$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: zmce/lIKPhzVQ/J1WTw8LIrEAKiGYZXFynWAl+4JE7Q= Subject key identifier: EC:D0:41:A3:D6:3A:14:0F:6E:B8:11:02:24:66:E2:52:40:5E:FA:70 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 0196C013A4FD72C4020B5F9490C8E32070FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0D29 Signing time: Sun 11 May 2025 16:00:34 +0000 Manifest this update: Sun 11 May 2025 16:00:34 +0000 Manifest next update: Mon 12 May 2025 16:00:34 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 7: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 8: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 9: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 10: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: xXnzoxOxQ4siy8K3ol+d9LG5+SgMIAoxNpS+JobffHk=) 12: qLwaQHbpLKR-VOFMsqI1Dr-brZQ.roa (hash: zu206w/6uZIZGZL13CES5xmLYzoUTsD6JgpbCtCYgq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c0:13:a4:fd:72:c4:02:0b:5f:94:90:c8:e3:20:70:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: May 11 16:00:34 2025 GMT Not After : May 12 16:00:34 2025 GMT Subject: CN=ecd041a3d63a140f6eb811022466e252405efa70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:37:fe:01:9e:0d:f2:c1:be:94:1f:d8:9e: fd:95:a6:9f:9f:c1:a9:54:45:c9:6d:3c:31:9e:29: 57:7e:d9:d9:cd:c0:2e:9c:07:3e:ec:19:2c:49:03: dd:c0:aa:92:3b:f8:92:db:77:2e:09:ab:26:37:b4: c5:ea:e7:0a:c9:02:e8:52:d1:19:8c:67:a6:98:2f: f6:7b:45:e0:42:80:ce:ec:3d:0c:2a:b0:34:c9:36: d7:38:37:0e:43:05:13:b7:a8:33:06:8c:40:75:8b: 73:19:f2:eb:d0:23:01:ce:17:08:2a:b9:d5:b3:d7: 42:68:f9:14:f1:c5:b9:4e:ee:38:35:fe:78:d6:8e: d2:a5:d5:63:57:ee:f9:b6:08:92:ed:74:e7:e0:94: eb:5a:57:38:cd:14:eb:50:73:ed:25:d3:84:32:f8: 0f:a4:fb:bc:85:31:a8:14:f0:63:6e:08:42:e6:7b: 8b:d1:72:a9:4d:7b:a1:58:e5:16:b6:c7:85:51:d3: fe:65:19:c2:c9:3a:59:2a:77:6c:43:34:87:01:96: 94:f5:a1:a8:dd:b3:b3:2e:4d:fd:1f:de:6d:15:c7: 83:49:1a:73:24:8a:96:af:bb:98:b5:89:c8:6f:f5: 41:78:e8:af:cc:b3:e6:9b:5c:a4:1e:59:2d:3a:2b: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D0:41:A3:D6:3A:14:0F:6E:B8:11:02:24:66:E2:52:40:5E:FA:70 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:94:b3:4e:b1:89:ea:7e:09:f4:ad:9c:e5:86:94:42:04:24: c3:e4:c5:a3:ad:37:7c:17:13:5b:93:34:b8:70:de:db:48:97: eb:1a:18:87:45:a3:99:db:36:c6:1f:73:9d:0b:20:97:95:23: 45:e2:cd:a3:e9:c6:66:2d:94:37:cc:78:bf:2f:a7:e8:db:c9: 8d:a6:64:6a:50:3c:d7:b3:1d:d3:e4:31:90:64:29:a5:8f:b1: 0b:97:df:9d:dd:46:0a:c8:1b:75:71:ca:38:95:44:96:e7:1b: fe:e6:01:df:4f:11:b6:b8:3a:6f:d2:45:94:01:27:1c:92:49: e0:a0:40:a1:08:3f:3c:8e:72:61:7c:7a:9f:11:e4:b4:2d:24: cb:23:6d:1f:6a:bc:34:71:4d:2a:ac:c5:99:4f:bf:8c:c2:d7: 5a:9c:3e:13:b5:87:ac:b1:1c:22:17:c1:a3:72:93:57:b5:f9: 61:6c:b7:f2:0d:01:81:f1:2b:a3:76:c5:50:9b:c1:1d:15:2e: d9:a8:91:41:93:d8:0a:51:73:2b:6a:31:f8:4a:99:03:a9:03: aa:6d:20:d1:b3:d3:b8:ba:bd:44:42:cf:eb:bf:45:d2:04:ff: 99:88:d3:47:c8:9e:2f:2f:7a:8f:74:88:af:e8:b6:95:f6:9b: ee:e0:d5:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbAE6T9csQCC1+UkMjjIHD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwNTExMTYwMDM0WhcNMjUwNTEyMTYwMDM0WjAzMTEwLwYDVQQD EyhlY2QwNDFhM2Q2M2ExNDBmNmViODExMDIyNDY2ZTI1MjQwNWVmYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0to3/gGeDfLBvpQf2J79laafn8Gp VEXJbTwxnilXftnZzcAunAc+7BksSQPdwKqSO/iS23cuCasmN7TF6ucKyQLoUtEZ jGemmC/2e0XgQoDO7D0MKrA0yTbXODcOQwUTt6gzBoxAdYtzGfLr0CMBzhcIKrnV s9dCaPkU8cW5Tu44Nf541o7SpdVjV+75tgiS7XTn4JTrWlc4zRTrUHPtJdOEMvgP pPu8hTGoFPBjbghC5nuL0XKpTXuhWOUWtseFUdP+ZRnCyTpZKndsQzSHAZaU9aGo 3bOzLk39H95tFceDSRpzJIqWr7uYtYnIb/VBeOivzLPmm1ykHlktOivIGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzQQaPWOhQPbrgRAiRm4lJAXvpwMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJSzTrGJ 6n4J9K2c5YaUQgQkw+TFo603fBcTW5M0uHDe20iX6xoYh0Wjmds2xh9znQsgl5Uj ReLNo+nGZi2UN8x4vy+n6NvJjaZkalA817Md0+QxkGQppY+xC5ffnd1GCsgbdXHK OJVElucb/uYB308Rtrg6b9JFlAEnHJJJ4KBAoQg/PI5yYXx6nxHktC0kyyNtH2q8 NHFNKqzFmU+/jMLXWpw+E7WHrLEcIhfBo3KTV7X5YWy38g0BgfEro3bFUJvBHRUu 2aiRQZPYClFzK2ox+EqZA6kDqm0g0bPTuLq9RELP679F0gT/mYjTR8ieLy96j3SI r+i2lfab7uDV6w== -----END CERTIFICATE-----Generated at Sun May 11 22:13:45 2025 by rpki-client