$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft File: Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft (raw, json) Hash identifier: MlOOym30C1WN13gpApy3oJ5oO/gZpCVIIwMlq52bjT4= Subject key identifier: C4:D4:91:C1:F6:A7:20:0C:7D:B8:F9:A5:84:EE:F7:02:0F:28:D9:38 Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c Certificate serial: 01976F9A0DE0975E21A330FE3BFDCF3D4B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft Manifest number: 0903 Signing time: Sat 14 Jun 2025 18:00:56 +0000 Manifest this update: Sat 14 Jun 2025 18:00:56 +0000 Manifest next update: Sun 15 Jun 2025 18:00:56 +0000 Files and hashes: 1: 0pA9jqxxzLz7rK77xH9_gAV2Ddc.roa (hash: kuW3cMupmnzRroMZH+onX29Wp3xp+NRO+gRxYcXjYi4=) 2: 2TnqZvmmysxhyiNZrk30acF9SlI.roa (hash: WiwIIXJhkAErUqVwl7rpQhJM1V3EKt+e61vZ4TyGts0=) 3: Dw3X8fWhKPYb3Mn-3k0h1r_9KbU.roa (hash: TMxwGgTVPG6mIC+cdCWlxe1kZRGY132KC9x3rO2T5lU=) 4: DwPcfSHFXNqM7rUhdUmfwPDUgE4.roa (hash: TJWMP4o9L/gCTxpzvrb7aiWTaCJtkInjMyTtZ8ZQv6w=) 5: I0so05T8WJ0IrbDuX6UjLySLqmI.roa (hash: dR+mdnDCO20UWtvzil7AKdca65/eFTAOBYqBvQ7au8Y=) 6: Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl (hash: 4a6CBNlMpAIW1eGX9vvQrOa/QH2x3AaJxPlcodf11iI=) 7: SFaGChEcecBfMkYfUdNCUJpmOZs.roa (hash: urAyNSsYssS08ZQ9VO9nXj8k0R3NhqQ1uecoM5zn4Xg=) 8: VdXHdlxLvSXMtikY4Tkq1ivw7b0.roa (hash: d4XyYarFCX7iHNvauLVhaF+5yte4Mx2+kXf0dxCZBfg=) 9: VzB0p7pCZsQMiGHUlZc1UelTzYY.roa (hash: BzzAqeicP4DohtRLpuezZoWn//Z3/wAyEJHVc5sVYtU=) 10: XkP13qdKiUI4ksMyPnhV_Dq7ZH8.roa (hash: YloS2aXtag5qQ1JTIqYqkyKRVfkw4jImfuhbP08yNwU=) 11: _okwze0rSlq8LhXlB7FWi8OlsK4.roa (hash: 3wzhS+5DOCgktIdxwao39vX+OQv7jnEn/glBS5LioaY=) 12: aaPCQ3vYc10mi-8M5KP_x-4UjqI.roa (hash: k87j6NF+EKH8P+VssVknz/tteS+89PmRGUWHWReOd5U=) 13: keRc_cuZtJ4i5Jvsc90Pj2Jghdg.roa (hash: gciROLJg7+/w52qQUKA87ZvQS+qeyeOp3E1ngvwPEK4=) 14: mReJXjEFw2vH3gsylG3516bpkxI.roa (hash: orfciGxm8QNpQKbu93OyqVEi/aKCukxyiFS74rnLbXg=) 15: t2p4-i0-AMgrPWWbLPjsZticI0E.roa (hash: /e/8T+eYaFYAkJQaQBKZKZelhBajXo5oP/zmVdgWK8A=) 16: wXmD77ivrLBnzkfNVUx9GVYS9fw.roa (hash: tE/07N+y9ScJvAqYYnDp5CmkVEB1T6atwgfCQwskaeM=) 17: xzcqcrFf-ra6k9gJVEfYsUOL7r0.roa (hash: tLEmQ4Ip0nJAlYr4VF0AY9UERYkLlEbUUc3k5bIYBQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6f:9a:0d:e0:97:5e:21:a3:30:fe:3b:fd:cf:3d:4b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c Validity Not Before: Jun 14 18:00:56 2025 GMT Not After : Jun 15 18:00:56 2025 GMT Subject: CN=c4d491c1f6a7200c7db8f9a584eef7020f28d938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:26:f2:a1:15:f2:1a:5d:35:84:e7:9c:68: d1:91:27:51:55:74:f0:c8:39:01:f0:77:19:bf:bf: a1:4a:8c:73:26:64:50:82:a5:7c:47:3a:70:be:ee: 17:89:38:d4:02:25:78:58:ce:a0:86:c8:22:95:29: 1e:d2:ca:2d:d7:49:56:1d:f3:0c:ed:5b:b5:39:16: fd:65:88:f2:78:5c:2e:f3:d5:04:8e:35:b4:c2:03: 54:c3:77:a9:18:c5:a0:aa:f4:5f:76:25:20:b3:89: 95:93:b7:76:d5:46:e9:7f:62:27:b3:45:c8:9e:bd: 64:fb:58:6e:78:c9:6e:a5:60:a1:04:3e:d8:3b:5e: d3:29:bb:4a:18:de:8a:3e:e5:03:82:4a:91:ff:68: e3:c9:86:ea:53:a8:13:5c:a1:90:98:40:e3:4d:05: ae:00:74:35:30:7e:55:49:43:2d:e8:4e:aa:03:0f: 41:b6:f3:34:53:ea:a7:92:03:83:65:e3:4f:b7:37: 7a:73:6a:40:7b:05:98:35:a4:c6:29:2c:e3:b5:dc: b7:15:b2:87:47:ef:f9:6b:73:88:e7:a6:05:4d:25: aa:7e:a8:a4:3a:e0:bf:4b:5d:86:45:2d:76:9a:34: 2b:96:08:58:b2:1c:6b:06:6a:db:e1:70:16:ea:29: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D4:91:C1:F6:A7:20:0C:7D:B8:F9:A5:84:EE:F7:02:0F:28:D9:38 X509v3 Authority Key Identifier: keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:27:a6:43:53:36:2d:8c:54:05:61:b2:ec:d3:c0:79:67:3e: f6:ba:02:7c:2e:c2:a9:33:d6:33:28:6b:7a:7c:bc:33:13:f7: d4:75:c4:3a:d5:41:2f:c1:e2:23:4b:dc:19:f3:1e:17:68:e4: bf:90:75:6b:8c:0a:27:21:a1:44:de:c7:5c:a0:53:0d:30:1f: 43:59:06:3a:8d:db:ad:91:1c:42:a6:d5:bb:5e:7d:61:30:8e: b5:59:77:28:9b:40:41:1b:12:0d:15:59:21:36:bd:2b:26:43: 16:6e:ad:4f:d9:57:8f:94:a2:85:61:c5:0c:1e:7a:d8:cb:aa: f3:1d:7c:16:f3:90:cc:ca:da:b4:c2:cc:01:8b:88:76:df:d7: bd:33:44:d4:38:d3:6f:a4:4b:38:8c:0b:66:ca:e3:1e:5a:c4: d9:2c:10:e9:59:e1:66:a5:15:a1:f9:17:28:ee:4f:51:8f:06: fd:3b:49:bb:9f:01:17:0b:bc:e6:e6:20:6a:9e:04:1c:44:c4: 31:5a:08:02:69:97:88:7c:65:c1:cb:6a:44:d9:f5:9f:da:58: 7f:4f:0f:71:63:eb:ce:43:11:67:38:1c:4c:c6:6d:d0:83:c9: 9b:6e:81:c1:df:3e:4b:fa:b0:30:a9:7a:a3:a8:d0:ae:57:17: ff:83:8d:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdvmg3gl14hozD+O/3PPUuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNTRhNDE5MjI1ZDVkNzlmNGExYWUxNTIwYTNiMWE1NmQ0 NTI2OGMwHhcNMjUwNjE0MTgwMDU2WhcNMjUwNjE1MTgwMDU2WjAzMTEwLwYDVQQD EyhjNGQ0OTFjMWY2YTcyMDBjN2RiOGY5YTU4NGVlZjcwMjBmMjhkOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Mm8qEV8hpdNYTnnGjRkSdRVXTw yDkB8HcZv7+hSoxzJmRQgqV8Rzpwvu4XiTjUAiV4WM6ghsgilSke0sot10lWHfMM 7Vu1ORb9ZYjyeFwu89UEjjW0wgNUw3epGMWgqvRfdiUgs4mVk7d21Ubpf2Ins0XI nr1k+1hueMlupWChBD7YO17TKbtKGN6KPuUDgkqR/2jjyYbqU6gTXKGQmEDjTQWu AHQ1MH5VSUMt6E6qAw9BtvM0U+qnkgODZeNPtzd6c2pAewWYNaTGKSzjtdy3FbKH R+/5a3OI56YFTSWqfqikOuC/S12GRS12mjQrlghYshxrBmrb4XAW6ikl4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTUkcH2pyAMfbj5pYTu9wIPKNk4MB8GA1UdIwQY MBaAFENUpBkiXV159KGuFSCjsaVtRSaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEt Njg4ZDUxYTQ0NDQ4LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEtNjg4ZDUxYTQ0NDQ4 LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICemQ1M2 LYxUBWGy7NPAeWc+9roCfC7CqTPWMyhreny8MxP31HXEOtVBL8HiI0vcGfMeF2jk v5B1a4wKJyGhRN7HXKBTDTAfQ1kGOo3brZEcQqbVu159YTCOtVl3KJtAQRsSDRVZ ITa9KyZDFm6tT9lXj5SihWHFDB562Muq8x18FvOQzMratMLMAYuIdt/XvTNE1DjT b6RLOIwLZsrjHlrE2SwQ6VnhZqUVofkXKO5PUY8G/TtJu58BFwu85uYgap4EHETE MVoIAmmXiHxlwctqRNn1n9pYf08PcWPrzkMRZzgcTMZt0IPJm26Bwd8+S/qwMKl6 o6jQrlcX/4ONrA== -----END CERTIFICATE-----Generated at Sun Jun 15 04:05:40 2025 by rpki-client