$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: 7/tFsLBccyNS+udfIVHJqSEn4raVW6GYietnU5bgK7I= Subject key identifier: 8C:6E:2A:B0:94:FD:16:6E:E5:7B:73:7F:AE:B3:A1:4B:7E:B3:CA:35 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019A4F622B44D45D90FF024024962324951D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1719 Signing time: Tue 04 Nov 2025 15:00:24 +0000 Manifest this update: Tue 04 Nov 2025 15:00:24 +0000 Manifest next update: Wed 05 Nov 2025 15:00:24 +0000 Files and hashes: 1: 1-j_NENm5-sNQNRhoG12DGhts2RA.roa (hash: rxMl58Hpd8I9+Opcjq2WXGHyT2V7qNJ/2GgS8YODf/c=) 2: 4AzaQ00Qbm11xuSZKiEAVdKCvuo.roa (hash: S2of1YjCL3/XCtKNbSiofOIataHuKf+CE34W0v3KCW4=) 3: 8ICMXIH8G4STVhG9LTK8XF1huYU.roa (hash: sFIpNhCbdCmlf97RdiMILKWsK0y4eXG6qnrYkuB08Vw=) 4: MYNb4kXenjrBnIvjPCoM8j_fi5o.roa (hash: 2HjJmnXUgEYlKwXXNaaAbeRyQ+qenY20+TOLrdKlR0k=) 5: OCLegx7AAJrXlZwafZY4saWNhbA.roa (hash: e9VTWsNvHN7d5ckNNnCA+CRusyYItjY5AHniHQNomyw=) 6: QCfvCEoxrXNbaQlE55CsHK0ASLY.roa (hash: 9+mZrRJlriXyV5x8bWgpbYum8oJQ/snmalu+5JqeXNg=) 7: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: KFKdlq6JmAIWyi6xgUBijL5jxKv2NPhfuEhssCwV48M=) 8: RV95HMnGrJSH6R13BYTApcw5VQE.roa (hash: OCGu39xDZSl3EactuFgzu+oeqkGxYuePRbccAhiaclk=) 9: RVrCIdZOCs8XoQd6-3H2dv3Ud8c.roa (hash: rvxLY8CED/tcAf5ZRvAyRXPjljhVdMNLG3UeLvOKbTo=) 10: iIDxyZI7f69mJkZ2Wv7XkahzbJk.roa (hash: +LiZiCI3CHohIXxSoLr49Tx7ntAiVnERXS5bwyYZ1ps=) 11: j8Z9luk9TH9XzdeKRdbx_0lXU_Q.roa (hash: SQ7pmoz5e7GX+kpjw+HCwdCwB08Ca3taMT0X/4L2FsQ=) 12: t4wOKfZBFKXZzzCG12rDjNWCtck.roa (hash: mvEY+dYzE/HHgzwgOuYVcJ0HNTTQPL4qHN5pglpVEdk=) 13: ulfvPRSSn4HEoigXYoN-qraw9B0.roa (hash: v4egLtmiPngUJcZdugzr6mM0L0rgTT/ReQ/DVFds8Ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:62:2b:44:d4:5d:90:ff:02:40:24:96:23:24:95:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Nov 4 15:00:24 2025 GMT Not After : Nov 5 15:00:24 2025 GMT Subject: CN=8c6e2ab094fd166ee57b737faeb3a14b7eb3ca35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:18:8b:72:0f:f1:43:f5:54:f2:da:59:6a:b6: 9a:3c:5a:1d:c6:ec:0a:b7:8c:72:09:cb:74:e8:7c: 27:1c:29:50:ae:55:b4:f1:5f:fd:95:74:70:5c:23: a3:14:6c:5a:ca:4f:4f:d4:75:d8:7c:ae:eb:07:9d: 47:5a:e6:af:5d:7e:80:f3:04:73:b8:f1:dd:e0:3c: 6e:64:f9:1c:8d:8d:c7:e0:46:a7:0f:54:88:c1:3d: 5f:94:46:61:73:55:53:73:bc:07:f2:f3:aa:1e:09: 44:c8:23:5d:a8:4a:84:e4:0c:85:67:56:23:cd:36: d2:cd:1e:17:49:d9:29:04:23:63:43:a7:b6:98:a0: 0d:c0:91:4b:0d:e9:2c:26:1b:e0:63:0e:70:7b:37: 5b:56:f2:25:2a:a7:21:c9:d3:e4:dc:dd:6d:b4:f7: 88:e2:f7:20:74:43:5f:3d:6a:34:01:60:ae:88:8b: 08:ae:9a:b8:55:0b:b4:cd:ec:54:a0:24:89:02:d8: 62:fe:6a:3f:ee:cf:c0:2b:23:ae:20:c4:d9:3a:ad: e9:14:fb:7d:d5:52:d2:12:7a:c4:86:4f:f2:8d:6c: 7a:ee:b6:1c:29:9c:f1:90:09:f1:f2:8b:db:1a:23: d5:44:14:c9:1d:52:bb:52:e7:ba:08:20:39:d2:03: d8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6E:2A:B0:94:FD:16:6E:E5:7B:73:7F:AE:B3:A1:4B:7E:B3:CA:35 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:85:a1:89:f9:df:c7:b0:bf:4b:95:86:05:d8:39:34:f7:5e: 31:0c:87:8a:be:4a:6a:7e:dd:a5:81:21:22:bc:f3:ee:4d:0f: 8c:64:12:65:ca:80:06:25:2d:57:39:c1:9c:a6:40:7a:ce:4f: 80:83:b2:ce:f8:2d:f4:c2:f8:b8:6e:5d:8e:3b:13:f0:2b:79: 2c:65:f3:80:37:da:60:45:98:89:8a:8d:b7:a2:a2:9b:bb:2b: 7e:aa:6a:de:9a:bc:82:54:df:f2:5e:bb:fc:27:40:e3:43:52: e3:c8:a1:6d:6b:0a:0f:d5:de:ef:55:5f:4b:3c:d8:01:ba:58: 9f:b6:b0:44:b1:ca:d2:3f:fd:78:74:2f:d3:ec:b3:e0:cc:dc: d5:89:d1:f0:5b:7a:dc:d5:76:47:5b:8f:f1:8f:52:42:0c:60: 2b:df:1a:89:ec:3b:1b:1a:8b:42:fa:99:e4:4f:06:d3:f7:fa: 9b:08:4f:93:ba:30:88:25:72:f7:0f:f0:5e:4b:5e:b0:bf:cf: e4:b5:b1:43:e7:05:d8:15:bb:3d:9e:28:6d:bf:a2:81:c3:df: 4f:d1:81:35:e4:02:15:65:66:3c:b2:58:50:0d:b5:e9:c5:a2: 77:0a:2f:bb:f3:ca:ae:bd:3b:bb:d6:8e:de:75:bf:a1:e0:50: df:55:fd:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPYitE1F2Q/wJAJJYjJJUdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjUxMTA0MTUwMDI0WhcNMjUxMTA1MTUwMDI0WjAzMTEwLwYDVQQD Eyg4YzZlMmFiMDk0ZmQxNjZlZTU3YjczN2ZhZWIzYTE0YjdlYjNjYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihiLcg/xQ/VU8tpZaraaPFodxuwK t4xyCct06HwnHClQrlW08V/9lXRwXCOjFGxayk9P1HXYfK7rB51HWuavXX6A8wRz uPHd4DxuZPkcjY3H4EanD1SIwT1flEZhc1VTc7wH8vOqHglEyCNdqEqE5AyFZ1Yj zTbSzR4XSdkpBCNjQ6e2mKANwJFLDeksJhvgYw5wezdbVvIlKqchydPk3N1ttPeI 4vcgdENfPWo0AWCuiIsIrpq4VQu0zexUoCSJAthi/mo/7s/AKyOuIMTZOq3pFPt9 1VLSEnrEhk/yjWx67rYcKZzxkAnx8ovbGiPVRBTJHVK7Uue6CCA50gPYfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxuKrCU/RZu5Xtzf66zoUt+s8o1MB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIWhifnf x7C/S5WGBdg5NPdeMQyHir5Kan7dpYEhIrzz7k0PjGQSZcqABiUtVznBnKZAes5P gIOyzvgt9ML4uG5djjsT8Ct5LGXzgDfaYEWYiYqNt6Kim7srfqpq3pq8glTf8l67 /CdA40NS48ihbWsKD9Xe71VfSzzYAbpYn7awRLHK0j/9eHQv0+yz4Mzc1YnR8Ft6 3NV2R1uP8Y9SQgxgK98aiew7GxqLQvqZ5E8G0/f6mwhPk7owiCVy9w/wXktesL/P 5LWxQ+cF2BW7PZ4obb+igcPfT9GBNeQCFWVmPLJYUA216cWidwovu/PKrr07u9aO 3nW/oeBQ31X9Jw== -----END CERTIFICATE-----Generated at Tue Nov 4 17:54:30 2025 by rpki-client