$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json) Hash identifier: +mVJmbWGZe/pSKHjV24IkKj1Dr+8Bu9V5ZVBNgze6N4= Subject key identifier: 2E:7F:66:A2:05:43:E7:4B:C7:8F:CA:1C:98:80:2D:9A:9E:D1:19:30 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019A4F2B43573F9E9D7C02FA20FA517ECF71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft Manifest number: 12EC Signing time: Tue 04 Nov 2025 14:00:26 +0000 Manifest this update: Tue 04 Nov 2025 14:00:26 +0000 Manifest next update: Wed 05 Nov 2025 14:00:26 +0000 Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=) 2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=) 3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: WdtLo+EJ1E2BLWRjXQYhpDJc+vwCeIXVsCZAcRZgbqE=) 4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=) 5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=) 6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=) 7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=) 8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=) 9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=) 10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4f:2b:43:57:3f:9e:9d:7c:02:fa:20:fa:51:7e:cf:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Nov 4 14:00:26 2025 GMT Not After : Nov 5 14:00:26 2025 GMT Subject: CN=2e7f66a20543e74bc78fca1c98802d9a9ed11930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:0d:e1:1a:5c:10:13:7a:59:71:fe:d1:16: bc:59:b5:e1:b2:5f:9e:ca:7c:ec:09:ee:b3:84:7b: fc:0d:b8:af:a3:84:9e:b6:49:9a:01:e5:56:dd:3e: 12:dd:c3:4f:54:b6:0d:70:60:b7:5b:05:54:dc:e1: 80:16:0b:35:e7:e7:8d:72:61:bc:7b:2f:11:78:36: 9c:0d:49:fc:1a:16:99:dc:02:5a:a7:f6:2a:7d:6f: ff:fe:d1:a8:d8:67:09:b9:0a:e3:7a:5a:c9:22:5b: 62:2f:43:04:41:fb:b7:dc:67:30:ed:1e:24:71:63: 71:2d:be:fa:1b:67:a0:fe:2e:e8:12:2e:93:63:cf: 32:7c:f8:29:47:bb:a5:80:4c:70:21:f2:fe:99:98: 8d:7c:2e:c5:d7:c4:27:e0:32:27:98:42:6d:a3:6b: 2d:92:b3:e2:d2:32:fa:6b:85:5f:78:78:63:94:ce: eb:0d:6f:85:99:2d:2d:45:66:22:05:50:35:be:51: 92:7b:df:df:e0:ec:0c:a2:ca:90:6c:6e:f7:74:34: 42:2e:3b:55:74:1e:5a:05:bf:b7:95:49:72:2c:0a: 88:86:92:db:4b:8a:8f:26:bd:a6:d0:6e:5b:0f:ec: d9:ac:63:aa:a2:04:54:a7:50:f6:ff:c9:17:33:4b: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7F:66:A2:05:43:E7:4B:C7:8F:CA:1C:98:80:2D:9A:9E:D1:19:30 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cd:0f:ef:2b:26:ce:bf:5c:4b:1a:10:20:f1:61:8c:66:d5: b9:4d:20:ec:8e:f0:53:b6:8c:77:1e:c6:28:0a:0e:e2:4c:d8: e3:57:cf:3e:b7:b6:72:36:82:07:34:7a:c5:b9:30:08:9f:9e: ef:3d:6d:da:fe:62:77:44:22:22:4c:b4:b9:48:cc:18:a4:7b: 18:c0:6a:b7:9c:94:14:51:e8:62:f4:e4:9d:16:9b:df:aa:73: 6d:c9:80:3c:2c:fc:37:2e:53:17:79:19:b4:bc:18:c4:25:4f: d2:a8:6e:68:38:2e:87:81:66:9f:51:87:7c:a0:1d:ae:33:4a: 79:11:78:4e:d4:00:5a:7e:69:62:68:f4:b8:9e:90:e6:d9:35: 75:87:62:2c:07:14:74:09:6c:97:cc:01:9e:18:66:28:2e:c5: fb:0a:2f:8b:03:d7:ad:89:29:b1:04:ae:37:43:dd:f7:99:6b: 9b:a6:e3:21:dd:e0:d3:75:08:d7:fe:59:4e:24:2b:6a:4b:3e: 4e:83:f5:73:a7:1c:a7:df:a1:ad:6f:82:eb:ab:de:85:0c:ce: 4b:b5:8c:39:5a:e6:f9:25:0b:8a:94:a3:3d:7f:24:6e:ea:d5: a1:9d:90:82:5c:fd:c3:d0:24:70:33:fd:11:f3:e9:c5:53:be: 9e:8d:01:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpPK0NXP56dfAL6IPpRfs9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjUxMTA0MTQwMDI2WhcNMjUxMTA1MTQwMDI2WjAzMTEwLwYDVQQD EygyZTdmNjZhMjA1NDNlNzRiYzc4ZmNhMWM5ODgwMmQ5YTllZDExOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lcN4RpcEBN6WXH+0Ra8WbXhsl+e ynzsCe6zhHv8Dbivo4SetkmaAeVW3T4S3cNPVLYNcGC3WwVU3OGAFgs15+eNcmG8 ey8ReDacDUn8GhaZ3AJap/YqfW///tGo2GcJuQrjelrJIltiL0MEQfu33Gcw7R4k cWNxLb76G2eg/i7oEi6TY88yfPgpR7ulgExwIfL+mZiNfC7F18Qn4DInmEJto2st krPi0jL6a4VfeHhjlM7rDW+FmS0tRWYiBVA1vlGSe9/f4OwMosqQbG73dDRCLjtV dB5aBb+3lUlyLAqIhpLbS4qPJr2m0G5bD+zZrGOqogRUp1D2/8kXM0ufFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5/ZqIFQ+dLx4/KHJiALZqe0RkwMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqc0P7ysm zr9cSxoQIPFhjGbVuU0g7I7wU7aMdx7GKAoO4kzY41fPPre2cjaCBzR6xbkwCJ+e 7z1t2v5id0QiIky0uUjMGKR7GMBqt5yUFFHoYvTknRab36pzbcmAPCz8Ny5TF3kZ tLwYxCVP0qhuaDguh4Fmn1GHfKAdrjNKeRF4TtQAWn5pYmj0uJ6Q5tk1dYdiLAcU dAlsl8wBnhhmKC7F+woviwPXrYkpsQSuN0Pd95lrm6bjId3g03UI1/5ZTiQraks+ ToP1c6ccp9+hrW+C66vehQzOS7WMOVrm+SULipSjPX8kburVoZ2Qglz9w9AkcDP9 EfPpxVO+no0B0g== -----END CERTIFICATE-----Generated at Tue Nov 4 17:59:19 2025 by rpki-client