$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: udAst11VqpWv28TaiqO4jRXvftax6f1mg+zWUZrID4o= Subject key identifier: AC:0E:5F:67:D0:2D:F9:B1:43:AB:44:73:08:B1:35:EE:43:82:66:75 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 01976DAB36D185AA8C284BEC8AD2B3FC9B1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 12E7 Signing time: Sat 14 Jun 2025 09:00:26 +0000 Manifest this update: Sat 14 Jun 2025 09:00:26 +0000 Manifest next update: Sun 15 Jun 2025 09:00:26 +0000 Files and hashes: 1: 1-niL0HbBFnJVvKQt0hrUfnDYA2c.roa (hash: p6l0h8/YpcHujUF4CKICdytjB1xU/xyAlUPJ2RPYdEQ=) 2: DsBDj8KsrMYweEmru4YQ7bU7sz8.roa (hash: oA8nmfJDBbOdrQcggeSaroPYHpNkZEPFvvy4YClThHI=) 3: LUrkh66XkZKwVNjUYmI-WKVrIfI.roa (hash: 5Ng6MZdkPvVN1KuSdt18zrAjGiSQ9er9QPXtD6HBMwQ=) 4: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: NNSnwb/laVCVWytR6agAF3AY8cxJBeDdQ6d9oTtHg+A=) 5: RuOi2OeVJdwH3Q6pVke6pui-1E8.roa (hash: BsUPGdr6IGp3DYNoUG3GCCkksQVBZT3mPP+PTIsI/CA=) 6: SzNYWx_4hbqA7vEqG7rOuTVWK7Q.roa (hash: GZgAmTtenwDDV11JM4j1ngtQVXbeYOJ7NUqczMITg9o=) 7: Vj4iHrU7dsbeaslPJ_eVBTytqtY.roa (hash: /zJF5mkUGTwYWXCySnUO52dFrGJdzfLiWoQaQ79ZacU=) 8: dlhULa_o4hF10yPrQ_I-UzLSMvg.roa (hash: n5MWiKBU+SDn7fIztiNsKerZVsY87rNqSmMQdq7c4Rk=) 9: fHo2pcaaIcweymRP9VZzAj3Yeqs.roa (hash: YJjSWW1PXI1mtqdoEAcxdmIIvuJp8uQtL2etXqLTxn4=) 10: sbYki2S9rry6fN02izJCoCuBIoc.roa (hash: JDPx+s9M+Bjw+jrid88onp3XFhgKi9dhxcTgFA3x7pU=) 11: wNlngMkXPAo5ge24oPNEH7R4BjU.roa (hash: BQ1wZvgOoq4b7JD2/JD8F0i9dHc0x2sFZgpgbCaJ8VU=) 12: zrNvMg5io5pMpIrO6TDYvG8kJjM.roa (hash: NNiMoJ3mCFhCHNy/9nb06xy4EL/lhZ12ezrpRXLWkFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 01:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6d:ab:36:d1:85:aa:8c:28:4b:ec:8a:d2:b3:fc:9b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: Jun 14 09:00:26 2025 GMT Not After : Jun 15 09:00:26 2025 GMT Subject: CN=ac0e5f67d02df9b143ab447308b135ee43826675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:ee:9f:a8:80:89:61:6b:a4:17:a9:58:22: d9:3e:7d:e2:2a:9e:6b:e8:e7:65:f3:d3:84:5b:66: 53:85:19:2d:40:ca:4e:c1:89:1e:7d:dc:99:ee:de: 9f:18:43:2b:e3:98:84:cf:7a:3e:8e:e7:f4:b9:58: c6:32:bb:37:45:0d:74:05:a0:4d:20:b8:01:a9:20: b6:63:a6:2d:03:4a:5a:45:cd:a0:b2:9f:e0:13:e0: 9b:7e:c7:a1:f5:5c:21:84:9e:cf:f5:15:1e:89:47: 95:0e:6b:ca:48:e7:54:08:93:c9:59:a5:fb:fb:7d: 5f:01:54:39:ac:32:87:87:cf:6a:99:43:2c:87:4f: 62:c0:a0:f3:10:ab:09:03:a4:a8:66:c9:8c:10:03: 4c:04:26:52:b1:4d:10:d1:ce:c8:50:04:db:66:6e: a5:f7:ea:ed:53:69:05:09:c0:e1:17:eb:9a:31:51: 0f:3a:0a:f9:38:3f:c8:7b:1e:cf:3d:f3:dc:77:77: 24:6e:53:e8:f8:ac:b8:13:7f:c2:aa:fd:c1:79:99: 49:d0:88:15:8d:30:5c:c8:ae:64:44:a1:54:ca:40: bc:5d:e5:2e:25:be:a9:d4:31:0b:6e:07:70:93:05: e8:b5:b7:c3:73:65:da:90:2f:71:2a:a8:2d:e9:c6: ad:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:5F:67:D0:2D:F9:B1:43:AB:44:73:08:B1:35:EE:43:82:66:75 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:2d:f6:c0:4f:28:45:81:ce:ef:71:54:50:34:70:09:d0:ac: b7:a0:ae:14:d2:ae:c4:11:db:25:f4:93:8f:cd:bd:52:b2:f6: da:74:04:90:26:63:ac:96:7a:4e:75:6b:51:2d:ed:ba:0b:cf: 11:d6:2a:42:ca:be:da:e5:1c:65:17:67:a8:d0:35:5f:c3:cd: b4:07:6c:ab:0a:ab:c4:a2:d7:3c:80:51:1a:cd:9b:64:2f:7e: 97:6b:f4:8b:e6:94:74:ae:05:ae:68:5a:dd:a2:82:d9:09:56: 47:aa:b9:be:e5:13:12:c7:a2:71:56:c0:72:05:be:68:16:cb: 77:df:9c:18:1b:e8:01:0e:dd:92:95:84:ad:26:9e:a1:46:07: 37:0e:51:e7:f5:30:92:2e:e2:f8:01:0e:5f:d9:3a:36:a9:c5: ec:ca:ea:b7:39:e4:93:ec:58:0f:9a:db:c3:3b:c2:fc:24:85: 9b:80:aa:78:3b:16:e7:62:fc:b5:bb:1e:37:ee:d2:df:aa:53: 01:92:f0:ad:e4:60:49:3a:c3:27:7c:4b:a5:1d:db:0f:e4:b7: b1:4a:1b:fc:70:0f:33:2f:66:f3:3f:1f:c4:00:a2:b5:c6:74: e9:24:86:32:86:b9:2e:0b:0b:c6:00:c7:6e:81:f8:19:81:e0: a3:7b:8f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdtqzbRhaqMKEvsitKz/JsaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjUwNjE0MDkwMDI2WhcNMjUwNjE1MDkwMDI2WjAzMTEwLwYDVQQD EyhhYzBlNWY2N2QwMmRmOWIxNDNhYjQ0NzMwOGIxMzVlZTQzODI2Njc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGjun6iAiWFrpBepWCLZPn3iKp5r 6Odl89OEW2ZThRktQMpOwYkefdyZ7t6fGEMr45iEz3o+juf0uVjGMrs3RQ10BaBN ILgBqSC2Y6YtA0paRc2gsp/gE+Cbfseh9VwhhJ7P9RUeiUeVDmvKSOdUCJPJWaX7 +31fAVQ5rDKHh89qmUMsh09iwKDzEKsJA6SoZsmMEANMBCZSsU0Q0c7IUATbZm6l 9+rtU2kFCcDhF+uaMVEPOgr5OD/Iex7PPfPcd3ckblPo+Ky4E3/Cqv3BeZlJ0IgV jTBcyK5kRKFUykC8XeUuJb6p1DELbgdwkwXotbfDc2XakC9xKqgt6cat3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwOX2fQLfmxQ6tEcwixNe5DgmZ1MB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqi32wE8o RYHO73FUUDRwCdCst6CuFNKuxBHbJfSTj829UrL22nQEkCZjrJZ6TnVrUS3tugvP EdYqQsq+2uUcZRdnqNA1X8PNtAdsqwqrxKLXPIBRGs2bZC9+l2v0i+aUdK4Frmha 3aKC2QlWR6q5vuUTEseicVbAcgW+aBbLd9+cGBvoAQ7dkpWErSaeoUYHNw5R5/Uw ki7i+AEOX9k6NqnF7Mrqtznkk+xYD5rbwzvC/CSFm4CqeDsW52L8tbseN+7S36pT AZLwreRgSTrDJ3xLpR3bD+S3sUob/HAPMy9m8z8fxACitcZ06SSGMoa5LgsLxgDH boH4GYHgo3uPQw== -----END CERTIFICATE-----Generated at Sat Jun 14 11:17:45 2025 by rpki-client