$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: jnk4UBg4Hr0mKKffvVOYAo23ScH5FT4tqGr+0vQoyt8= Subject key identifier: 64:B7:0F:12:2D:0C:E6:6F:60:B4:A0:66:65:3D:E6:2E:C1:69:0A:2E Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 019873E34824CD251F5C370845DE1C1D4AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 1634 Signing time: Mon 04 Aug 2025 07:02:11 +0000 Manifest this update: Mon 04 Aug 2025 07:02:11 +0000 Manifest next update: Tue 05 Aug 2025 07:02:11 +0000 Files and hashes: 1: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=) 2: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=) 3: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=) 4: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: deYtig1sjgkAaGt92irukybo9GCYowcGPB/xxDniWRs=) 5: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=) 6: bDUFsRxvOWilElkS5MfCCIWk1XQ.roa (hash: mAKIKAHs72Ncw5cLpVcqx2omnJ6e82AfVTrRpnwNpJU=) 7: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=) 8: i4BvPEbIU0LE_KGbaw2Du_jwtCU.roa (hash: /Y2NvzZtZ5IYW3kWzP26GGHk2SWDVIrWTwCk4pyyB7E=) 9: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=) 10: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=) 11: ys5vmqUy51MsJ0ygo_iK-V09VLk.roa (hash: 0bEBsx5vAAoh9m1hQ5TVct9tCZkHxHVWgyiCpF/cLSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e3:48:24:cd:25:1f:5c:37:08:45:de:1c:1d:4a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Aug 4 07:02:11 2025 GMT Not After : Aug 5 07:02:11 2025 GMT Subject: CN=64b70f122d0ce66f60b4a066653de62ec1690a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:16:51:6c:08:9a:92:43:a2:05:84:45:50: c5:29:74:91:2e:aa:2c:e1:23:23:94:c9:1a:0b:f5: 56:08:6e:a7:63:e0:40:b1:37:aa:c2:0e:64:46:39: 67:ad:b8:20:bc:c8:47:0d:0f:0c:e5:ca:8f:cd:db: e8:22:be:06:d8:cd:82:f4:9b:d7:dc:b0:13:40:a0: 04:ac:36:75:a5:72:60:54:3a:1c:d7:8c:d1:9a:5e: a1:3e:27:38:e7:3a:4a:be:f4:93:02:01:ba:e3:4b: 17:e5:01:0e:ed:52:18:90:c9:b2:6a:fa:a3:4a:19: 7c:90:9a:35:69:42:aa:34:f0:e1:b9:ed:87:42:b4: 35:c3:49:22:3e:d2:e5:10:ee:56:db:05:cc:10:fb: 72:0e:ba:5c:19:e0:72:aa:70:5c:98:c2:56:72:ee: 61:78:c9:f1:97:eb:9b:9d:ec:11:73:f0:f5:93:c4: 1d:45:c4:c1:ba:de:9f:2e:28:29:f1:41:ae:a0:60: 28:0d:33:8f:c0:18:8d:cd:1a:65:7f:9f:bc:f0:68: bb:73:2b:66:c2:b3:f8:d6:58:f3:fa:6c:7c:d3:0e: 28:6e:6e:13:3f:12:ff:b8:b1:e9:cb:55:ac:0d:73: 2d:fe:d4:05:1d:b0:1b:da:30:e9:fe:b6:55:74:93: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B7:0F:12:2D:0C:E6:6F:60:B4:A0:66:65:3D:E6:2E:C1:69:0A:2E X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cc:de:00:a0:dc:97:c0:11:b0:ba:5d:10:2c:a8:ff:58:aa: c5:57:a5:54:b7:71:c9:eb:6f:94:30:a1:93:60:ad:4a:99:c5: e7:ab:1b:c0:d0:98:10:5d:ee:eb:17:23:5e:25:86:ea:c0:de: fa:b5:e1:8b:1d:73:10:b4:3d:5f:d9:60:22:7f:53:5a:36:84: 7a:9d:9a:dd:3d:9c:b9:10:ba:50:9f:06:cf:b7:86:8d:34:af: 5c:18:3b:b8:3f:6a:4e:92:49:5e:e3:ed:ef:81:de:5a:f6:a1: 5c:93:ef:03:70:66:26:40:e1:0a:5b:1f:b8:2e:d3:9a:86:6c: 2e:b4:e8:02:ee:db:2c:96:4d:30:4e:f9:63:27:47:a2:82:95: e8:ae:26:99:d6:8d:d0:1d:d6:69:24:e7:c8:33:a3:71:7a:1a: 6a:7b:21:e9:d0:15:21:70:76:ac:3c:10:4e:04:07:d6:c6:7d: 71:c6:6d:0c:fa:61:27:e1:8e:cc:07:01:dc:93:5b:8a:57:e9: 49:2e:24:7d:26:83:72:ee:8e:9d:9e:28:54:d9:cd:ca:dd:cf: 57:bd:04:2c:25:8f:82:0c:de:ca:c7:be:c7:cc:46:04:65:94: ef:83:69:a6:7f:75:34:74:0b:3f:0c:ee:99:95:b9:14:2e:fb: 5b:ae:9a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz40gkzSUfXDcIRd4cHUqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjUwODA0MDcwMjExWhcNMjUwODA1MDcwMjExWjAzMTEwLwYDVQQD Eyg2NGI3MGYxMjJkMGNlNjZmNjBiNGEwNjY2NTNkZTYyZWMxNjkwYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DoWUWwImpJDogWERVDFKXSRLqos 4SMjlMkaC/VWCG6nY+BAsTeqwg5kRjlnrbggvMhHDQ8M5cqPzdvoIr4G2M2C9JvX 3LATQKAErDZ1pXJgVDoc14zRml6hPic45zpKvvSTAgG640sX5QEO7VIYkMmyavqj Shl8kJo1aUKqNPDhue2HQrQ1w0kiPtLlEO5W2wXMEPtyDrpcGeByqnBcmMJWcu5h eMnxl+ubnewRc/D1k8QdRcTBut6fLigp8UGuoGAoDTOPwBiNzRplf5+88Gi7cytm wrP41ljz+mx80w4obm4TPxL/uLHpy1WsDXMt/tQFHbAb2jDp/rZVdJNmtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS3DxItDOZvYLSgZmU95i7BaQouMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8zeAKDc l8ARsLpdECyo/1iqxVelVLdxyetvlDChk2CtSpnF56sbwNCYEF3u6xcjXiWG6sDe +rXhix1zELQ9X9lgIn9TWjaEep2a3T2cuRC6UJ8Gz7eGjTSvXBg7uD9qTpJJXuPt 74HeWvahXJPvA3BmJkDhClsfuC7TmoZsLrToAu7bLJZNME75YydHooKV6K4mmdaN 0B3WaSTnyDOjcXoaansh6dAVIXB2rDwQTgQH1sZ9ccZtDPphJ+GOzAcB3JNbilfp SS4kfSaDcu6OnZ4oVNnNyt3PV70ELCWPggzeyse+x8xGBGWU74Nppn91NHQLPwzu mZW5FC77W66agQ== -----END CERTIFICATE-----Generated at Mon Aug 4 11:18:23 2025 by rpki-client