$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: VpNdFuPjNN6DMr4cSHYAJnpmR1jswT1Tgg74P6zJyBc= Subject key identifier: D8:6E:69:70:6A:61:13:21:F1:2A:6E:30:B8:60:90:E1:A5:3A:F9:E9 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 0199FCC675B157A8EC22594FA4350B8F3C65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0EDC Signing time: Sun 19 Oct 2025 14:01:28 +0000 Manifest this update: Sun 19 Oct 2025 14:01:28 +0000 Manifest next update: Mon 20 Oct 2025 14:01:28 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: f0qGdEGT76CEBsrDVGgN0sWEXkG2SpVrTcAHJhvH/Ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 11:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fc:c6:75:b1:57:a8:ec:22:59:4f:a4:35:0b:8f:3c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Oct 19 14:01:28 2025 GMT Not After : Oct 20 14:01:28 2025 GMT Subject: CN=d86e69706a611321f12a6e30b86090e1a53af9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:bd:36:4c:71:42:4f:b4:1e:3b:d6:38:0b: 09:26:cd:f4:1d:99:4f:11:87:f5:0f:8f:dc:ba:ce: f8:f8:7d:d5:52:56:47:0a:a6:ef:8d:2a:56:a3:67: 64:1f:72:9c:0f:72:24:b8:03:b4:d2:1c:d1:7e:d1: b2:6f:ee:58:51:d7:df:1c:9b:d8:9c:23:e3:65:af: bd:52:1d:86:7e:e3:e5:36:59:c0:93:12:80:ae:e4: c6:32:f4:3e:f3:59:af:dd:21:18:f4:58:38:07:7c: f3:90:0f:7f:c5:02:1f:19:ef:ba:21:80:08:7b:9d: fd:ca:79:d5:36:e6:2a:74:7e:26:fe:12:80:f1:2d: 41:5d:e1:0c:5d:b5:4f:70:eb:61:eb:b1:08:39:d1: 8d:f9:ae:e7:f7:2b:6d:0e:8f:e9:06:8d:11:a9:41: cf:32:c0:0e:6c:ba:92:87:c2:28:f1:b2:2b:77:80: 85:6f:ea:f7:66:50:79:39:a6:38:53:d4:21:88:3a: 6b:85:86:29:f6:2b:4b:ec:c5:54:3b:37:a0:2a:eb: 12:25:f5:c1:88:4f:fd:8d:d9:23:a8:b8:a4:a4:c4: 30:52:f8:56:4f:64:08:0c:9c:84:50:82:85:b9:dd: e9:cb:85:ad:ea:e2:12:56:63:92:a8:67:00:1e:3a: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6E:69:70:6A:61:13:21:F1:2A:6E:30:B8:60:90:E1:A5:3A:F9:E9 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f2:af:2f:ad:42:13:30:00:95:08:22:b0:86:66:44:d7:5a: 14:15:89:83:49:16:50:c2:fe:01:1f:9f:45:8a:b6:fd:de:20: d6:3d:c7:03:5f:f5:06:7e:be:a4:23:d7:4a:67:78:bc:bf:b3: 2b:cc:2e:e6:36:b2:ab:e5:a7:6f:ce:63:2f:5c:91:a2:70:75: c8:13:c3:5f:0e:73:43:be:85:17:e1:8e:d1:70:be:58:6e:5c: 1b:ab:ea:07:0c:22:03:36:a7:57:6d:61:88:af:f5:12:2e:c9: 7f:e4:22:7c:2c:42:86:05:6a:30:80:b9:73:7e:bb:62:bc:33: 0a:fe:fb:de:fe:a2:d7:c3:b7:35:4c:bb:ea:4b:16:ff:8a:5d: 58:31:1e:49:64:22:80:a9:55:88:3d:09:a7:12:4a:8b:fc:73: 6d:54:4c:e3:0a:f7:ed:bc:67:53:43:24:48:1a:9e:65:07:b7: 06:f3:5c:64:70:47:10:91:c1:c8:d5:ec:cc:cb:26:a4:23:eb: f0:c3:47:8e:39:1b:03:89:60:f3:04:c8:21:03:27:27:27:e1: 34:e2:e5:6c:f3:85:b2:9c:76:55:4c:68:44:4a:6d:cf:ec:a6: 32:0c:b9:69:dc:f5:af:d1:cf:ed:69:cc:ca:7f:b9:f3:42:c6: 00:8b:a1:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn8xnWxV6jsIllPpDULjzxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUxMDE5MTQwMTI4WhcNMjUxMDIwMTQwMTI4WjAzMTEwLwYDVQQD EyhkODZlNjk3MDZhNjExMzIxZjEyYTZlMzBiODYwOTBlMWE1M2FmOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp+9NkxxQk+0HjvWOAsJJs30HZlP EYf1D4/cus74+H3VUlZHCqbvjSpWo2dkH3KcD3IkuAO00hzRftGyb+5YUdffHJvY nCPjZa+9Uh2GfuPlNlnAkxKAruTGMvQ+81mv3SEY9Fg4B3zzkA9/xQIfGe+6IYAI e539ynnVNuYqdH4m/hKA8S1BXeEMXbVPcOth67EIOdGN+a7n9yttDo/pBo0RqUHP MsAObLqSh8Io8bIrd4CFb+r3ZlB5OaY4U9QhiDprhYYp9itL7MVUOzegKusSJfXB iE/9jdkjqLikpMQwUvhWT2QIDJyEUIKFud3py4Wt6uISVmOSqGcAHjo1QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhuaXBqYRMh8SpuMLhgkOGlOvnpMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPKvL61C EzAAlQgisIZmRNdaFBWJg0kWUML+AR+fRYq2/d4g1j3HA1/1Bn6+pCPXSmd4vL+z K8wu5jayq+Wnb85jL1yRonB1yBPDXw5zQ76FF+GO0XC+WG5cG6vqBwwiAzanV21h iK/1Ei7Jf+QifCxChgVqMIC5c367YrwzCv773v6i18O3NUy76ksW/4pdWDEeSWQi gKlViD0JpxJKi/xzbVRM4wr37bxnU0MkSBqeZQe3BvNcZHBHEJHByNXszMsmpCPr 8MNHjjkbA4lg8wTIIQMnJyfhNOLlbPOFspx2VUxoREptz+ymMgy5adz1r9HP7WnM yn+580LGAIuhWA== -----END CERTIFICATE-----Generated at Sun Oct 19 20:58:59 2025 by rpki-client