1cpO+LFcO/FiWJ9c4Seg4qeIohh0dXJ 5CWG3KmyP/jBYUdK6JwXExZxZivuS3QHswcy8EIyxyVe1hedNsRz6O/gvnocmqgV Uh1ufqPf6NHihWXfY0Mp/ZxJikWLBw8UEvAKOMaMH9DWyq+FjxmmEAad4+u8A972 eincKvYeTdek2/5JSZY+RuMu5eE1dovX7SyBLW1ITZRej2Ik0Y+AOJRvsPG4Sx+M 14+DlAhgxDt+b47mnK2UhSGZDsyJ1fgfg9fOiieNSwMEXOmubwZ2QjaOjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmBdPV10CpRUM78fPUHZOzOur+pMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPct0i1h 6Re3oILPrw/xB5kyAuwmnY8ifPFTeOeMh0Co2SdmVXIE/XohZKH0mODSi4qq1oDO kUJg1I9ry3K72Yq7X+ahnZjMyp+hRnJjWDRwux7XZ+2a/aHhVJZ+zqaWPeLfPI4z bKWziwB6ispPyWNVAQVquOHj+qj+0Dxijr4kEITvDJxhzpF6MOvA84WooxhUrd/h jgPtuvraHPy/d5DwemEkqLt8TArSSgNMu3RqrrVxZrHnfpAZoeV68Lwm/TMxQDfH 5r7wt3eFJeVdUV7XsJa3T6OskO0ZVpTXrjbhBDpMxwjE+hQYzMEE0D6ZZ/morYPT UiuGhdi9eifgwg== -----END CERTIFICATE-----Generated at Sat Aug 23 11:41:52 2025 by rpki-client