$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft File: QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json) Hash identifier: e5EnVMdX1pePbU4VQyL7rfgk5ewOrca5+GNrTLsITTc= Subject key identifier: FB:4D:70:55:20:76:20:4B:09:7C:E9:AD:57:EF:40:B8:84:75:3C:88 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 01976E5018D5D0257984041C6B6CDF06C5E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft Manifest number: 0C39 Signing time: Sat 14 Jun 2025 12:00:32 +0000 Manifest this update: Sat 14 Jun 2025 12:00:32 +0000 Manifest next update: Sun 15 Jun 2025 12:00:32 +0000 Files and hashes: 1: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (hash: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=) 2: 5HOLpYhwqliELfIR2gI4LSu5Csw.roa (hash: CoNRHaLEfVgA7zhIYoNXjV+JQl4/d7Z3te8aNHAlbEY=) 3: HWHdr5GQC_VX7j9F1WqoV0bdwWg.roa (hash: lHH/IuLivWC3z/kum1lv/KByl1Iaio0y3RFaovhY1eA=) 4: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (hash: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=) 5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: a6OR7Kspdj/pzNKPJLWBprWzKd//glOOjdUBkIQfFJY=) 6: YZc7E-Pi1-HqwTzBTXPEwMo10ow.roa (hash: eRCfIEAiODqxSFWTae6bCGEKxja/mJ0cdxQQXhEkbgQ=) 7: fhK3spdizh-j08bDgQWAIWcvZm4.roa (hash: Nz0rdH67w5QKkf0wMH2IazVmlZq7Iwuz9Y5nbjtBWvw=) 8: mOMaktyaCkMxZ5MZJip9rZKzZTo.roa (hash: 6nwLbfgbvPLxcE59s58vm7SzOxg6/OXQsbiUHhiUMSY=) 9: n6PPvLqOIY-a_F3MLESyDvcvXY0.roa (hash: xZoHr4CQMcrmIiMPTjA0BdI8KURWGLmYwPAm6zg2CKo=) 10: oLFFYbgwgHeGsoWAlLxxn6-o7ms.roa (hash: dr6W37ke4ICMcO/2XgdSWX/eEcxR7/Ru69vHyG1qXnc=) 11: tKgBqg_rLrlFGJvqmdrP_jnooGM.roa (hash: tpbpHr7/WtsAKH6NIHCmBsfYfjVLkAOk8pTuaYRtsII=) 12: tp2E5WChRbWLDaQeVxSsg5O3abg.roa (hash: IJndAEau9okeEaFaIITFXTZaOD5OBeBTmwd5pMHOtQ8=) 13: wKGyrrFyaBqNrXVfIn21-Aht03M.roa (hash: eS6+JkZi0pZvewBXXxrhJa8RtOVgeDFpDwD8cwOdAeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 10:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:6e:50:18:d5:d0:25:79:84:04:1c:6b:6c:df:06:c5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jun 14 12:00:32 2025 GMT Not After : Jun 15 12:00:32 2025 GMT Subject: CN=fb4d70552076204b097ce9ad57ef40b884753c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:6c:77:e3:dd:3e:9d:cc:3f:b6:56:74:8a: 78:b5:28:5f:71:98:93:8f:5b:26:b7:53:bc:16:b1: dc:1f:a7:b7:84:a4:58:41:4b:2c:dc:11:2e:01:04: d4:db:61:41:f0:ab:38:ae:0f:9f:73:0e:ad:2e:e7: 11:99:bc:ae:0d:2f:e6:d4:72:85:a6:f3:09:e1:6b: 39:e8:8a:00:f6:c1:f8:9d:76:9e:7f:ae:20:28:d8: c8:0d:9c:0c:a3:84:1e:1c:aa:64:62:ec:59:78:7a: 7c:76:d8:16:dd:1b:66:a9:34:f7:99:5b:96:0a:0e: 51:5b:33:5c:66:cf:4f:b3:bf:9c:e0:30:7b:3b:af: 42:ed:30:4d:9b:1f:d1:ef:d5:b9:9d:d2:57:e6:ff: 2c:0e:9d:11:8e:d6:b8:67:12:85:b6:a8:a0:d2:6e: 78:c9:38:57:e7:31:9e:78:5d:56:aa:e3:38:dc:f7: a4:7a:c4:55:7e:05:bf:c9:0c:80:cc:a1:78:1e:a7: fe:8c:9f:17:93:53:6a:36:87:e1:a5:fd:bd:2b:88: 4f:19:d3:ab:f5:35:03:96:1a:11:38:b0:5d:f7:af: 4b:34:ad:0f:60:3e:6b:a9:b3:32:cc:38:71:4c:8d: f2:0c:ca:1b:b7:4f:9b:56:c8:2b:fb:8b:83:14:bc: e5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4D:70:55:20:76:20:4B:09:7C:E9:AD:57:EF:40:B8:84:75:3C:88 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:bd:62:78:87:fc:7d:19:d4:3f:66:75:65:82:bd:80:c3:22: 37:67:0c:ce:0f:fa:36:e1:ee:ca:c5:97:78:47:c9:c5:f9:d2: ab:67:34:e0:07:83:71:37:e9:fc:f4:61:44:06:a5:4d:3b:94: 8e:42:00:76:50:68:ed:db:55:24:cf:29:90:c9:71:dc:87:2b: f7:fd:84:ae:d1:3a:56:90:48:00:c9:cb:4f:30:53:a5:f7:20: bd:3d:5d:8b:4e:44:00:a1:db:27:82:d9:40:da:64:c7:9d:b3: 8b:21:3c:3e:78:3f:98:1a:d7:07:67:9d:68:42:c5:95:65:d9: 83:26:9c:a8:c0:f0:e6:1a:a8:3c:fd:52:45:3e:28:b6:6b:e1: 71:8e:9f:57:d0:8f:08:be:2e:ea:00:35:81:82:4c:fe:45:10: 73:8f:2f:06:7e:82:f0:84:33:d0:5f:20:a3:5a:a5:5b:5e:60: 89:24:b6:a6:73:f4:59:f7:16:00:d6:e3:ad:54:84:53:8e:45: df:2e:ce:4e:a6:5c:80:7a:de:fb:24:79:ae:6c:f8:ff:e8:2c: 9f:c8:e5:7b:83:3d:8c:2f:a7:2b:4e:92:b5:fd:de:57:b3:77: 3a:fe:f8:a9:07:2b:1b:fe:af:cb:01:cb:aa:01:cd:a5:fa:84: fa:bf:0b:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZduUBjV0CV5hAQca2zfBsXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjUwNjE0MTIwMDMyWhcNMjUwNjE1MTIwMDMyWjAzMTEwLwYDVQQD EyhmYjRkNzA1NTIwNzYyMDRiMDk3Y2U5YWQ1N2VmNDBiODg0NzUzYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliJsd+PdPp3MP7ZWdIp4tShfcZiT j1smt1O8FrHcH6e3hKRYQUss3BEuAQTU22FB8Ks4rg+fcw6tLucRmbyuDS/m1HKF pvMJ4Ws56IoA9sH4nXaef64gKNjIDZwMo4QeHKpkYuxZeHp8dtgW3RtmqTT3mVuW Cg5RWzNcZs9Ps7+c4DB7O69C7TBNmx/R79W5ndJX5v8sDp0Rjta4ZxKFtqig0m54 yThX5zGeeF1WquM43PekesRVfgW/yQyAzKF4Hqf+jJ8Xk1NqNofhpf29K4hPGdOr 9TUDlhoROLBd969LNK0PYD5rqbMyzDhxTI3yDMobt0+bVsgr+4uDFLzltQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtNcFUgdiBLCXzprVfvQLiEdTyIMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEr1ieIf8 fRnUP2Z1ZYK9gMMiN2cMzg/6NuHuysWXeEfJxfnSq2c04AeDcTfp/PRhRAalTTuU jkIAdlBo7dtVJM8pkMlx3Icr9/2ErtE6VpBIAMnLTzBTpfcgvT1di05EAKHbJ4LZ QNpkx52ziyE8Png/mBrXB2edaELFlWXZgyacqMDw5hqoPP1SRT4otmvhcY6fV9CP CL4u6gA1gYJM/kUQc48vBn6C8IQz0F8go1qlW15giSS2pnP0WfcWANbjrVSEU45F 3y7OTqZcgHre+yR5rmz4/+gsn8jle4M9jC+nK06Stf3eV7N3Ov74qQcrG/6vywHL qgHNpfqE+r8LYA== -----END CERTIFICATE-----Generated at Sat Jun 14 18:38:14 2025 by rpki-client