$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: 0Rgt7l+Ud1yrmlAtwe9HrAYKaL6RyQSH5VnYKJO+k9c= Subject key identifier: 72:8C:38:99:42:46:80:BB:30:71:09:B2:D6:F3:E7:34:6A:AA:21:44 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 0198791D615ABCB4C13FB4D96C677E7F02E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0CC4 Signing time: Tue 05 Aug 2025 07:23:45 +0000 Manifest this update: Tue 05 Aug 2025 07:23:45 +0000 Manifest next update: Wed 06 Aug 2025 07:23:45 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: A5DsHdxjGronY1SlJmY-avOq7l0.roa (hash: TRbOBB2FpSmRLzGWMLyHgzyzq9dao9eG06ouQ8rU7ko=) 4: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 5: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 6: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: Cr1CyjLk+PHqrFkq1dlA7CtgEFDgqbNYqDz/deaXc6w=) 7: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 8: mOMaktyaCkMxZ5MZJip9rZKzZTo.roa (hash: 6nwLbfgbvPLxcE59s58vm7SzOxg6/OXQsbiUHhiUMSY=) 9: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 12: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 Aug 2025 07:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:79:1d:61:5a:bc:b4:c1:3f:b4:d9:6c:67:7e:7f:02:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Aug 5 07:23:45 2025 GMT Not After : Aug 6 07:23:45 2025 GMT Subject: CN=728c3899424680bb307109b2d6f3e7346aaa2144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:ad:be:83:bc:db:52:51:2a:55:07:62:30: 35:cf:15:13:03:1c:4e:6f:c7:4b:d0:b4:9d:56:d4: 25:08:2e:15:91:87:68:0a:2d:32:c3:f2:36:8d:26: e8:d8:61:69:51:66:e4:f1:6e:89:85:02:91:99:9f: aa:a7:02:66:f5:ba:61:f8:23:34:73:8d:6a:8a:92: d1:a9:a2:d5:6d:a8:bb:01:60:07:5a:4d:5e:c3:f7: ad:b8:4e:56:81:b0:10:20:58:80:90:e0:dc:08:00: 20:54:2f:bb:35:20:cc:9e:57:75:a9:40:55:56:76: 5d:bd:b8:d7:6a:0b:f5:f7:9a:f3:04:63:fb:cd:3a: 26:a5:3f:0a:75:79:62:ab:bf:d9:9d:56:a9:ae:63: ad:e0:16:34:b8:98:ef:f9:da:3d:43:92:65:3e:71: 1d:0c:b1:87:7d:fb:1c:29:66:88:f1:d4:c1:e1:f0: 72:52:83:51:4d:2a:d6:4c:a3:77:41:88:5b:a5:07: b1:7b:49:68:ef:d3:85:40:77:89:07:b2:d8:5c:1f: 5c:87:ce:30:1d:d9:53:62:2a:9d:a1:42:ba:2f:7f: b8:13:1e:c4:33:7a:f7:af:d9:16:09:2c:9c:4f:d7: af:fd:4f:c9:da:40:cb:41:ab:a1:9d:39:50:16:8e: 1f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8C:38:99:42:46:80:BB:30:71:09:B2:D6:F3:E7:34:6A:AA:21:44 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fe:ad:26:4e:ee:43:35:10:5f:7f:db:d2:48:ce:0e:25:b0: 88:f4:63:0e:68:73:59:88:d7:24:d4:94:32:de:80:b0:d3:b7: d7:39:9b:17:3c:47:5b:2a:08:f1:18:00:0d:81:b6:c7:ce:65: 22:95:1d:f3:58:31:21:42:5a:00:56:50:ce:cf:7c:4f:3f:6f: d4:d4:b0:68:37:b1:b1:1d:07:7b:53:f1:09:2d:03:4a:d8:00: b5:f3:ca:75:be:bd:19:ce:13:c9:f8:92:54:03:37:e1:e5:3e: b2:cd:2f:a3:d6:6e:9f:11:0d:22:4d:92:8a:3a:37:f2:cd:0a: 08:ca:d5:93:dd:79:fb:4d:56:45:eb:05:0f:22:58:78:1d:e3: 4e:2d:30:74:34:25:1b:e0:45:23:40:2d:42:24:61:a2:b5:88: 31:a8:7f:1b:cf:98:62:be:7f:25:bc:cb:83:52:81:eb:96:78: fa:d3:5c:98:75:a1:37:6d:3b:38:70:0b:41:d1:18:c4:ab:2c: 68:2a:cf:79:51:82:3b:c4:88:71:a6:eb:43:be:5c:80:cd:b4: 0c:03:97:49:39:c4:51:33:3b:d8:b9:f4:22:5f:0a:8b:c7:ea: 0e:07:66:1b:e6:68:c6:e1:b9:6a:29:0f:dd:80:94:d3:4c:22: 91:4c:14:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZh5HWFavLTBP7TZbGd+fwLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUwODA1MDcyMzQ1WhcNMjUwODA2MDcyMzQ1WjAzMTEwLwYDVQQD Eyg3MjhjMzg5OTQyNDY4MGJiMzA3MTA5YjJkNmYzZTczNDZhYWEyMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpqtvoO821JRKlUHYjA1zxUTAxxO b8dL0LSdVtQlCC4VkYdoCi0yw/I2jSbo2GFpUWbk8W6JhQKRmZ+qpwJm9bph+CM0 c41qipLRqaLVbai7AWAHWk1ew/etuE5WgbAQIFiAkODcCAAgVC+7NSDMnld1qUBV VnZdvbjXagv195rzBGP7zTompT8KdXliq7/ZnVaprmOt4BY0uJjv+do9Q5JlPnEd DLGHffscKWaI8dTB4fByUoNRTSrWTKN3QYhbpQexe0lo79OFQHeJB7LYXB9ch84w HdlTYiqdoUK6L3+4Ex7EM3r3r9kWCSycT9ev/U/J2kDLQauhnTlQFo4fMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKMOJlCRoC7MHEJstbz5zRqqiFEMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/6tJk7u QzUQX3/b0kjODiWwiPRjDmhzWYjXJNSUMt6AsNO31zmbFzxHWyoI8RgADYG2x85l IpUd81gxIUJaAFZQzs98Tz9v1NSwaDexsR0He1PxCS0DStgAtfPKdb69Gc4TyfiS VAM34eU+ss0vo9ZunxENIk2Sijo38s0KCMrVk915+01WResFDyJYeB3jTi0wdDQl G+BFI0AtQiRhorWIMah/G8+YYr5/JbzLg1KB65Z4+tNcmHWhN207OHALQdEYxKss aCrPeVGCO8SIcabrQ75cgM20DAOXSTnEUTM72Ln0Il8Ki8fqDgdmG+ZoxuG5aikP 3YCU00wikUwUdg== -----END CERTIFICATE-----Generated at Tue Aug 5 16:37:44 2025 by rpki-client