$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft File: QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json) Hash identifier: XHpomGm2nFctIzVfyXchl7BW2dVhK1uqrz1jVSwHPQo= Subject key identifier: CF:13:AC:B3:3D:FA:2F:3E:3D:F6:66:FE:44:12:49:89:3E:DD:25:BD Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 01967B32791C3EB3E7C84FBF74C22B37BAAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft Manifest number: 1529 Signing time: Mon 28 Apr 2025 07:00:27 +0000 Manifest this update: Mon 28 Apr 2025 07:00:27 +0000 Manifest next update: Tue 29 Apr 2025 07:00:27 +0000 Files and hashes: 1: 0esZKuZd06vTF3egbk7SFqajsIo.roa (hash: P0O/NDwq3sTeK/AsSKKPK6Qr+cdWA34yW0U7UgVxZHg=) 2: 1-F-5SWsecFgzI5NahgeczUF5j-k.roa (hash: AjzylbQuDtMZ4CoZ2EqAKKte+m5xBNBNs+Oy65Y8EM0=) 3: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (hash: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=) 4: 4URO2C3ml1u1p3j0aVym-OypCmw.roa (hash: FBodq3AGj9I/WrFusJYGhp0BteIh9N9SY38AbrciYWk=) 5: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (hash: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=) 6: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (hash: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=) 7: GAgtr-CLltTm3C54wjvqWFoClvc.roa (hash: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=) 8: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (hash: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=) 9: HxipHT46tv6qA61seP-3FDc3m84.roa (hash: dvYRTvtnN6xoSKyBzydQ1i2HWHdep/QnlIOV+ZIODek=) 10: JcQ4XnNNuhCFCptegJ4OikKt6EI.roa (hash: V4uiHg1qNVTGH4cwLosCcAcAuUHU5FHwvSgPuESRx7Y=) 11: Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa (hash: R9xWi9BNSSwcGXEc8iJXQHOFaaQnnZvq83WcJjO5BE8=) 12: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: 3QrPYMec+MNHrTzKV4igB38s0VGhyx09n7NnI7kC1GE=) 13: QVpDsEjXaPZQ4FGjN9dHcrQXvHg.roa (hash: HCD6w2XxMAQn0SFhGHQKXXLIjCxVrY39/u5TIy7CNM8=) 14: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (hash: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=) 15: RNDoaXvvOX22MpXmc3Ff_6K2Zr0.roa (hash: 9ScFJyBJ0ntBcGgka6vn0/EsUriLP41MonbDidIqsxk=) 16: UtpSRhJuNLlPda0ealCAV2oOOIs.roa (hash: 6zNva/R7MgFInq/rTlig5RzR+MH92GbfZMeRaso1csA=) 17: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (hash: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=) 18: aCzvft-4bbV7rBYNhvjtTU8ZwVY.roa (hash: LyfD0ZqEZ95kmtswsVkI/tj5kthO2U488G+9z2mp6gg=) 19: anyb0S2isVZ6Se4Mftij8iSLpPk.roa (hash: 8kZzLUilTF5CneX4LxuRFJNuwebJiucwE+f4bJOwZpY=) 20: cLHJ9pzG4jNGxgoAoRMirT2Ejso.roa (hash: Jzxa7wOrH3SZg3F+/QPuNnZeQarhGQ5yhFav2kPWjJ0=) 21: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (hash: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=) 22: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (hash: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=) 23: glVWs7IQA6E4icmC8qXaL1BO1oU.roa (hash: wAwxqn0T2Tg7SmJ7QKis7shqbxTq4mypLKV5b5C3kXg=) 24: kL3chxghDnQX5YSzwgkNCMx_3uM.roa (hash: ARDIceVeEM1YjdBNdcn8ziSYK6i63yZ+Nxd3mBgB/OM=) 25: khxB07onbtl0gHz8-6pLaDUUqYo.roa (hash: MoQ9KdSAj5hEESTK4yNZR+E8klzqWct22REysr25b/w=) 26: lKXrokKPFOF3aznjmWojVE7APiQ.roa (hash: PRGVlrmspET+S9gMw9HSgp3fT7nUxwmOOvlgERWds3M=) 27: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (hash: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=) 28: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (hash: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=) 29: nGljitgno8Zg_3gTd1NL8ga4UlY.roa (hash: rg8O6DW4r5DhXeJAjPcwuhjgZqT37lpRRlPUN2MFmGk=) 30: pfnbvP54fI2mKR09iIt0xfdp0co.roa (hash: TpvSBeXjgBs6iHcMA91RD8MXDqtM3kW6rNOmftw2zXc=) 31: twN006NWSqIAzyJjBefGoakpUcI.roa (hash: Dw9Jbr5s1oT+R6tnGBJCmZXohfgBB+1HIADmJwaJ7IA=) 32: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (hash: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7b:32:79:1c:3e:b3:e7:c8:4f:bf:74:c2:2b:37:ba:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Apr 28 07:00:27 2025 GMT Not After : Apr 29 07:00:27 2025 GMT Subject: CN=cf13acb33dfa2f3e3df666fe441249893edd25bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ab:0c:a6:e2:52:ab:91:9f:eb:df:51:94:16: f3:83:08:a2:39:f2:5c:13:ef:5b:57:10:65:56:67: c0:8e:7b:15:20:df:e0:92:66:d0:8d:6e:1d:07:ca: b0:a0:b2:85:dc:75:db:5a:9b:1e:55:77:bf:01:44: 6f:ba:ba:2c:55:b8:73:ce:a7:31:5f:f7:2d:c0:42: 52:a1:2c:03:9a:a9:57:8b:a6:83:52:ae:02:27:0c: c8:80:b3:01:1a:ab:44:b2:66:03:3c:b9:8a:94:0f: c0:e1:48:5a:1a:fc:d3:89:a2:06:b4:97:8c:bc:d4: 12:1a:e0:b9:3c:24:17:ef:87:77:4d:19:50:b4:7f: f7:ed:b4:e2:7b:1c:11:37:66:14:7a:8c:dc:b8:d1: af:65:2e:e5:82:bc:2d:6b:cf:05:1d:a8:e9:42:25: 7a:a3:da:ba:3c:82:0f:f9:4a:c5:88:89:c3:bb:55: d0:64:99:34:d8:95:cc:48:13:5f:65:b8:ea:f0:af: 36:27:47:d6:68:18:ff:13:30:1f:e6:d1:65:34:44: 9f:69:db:90:a2:4a:c9:e2:c3:a8:3f:51:90:b9:34: 4b:94:39:00:0b:bf:37:2b:36:9d:8b:06:6b:d8:fb: 2c:ec:95:f6:fd:8b:31:3c:ce:fd:40:7b:f5:8e:41: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:13:AC:B3:3D:FA:2F:3E:3D:F6:66:FE:44:12:49:89:3E:DD:25:BD X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:23:08:82:84:28:ed:41:36:9e:33:8e:9f:37:b8:cf:b9:e3: 41:58:60:ff:cd:37:a2:b1:75:29:58:1f:5e:24:45:8c:b9:1a: fc:80:10:35:ad:9f:41:64:81:21:4f:3a:ec:56:3f:d0:99:d0: 35:4e:89:ac:3c:88:fc:87:f0:b6:c3:17:33:e9:2d:2f:34:d5: bc:2f:1e:ad:58:cc:65:0b:dd:64:7f:0e:56:f5:31:3d:88:38: 69:38:8e:8f:7b:2a:f9:26:46:26:0e:90:3d:55:05:b0:44:a4: 08:4f:19:ba:23:f3:98:8e:21:4e:ef:06:85:aa:60:7d:e4:04: ee:27:af:98:39:39:8a:16:09:ef:b4:96:ee:20:df:a2:ef:85: e3:94:51:1e:e4:47:dc:6f:3d:c3:12:10:c5:d3:84:bb:4e:3c: d9:35:3b:9e:e1:84:0e:20:b0:b4:8e:9f:4b:fa:9d:28:85:2b: db:99:83:7c:d9:51:77:03:78:0c:4e:f0:7e:14:ce:85:cf:5d: 58:64:4d:64:69:41:72:2a:39:83:99:0c:0a:8b:a0:cb:a2:5b: 39:60:23:d9:e2:46:c5:5e:87:4a:e2:c9:3c:f2:c0:99:67:de: 12:6a:2b:b1:db:fc:82:27:0f:af:06:1d:51:8b:8d:a8:4c:d5: 8f:46:d6:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ7MnkcPrPnyE+/dMIrN7qsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjUwNDI4MDcwMDI3WhcNMjUwNDI5MDcwMDI3WjAzMTEwLwYDVQQD EyhjZjEzYWNiMzNkZmEyZjNlM2RmNjY2ZmU0NDEyNDk4OTNlZGQyNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKsMpuJSq5Gf699RlBbzgwiiOfJc E+9bVxBlVmfAjnsVIN/gkmbQjW4dB8qwoLKF3HXbWpseVXe/AURvurosVbhzzqcx X/ctwEJSoSwDmqlXi6aDUq4CJwzIgLMBGqtEsmYDPLmKlA/A4UhaGvzTiaIGtJeM vNQSGuC5PCQX74d3TRlQtH/37bTiexwRN2YUeozcuNGvZS7lgrwta88FHajpQiV6 o9q6PIIP+UrFiInDu1XQZJk02JXMSBNfZbjq8K82J0fWaBj/EzAf5tFlNESfaduQ okrJ4sOoP1GQuTRLlDkAC783KzadiwZr2Pss7JX2/YsxPM79QHv1jkFA9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8TrLM9+i8+PfZm/kQSSYk+3SW9MB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiMIgoQo 7UE2njOOnze4z7njQVhg/803orF1KVgfXiRFjLka/IAQNa2fQWSBIU867FY/0JnQ NU6JrDyI/IfwtsMXM+ktLzTVvC8erVjMZQvdZH8OVvUxPYg4aTiOj3sq+SZGJg6Q PVUFsESkCE8ZuiPzmI4hTu8GhapgfeQE7ievmDk5ihYJ77SW7iDfou+F45RRHuRH 3G89wxIQxdOEu0482TU7nuGEDiCwtI6fS/qdKIUr25mDfNlRdwN4DE7wfhTOhc9d WGRNZGlBcio5g5kMCougy6JbOWAj2eJGxV6HSuLJPPLAmWfeEmorsdv8gicPrwYd UYuNqEzVj0bWqw== -----END CERTIFICATE-----Generated at Mon Apr 28 18:03:27 2025 by rpki-client