$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: WP4EF4Q8/lix8wKfEou/pjY9vmL1PLmjjEMaLOsNNcY= Subject key identifier: 85:6D:2F:F3:02:00:9D:BB:C8:90:3F:31:E9:D5:5F:86:BF:DE:0F:D4 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 0196729DB22FBB782F3AB5E9581F8FD3AB1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 1265 Signing time: Sat 26 Apr 2025 15:00:59 +0000 Manifest this update: Sat 26 Apr 2025 15:00:59 +0000 Manifest next update: Sun 27 Apr 2025 15:00:59 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: uSX2B3BxZnh/9XbA5yhdifgrzyMMBRM/9jgenDy1WJg=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:b2:2f:bb:78:2f:3a:b5:e9:58:1f:8f:d3:ab:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Apr 26 15:00:59 2025 GMT Not After : Apr 27 15:00:59 2025 GMT Subject: CN=856d2ff302009dbbc8903f31e9d55f86bfde0fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2a:25:ec:5c:73:e1:54:aa:2f:76:3e:55:f9: 3a:02:a4:32:ba:e5:44:4a:14:ae:0a:80:b7:c7:3c: 10:49:05:22:8c:27:76:6d:7d:2f:9e:25:b0:e2:62: fd:e4:78:5c:7a:3b:83:2a:aa:e5:61:1f:91:5d:97: f2:bd:38:7d:12:0e:06:ba:6d:22:18:c0:a6:82:a7: fa:01:1d:9d:09:0d:7a:70:0d:30:ee:ca:4c:fd:df: 4a:9f:7a:9a:48:e5:7b:32:4f:59:3a:c1:34:19:ce: 11:f9:26:ff:67:99:9c:92:cf:d8:16:95:0a:a0:ed: 4b:19:b9:a9:9f:83:eb:22:1a:a0:c9:4b:a0:df:4f: 12:6d:9c:40:cf:b1:7f:0f:a9:8d:84:1d:d4:f2:a6: 18:b5:7f:20:64:ff:0d:3c:f9:10:9f:91:2d:a5:1d: 94:66:bd:c6:c8:b6:6f:2f:e6:aa:a1:cb:8e:f5:71: 66:db:a6:20:41:40:08:4b:e8:7a:28:5b:16:80:ac: 26:ce:db:06:05:3f:00:38:73:01:f9:30:9a:03:d7: 0a:ce:23:ab:0e:18:c1:fe:c5:92:c2:98:ab:39:5e: 19:3f:02:ed:9f:c8:8d:e6:f2:97:10:03:9e:96:a0: 28:35:15:ea:e3:9a:61:3f:54:08:6a:84:45:eb:50: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6D:2F:F3:02:00:9D:BB:C8:90:3F:31:E9:D5:5F:86:BF:DE:0F:D4 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:87:60:fa:02:ce:39:07:82:cb:aa:6b:81:61:7d:b6:4a:26: 83:17:c4:65:73:25:2e:3c:32:12:c7:0c:db:28:b6:3b:b5:e6: ea:e5:fd:3b:7a:29:fb:fe:20:f1:d3:fa:1a:37:8b:06:a1:a6: 5b:0a:28:fb:51:63:ff:4e:0f:d3:2a:d0:47:27:bb:b4:74:3c: 45:89:65:2b:97:50:49:a4:b4:71:29:34:b4:c5:c1:aa:2a:16: 96:2c:f1:85:bb:06:03:36:74:7c:f2:25:65:18:8b:ae:7b:ac: ab:86:7f:d9:01:50:f4:0d:a2:64:1a:15:96:f9:dc:f8:6d:f3: 59:dc:4b:48:89:d0:c2:aa:7f:fe:bb:f9:6b:1f:36:79:5e:b9: ba:21:87:40:11:f8:90:6e:1b:e0:c3:02:3b:57:d4:4c:e0:ad: bf:a3:2f:ea:ec:47:9a:2b:16:6d:a1:4e:b0:02:a4:5d:5e:09: 8b:a3:c4:dd:06:75:e3:2e:86:12:3a:6a:3e:53:7a:3f:ca:61: a6:22:0e:c5:c6:94:63:f6:e8:4c:ea:ae:b1:c1:c3:cc:68:73: dc:ae:10:8e:0f:72:12:d8:15:28:5c:3e:70:58:35:f5:16:e1: f3:1d:4c:17:b0:ea:30:09:f9:23:cc:44:a1:04:ca:fa:10:84: 89:81:c4:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZynbIvu3gvOrXpWB+P06saMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwNDI2MTUwMDU5WhcNMjUwNDI3MTUwMDU5WjAzMTEwLwYDVQQD Eyg4NTZkMmZmMzAyMDA5ZGJiYzg5MDNmMzFlOWQ1NWY4NmJmZGUwZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiol7Fxz4VSqL3Y+Vfk6AqQyuuVE ShSuCoC3xzwQSQUijCd2bX0vniWw4mL95HhcejuDKqrlYR+RXZfyvTh9Eg4Gum0i GMCmgqf6AR2dCQ16cA0w7spM/d9Kn3qaSOV7Mk9ZOsE0Gc4R+Sb/Z5mcks/YFpUK oO1LGbmpn4PrIhqgyUug308SbZxAz7F/D6mNhB3U8qYYtX8gZP8NPPkQn5EtpR2U Zr3GyLZvL+aqocuO9XFm26YgQUAIS+h6KFsWgKwmztsGBT8AOHMB+TCaA9cKziOr DhjB/sWSwpirOV4ZPwLtn8iN5vKXEAOelqAoNRXq45phP1QIaoRF61DX6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVtL/MCAJ27yJA/MenVX4a/3g/UMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYdg+gLO OQeCy6prgWF9tkomgxfEZXMlLjwyEscM2yi2O7Xm6uX9O3op+/4g8dP6GjeLBqGm Wwoo+1Fj/04P0yrQRye7tHQ8RYllK5dQSaS0cSk0tMXBqioWlizxhbsGAzZ0fPIl ZRiLrnusq4Z/2QFQ9A2iZBoVlvnc+G3zWdxLSInQwqp//rv5ax82eV65uiGHQBH4 kG4b4MMCO1fUTOCtv6Mv6uxHmisWbaFOsAKkXV4Ji6PE3QZ14y6GEjpqPlN6P8ph piIOxcaUY/boTOquscHDzGhz3K4Qjg9yEtgVKFw+cFg19Rbh8x1MF7DqMAn5I8xE oQTK+hCEiYHEkw== -----END CERTIFICATE-----Generated at Sat Apr 26 23:40:41 2025 by rpki-client