$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: SdqswscaLS/jmrgxfjTTeAskg3GTORHHLDMEAZ6IknQ= Subject key identifier: 2E:DD:46:7B:A9:1C:39:B3:A7:AA:03:11:FC:6C:05:3B:FC:10:C0:75 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 019A4E4FE5BACA5A0FAC00E470B3F8BF0D1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 146B Signing time: Tue 04 Nov 2025 10:00:50 +0000 Manifest this update: Tue 04 Nov 2025 10:00:50 +0000 Manifest next update: Wed 05 Nov 2025 10:00:50 +0000 Files and hashes: 1: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 2: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 2j5OCALGNPRi+xyxj19pFrjy6j2fPjYNfh/WX1llf4o=) 4: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 5: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 6: XO9hryEjXx5kgKnr74JXjzCM8w0.roa (hash: w6sYmDLnWAclOfvxxkvq1DeKbEW8wcfpI5kQA52E9OY=) 7: ZCVtB8725E04xja-A_7tFv0UGbA.roa (hash: G23IAdwlc1DMlMrfpBBsuDs0R5mxQSfAIypWEkTSgDc=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:4f:e5:ba:ca:5a:0f:ac:00:e4:70:b3:f8:bf:0d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Nov 4 10:00:50 2025 GMT Not After : Nov 5 10:00:50 2025 GMT Subject: CN=2edd467ba91c39b3a7aa0311fc6c053bfc10c075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:e6:23:a8:25:1d:ca:93:74:a6:60:74:a5: d8:48:a9:3c:cd:77:c2:56:f6:f7:c1:b9:e8:50:31: 2d:42:a2:b3:4b:9d:17:28:4a:0b:e8:e2:37:b3:ea: 6f:5f:fd:f9:ad:7a:aa:94:e2:90:5d:f2:95:57:63: 75:22:ca:4a:17:58:c0:ac:09:23:0a:96:b5:06:51: c2:35:e1:1b:10:45:20:ac:80:76:0a:21:51:94:3a: ea:3b:e3:86:6e:df:c7:a5:10:95:5e:76:36:05:4e: 5e:ff:09:50:51:ea:06:79:7c:ef:a6:4f:b8:c3:1d: 8a:ad:b9:eb:e7:65:b3:8a:c7:cd:de:91:4c:64:4f: 64:5b:25:9c:06:4e:07:04:45:be:bd:5c:d4:93:84: 45:f6:98:ca:e6:13:7c:a4:64:7b:49:f8:0d:be:c8: 07:d0:b1:4e:e8:82:18:76:88:48:21:3c:8b:85:4f: 87:13:fb:0f:7a:95:b8:61:6c:f5:81:a4:60:e7:1e: f2:0c:0f:31:a8:2f:8f:86:65:77:4d:b8:87:3b:39: 59:76:f6:63:b4:24:ca:fd:97:eb:ea:76:e0:2d:62: 39:cc:ee:3c:27:bb:30:5a:88:34:7e:4c:e6:95:06: 4e:04:0a:21:87:86:f2:ed:ad:a2:48:04:b2:d2:9c: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:46:7B:A9:1C:39:B3:A7:AA:03:11:FC:6C:05:3B:FC:10:C0:75 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:89:3e:d1:9d:56:6a:a2:96:de:24:54:63:eb:3e:a0:3e:e9: 5c:99:99:66:df:e6:86:5d:53:ee:9b:32:bd:8e:5f:86:1b:5f: 34:4d:8d:b7:f7:7a:ab:01:40:63:ee:d4:73:54:d4:d9:c2:dd: 04:fa:fc:93:43:9b:43:3d:c9:3a:2d:43:2b:b6:d9:4f:ce:f4: dc:74:83:52:4b:c6:3e:d5:54:1a:29:a6:bf:7c:4e:57:ca:6f: 49:f1:4c:e4:49:5b:e1:61:2f:d0:41:62:93:08:b0:39:85:f0: c2:83:99:35:25:33:de:9e:4b:09:e4:5a:c1:7c:75:6b:c7:0f: 79:a5:1d:ac:90:a8:bd:38:98:a4:a0:0c:84:00:3a:1d:f3:87: c7:64:31:89:7a:c3:a7:aa:6b:47:6f:87:94:5b:f2:a1:3a:1a: 20:91:b4:29:13:7d:c3:d4:3e:5a:96:a5:e9:f4:6d:e6:2d:be: e8:d5:61:11:4c:4d:a8:a8:34:70:34:ec:05:07:12:db:22:e4: 4d:bf:7d:4f:99:8b:8d:f9:0c:4c:3e:76:f4:79:14:0c:9b:8a: a1:1f:75:25:0f:f0:2c:09:4d:08:86:5f:b1:8a:ac:31:14:af: cf:d0:ed:b6:8a:f7:c8:5d:4d:b6:dd:ef:69:84:57:18:d7:0b: b4:5a:ac:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpOT+W6yloPrADkcLP4vw0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUxMTA0MTAwMDUwWhcNMjUxMTA1MTAwMDUwWjAzMTEwLwYDVQQD EygyZWRkNDY3YmE5MWMzOWIzYTdhYTAzMTFmYzZjMDUzYmZjMTBjMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfnmI6glHcqTdKZgdKXYSKk8zXfC Vvb3wbnoUDEtQqKzS50XKEoL6OI3s+pvX/35rXqqlOKQXfKVV2N1IspKF1jArAkj Cpa1BlHCNeEbEEUgrIB2CiFRlDrqO+OGbt/HpRCVXnY2BU5e/wlQUeoGeXzvpk+4 wx2Krbnr52WzisfN3pFMZE9kWyWcBk4HBEW+vVzUk4RF9pjK5hN8pGR7SfgNvsgH 0LFO6IIYdohIITyLhU+HE/sPepW4YWz1gaRg5x7yDA8xqC+PhmV3TbiHOzlZdvZj tCTK/Zfr6nbgLWI5zO48J7swWog0fkzmlQZOBAohh4by7a2iSASy0pxy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7dRnupHDmzp6oDEfxsBTv8EMB1MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzIk+0Z1W aqKW3iRUY+s+oD7pXJmZZt/mhl1T7psyvY5fhhtfNE2Nt/d6qwFAY+7Uc1TU2cLd BPr8k0ObQz3JOi1DK7bZT8703HSDUkvGPtVUGimmv3xOV8pvSfFM5Elb4WEv0EFi kwiwOYXwwoOZNSUz3p5LCeRawXx1a8cPeaUdrJCovTiYpKAMhAA6HfOHx2QxiXrD p6prR2+HlFvyoToaIJG0KRN9w9Q+Wpal6fRt5i2+6NVhEUxNqKg0cDTsBQcS2yLk Tb99T5mLjfkMTD529HkUDJuKoR91JQ/wLAlNCIZfsYqsMRSvz9Dttor3yF1Ntt3v aYRXGNcLtFqs8g== -----END CERTIFICATE-----Generated at Tue Nov 4 17:56:55 2025 by rpki-client