$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: SaBHW1ZQIRvFJvIX602iDojS1esTHBdkRAxyntYNzZs= Subject key identifier: B8:2F:1E:E0:0F:6C:B5:97:58:65:2A:5A:B6:F7:9D:B1:83:1E:4C:14 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019A4D73A2EB72EEF0EFCE8F6C843515A850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0DB7 Signing time: Tue 04 Nov 2025 06:00:15 +0000 Manifest this update: Tue 04 Nov 2025 06:00:15 +0000 Manifest next update: Wed 05 Nov 2025 06:00:15 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 4: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: 05DCuHev7VgUuogmfuoqLp2ynKw3q9RnJHLO0JF8s8c=) 6: XmW1bZIMAH1eUiD8pIh2qe-nzi4.roa (hash: OGkNzBo8j0AN5nV1X1VDsvF/YywJ3+cRgQIpDFVours=) 7: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 8: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 9: oFP6X1Pf78VGMK8HY0EDx01ApW0.roa (hash: lDBxCCacRhN6uDAJG81pMtyRTm9VBKmLlVEk7CNfFXw=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 12: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4d:73:a2:eb:72:ee:f0:ef:ce:8f:6c:84:35:15:a8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Nov 4 06:00:15 2025 GMT Not After : Nov 5 06:00:15 2025 GMT Subject: CN=b82f1ee00f6cb59758652a5ab6f79db1831e4c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:5d:03:65:52:45:e5:86:8c:a7:4d:19:d8: 34:04:64:c7:d1:01:b2:4d:82:d6:d1:bb:bd:97:8b: 5d:47:24:e8:aa:8f:2f:91:b3:34:ac:17:a5:17:80: b3:f0:12:f3:7b:6b:69:76:e3:70:5f:96:51:dc:41: 2b:0e:7e:9f:7b:7d:13:26:3c:6c:24:e2:3d:81:88: 3d:92:1b:c7:c7:b4:0a:2a:58:0d:28:7e:36:9f:b5: 0a:d4:04:00:4b:18:67:2d:0c:98:71:4a:8b:57:f3: 1e:61:44:67:43:14:a3:c4:95:00:b8:7c:c5:9c:44: 60:de:3f:03:48:b9:1d:70:ef:1f:e9:94:22:53:5f: b6:c5:e2:6c:6d:03:7e:2d:62:fe:d8:16:82:47:28: e3:8b:a7:d9:22:b6:97:23:9c:8c:17:1e:19:6f:27: 56:13:43:ab:78:56:9a:15:f3:89:44:21:75:34:a4: ce:cf:38:44:fc:c8:e0:9b:f8:a8:bf:92:66:01:c6: 59:ee:2c:c7:69:2c:fa:41:72:84:e0:f7:ea:ec:b5: 89:2e:5d:13:de:84:82:80:67:22:f9:af:14:2a:be: 83:98:32:48:94:33:38:5b:f5:b0:89:37:a1:97:07: 5d:8e:e3:2b:76:5a:45:cc:0c:40:72:44:dd:b8:5a: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2F:1E:E0:0F:6C:B5:97:58:65:2A:5A:B6:F7:9D:B1:83:1E:4C:14 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:33:31:9b:af:73:b7:c0:85:88:45:20:bb:d6:84:e1:d7:db: 07:60:e4:13:95:8b:8a:79:10:b1:8d:f2:54:22:91:99:32:56: 2a:a7:6b:d3:d7:01:e1:42:a0:09:4e:5e:d5:eb:59:d7:31:15: 69:82:25:a9:39:16:46:48:30:6d:0b:08:28:59:f9:e7:0e:ff: 13:11:2c:52:49:de:48:c5:59:4f:6b:04:92:15:45:10:65:21: 7b:f4:81:47:47:c8:22:58:31:04:84:f3:47:8b:dd:1c:51:57: 3e:98:c0:c5:00:38:47:7e:23:32:4f:1f:71:18:40:08:74:2b: 8a:ca:ce:f5:72:13:71:b2:72:53:e3:84:1b:5d:6b:98:29:12: 05:da:ea:f9:d9:4a:93:11:2a:e0:dd:bc:6e:49:64:f3:35:cd: 70:00:a1:37:5c:53:ce:03:7d:56:f2:13:58:5a:74:dc:58:a2: ae:2b:f2:40:2c:5d:9b:43:a3:de:84:55:c5:cf:76:92:ba:78: 1f:3c:11:11:6d:28:a3:6a:51:2f:7f:91:e6:aa:92:f0:ee:3e: ae:82:e6:12:25:32:d3:c9:47:3c:91:79:87:1a:78:cd:bf:f1: 6c:1c:5f:b1:5e:70:c8:f1:26:30:0c:1e:52:70:9a:69:15:17: 53:65:a6:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZpNc6Lrcu7w786PbIQ1FahQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUxMTA0MDYwMDE1WhcNMjUxMTA1MDYwMDE1WjAzMTEwLwYDVQQD EyhiODJmMWVlMDBmNmNiNTk3NTg2NTJhNWFiNmY3OWRiMTgzMWU0YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5NdA2VSReWGjKdNGdg0BGTH0QGy TYLW0bu9l4tdRyToqo8vkbM0rBelF4Cz8BLze2tpduNwX5ZR3EErDn6fe30TJjxs JOI9gYg9khvHx7QKKlgNKH42n7UK1AQASxhnLQyYcUqLV/MeYURnQxSjxJUAuHzF nERg3j8DSLkdcO8f6ZQiU1+2xeJsbQN+LWL+2BaCRyjji6fZIraXI5yMFx4ZbydW E0OreFaaFfOJRCF1NKTOzzhE/Mjgm/iov5JmAcZZ7izHaSz6QXKE4Pfq7LWJLl0T 3oSCgGci+a8UKr6DmDJIlDM4W/WwiTehlwddjuMrdlpFzAxAckTduFrkfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgvHuAPbLWXWGUqWrb3nbGDHkwUMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzMxm69z t8CFiEUgu9aE4dfbB2DkE5WLinkQsY3yVCKRmTJWKqdr09cB4UKgCU5e1etZ1zEV aYIlqTkWRkgwbQsIKFn55w7/ExEsUkneSMVZT2sEkhVFEGUhe/SBR0fIIlgxBITz R4vdHFFXPpjAxQA4R34jMk8fcRhACHQrisrO9XITcbJyU+OEG11rmCkSBdrq+dlK kxEq4N28bklk8zXNcAChN1xTzgN9VvITWFp03FiirivyQCxdm0Oj3oRVxc92krp4 HzwREW0oo2pRL3+R5qqS8O4+roLmEiUy08lHPJF5hxp4zb/xbBxfsV5wyPEmMAwe UnCaaRUXU2Wmig== -----END CERTIFICATE-----Generated at Tue Nov 4 14:46:45 2025 by rpki-client