$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: OB8qZ0vf4VE7nt66rsVpqM5m73Lhqhu17Z93I/Bk89w= Subject key identifier: C6:5F:34:69:26:50:0E:CD:26:DB:7A:75:BB:A1:DA:46:2D:E2:80:16 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 0198744FC4CED040323E285162FA38A1A25A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 136F Signing time: Mon 04 Aug 2025 09:00:41 +0000 Manifest this update: Mon 04 Aug 2025 09:00:41 +0000 Manifest next update: Tue 05 Aug 2025 09:00:41 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: nDNkZ5+M5G6rN4gQ37ItdaOySn7tnBcb4/U0EokvDOA=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:74:4f:c4:ce:d0:40:32:3e:28:51:62:fa:38:a1:a2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Aug 4 09:00:41 2025 GMT Not After : Aug 5 09:00:41 2025 GMT Subject: CN=c65f346926500ecd26db7a75bba1da462de28016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:7f:a2:4e:4a:10:11:f3:86:4f:15:f8:cf: 62:80:96:2c:88:c8:b9:ec:3b:59:f0:d0:e7:70:af: d3:8c:4b:0c:cd:00:b7:f0:42:ac:8d:a2:7a:f9:4a: 0e:81:49:eb:9a:6e:0a:d1:92:9f:76:0b:9f:e9:3a: 0e:60:7a:c7:f7:0c:8b:07:cf:16:2b:0c:0d:78:83: cf:fa:51:ee:fd:7a:e2:e6:04:ff:4a:1d:ea:13:b9: 3e:cf:c5:ba:5c:a7:5d:7a:e6:81:7d:61:cd:77:be: a6:f3:c0:79:ec:0b:97:a9:c5:6b:61:ab:35:6e:ac: e9:76:ce:0d:06:46:0b:97:9c:3d:06:98:1d:35:35: 31:5d:0b:fb:62:91:38:a0:26:8f:ca:85:8d:0c:b3: aa:05:1b:32:06:fd:32:0e:1e:d5:7f:23:1c:e9:fc: f8:9d:7c:af:13:09:dd:05:1c:d8:4a:b6:0a:4c:a5: d8:d2:63:86:9b:32:25:14:07:f3:52:94:d8:66:f2: 84:84:05:98:2b:93:ca:2a:22:02:54:28:09:9a:1e: 36:df:f1:0e:93:50:53:34:fc:d6:6a:e2:47:bb:c7: fc:bd:86:ad:f9:99:48:5f:0a:3d:bf:33:42:25:31: 3f:0e:27:cd:11:34:d6:dd:1d:b0:fd:cd:a3:d2:56: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5F:34:69:26:50:0E:CD:26:DB:7A:75:BB:A1:DA:46:2D:E2:80:16 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:4f:52:07:6b:46:9a:4c:e9:20:6e:e1:73:50:59:fb:36:07: 68:3d:fc:7f:7f:f1:44:7f:99:a6:de:4b:bb:71:c5:a1:ab:1b: 2e:f4:d5:e9:91:f8:ab:ca:c8:7f:a7:34:69:81:6d:61:48:7f: fb:b3:0d:f4:aa:a9:7e:5b:f2:42:8b:14:f5:bc:c7:53:c7:aa: 72:66:f7:f8:32:32:53:b7:ff:90:4e:04:d4:4c:c3:c9:59:0e: ca:86:7e:72:bd:d4:4f:98:58:c6:46:b0:df:fa:02:83:e1:fd: 70:6b:41:cb:a2:b5:b0:b1:6c:99:d8:d4:bd:78:29:a8:50:e1: 36:44:c0:07:07:f7:ac:39:d7:20:0a:46:f7:76:e5:aa:50:8a: 1f:b5:55:05:4e:2d:45:ac:42:bd:8f:b7:8d:83:b9:7a:5e:eb: d5:a9:b6:4f:00:46:13:11:e4:08:5e:8a:e3:e0:97:71:38:92: 39:bc:48:73:14:43:69:a4:3d:8d:b3:8a:ef:bd:59:31:c4:1f: cf:08:1c:67:3a:c1:c3:19:a5:a1:c6:df:7a:66:27:3b:66:f2: 48:55:04:dd:5d:e3:5f:ec:7e:67:a5:39:da:31:d5:dd:3f:4c: 88:88:1e:1c:90:be:97:92:c1:60:79:3b:d0:0a:05:96:8f:61: 5a:56:46:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh0T8TO0EAyPihRYvo4oaJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwODA0MDkwMDQxWhcNMjUwODA1MDkwMDQxWjAzMTEwLwYDVQQD EyhjNjVmMzQ2OTI2NTAwZWNkMjZkYjdhNzViYmExZGE0NjJkZTI4MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0l/ok5KEBHzhk8V+M9igJYsiMi5 7DtZ8NDncK/TjEsMzQC38EKsjaJ6+UoOgUnrmm4K0ZKfdguf6ToOYHrH9wyLB88W KwwNeIPP+lHu/Xri5gT/Sh3qE7k+z8W6XKddeuaBfWHNd76m88B57AuXqcVrYas1 bqzpds4NBkYLl5w9BpgdNTUxXQv7YpE4oCaPyoWNDLOqBRsyBv0yDh7VfyMc6fz4 nXyvEwndBRzYSrYKTKXY0mOGmzIlFAfzUpTYZvKEhAWYK5PKKiICVCgJmh423/EO k1BTNPzWauJHu8f8vYat+ZlIXwo9vzNCJTE/DifNETTW3R2w/c2j0lYoDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZfNGkmUA7NJtt6dbuh2kYt4oAWMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE9SB2tG mkzpIG7hc1BZ+zYHaD38f3/xRH+Zpt5Lu3HFoasbLvTV6ZH4q8rIf6c0aYFtYUh/ +7MN9KqpflvyQosU9bzHU8eqcmb3+DIyU7f/kE4E1EzDyVkOyoZ+cr3UT5hYxkaw 3/oCg+H9cGtBy6K1sLFsmdjUvXgpqFDhNkTABwf3rDnXIApG93blqlCKH7VVBU4t RaxCvY+3jYO5el7r1am2TwBGExHkCF6K4+CXcTiSObxIcxRDaaQ9jbOK771ZMcQf zwgcZzrBwxmlocbfemYnO2bySFUE3V3jX+x+Z6U52jHV3T9MiIgeHJC+l5LBYHk7 0AoFlo9hWlZGiw== -----END CERTIFICATE-----Generated at Mon Aug 4 18:26:03 2025 by rpki-client