$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: 6KQXfR+WxYy4iWkK9I0cl7V6ln1LJ/saCvN4BABMD8c= Subject key identifier: 96:BA:92:BE:DA:D6:27:55:1A:20:D0:58:2A:13:32:14:68:22:4B:B7 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019881D4C96D0FF58F1A06613681D9B7E829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 162A Signing time: Thu 07 Aug 2025 00:01:02 +0000 Manifest this update: Thu 07 Aug 2025 00:01:02 +0000 Manifest next update: Fri 08 Aug 2025 00:01:02 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: lBSyY6DyGvLYYhaRwWH2c7qaNmzc4+3DKShSK7QDqEI=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 07 Aug 2025 20:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:81:d4:c9:6d:0f:f5:8f:1a:06:61:36:81:d9:b7:e8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Aug 7 00:01:02 2025 GMT Not After : Aug 8 00:01:02 2025 GMT Subject: CN=96ba92bedad627551a20d0582a13321468224bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:88:b4:1b:b1:0d:aa:51:4e:f4:c6:6f:86: 23:af:04:f1:fb:5e:5c:cb:84:48:24:05:4b:3e:cf: 9e:ab:cc:ae:50:f7:c1:3c:e3:28:50:b5:50:35:87: 03:88:6c:ef:a6:df:9a:6c:d1:af:a3:74:6f:b5:69: 75:58:b3:2a:9c:79:e6:93:47:34:6e:7a:1d:ca:3f: 98:32:c6:98:78:7e:9a:f1:cc:7d:e4:69:53:d6:d3: 1e:a8:f0:b4:e6:d0:64:a6:ee:4b:6f:aa:b1:b8:03: 06:62:7a:83:f5:31:4b:a2:b9:97:20:1c:ac:25:e3: fc:e8:3b:bc:3d:f6:fa:2a:23:90:5b:8c:23:75:64: dc:b4:04:fc:64:5e:5a:24:7b:4f:13:d4:f2:b2:63: 33:13:45:e7:c0:35:a6:7e:69:d1:bf:d9:a9:40:f5: ba:66:5c:35:da:14:22:ba:5d:99:23:21:d6:85:d3: eb:0f:44:74:b8:0b:03:2f:ae:4d:ac:7d:22:08:3a: 25:c9:51:0b:59:78:cf:4d:65:a9:4f:e6:6a:88:6c: c9:cb:c5:6d:14:70:7b:97:7d:b2:30:92:a9:88:c1: 4f:98:2e:76:fd:71:fd:a1:d7:35:fc:26:6c:99:c7: 39:e9:fc:ee:b7:94:0c:6b:54:72:a8:29:ba:c1:76: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BA:92:BE:DA:D6:27:55:1A:20:D0:58:2A:13:32:14:68:22:4B:B7 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8a:e1:10:9d:b7:88:77:24:2a:5a:74:18:43:d4:dc:71:f9: b3:d6:23:92:5a:3a:58:ea:99:7b:b0:24:43:2c:fa:f7:c2:00: ec:85:f7:4f:9a:34:b2:bf:e5:f5:08:9b:21:ae:90:f5:0b:93: 03:f0:dd:ac:80:21:46:43:df:cb:aa:5a:86:5c:77:3f:db:ec: 87:1d:04:9c:5d:ab:23:4c:b5:0b:71:80:dc:25:8b:8d:4d:81: b9:09:c9:cf:d2:de:4d:5e:f2:1e:01:08:ba:ca:23:ef:2d:0c: 86:dc:79:69:6a:b0:f9:4c:9e:af:a6:f3:7e:db:bb:31:b5:d1: c8:bf:f3:a5:c3:18:16:13:01:d5:c1:0e:6a:88:18:40:6e:07: 57:bc:f1:f3:87:f2:97:3f:4f:8f:10:6d:45:97:f7:7c:04:ba: cd:71:db:c0:49:60:a4:56:e4:b4:e7:59:87:61:d2:15:ff:fc: 2b:5b:76:92:93:b9:72:23:79:70:71:40:d3:4f:47:40:57:d8: b7:1b:d7:81:9a:88:43:91:85:27:00:69:cb:08:70:5d:ed:87: ec:db:62:0e:72:a5:be:65:6a:90:72:e1:86:bc:de:5d:bc:e7: 95:3b:ce:49:60:d8:fb:25:40:76:b9:0b:d0:ac:cb:b7:ae:f8: 22:33:f0:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZiB1MltD/WPGgZhNoHZt+gpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUwODA3MDAwMTAyWhcNMjUwODA4MDAwMTAyWjAzMTEwLwYDVQQD Eyg5NmJhOTJiZWRhZDYyNzU1MWEyMGQwNTgyYTEzMzIxNDY4MjI0YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hSItBuxDapRTvTGb4YjrwTx+15c y4RIJAVLPs+eq8yuUPfBPOMoULVQNYcDiGzvpt+abNGvo3RvtWl1WLMqnHnmk0c0 bnodyj+YMsaYeH6a8cx95GlT1tMeqPC05tBkpu5Lb6qxuAMGYnqD9TFLormXIBys JeP86Du8Pfb6KiOQW4wjdWTctAT8ZF5aJHtPE9TysmMzE0XnwDWmfmnRv9mpQPW6 Zlw12hQiul2ZIyHWhdPrD0R0uAsDL65NrH0iCDolyVELWXjPTWWpT+ZqiGzJy8Vt FHB7l32yMJKpiMFPmC52/XH9odc1/CZsmcc56fzut5QMa1RyqCm6wXasKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa6kr7a1idVGiDQWCoTMhRoIku3MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYrhEJ23 iHckKlp0GEPU3HH5s9Yjklo6WOqZe7AkQyz698IA7IX3T5o0sr/l9QibIa6Q9QuT A/DdrIAhRkPfy6pahlx3P9vshx0EnF2rI0y1C3GA3CWLjU2BuQnJz9LeTV7yHgEI usoj7y0Mhtx5aWqw+Uyer6bzftu7MbXRyL/zpcMYFhMB1cEOaogYQG4HV7zx84fy lz9PjxBtRZf3fAS6zXHbwElgpFbktOdZh2HSFf/8K1t2kpO5ciN5cHFA009HQFfY txvXgZqIQ5GFJwBpywhwXe2H7NtiDnKlvmVqkHLhhrzeXbznlTvOSWDY+yVAdrkL 0KzLt674IjPw2A== -----END CERTIFICATE-----Generated at Thu Aug 7 05:07:40 2025 by rpki-client