$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json) Hash identifier: wVKU1OIZkwJhPehohyuh6DWBMX6sElxpcE9eplV1Zuo= Subject key identifier: B7:6F:0D:43:87:22:65:EB:F3:50:AD:21:CC:A9:FB:21:DB:D6:A5:54 Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Certificate serial: 019787A277A476DFCB11ED51958CDD89D12A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft Manifest number: 15C7 Signing time: Thu 19 Jun 2025 10:01:01 +0000 Manifest this update: Thu 19 Jun 2025 10:01:01 +0000 Manifest next update: Fri 20 Jun 2025 10:01:01 +0000 Files and hashes: 1: 1bGM56MEcLFHsgzDo3baYK4aCMQ.roa (hash: oVXVqg3b1Z1hACKH4hIRJE0IPfCRY+hMDc2k4VQe4XU=) 2: 5Bs7s2hMUk5okIwnH9_6NmpdROs.roa (hash: o2DAPVOVte9ZiZJsxUltnpbHI6j6XbmRUrV+d3RHQW0=) 3: 9qoftOkUQubHrr_5Y0O0OEB0jsk.roa (hash: NpXUbKfrAE82THRrSEt65m3odGmwe5q6Rv8hzF4EGTU=) 4: Cdz1li8VqIIJV-m5kmfKj99Y7vo.roa (hash: Injt2qVEYstD1CFDA2RDhQ4n71XCzIHna09I/6r+g6s=) 5: ITP65m-ELAYrIziT1mqhAaKmFKI.roa (hash: TA6Lz6SPSkTI7bhEP+cVZ388px4lL7fPEARYK+dRI9A=) 6: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: vtq2XfeBG+qJ2uIJtFximZx4za6xGl14uZG5ZTlHQAo=) 7: M10xggNFEiYKiCOpaRSr9Q_E5jI.roa (hash: or9G2RnVnC9nrrlnpNuQsb0VwFoCXmXB+b6uwP7Zhns=) 8: OFoxo4tSb8S4WTnb9Arp2ooyRvw.roa (hash: RZrf7jypWJt6TvS7MztBYdDEvw+Yp5dHCbAbuiSrNfs=) 9: PxE0dP6xcqVNoXMtC1a5Dmb6n-s.roa (hash: Ybvp2SkTVaVfqhDzUmHlRC82UcW4sX3toG9HthgZ+Es=) 10: RFQq8CL00Iuq4i_jx3Jd0iwOLHI.roa (hash: +y+KD8Sa0MVn4eIucYiZ7dhXT2uIb+hoC3jKlQ4uUUg=) 11: TI9rtNLD66XYwxwHXpdPJetrLYc.roa (hash: ujb2Pqco4C4UTnNLYGJAf0pytP8/IiyRIp98qQq1a6Y=) 12: U8lnC6TG0pv6pWZXKVHzbslUv7Y.roa (hash: en2pnR7bb0v314EN8AtTeDNZJOdRSB9qKOFTcoTcCf0=) 13: ULfjtaXZKeO21K8lDdoLHe5Lbts.roa (hash: Ky4d9tu18NCNsNUD91GQmMhDdLCi4CgvFfPWYH5+Qp4=) 14: X8iQP860aal3YLOybxReqwSyPWU.roa (hash: 8p2TloT9N3iJXhSo+Uh11LexFFF6Vzvsu6ANvx+UWDA=) 15: XvUgOjjL99J51pC_sC90Y2oxW38.roa (hash: c2LYASTNBV0y11dbQezPYJYqj9am3X4y+DmSJidna/c=) 16: cT-m8k4SDtvWHlQKpD65GuRYzTQ.roa (hash: r6RkMNZjMfYtE9PPmCf0mAK1eFJX+kttY3BaDf/aAME=) 17: qaj8dW9iDUS-TbB-31kgfVvtgq0.roa (hash: D9s2T78lGzQvF6gVSlb8wUKC9SQ4rmGaAnxWF6xJcHw=) 18: tvd71H71vKZmhl1lUI4Wfg7oqjo.roa (hash: e5ndVp+pna8lqdjnskWIAOqf7gaAH2YiQgOHVw4SZNM=) 19: vS5j-9f_l8NB8D0F1O7CDV1036U.roa (hash: R1R99GD9Fbi68eCqK84dzkbtSynzzus+WGLpYqyYhxQ=) 20: wPo7xJ66CFd_mhgw0SF3bAS25Aw.roa (hash: bk8jHsNK4RwETsCkuy+UEJf07NqgjUBEWkINzx/UrXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Jun 2025 10:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:87:a2:77:a4:76:df:cb:11:ed:51:95:8c:dd:89:d1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Validity Not Before: Jun 19 10:01:01 2025 GMT Not After : Jun 20 10:01:01 2025 GMT Subject: CN=b76f0d43872265ebf350ad21cca9fb21dbd6a554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:2f:f7:ca:9b:5c:cf:07:66:d8:47:9d:2a: 5f:14:00:38:6b:83:5b:54:1f:71:28:97:be:fa:3f: 63:c9:62:2c:eb:db:77:35:85:1b:ef:69:15:e6:69: bf:04:45:82:ff:1b:a1:70:2f:e1:0d:60:ac:e3:f8: 49:1a:df:21:8d:a5:98:6e:e1:9d:14:fb:d7:59:38: 00:50:7e:60:2f:0b:89:9e:d1:72:7c:22:e8:89:e8: 9f:2d:18:ab:b4:4f:e4:21:d1:35:42:3d:c8:b9:fd: 8c:b6:8b:ea:da:5b:e3:01:5c:9c:60:06:1c:14:60: 7a:cb:63:c0:24:e4:96:0c:9f:dd:7e:b4:c9:e2:01: 11:f9:4e:93:98:f0:3c:08:e3:77:1a:81:98:06:6a: e5:8d:6f:f8:ae:e7:55:36:02:06:9a:20:2f:57:31: 2e:4c:e6:64:04:a1:00:07:c9:31:b0:9e:d4:cc:9f: 62:cc:bc:7b:5a:e2:37:da:63:2c:62:19:9a:4d:e0: ce:ff:d8:de:24:9b:58:73:14:e6:6f:4e:62:82:0a: 89:63:43:f0:d2:82:b7:2b:bc:fe:e5:68:fe:c8:5c: bb:2a:ff:1a:8e:56:a8:0a:8e:c0:73:e7:99:37:2c: 08:f6:94:86:4a:5a:ca:08:c2:2d:a1:56:16:01:60: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6F:0D:43:87:22:65:EB:F3:50:AD:21:CC:A9:FB:21:DB:D6:A5:54 X509v3 Authority Key Identifier: keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a0:f1:dc:ac:2d:32:b2:63:03:c1:84:1c:69:db:b9:82:54: b3:e1:f1:cc:0d:5c:63:14:db:84:72:a5:c5:7c:82:38:61:d4: dc:83:a4:6e:88:a3:ef:7d:0f:01:67:d5:ee:38:4b:cf:fe:4f: 44:3a:63:c4:46:52:66:a1:2b:38:4f:1d:a3:7d:fa:58:ce:9d: 14:5a:c6:31:eb:ca:1a:cc:30:27:a6:29:c3:b9:c3:e5:9f:cc: fb:53:25:7d:f1:21:62:db:c1:eb:c3:71:35:2f:16:b3:79:72: 1e:67:25:66:1e:9d:eb:6e:32:9e:6e:53:59:b0:ca:c3:64:59: 38:f5:d5:7a:12:8b:16:b2:b0:46:bc:fb:fb:54:af:7a:42:19: 43:46:3c:62:3d:0f:58:2d:d5:f9:51:ef:1a:08:88:68:fe:0a: 4b:c9:94:2d:4e:a4:ba:61:d9:e8:f1:b2:bb:de:b7:42:ad:42: 5a:5b:8a:c6:e7:7b:8d:9c:0b:41:97:f9:51:47:f6:3e:be:75: 77:9a:fa:86:ff:d3:c9:86:66:28:57:93:c4:7d:c0:0e:fe:d4: 4b:f1:39:79:d4:a7:05:b5:24:2a:68:a0:00:19:2f:63:f0:f3: 5f:45:ad:ff:9e:5d:40:a4:cf:8b:b2:8f:4e:d5:48:b8:af:0e: 04:52:61:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZeHonekdt/LEe1RlYzdidEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1 ZjBmZTQwHhcNMjUwNjE5MTAwMTAxWhcNMjUwNjIwMTAwMTAxWjAzMTEwLwYDVQQD EyhiNzZmMGQ0Mzg3MjI2NWViZjM1MGFkMjFjY2E5ZmIyMWRiZDZhNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsigv98qbXM8HZthHnSpfFAA4a4Nb VB9xKJe++j9jyWIs69t3NYUb72kV5mm/BEWC/xuhcC/hDWCs4/hJGt8hjaWYbuGd FPvXWTgAUH5gLwuJntFyfCLoieifLRirtE/kIdE1Qj3Iuf2Mtovq2lvjAVycYAYc FGB6y2PAJOSWDJ/dfrTJ4gER+U6TmPA8CON3GoGYBmrljW/4rudVNgIGmiAvVzEu TOZkBKEAB8kxsJ7UzJ9izLx7WuI32mMsYhmaTeDO/9jeJJtYcxTmb05iggqJY0Pw 0oK3K7z+5Wj+yFy7Kv8ajlaoCo7Ac+eZNywI9pSGSlrKCMItoVYWAWAFRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdvDUOHImXr81CtIcyp+yHb1qVUMB8GA1UdIwQY MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt ZjJhZTdiYzdlY2M1LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1 LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqDx3Kwt MrJjA8GEHGnbuYJUs+HxzA1cYxTbhHKlxXyCOGHU3IOkboij730PAWfV7jhLz/5P RDpjxEZSZqErOE8do336WM6dFFrGMevKGswwJ6Ypw7nD5Z/M+1MlffEhYtvB68Nx NS8Ws3lyHmclZh6d624ynm5TWbDKw2RZOPXVehKLFrKwRrz7+1SvekIZQ0Y8Yj0P WC3V+VHvGgiIaP4KS8mULU6kumHZ6PGyu963Qq1CWluKxud7jZwLQZf5UUf2Pr51 d5r6hv/TyYZmKFeTxH3ADv7US/E5edSnBbUkKmigABkvY/DzX0Wt/55dQKTPi7KP TtVIuK8OBFJhBg== -----END CERTIFICATE-----Generated at Thu Jun 19 13:05:39 2025 by rpki-client